$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft File: QN3nG0G_-xtRbgewxhORvfTTvxE.mft (raw, json) Hash identifier: eCdbnQgHX88kcUgybBKGkghuuU9apQ0QJUAXE0rQSTg= Subject key identifier: B9:B0:3D:36:76:74:A0:2B:7C:26:C0:43:30:EF:AE:CE:05:B5:D0:F5 Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Certificate serial: 01A0BE0C1055F3C690C3BF7853DE058283BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft Manifest number: 0B65 Signing time: Sun 20 Sep 2026 09:00:56 +0000 Manifest this update: Sun 20 Sep 2026 09:00:56 +0000 Manifest next update: Mon 21 Sep 2026 09:00:56 +0000 Files and hashes: 1: 0_vDnDRF9RJXjQRo2pH5Tit2G6k.roa (hash: IvBfnkpqBkHgNd2fPdtTwy3ZEe1XX9CROdeaKsRCiZg=) 2: 3A7selqAvOAe0_qgDt52j-PXoUo.roa (hash: flK4+w82j1glwyv4wQLtf3SZZHY1VlIETMIP4anf5xE=) 3: 6lfGv8k68GhJfpCtD-OYR6WFhMM.roa (hash: hRZoZNE1zfUjpEY2IrJl4n+tjpdwbaQl0JLh8/g+Xrg=) 4: CKoKV9SSWeY0CC35RGZW3-Sowvk.roa (hash: CNoybL/dDEh4vogvIRKGBoOMFZRqcXzTkYgL2z5M9bM=) 5: HCfgldAudjj-QJp0v9tfxs8SS7s.roa (hash: scE7gtW6qWeNCkYq9sEgw17dRXKm9IoFbwhoZjct248=) 6: Pu68vnj2IvxGfPG1sUfBz7pfl60.roa (hash: e/ZGCUCMCJsJmK9XNPoqVMd6wsMqJMbIyH+5hWYg1kc=) 7: QN3nG0G_-xtRbgewxhORvfTTvxE.crl (hash: IVBYX5gz2kBbkKLNBaq6/I6+QKsddOKDWsK8dcnWoLs=) 8: SJIi9b7jF-tIX6-P-stvPvq18n8.roa (hash: Yf5kVhbDxCHqDvm6KWnDfz54gR5Gju/hz7Bu6PIbeGY=) 9: YkD_uNZixvFZy5o-FN9c3GrSt2c.roa (hash: HnHkeN+t+D68w5wvbHYNeze7wxX1WDFe/hvEfnU7xqg=) 10: bYPwb0EB-ZQ-8Y684GShPWjy1Hk.roa (hash: 0JCC1fOO6w53Jm25LczdyIlJEt6qyZ0R4CERFii4DMc=) 11: bbW-cNXckpCNDMmKy7e6MdanMaQ.roa (hash: wi5U39n0WOqR1X9J/HwVc9wPVGV330f9mDaW+R+cz3I=) 12: kveMMocsfLZh918Y0_FGgyBzNLM.roa (hash: vKnrq5ifdIB9dF0mtCayO5eOs+Yvg54hMTnFEcoDZaU=) 13: rDgB1WWhxRGF3eFkqX4VjqEkOcY.roa (hash: ifAnSGVO73NRoAKq59gXyGui7/GMr2OJw5wHm+/+JP8=) 14: rtgNwpKWEQ9VzPEoGc9ICsTEDGY.roa (hash: kSyIl9GbSnFUvQKXxkb/qMKrsJ6GBbvNU0EjtITFE2w=) 15: z0cFxQ6JyNCpSf1atSyxLBogwYE.roa (hash: K3/YTrhSfyH3/M+a1W4qVz5OIXek2v5gDMUUGi2l+rM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 05:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:be:0c:10:55:f3:c6:90:c3:bf:78:53:de:05:82:83:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Validity Not Before: Sep 20 09:00:56 2026 GMT Not After : Sep 21 09:00:56 2026 GMT Subject: CN=b9b03d367674a02b7c26c04330efaece05b5d0f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ea:e4:6c:11:f1:97:44:bd:c5:0a:2d:b2:3d: 49:11:70:94:e7:c2:0a:1c:6d:3c:36:56:34:37:e6: fc:c0:d7:17:10:36:02:78:f2:62:48:67:84:a7:5a: 94:3a:29:68:0d:1f:6f:fe:3f:87:ca:0a:01:dd:df: 4f:c2:16:c0:79:ca:7e:4e:83:12:15:b1:6e:f9:15: 97:73:f9:f3:db:cb:57:a1:15:9b:c7:3a:a0:52:92: 41:2f:82:9a:8a:8a:43:83:24:cf:3b:6f:5f:d3:3b: 75:30:b0:97:ea:94:82:fc:35:eb:6c:5a:7a:3d:82: 99:cc:5a:da:0e:6c:98:c1:14:7c:e4:20:d7:14:22: 50:79:06:25:42:72:1c:79:18:93:22:59:f5:94:2f: de:6c:19:25:9a:3a:a2:60:45:60:de:a9:12:50:a3: 69:61:4f:bc:fc:90:12:c1:6e:13:c7:69:df:42:c2: df:63:52:25:c9:60:50:2e:86:31:61:7e:64:78:59: b2:57:cb:8a:36:d6:83:ca:b4:a6:05:cb:d2:54:74: 9c:57:bd:ff:6b:39:f3:a6:9c:a9:98:e6:a4:5c:99: 3d:6e:71:9b:31:2a:ec:ef:26:20:da:f4:a8:2c:26: 1c:0f:06:72:e7:e6:c3:28:c0:b7:86:f5:b1:9f:f6: a8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:B0:3D:36:76:74:A0:2B:7C:26:C0:43:30:EF:AE:CE:05:B5:D0:F5 X509v3 Authority Key Identifier: keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:bc:0e:90:c0:78:2a:4b:4d:f1:51:93:57:e2:cd:13:20:76: 46:f4:f0:fe:e6:12:6b:c7:ff:b1:87:61:bc:f5:72:44:18:db: ba:a1:85:f7:3b:b5:78:1b:ef:8e:08:02:b3:5f:0e:fb:d8:b0: fa:d7:53:e5:2b:04:a5:b3:08:60:54:ca:42:12:3d:1e:59:0c: c1:4d:c9:4d:98:7c:b3:22:5b:cc:b4:01:53:06:a8:f4:1e:ed: 2b:24:e2:fc:5e:23:4c:48:36:3c:5d:2e:25:fc:54:c7:0b:d8: 42:d5:13:8d:36:65:f6:66:33:73:a1:7c:d9:00:98:b0:7f:cb: 33:0d:96:b8:de:59:3f:21:b4:8e:07:00:f8:0b:0f:c4:d3:1e: ff:79:c3:6e:97:95:65:25:0f:71:68:a5:d7:c0:b1:ed:53:db: 55:e0:f1:af:50:68:99:e7:57:ee:22:47:d5:35:23:47:3c:7d: ae:67:f2:cd:e9:25:bc:4c:b5:8a:83:a5:34:f2:30:ce:a4:c6: a5:b4:66:24:22:30:b1:63:09:cf:8d:c8:54:fd:ed:bb:34:d1: 74:19:ee:d9:ab:d8:f7:dc:22:d0:32:d7:17:03:44:1e:bb:12: b6:07:7a:b6:17:f2:dc:00:5a:32:0f:75:c0:11:60:e3:e8:c1: 8d:f2:20:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC+DBBV88aQw794U94FgoO7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZGRlNzFiNDFiZmZiMWI1MTZlMDdiMGM2MTM5MWJkZjRk M2JmMTEwHhcNMjYwOTIwMDkwMDU2WhcNMjYwOTIxMDkwMDU2WjAzMTEwLwYDVQQD EyhiOWIwM2QzNjc2NzRhMDJiN2MyNmMwNDMzMGVmYWVjZTA1YjVkMGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOrkbBHxl0S9xQotsj1JEXCU58IK HG08NlY0N+b8wNcXEDYCePJiSGeEp1qUOiloDR9v/j+HygoB3d9PwhbAecp+ToMS FbFu+RWXc/nz28tXoRWbxzqgUpJBL4KaiopDgyTPO29f0zt1MLCX6pSC/DXrbFp6 PYKZzFraDmyYwRR85CDXFCJQeQYlQnIceRiTIln1lC/ebBklmjqiYEVg3qkSUKNp YU+8/JASwW4Tx2nfQsLfY1IlyWBQLoYxYX5keFmyV8uKNtaDyrSmBcvSVHScV73/ aznzppypmOakXJk9bnGbMSrs7yYg2vSoLCYcDwZy5+bDKMC3hvWxn/aoZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLmwPTZ2dKArfCbAQzDvrs4FtdD1MB8GA1UdIwQY MBaAFEDd5xtBv/sbUW4HsMYTkb30078RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYt MmJhZGNlNDY2ODUzLzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYtMmJhZGNlNDY2ODUz LzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATLwOkMB4 KktN8VGTV+LNEyB2RvTw/uYSa8f/sYdhvPVyRBjbuqGF9zu1eBvvjggCs18O+9iw +tdT5SsEpbMIYFTKQhI9HlkMwU3JTZh8syJbzLQBUwao9B7tKyTi/F4jTEg2PF0u JfxUxwvYQtUTjTZl9mYzc6F82QCYsH/LMw2WuN5ZPyG0jgcA+AsPxNMe/3nDbpeV ZSUPcWil18Cx7VPbVeDxr1BomedX7iJH1TUjRzx9rmfyzeklvEy1ioOlNPIwzqTG pbRmJCIwsWMJz43IVP3tuzTRdBnu2avY99wi0DLXFwNEHrsStgd6thfy3ABaMg91 wBFg4+jBjfIgSg== -----END CERTIFICATE-----Generated at Sun Sep 20 13:54:00 2026 by rpki-client