$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft File: qFMQ9QMTeuizXU8yn0bwad1wOBU.mft (raw, json) Hash identifier: QZ2UbR/9jYBgu9ewt/NsRf9KdsrioXsEpyVTpnpWXjM= Subject key identifier: B1:70:99:AE:C9:94:10:86:BF:BE:33:E4:E3:89:FB:88:54:BC:A8:19 Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815 Certificate serial: 019D9AE3A03C122B8417AFD6A3C67A6FFADD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft Manifest number: 10BE Signing time: Fri 17 Apr 2026 10:01:41 +0000 Manifest this update: Fri 17 Apr 2026 10:01:41 +0000 Manifest next update: Sat 18 Apr 2026 10:01:41 +0000 Files and hashes: 1: 74nAH9muoqGD-s4yAjGfkwaZSpY.roa (hash: D3Z53fCQBRC5btWm2TKOEsF5ZZDk5JfPmaKFAGt33yM=) 2: 8-p5z6a3n-5Vbg_FUQcHOfePr1k.roa (hash: T0w7zmmsEVS9b11trnjpNDiN07nDknNytyRJ3xCbFlo=) 3: 9c8fl-F23xypfkbqbl1n5JPG_84.roa (hash: lNc776mR+msxcq+rQeOV4AB0lZ4u3hobNqWSqkfBl4w=) 4: BuCCAIR_5ckodCbHgOD1MMIt-Dk.roa (hash: QG9xQu9PRC+aBkksrXZrhX4apZcVikxD0oV/WFqRvns=) 5: EUcioYCNgoBr4fX2m_esrOCrQGM.roa (hash: 0JHPbY7p1Ja0Q0GjkadwueehBILVs0m7aNuPr13Bguc=) 6: Ir4fT-wtu3kzF5QNGTTkkMm0Z74.roa (hash: DJFlUJTizA9NLrEk8PUMB7MGXkecQxJA+XnDIeJTTP0=) 7: L5qyY9jZaitIZWVHzJF8EMKtnJw.roa (hash: RHPOnQl7M+92fyRwAlYoQqCItx05c0P7/Yx6ROjX9QU=) 8: etM1AIrZp5N8xQAUS7d-EkBBO6Q.roa (hash: 62w4oF2cGdWj0o3BpcwxlZBpiXXPXN7RYr3Sd64Mob8=) 9: pmjWXndiYs4KEBmLyUOfoVEBC-k.roa (hash: 0OAhoLS3wlHvG79outXZ8QvOduBA5V35p0IKCSGmHXM=) 10: qFMQ9QMTeuizXU8yn0bwad1wOBU.crl (hash: 6ETORKmfNYfZ65teVDzzNTsERN1MEUlOj8QZbRBv/es=) 11: uzUF1iytiBjIXaGoXYbb89U983Q.roa (hash: GmwJF+if9a4Li6CDW3Ardtoa/NUyQLlBVKRkV0wDIP0=) 12: zz2ubIWIT2y3LrPgWA-Wvq86OMs.roa (hash: FQoneHTBSyuTPA9+pRMwse2b3ajv2eaAnyk8ybdQibM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9a:e3:a0:3c:12:2b:84:17:af:d6:a3:c6:7a:6f:fa:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815 Validity Not Before: Apr 17 10:01:41 2026 GMT Not After : Apr 18 10:01:41 2026 GMT Subject: CN=b17099aec9941086bfbe33e4e389fb8854bca819 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:82:4e:b2:2b:c4:75:d8:50:67:71:57:2f:4b: f2:93:0a:de:04:0d:4d:2b:79:ba:01:c0:60:96:25: 44:78:f8:b3:fa:05:ce:93:b6:21:4c:90:cb:3d:3e: 25:ba:69:65:7e:16:e7:a3:e8:2f:ae:6a:6b:1f:fd: 08:a0:f3:5d:22:8f:fa:7a:8f:44:0b:c3:ef:e8:88: 6c:76:be:e7:8f:1a:bd:83:c8:56:15:7d:aa:eb:bd: 20:a6:53:15:cf:a1:d6:e4:2b:61:c4:29:47:83:64: d5:20:08:c3:00:72:86:93:8c:e0:d3:32:c7:43:64: 68:7f:87:88:9e:c3:80:74:d5:96:59:72:66:a4:45: a6:67:2b:c9:d4:bc:1e:73:fb:b1:99:07:1b:08:5a: 91:1c:39:f1:4a:fe:d7:cc:9f:e6:c1:a0:b9:b6:42: fe:9e:71:0a:32:53:50:a1:93:33:43:7c:76:a7:82: dd:25:aa:91:6e:fc:df:d3:a3:ef:36:98:61:ca:e5: a7:58:66:7a:75:b7:c5:67:f5:02:26:2d:18:f4:23: 01:aa:25:79:3b:fb:d5:34:dc:10:f0:1b:a5:7c:65: 99:dd:ff:a3:af:f1:08:7b:6a:66:0d:81:3a:10:ad: f0:fd:78:11:28:0f:8b:b6:48:fa:33:cc:8b:13:ef: be:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:70:99:AE:C9:94:10:86:BF:BE:33:E4:E3:89:FB:88:54:BC:A8:19 X509v3 Authority Key Identifier: keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:e8:08:92:ba:87:a8:0c:7e:ec:1c:63:21:7b:76:68:e5:84: bb:2c:87:fd:b7:b3:42:74:88:ff:b9:f0:d0:37:65:45:b4:45: 3f:02:d0:24:64:51:3d:77:f0:aa:7e:2e:0a:7d:7e:6a:09:6c: 98:de:ab:0c:1b:56:d3:be:00:50:4e:02:d9:9d:2a:94:b6:07: b0:91:be:8d:b5:98:a4:c2:52:ee:8f:84:d6:99:c2:e3:e2:f5: 4a:42:dc:c1:41:0e:14:41:a4:66:eb:da:be:18:7c:40:81:34: 44:d3:0f:23:5b:0c:4f:08:52:36:ae:4b:d6:32:30:d3:75:24: d7:fd:7a:34:95:fd:f2:09:21:f8:75:48:40:08:9e:11:73:74: 2a:53:65:d3:c5:f5:f6:5d:5f:69:32:0a:5a:d8:43:85:57:a5: ba:10:94:c5:dd:9f:a9:40:56:1d:f7:be:61:e3:97:af:8a:4d: 42:82:c7:f1:9a:ce:06:7d:56:3b:76:57:8d:91:dc:18:d4:80: 77:e1:09:fb:33:09:ac:58:54:8f:82:d8:8a:1a:f7:f0:4d:cb: 5d:f8:3a:e3:e5:2f:fa:93:39:e0:a4:40:f3:71:c2:91:63:85: 8a:a8:d2:9c:87:98:bb:42:96:fb:3a:37:c1:b5:0e:5d:ac:1f: 35:9f:ea:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2a46A8EiuEF6/Wo8Z6b/rdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NTMxMGY1MDMxMzdhZThiMzVkNGYzMjlmNDZmMDY5ZGQ3 MDM4MTUwHhcNMjYwNDE3MTAwMTQxWhcNMjYwNDE4MTAwMTQxWjAzMTEwLwYDVQQD EyhiMTcwOTlhZWM5OTQxMDg2YmZiZTMzZTRlMzg5ZmI4ODU0YmNhODE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4JOsivEddhQZ3FXL0vykwreBA1N K3m6AcBgliVEePiz+gXOk7YhTJDLPT4lumllfhbno+gvrmprH/0IoPNdIo/6eo9E C8Pv6Ihsdr7njxq9g8hWFX2q670gplMVz6HW5CthxClHg2TVIAjDAHKGk4zg0zLH Q2Rof4eInsOAdNWWWXJmpEWmZyvJ1Lwec/uxmQcbCFqRHDnxSv7XzJ/mwaC5tkL+ nnEKMlNQoZMzQ3x2p4LdJaqRbvzf06PvNphhyuWnWGZ6dbfFZ/UCJi0Y9CMBqiV5 O/vVNNwQ8BulfGWZ3f+jr/EIe2pmDYE6EK3w/XgRKA+Ltkj6M8yLE+++8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLFwma7JlBCGv74z5OOJ+4hUvKgZMB8GA1UdIwQY MBaAFKhTEPUDE3ros11PMp9G8GndcDgVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYt MzAxODlhNWE0ZWJhLzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYtMzAxODlhNWE0ZWJh LzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK+gIkrqH qAx+7BxjIXt2aOWEuyyH/bezQnSI/7nw0DdlRbRFPwLQJGRRPXfwqn4uCn1+agls mN6rDBtW074AUE4C2Z0qlLYHsJG+jbWYpMJS7o+E1pnC4+L1SkLcwUEOFEGkZuva vhh8QIE0RNMPI1sMTwhSNq5L1jIw03Uk1/16NJX98gkh+HVIQAieEXN0KlNl08X1 9l1faTIKWthDhVeluhCUxd2fqUBWHfe+YeOXr4pNQoLH8ZrOBn1WO3ZXjZHcGNSA d+EJ+zMJrFhUj4LYihr38E3LXfg64+Uv+pM54KRA83HCkWOFiqjSnIeYu0KW+zo3 wbUOXawfNZ/qqA== -----END CERTIFICATE-----Generated at Fri Apr 17 14:07:03 2026 by rpki-client