$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft File: qFMQ9QMTeuizXU8yn0bwad1wOBU.mft (raw, json) Hash identifier: wOWbMPjAwZIVIGhhfrKYbeJatk6odQe8RanmR6eY/r0= Subject key identifier: D1:F9:B3:3D:4A:F1:F2:79:50:1A:43:A6:19:00:18:1A:FA:BD:68:19 Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815 Certificate serial: 019CA97C6651CA2357B85B42181E63F8A8F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft Manifest number: 1041 Signing time: Sun 01 Mar 2026 13:00:27 +0000 Manifest this update: Sun 01 Mar 2026 13:00:27 +0000 Manifest next update: Mon 02 Mar 2026 13:00:27 +0000 Files and hashes: 1: 74nAH9muoqGD-s4yAjGfkwaZSpY.roa (hash: D3Z53fCQBRC5btWm2TKOEsF5ZZDk5JfPmaKFAGt33yM=) 2: 8-p5z6a3n-5Vbg_FUQcHOfePr1k.roa (hash: T0w7zmmsEVS9b11trnjpNDiN07nDknNytyRJ3xCbFlo=) 3: 9c8fl-F23xypfkbqbl1n5JPG_84.roa (hash: lNc776mR+msxcq+rQeOV4AB0lZ4u3hobNqWSqkfBl4w=) 4: BuCCAIR_5ckodCbHgOD1MMIt-Dk.roa (hash: QG9xQu9PRC+aBkksrXZrhX4apZcVikxD0oV/WFqRvns=) 5: EUcioYCNgoBr4fX2m_esrOCrQGM.roa (hash: 0JHPbY7p1Ja0Q0GjkadwueehBILVs0m7aNuPr13Bguc=) 6: Ir4fT-wtu3kzF5QNGTTkkMm0Z74.roa (hash: DJFlUJTizA9NLrEk8PUMB7MGXkecQxJA+XnDIeJTTP0=) 7: L5qyY9jZaitIZWVHzJF8EMKtnJw.roa (hash: RHPOnQl7M+92fyRwAlYoQqCItx05c0P7/Yx6ROjX9QU=) 8: etM1AIrZp5N8xQAUS7d-EkBBO6Q.roa (hash: 62w4oF2cGdWj0o3BpcwxlZBpiXXPXN7RYr3Sd64Mob8=) 9: pmjWXndiYs4KEBmLyUOfoVEBC-k.roa (hash: 0OAhoLS3wlHvG79outXZ8QvOduBA5V35p0IKCSGmHXM=) 10: qFMQ9QMTeuizXU8yn0bwad1wOBU.crl (hash: raRD3GPyMI60REnCaYV4DIfIUCl2tgBx0VSr6S9Xxgg=) 11: uzUF1iytiBjIXaGoXYbb89U983Q.roa (hash: GmwJF+if9a4Li6CDW3Ardtoa/NUyQLlBVKRkV0wDIP0=) 12: zz2ubIWIT2y3LrPgWA-Wvq86OMs.roa (hash: FQoneHTBSyuTPA9+pRMwse2b3ajv2eaAnyk8ybdQibM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 13:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a9:7c:66:51:ca:23:57:b8:5b:42:18:1e:63:f8:a8:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815 Validity Not Before: Mar 1 13:00:27 2026 GMT Not After : Mar 2 13:00:27 2026 GMT Subject: CN=d1f9b33d4af1f279501a43a61900181afabd6819 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5f:63:cf:3d:c8:3b:c9:6f:6b:8a:04:f3:ff: 15:24:84:ca:ac:08:01:0a:0c:25:44:ac:ae:3b:d4: e0:a2:33:05:b4:26:91:e3:3d:9f:ce:aa:2c:1c:e4: b0:26:41:95:85:37:02:4b:1e:9d:bd:34:8e:41:b9: 5d:2a:2e:f0:27:81:66:63:f6:7f:2c:9a:fd:29:7e: 50:27:d6:cb:da:ef:43:bb:65:30:71:82:43:4e:1c: 04:52:d6:d0:07:a7:8c:bd:fd:01:d3:9c:2e:e0:d1: 94:96:c3:65:e8:f0:57:87:77:ed:3e:d9:60:4a:99: f4:0d:5a:2d:33:3b:32:33:81:e2:36:c6:2e:87:65: fe:87:c4:67:6f:cd:b7:0d:89:f6:38:77:52:aa:57: b3:1c:ae:52:13:8b:72:b5:d4:f0:4c:ec:84:f4:25: bd:85:1a:c7:24:1a:49:00:33:cf:88:52:50:b9:0c: f9:f3:04:a1:95:2e:d1:07:aa:37:9f:4c:fe:45:5d: 52:0e:5a:9f:aa:55:df:6b:bc:dc:b4:27:e3:ab:00: 46:76:4e:f6:e7:50:9e:b6:41:f1:31:e4:e4:f5:38: 72:19:e2:7d:54:5c:13:c1:39:cb:0f:44:f7:06:1d: 66:01:75:58:7b:3d:31:c5:a8:bd:4a:be:36:0e:fd: e7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:F9:B3:3D:4A:F1:F2:79:50:1A:43:A6:19:00:18:1A:FA:BD:68:19 X509v3 Authority Key Identifier: keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:23:fb:7c:7e:f6:ef:25:17:54:93:e2:2f:db:ba:ee:d4:0d: ba:13:af:9c:04:c6:63:9b:a8:db:f3:9f:e1:13:e5:7f:40:d7: 2f:07:c1:14:c8:dc:6e:cc:45:05:2e:4d:6d:f8:e6:ae:17:b4: 16:bd:38:69:b5:e8:55:98:88:54:9c:e7:b2:9a:98:a8:b6:d7: d6:88:71:f8:86:19:52:2b:2c:73:2c:ed:1a:09:1d:a2:e3:18: 0a:a7:7a:f9:88:e8:75:14:94:f1:ef:ff:06:ce:51:61:18:cc: 7c:9a:db:48:a8:d1:42:66:ec:e0:1a:69:b5:cf:db:31:a7:bb: 0d:df:ab:4d:d4:88:2d:a0:fc:4a:c2:52:f0:77:a5:23:1f:ec: c4:bc:3a:b2:05:64:ec:b2:f1:7a:6c:79:15:c3:a6:3d:2c:7e: 54:3c:b4:22:ce:83:76:d5:8d:4f:93:04:d7:84:b1:24:64:83: ac:aa:76:84:e7:cf:29:73:b2:60:8f:e4:eb:bd:b5:ae:f6:4c: db:18:61:15:47:b3:f1:d9:8c:2c:5b:e1:64:ed:f7:e7:1f:80: 46:a7:60:98:dc:fb:b5:93:b9:49:cf:4b:c0:3f:ec:3a:59:1b: 79:d5:22:93:32:d8:c6:95:54:45:8c:54:dd:27:1f:b6:48:6f: 6a:37:f5:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZypfGZRyiNXuFtCGB5j+Kj3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NTMxMGY1MDMxMzdhZThiMzVkNGYzMjlmNDZmMDY5ZGQ3 MDM4MTUwHhcNMjYwMzAxMTMwMDI3WhcNMjYwMzAyMTMwMDI3WjAzMTEwLwYDVQQD EyhkMWY5YjMzZDRhZjFmMjc5NTAxYTQzYTYxOTAwMTgxYWZhYmQ2ODE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAql9jzz3IO8lva4oE8/8VJITKrAgB CgwlRKyuO9TgojMFtCaR4z2fzqosHOSwJkGVhTcCSx6dvTSOQbldKi7wJ4FmY/Z/ LJr9KX5QJ9bL2u9Du2UwcYJDThwEUtbQB6eMvf0B05wu4NGUlsNl6PBXh3ftPtlg Spn0DVotMzsyM4HiNsYuh2X+h8Rnb823DYn2OHdSqlezHK5SE4tytdTwTOyE9CW9 hRrHJBpJADPPiFJQuQz58wShlS7RB6o3n0z+RV1SDlqfqlXfa7zctCfjqwBGdk72 51CetkHxMeTk9ThyGeJ9VFwTwTnLD0T3Bh1mAXVYez0xxai9Sr42Dv3nBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNH5sz1K8fJ5UBpDphkAGBr6vWgZMB8GA1UdIwQY MBaAFKhTEPUDE3ros11PMp9G8GndcDgVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYt MzAxODlhNWE0ZWJhLzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYtMzAxODlhNWE0ZWJh LzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgiP7fH72 7yUXVJPiL9u67tQNuhOvnATGY5uo2/Of4RPlf0DXLwfBFMjcbsxFBS5Nbfjmrhe0 Fr04abXoVZiIVJznspqYqLbX1ohx+IYZUisscyztGgkdouMYCqd6+YjodRSU8e// Bs5RYRjMfJrbSKjRQmbs4Bpptc/bMae7Dd+rTdSILaD8SsJS8HelIx/sxLw6sgVk 7LLxemx5FcOmPSx+VDy0Is6DdtWNT5ME14SxJGSDrKp2hOfPKXOyYI/k6721rvZM 2xhhFUez8dmMLFvhZO335x+ARqdgmNz7tZO5Sc9LwD/sOlkbedUikzLYxpVURYxU 3Scftkhvajf1LA== -----END CERTIFICATE-----Generated at Sun Mar 1 23:58:45 2026 by rpki-client