$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft File: QN3nG0G_-xtRbgewxhORvfTTvxE.mft (raw, json) Hash identifier: vk0S12RDjf9AaxQtur1e8butnWoHCQSLMmcUgYlHPX0= Subject key identifier: 7F:B7:24:7D:06:0F:59:40:9D:AA:D9:AA:F1:73:97:54:02:38:0D:15 Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Certificate serial: 019CA86A3B49BD39DB0C7625108FF3FE58FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft Manifest number: 0941 Signing time: Sun 01 Mar 2026 08:00:59 +0000 Manifest this update: Sun 01 Mar 2026 08:00:59 +0000 Manifest next update: Mon 02 Mar 2026 08:00:59 +0000 Files and hashes: 1: 3A7selqAvOAe0_qgDt52j-PXoUo.roa (hash: flK4+w82j1glwyv4wQLtf3SZZHY1VlIETMIP4anf5xE=) 2: 6lfGv8k68GhJfpCtD-OYR6WFhMM.roa (hash: hRZoZNE1zfUjpEY2IrJl4n+tjpdwbaQl0JLh8/g+Xrg=) 3: HCfgldAudjj-QJp0v9tfxs8SS7s.roa (hash: scE7gtW6qWeNCkYq9sEgw17dRXKm9IoFbwhoZjct248=) 4: Pu68vnj2IvxGfPG1sUfBz7pfl60.roa (hash: e/ZGCUCMCJsJmK9XNPoqVMd6wsMqJMbIyH+5hWYg1kc=) 5: QN3nG0G_-xtRbgewxhORvfTTvxE.crl (hash: qtny02PGPJRFlW8svwK+8im6YEzsPtm4SWWh2M057Ho=) 6: SJIi9b7jF-tIX6-P-stvPvq18n8.roa (hash: Yf5kVhbDxCHqDvm6KWnDfz54gR5Gju/hz7Bu6PIbeGY=) 7: YkD_uNZixvFZy5o-FN9c3GrSt2c.roa (hash: HnHkeN+t+D68w5wvbHYNeze7wxX1WDFe/hvEfnU7xqg=) 8: bYPwb0EB-ZQ-8Y684GShPWjy1Hk.roa (hash: 0JCC1fOO6w53Jm25LczdyIlJEt6qyZ0R4CERFii4DMc=) 9: bbW-cNXckpCNDMmKy7e6MdanMaQ.roa (hash: wi5U39n0WOqR1X9J/HwVc9wPVGV330f9mDaW+R+cz3I=) 10: e-wh2r9wdch9AbYzWAb-amfpi3k.roa (hash: 7RxrmeOp+FYtmV6C/Huryp37MguNnmSBg7rxFRERF7A=) 11: k84WPUGfQIVIA_tiWGdJRtGMimg.roa (hash: hA5+KWMD6TuAOakxzUqUiHv7L3lZ8BGhQfo9wvlqG0s=) 12: z0cFxQ6JyNCpSf1atSyxLBogwYE.roa (hash: K3/YTrhSfyH3/M+a1W4qVz5OIXek2v5gDMUUGi2l+rM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 06:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a8:6a:3b:49:bd:39:db:0c:76:25:10:8f:f3:fe:58:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Validity Not Before: Mar 1 08:00:59 2026 GMT Not After : Mar 2 08:00:59 2026 GMT Subject: CN=7fb7247d060f59409daad9aaf173975402380d15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c1:dc:de:76:ad:93:7e:52:5f:ab:ac:30:a4: 0c:a5:49:ba:81:c8:af:f9:e5:32:bb:f4:22:e7:a7: fd:ce:cf:c7:fb:9c:fe:bc:fb:ce:3d:0c:eb:dc:b7: 0d:a4:c9:11:b6:80:4c:99:a2:69:2f:83:63:21:c1: 2c:62:38:6f:02:cd:ae:5a:82:af:3a:0d:3e:6f:d3: 47:3a:9c:8c:88:d6:cc:74:54:7f:2e:ed:c5:b8:12: 7e:d9:e4:d0:e3:80:5f:e0:28:0c:0f:78:44:f1:c3: a9:9a:61:2c:83:2d:eb:e1:d2:c0:5b:00:36:a4:3d: 89:fc:25:2b:22:71:75:ec:cc:f4:6f:73:e6:c5:47: db:0a:8b:47:25:b3:8f:ff:9a:23:25:38:70:76:52: da:b8:65:19:14:0f:cc:66:0c:07:fd:70:1f:95:51: 92:08:cb:51:01:99:ce:19:5f:b9:b9:59:03:0f:66: eb:93:d0:5e:c7:2e:23:d4:f3:96:17:cc:e9:91:b0: f2:bc:69:c0:a7:62:25:a9:d5:4a:22:f3:46:d0:b1: 8c:78:ef:80:ea:31:cd:12:4d:98:50:7c:63:7d:b8: ad:bc:96:30:fd:0b:23:3b:42:64:22:fc:2a:2d:e8: 26:e0:70:a8:8e:3f:b1:6b:ca:72:64:18:cd:55:6a: 33:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:B7:24:7D:06:0F:59:40:9D:AA:D9:AA:F1:73:97:54:02:38:0D:15 X509v3 Authority Key Identifier: keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:bc:8b:27:a4:f2:6d:f7:64:83:47:25:de:ea:12:45:25:32: e8:8e:29:bb:47:00:4e:76:2f:e4:ce:03:ce:65:99:06:92:98: 21:f2:2f:23:5d:7e:e6:32:54:98:3f:8d:99:bd:45:2f:66:57: fe:50:dd:d8:53:bc:e8:91:97:0b:36:d8:5c:a3:93:ee:d1:2c: 90:93:d1:09:32:5c:f6:be:48:4f:2e:03:98:a7:e9:14:80:50: 31:51:39:28:aa:6e:5b:43:bd:5f:92:64:0a:7c:2c:56:3b:d4: 5a:65:90:ff:57:ed:3a:ea:02:e1:80:3d:d9:64:9f:57:88:46: bb:80:93:fb:9d:96:e1:8f:6d:2d:05:31:72:39:78:69:99:dd: 31:24:5f:2e:33:5b:48:a5:b8:02:7f:9a:8d:cf:36:63:61:0d: 35:60:79:5e:9c:e0:1c:16:b9:9e:3e:dc:ff:08:f8:f0:89:2d: d9:90:77:dc:52:c8:6b:c0:87:7d:7a:a8:61:e4:66:0e:d9:03: c8:47:0e:71:9c:d5:06:78:53:35:07:99:19:97:c8:b7:94:d8: ae:84:0d:31:86:8f:9f:c5:0d:c1:72:9d:ed:b6:b8:a0:07:8f: c8:f7:18:2a:49:2b:72:6f:6f:7e:36:b7:25:cd:3e:f5:12:1c: 6e:bb:94:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyoajtJvTnbDHYlEI/z/lj8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZGRlNzFiNDFiZmZiMWI1MTZlMDdiMGM2MTM5MWJkZjRk M2JmMTEwHhcNMjYwMzAxMDgwMDU5WhcNMjYwMzAyMDgwMDU5WjAzMTEwLwYDVQQD Eyg3ZmI3MjQ3ZDA2MGY1OTQwOWRhYWQ5YWFmMTczOTc1NDAyMzgwZDE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28Hc3natk35SX6usMKQMpUm6gciv +eUyu/Qi56f9zs/H+5z+vPvOPQzr3LcNpMkRtoBMmaJpL4NjIcEsYjhvAs2uWoKv Og0+b9NHOpyMiNbMdFR/Lu3FuBJ+2eTQ44Bf4CgMD3hE8cOpmmEsgy3r4dLAWwA2 pD2J/CUrInF17Mz0b3PmxUfbCotHJbOP/5ojJThwdlLauGUZFA/MZgwH/XAflVGS CMtRAZnOGV+5uVkDD2brk9Bexy4j1POWF8zpkbDyvGnAp2IlqdVKIvNG0LGMeO+A 6jHNEk2YUHxjfbitvJYw/QsjO0JkIvwqLegm4HCojj+xa8pyZBjNVWozWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH+3JH0GD1lAnarZqvFzl1QCOA0VMB8GA1UdIwQY MBaAFEDd5xtBv/sbUW4HsMYTkb30078RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYt MmJhZGNlNDY2ODUzLzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYtMmJhZGNlNDY2ODUz LzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADbyLJ6Ty bfdkg0cl3uoSRSUy6I4pu0cATnYv5M4DzmWZBpKYIfIvI11+5jJUmD+Nmb1FL2ZX /lDd2FO86JGXCzbYXKOT7tEskJPRCTJc9r5ITy4DmKfpFIBQMVE5KKpuW0O9X5Jk CnwsVjvUWmWQ/1ftOuoC4YA92WSfV4hGu4CT+52W4Y9tLQUxcjl4aZndMSRfLjNb SKW4An+ajc82Y2ENNWB5XpzgHBa5nj7c/wj48Ikt2ZB33FLIa8CHfXqoYeRmDtkD yEcOcZzVBnhTNQeZGZfIt5TYroQNMYaPn8UNwXKd7ba4oAePyPcYKkkrcm9vfja3 Jc0+9RIcbruUfg== -----END CERTIFICATE-----Generated at Sun Mar 1 16:30:27 2026 by rpki-client