$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft File: qFMQ9QMTeuizXU8yn0bwad1wOBU.mft (raw, json) Hash identifier: oTMZ3uRC0MGoGSKEqtiXVuOf9jT16iR8ZIYREnSKl1E= Subject key identifier: 71:ED:9E:13:29:06:6A:E3:63:0F:98:48:74:1B:18:A3:8B:46:CB:30 Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815 Certificate serial: 019D9CD1DD8BF42CE6F225D4213E17DC684E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft Manifest number: 10BF Signing time: Fri 17 Apr 2026 19:01:32 +0000 Manifest this update: Fri 17 Apr 2026 19:01:32 +0000 Manifest next update: Sat 18 Apr 2026 19:01:32 +0000 Files and hashes: 1: 74nAH9muoqGD-s4yAjGfkwaZSpY.roa (hash: D3Z53fCQBRC5btWm2TKOEsF5ZZDk5JfPmaKFAGt33yM=) 2: 8-p5z6a3n-5Vbg_FUQcHOfePr1k.roa (hash: T0w7zmmsEVS9b11trnjpNDiN07nDknNytyRJ3xCbFlo=) 3: 9c8fl-F23xypfkbqbl1n5JPG_84.roa (hash: lNc776mR+msxcq+rQeOV4AB0lZ4u3hobNqWSqkfBl4w=) 4: BuCCAIR_5ckodCbHgOD1MMIt-Dk.roa (hash: QG9xQu9PRC+aBkksrXZrhX4apZcVikxD0oV/WFqRvns=) 5: EUcioYCNgoBr4fX2m_esrOCrQGM.roa (hash: 0JHPbY7p1Ja0Q0GjkadwueehBILVs0m7aNuPr13Bguc=) 6: Ir4fT-wtu3kzF5QNGTTkkMm0Z74.roa (hash: DJFlUJTizA9NLrEk8PUMB7MGXkecQxJA+XnDIeJTTP0=) 7: L5qyY9jZaitIZWVHzJF8EMKtnJw.roa (hash: RHPOnQl7M+92fyRwAlYoQqCItx05c0P7/Yx6ROjX9QU=) 8: etM1AIrZp5N8xQAUS7d-EkBBO6Q.roa (hash: 62w4oF2cGdWj0o3BpcwxlZBpiXXPXN7RYr3Sd64Mob8=) 9: pmjWXndiYs4KEBmLyUOfoVEBC-k.roa (hash: 0OAhoLS3wlHvG79outXZ8QvOduBA5V35p0IKCSGmHXM=) 10: qFMQ9QMTeuizXU8yn0bwad1wOBU.crl (hash: ltd/5PxATfKg/PG0mZaESAhVJHYF8jbav5xyclOCp+g=) 11: uzUF1iytiBjIXaGoXYbb89U983Q.roa (hash: GmwJF+if9a4Li6CDW3Ardtoa/NUyQLlBVKRkV0wDIP0=) 12: zz2ubIWIT2y3LrPgWA-Wvq86OMs.roa (hash: FQoneHTBSyuTPA9+pRMwse2b3ajv2eaAnyk8ybdQibM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9c:d1:dd:8b:f4:2c:e6:f2:25:d4:21:3e:17:dc:68:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815 Validity Not Before: Apr 17 19:01:32 2026 GMT Not After : Apr 18 19:01:32 2026 GMT Subject: CN=71ed9e1329066ae3630f9848741b18a38b46cb30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2f:1d:98:46:f0:cc:01:6c:93:7d:41:fe:3a: 2c:61:99:37:31:76:b7:3d:87:a1:c2:1f:06:82:31: 15:21:22:cd:9f:a3:96:b1:0a:c4:18:6a:ab:ea:50: 29:64:2e:a5:23:f0:f4:ff:b2:43:1b:0d:f4:70:b4: 67:94:9c:54:09:45:dc:51:b2:51:3a:4a:0e:fa:a8: 05:22:5c:10:05:09:6a:ad:13:1b:1f:74:a8:2d:78: 8b:03:2b:23:c6:4b:ed:4f:9a:9f:12:3a:af:24:6c: eb:be:25:4c:90:94:6e:5d:83:87:eb:29:59:5c:f3: c7:be:39:1b:5c:6b:3e:da:f2:9d:a5:79:44:3a:c1: a5:94:67:32:47:84:90:a7:f6:1d:2b:5f:50:11:87: 60:01:75:b3:36:46:7b:68:83:61:60:1d:18:55:0e: 04:7a:7d:ba:b8:bf:5f:2f:ee:e7:6c:e3:a6:f3:e3: 47:b1:f8:c4:f9:c1:ae:ac:61:25:12:0c:e2:41:57: 3a:0c:82:7b:42:55:d3:7e:32:81:42:84:86:01:64: 79:89:36:2d:c4:41:02:13:52:74:9c:59:16:a8:39: 25:8c:8c:42:08:fd:4a:84:76:83:3f:31:e1:76:8a: fa:04:8b:c0:24:ed:56:06:a5:68:67:bb:b6:79:8e: 55:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:ED:9E:13:29:06:6A:E3:63:0F:98:48:74:1B:18:A3:8B:46:CB:30 X509v3 Authority Key Identifier: keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:2e:ae:7f:93:3c:1d:2e:4c:6c:1d:4b:8d:90:86:24:19:d9: c2:b4:b4:f7:dc:88:50:bd:30:69:0d:92:65:0c:9b:d2:ea:5b: 61:d2:bf:4a:92:be:8b:45:b4:b4:e3:08:83:10:99:97:20:36: 63:b8:d3:88:4c:ce:d1:ec:6e:b7:0b:b4:9f:07:43:8b:35:ac: a3:16:9a:c7:18:97:05:43:26:85:e0:1a:43:f6:57:6a:5b:3e: 75:75:af:cd:50:c7:2e:1d:5b:30:c8:30:0c:ad:07:95:4c:ce: 6b:99:75:54:e6:f0:c2:0d:93:d2:f3:77:12:ef:44:7e:65:44: 83:e7:24:69:49:be:7a:ef:84:42:a6:fc:d2:ed:91:58:ad:ac: 24:b1:51:3c:aa:0b:6b:a7:ae:50:84:22:12:b8:9b:31:23:6c: 9c:3f:af:22:eb:ab:94:26:fd:fb:45:92:1b:a1:b7:36:5e:43: 5c:60:8e:9d:45:b8:f5:76:7a:54:c0:d6:a8:54:cd:a1:06:cf: 11:6b:92:7e:80:7f:4c:1e:30:70:15:d0:30:8f:b7:27:b9:c1: e0:d8:54:61:a6:ff:8a:72:92:36:22:24:49:9c:69:9d:df:15: 9a:35:6f:22:19:83:40:86:d2:a4:e3:87:96:b1:e8:80:52:80: 40:d1:6c:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2c0d2L9Czm8iXUIT4X3GhOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NTMxMGY1MDMxMzdhZThiMzVkNGYzMjlmNDZmMDY5ZGQ3 MDM4MTUwHhcNMjYwNDE3MTkwMTMyWhcNMjYwNDE4MTkwMTMyWjAzMTEwLwYDVQQD Eyg3MWVkOWUxMzI5MDY2YWUzNjMwZjk4NDg3NDFiMThhMzhiNDZjYjMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqC8dmEbwzAFsk31B/josYZk3MXa3 PYehwh8GgjEVISLNn6OWsQrEGGqr6lApZC6lI/D0/7JDGw30cLRnlJxUCUXcUbJR OkoO+qgFIlwQBQlqrRMbH3SoLXiLAysjxkvtT5qfEjqvJGzrviVMkJRuXYOH6ylZ XPPHvjkbXGs+2vKdpXlEOsGllGcyR4SQp/YdK19QEYdgAXWzNkZ7aINhYB0YVQ4E en26uL9fL+7nbOOm8+NHsfjE+cGurGElEgziQVc6DIJ7QlXTfjKBQoSGAWR5iTYt xEECE1J0nFkWqDkljIxCCP1KhHaDPzHhdor6BIvAJO1WBqVoZ7u2eY5VKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHHtnhMpBmrjYw+YSHQbGKOLRsswMB8GA1UdIwQY MBaAFKhTEPUDE3ros11PMp9G8GndcDgVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYt MzAxODlhNWE0ZWJhLzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYtMzAxODlhNWE0ZWJh LzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWy6uf5M8 HS5MbB1LjZCGJBnZwrS099yIUL0waQ2SZQyb0upbYdK/SpK+i0W0tOMIgxCZlyA2 Y7jTiEzO0exutwu0nwdDizWsoxaaxxiXBUMmheAaQ/ZXals+dXWvzVDHLh1bMMgw DK0HlUzOa5l1VObwwg2T0vN3Eu9EfmVEg+ckaUm+eu+EQqb80u2RWK2sJLFRPKoL a6euUIQiEribMSNsnD+vIuurlCb9+0WSG6G3Nl5DXGCOnUW49XZ6VMDWqFTNoQbP EWuSfoB/TB4wcBXQMI+3J7nB4NhUYab/inKSNiIkSZxpnd8VmjVvIhmDQIbSpOOH lrHogFKAQNFsmA== -----END CERTIFICATE-----Generated at Fri Apr 17 23:00:50 2026 by rpki-client