$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft File: QN3nG0G_-xtRbgewxhORvfTTvxE.mft (raw, json) Hash identifier: nVVg7NqgwZX+I2yZ/7QPIRlKcbzmLM6YETbxP2/7w7o= Subject key identifier: 76:BB:A4:6D:23:88:E0:04:6A:98:A3:56:C3:5F:9E:5B:11:71:DE:5A Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Certificate serial: 019D99993204768C09A2C82D983604D3A06C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft Manifest number: 09BF Signing time: Fri 17 Apr 2026 04:00:46 +0000 Manifest this update: Fri 17 Apr 2026 04:00:46 +0000 Manifest next update: Sat 18 Apr 2026 04:00:46 +0000 Files and hashes: 1: 0_vDnDRF9RJXjQRo2pH5Tit2G6k.roa (hash: IvBfnkpqBkHgNd2fPdtTwy3ZEe1XX9CROdeaKsRCiZg=) 2: 3A7selqAvOAe0_qgDt52j-PXoUo.roa (hash: flK4+w82j1glwyv4wQLtf3SZZHY1VlIETMIP4anf5xE=) 3: 6lfGv8k68GhJfpCtD-OYR6WFhMM.roa (hash: hRZoZNE1zfUjpEY2IrJl4n+tjpdwbaQl0JLh8/g+Xrg=) 4: HCfgldAudjj-QJp0v9tfxs8SS7s.roa (hash: scE7gtW6qWeNCkYq9sEgw17dRXKm9IoFbwhoZjct248=) 5: Pu68vnj2IvxGfPG1sUfBz7pfl60.roa (hash: e/ZGCUCMCJsJmK9XNPoqVMd6wsMqJMbIyH+5hWYg1kc=) 6: QN3nG0G_-xtRbgewxhORvfTTvxE.crl (hash: Vjw5sc8dMPVZs+za/mI1L2yJ2886L27yQW6Q+J8/Ljs=) 7: SJIi9b7jF-tIX6-P-stvPvq18n8.roa (hash: Yf5kVhbDxCHqDvm6KWnDfz54gR5Gju/hz7Bu6PIbeGY=) 8: YRLmUoiyriHbBZz8cKLyi9qEJ78.roa (hash: 2dbD8JRE13NWzX1L2KBuix9ycJyQxpH9mx7PA8Rx7lQ=) 9: YkD_uNZixvFZy5o-FN9c3GrSt2c.roa (hash: HnHkeN+t+D68w5wvbHYNeze7wxX1WDFe/hvEfnU7xqg=) 10: bYPwb0EB-ZQ-8Y684GShPWjy1Hk.roa (hash: 0JCC1fOO6w53Jm25LczdyIlJEt6qyZ0R4CERFii4DMc=) 11: bbW-cNXckpCNDMmKy7e6MdanMaQ.roa (hash: wi5U39n0WOqR1X9J/HwVc9wPVGV330f9mDaW+R+cz3I=) 12: kveMMocsfLZh918Y0_FGgyBzNLM.roa (hash: vKnrq5ifdIB9dF0mtCayO5eOs+Yvg54hMTnFEcoDZaU=) 13: z0cFxQ6JyNCpSf1atSyxLBogwYE.roa (hash: K3/YTrhSfyH3/M+a1W4qVz5OIXek2v5gDMUUGi2l+rM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 04:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:99:99:32:04:76:8c:09:a2:c8:2d:98:36:04:d3:a0:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Validity Not Before: Apr 17 04:00:46 2026 GMT Not After : Apr 18 04:00:46 2026 GMT Subject: CN=76bba46d2388e0046a98a356c35f9e5b1171de5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9d:35:f4:a1:06:b7:b1:fb:b3:1c:ca:c2:cb: 8a:84:ce:f7:fc:35:de:96:cf:09:f5:e7:c7:61:dd: 10:bc:06:1c:b1:0b:cb:25:6b:a7:06:34:54:4b:12: 22:f8:69:32:11:52:6b:2e:ac:54:85:2f:9d:22:03: 80:c6:e9:6f:cf:d1:85:c3:36:c6:64:34:e4:da:cc: 40:51:16:e8:67:fb:fc:fc:c6:f8:14:23:4a:bc:b9: f2:09:94:ee:74:9a:7b:dc:ce:32:35:c6:36:6e:66: 19:97:52:c2:a0:40:8c:c2:a5:58:cd:4c:da:d7:3d: 90:cf:09:a6:30:1d:e6:91:66:89:8b:f5:70:82:7d: 48:94:04:e3:85:52:31:f6:89:d2:16:cc:98:3c:8a: eb:19:6c:d9:82:92:b5:97:de:14:2a:d0:6c:64:87: 9d:bb:66:43:fa:ac:a8:15:36:a3:4a:c7:90:dc:3b: 9e:9a:ce:83:a9:e4:d7:2b:ac:de:53:e4:d5:8c:8b: 65:f4:25:3d:1c:5e:3d:b2:96:48:0a:02:dc:97:b1: 6d:17:fe:e2:10:c0:a4:1c:0e:49:6a:47:a5:de:be: 72:a6:c9:80:40:59:db:7d:e4:f4:cf:46:df:0d:4e: 32:bd:f5:ea:e0:a4:7d:15:de:c8:29:1b:b6:8a:3b: 9c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:BB:A4:6D:23:88:E0:04:6A:98:A3:56:C3:5F:9E:5B:11:71:DE:5A X509v3 Authority Key Identifier: keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:d4:70:ed:22:81:23:98:43:a9:00:3e:0e:b3:09:2c:62:bc: 1a:84:c7:60:02:48:54:fc:4e:09:5f:de:e9:a5:6b:c9:f5:1d: 28:6b:6f:e0:22:1d:85:a8:2c:18:99:36:67:40:67:25:0b:e1: b9:1a:92:07:e9:82:0c:85:52:00:e4:60:ab:fd:c5:1c:fe:31: 95:21:12:9d:cc:cd:bb:4d:74:72:71:bc:93:4f:b8:74:a6:25: d5:8b:cd:37:90:78:1c:bf:29:5e:b2:f6:b8:9b:56:c0:bd:8c: 98:fc:c4:10:a4:67:d9:e2:31:88:ad:8f:bb:51:f5:8a:80:08: e8:1b:26:bd:d4:27:64:f4:1a:1b:fd:12:7f:49:6f:ff:28:33: 29:39:1b:2b:3e:ac:7a:08:17:c5:ea:7f:9d:ed:1f:95:b3:25: ed:62:b2:1f:cf:9f:47:ae:e8:52:44:89:f2:f2:66:88:39:2b: f3:67:6d:fa:76:6d:dc:9e:08:f8:61:56:19:c7:53:61:6f:ff: 58:24:ab:ac:6f:78:70:5a:91:c0:4d:a5:3b:74:05:c9:d4:25: 83:4f:00:7c:8f:4a:c8:66:2f:c8:98:7e:53:58:b7:9d:2f:77: db:b5:16:84:f6:2f:8f:97:54:fe:f2:c7:e2:58:98:e0:b1:90: 6c:27:b2:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2ZmTIEdowJosgtmDYE06BsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZGRlNzFiNDFiZmZiMWI1MTZlMDdiMGM2MTM5MWJkZjRk M2JmMTEwHhcNMjYwNDE3MDQwMDQ2WhcNMjYwNDE4MDQwMDQ2WjAzMTEwLwYDVQQD Eyg3NmJiYTQ2ZDIzODhlMDA0NmE5OGEzNTZjMzVmOWU1YjExNzFkZTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJ019KEGt7H7sxzKwsuKhM73/DXe ls8J9efHYd0QvAYcsQvLJWunBjRUSxIi+GkyEVJrLqxUhS+dIgOAxulvz9GFwzbG ZDTk2sxAURboZ/v8/Mb4FCNKvLnyCZTudJp73M4yNcY2bmYZl1LCoECMwqVYzUza 1z2QzwmmMB3mkWaJi/Vwgn1IlATjhVIx9onSFsyYPIrrGWzZgpK1l94UKtBsZIed u2ZD+qyoFTajSseQ3Duems6DqeTXK6zeU+TVjItl9CU9HF49spZICgLcl7FtF/7i EMCkHA5Jakel3r5ypsmAQFnbfeT0z0bfDU4yvfXq4KR9Fd7IKRu2ijuc4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHa7pG0jiOAEapijVsNfnlsRcd5aMB8GA1UdIwQY MBaAFEDd5xtBv/sbUW4HsMYTkb30078RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYt MmJhZGNlNDY2ODUzLzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYtMmJhZGNlNDY2ODUz LzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARNRw7SKB I5hDqQA+DrMJLGK8GoTHYAJIVPxOCV/e6aVryfUdKGtv4CIdhagsGJk2Z0BnJQvh uRqSB+mCDIVSAORgq/3FHP4xlSESnczNu010cnG8k0+4dKYl1YvNN5B4HL8pXrL2 uJtWwL2MmPzEEKRn2eIxiK2Pu1H1ioAI6BsmvdQnZPQaG/0Sf0lv/ygzKTkbKz6s eggXxep/ne0flbMl7WKyH8+fR67oUkSJ8vJmiDkr82dt+nZt3J4I+GFWGcdTYW// WCSrrG94cFqRwE2lO3QFydQlg08AfI9KyGYvyJh+U1i3nS9327UWhPYvj5dU/vLH 4liY4LGQbCeyVg== -----END CERTIFICATE-----Generated at Fri Apr 17 12:03:45 2026 by rpki-client