
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
File: QwFWVAgleMSUbNJ74eiaPddWL6Q.mft (raw, json)
Hash identifier: nj6tgE438DVDZFKYh6KWxt3xsByqVyYZiBO1PutsmtI=
Subject key identifier: 9F:79:8F:04:34:0B:17:B8:6D:7A:54:40:F3:40:16:1B:CA:E0:C1:94
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A089B0EA73751E7105857181624454F975
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
Manifest number: 1AD3
Signing time: Thu 10 Sep 2026 05:01:07 +0000
Manifest this update: Thu 10 Sep 2026 05:01:07 +0000
Manifest next update: Fri 11 Sep 2026 05:01:07 +0000
Files and hashes: 1: 0k-1e23Nnsj5tw_awEN0WvPaAY0.roa (hash: BtLailLpSoIf7271BKNE7tm6wk0WQ2XZ6vsIZUFj/0A=)
2: 1-0zBT1lgylSb8x2-aAc9ZqBqBVk.roa (hash: 5CRP7SsSnCJL5rSj4NtE2ZZEkcwBzexSUUdMCu4JfX8=)
3: 4sdM2Ij2cKTZcjTQDwS5CUZKGM8.roa (hash: p6d+T9unm13i17/+Ku4D32irYqiCGUYExQ9+4mlQvAo=)
4: ANbnsWF-JLHqejX2Av48LjJnZgs.roa (hash: 9c6ZcPPtFkeQLm/HVh4TWJ/ypShUXQ5+qlsGmHtD58M=)
5: H-sJquMx0B9zaiEd2E3ZAwhMIY0.roa (hash: Qz5OBe4elYp8/kALuORw31r1oAByBlhUSN3w2LlmMFc=)
6: JOafdpaRUl88PgC90VL5xpYKcjE.roa (hash: ZlP86SaiYRDtD1HSEnrHmifz4GMyg0MfqdTIcETJl8k=)
7: JjaZurkudx-UKkST6atudJj3AIU.roa (hash: dRfqQWg4++hOM2BitZpArCb7fIVbWUXdPwFxajSITpU=)
8: NKWHCYzNepWbSsW4Fdxn7US24kg.roa (hash: GmLgFf+CDpdyG1pPKSxadcb5exdWjVthfa2WpFffGps=)
9: PSTGomZ1ObMqQqpGdFQH1zvbUBQ.roa (hash: afnFmYkWhiN9F+mMJUqb2R4wmcsEqxZEBV5b+sQWhDE=)
10: QwFWVAgleMSUbNJ74eiaPddWL6Q.crl (hash: i4I1JrWo+wL35uqFiO5mRylc5gYH1kXGIVgX4jTNeOs=)
11: RWNZJSEiBfn1wB9oIDfPPv-6iDU.roa (hash: YWHdoHexy9yOia35AdSs7CrATv21q3km7UUVFr0uFQg=)
12: RaFD1qIa1FBUHdH1NBKzltHz-BE.roa (hash: QJ4vh7+fg+2vbDLAlShsEsZ766Dpe7V2hwZH9ZczJ2M=)
13: RgoVuEZzrB6iPeoDkS2VZ5UJEjM.roa (hash: 7eIfiRclCfgNOCGCCRoqijzNwFTi6X6q7V5T2mrxMRU=)
14: SLbomanQ3-fIQUZVXrXhD7YErbE.roa (hash: QUG83pZHkv5z2TWCKaHbPmMugaiEFODeHY4PaYFDlLk=)
15: U_ZLkvUUAkI4RwZMyq2Jjf32RV4.roa (hash: ZA+c3pV+IS0ReWusbsSPVJltdHE5p1qLZ8/Eb5F1S/A=)
16: XqV0597Xo_MkEED3jLDmcWL6fvQ.roa (hash: kyh2gbblSVguPugHg4ygFbc+GDfw8j5BLGulCOFHoBI=)
17: Yhh2c5k5LhDOhYle3vNv0DyJTfw.roa (hash: 5rg3Zm+cCVynOrEVlUJGi6HocKZPKPBOqGy0u2RMqq8=)
18: aCrBApyDuKijuFQpX20WNh4unzc.roa (hash: RUfwA5/PkM//szQwil20D8d8AR2S1/InQiu9dABqgmA=)
19: b5VOfYsngZbVCSYSWuCVZzy3P-Q.roa (hash: t2BVxSRMg1PdBU4XB2zXlf0uBbFPlcL38V60oFFybJA=)
20: bOwoeGXB2wja2W0aIO7cJEqFn0c.roa (hash: TjrVmHhe6qTnTA+IeFLgJO+nqktu8K34RwVXqHJjTPE=)
21: bd9meoVRVsoGRpmrtv6r2FY6vUs.roa (hash: QKSqFz83HLFoMWuJv5WI4OLjuPDDcqe3jRtpz3GGoXs=)
22: eg-dC7-vvWJiDSYDZiH6xaOQOec.roa (hash: sC47Vwp9nCQThUP6arB1TrIxrRHoT/y10hj3aRxTokc=)
23: egRMfjWT4bORy9ZUDeCc-picH3M.roa (hash: MJivsHN+cDnfID99mCZofcESqSojJuLSLL6F+jiPy8I=)
24: f015adFaATlW5JvEZeSXsa1hjQQ.roa (hash: GKXh92dvGDb4027E44++nL+DrElheoPfQ05C/idzNLI=)
25: fOJAq1swbmkh20dmWLCzyArzpkI.roa (hash: kX9r2C4lqqAIqj4EY1SToSstb8rKWuOuq4K6oCRN74c=)
26: gNAyrBVoFaWeREXzr33gHPdjLuc.roa (hash: 9t3cAZDPUcX15JFGLDAbTwFu6aPFTfX5yposYhTNwLc=)
27: gfZI4IQTC0ezUMVBFSxLag6FqdI.roa (hash: uT4KnHoYYVdfwJWh8J9YXV6bwz4BpsS1dLHpl2DqdnI=)
28: ijGkWwYVORg8Tu7PMqv3s3GYh9c.roa (hash: +8uIyDzsIpDEcEGhMLdsjhN/19cB8kOUhUyL7Er61Ro=)
29: kuKa_RbKBF-8apG5eNAA7ZGrk64.roa (hash: 8GXXom7MNoYYjacR6QL5aPwdId669M5Mrd0b2uKdYxk=)
30: nH7gC0A7tnD9psDoH0OJ31kdyeU.roa (hash: R/7TBye0UFeEZNsucxTN2YluARZDvoPXoxZFH713aK0=)
31: r2HCLeyltEGA_hqzatfeQM2CBho.roa (hash: YwyR5/CmHx99oGk6Tb5irnpTZ36vyJlRZ9chIz7XE+Q=)
32: r4gojXpCfVfMsKXfq3IcqeiE878.roa (hash: T3XdnQciJ8C4NOqpLw2BOhgbQDlMQMjf7FhYEgWICW0=)
33: tFOqYeDH3lLeYNt7fwV-QtAZUnE.roa (hash: LilK2m+4vGz0x/pO6ZW3viZdV1XDW+8QHDp0GCFsdwY=)
34: upIVk4iaBG0ajJipBgk_wD3mKH8.roa (hash: HR0j+060CHqr8GzQEmE7b+qXp4Z4SFIqTOKsw2g4MrQ=)
35: vanYw-zAW1B03Ap8EGM-X-9boHo.roa (hash: KXoGvYV70RLHSvH90MfYI8MYqhrQDWCU5Yc8cSTrOI0=)
36: w4XR7nwro5wjJE5JtKRUqOgZf5k.roa (hash: KiumyrEOqBPi+erguwa4/UEHEHESuukLcClHJxfKhnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:b0:ea:73:75:1e:71:05:85:71:81:62:44:54:f9:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Sep 10 05:01:07 2026 GMT
Not After : Sep 11 05:01:07 2026 GMT
Subject: CN=9f798f04340b17b86d7a5440f340161bcae0c194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8b:a5:7a:09:66:b2:77:14:ec:47:1c:4f:14:
bf:fd:52:8a:d3:15:0b:ad:50:76:d4:6a:ca:e8:88:
f7:61:2d:2c:e0:17:3e:ba:f3:a5:9b:f6:43:4c:29:
8b:16:16:0c:dc:0d:d7:f4:1d:30:c8:b2:57:c5:2e:
17:83:d7:6f:f5:34:5d:04:5e:6b:96:b8:24:fa:de:
3a:5c:ab:21:b5:72:f3:02:95:5a:f5:85:a7:51:5a:
b9:db:3a:71:81:7a:9f:97:a5:2c:94:23:af:c2:a6:
05:c2:45:3f:dc:48:bb:e1:ee:0c:65:4b:37:55:26:
ac:9b:4a:00:5e:cd:49:6f:3f:36:87:59:b1:0d:19:
be:71:79:24:98:1f:fc:c8:d6:1b:74:e9:d7:37:1a:
71:05:76:82:08:7f:82:2d:20:a4:b6:6e:05:f3:4f:
ea:6c:14:a4:e9:d3:1d:f4:0d:93:6b:33:c3:f8:44:
1c:07:7e:ba:9f:a0:a7:57:95:24:6a:4a:5a:d1:54:
cb:b7:83:1f:2e:41:d5:9e:3d:dd:96:4d:fb:08:c8:
e9:65:40:2d:23:75:fd:ce:ae:a8:2d:80:24:0b:91:
d5:b7:08:fb:a4:64:5a:48:44:df:c4:40:49:cd:95:
3a:6e:56:4a:f6:6d:5b:69:2a:4c:a7:ac:a0:ed:1f:
00:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:79:8F:04:34:0B:17:B8:6D:7A:54:40:F3:40:16:1B:CA:E0:C1:94
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:22:4a:7c:f7:42:c4:cc:d4:19:fe:a6:bf:d3:47:ca:00:a7:
0d:3c:b3:da:ec:09:bc:cb:76:fa:26:08:b3:d9:74:7a:ff:bf:
85:60:dc:84:f9:24:f6:0e:19:56:d3:61:95:49:44:65:8b:6c:
bc:77:0a:87:b9:ea:ed:de:0d:ec:7d:42:1d:cd:6c:db:06:35:
3d:a4:08:96:9f:92:d2:52:4b:9a:f8:0b:f5:55:fe:0e:4b:11:
c8:b0:97:c6:38:99:65:5a:01:7d:37:40:00:c0:66:24:44:5a:
77:77:48:35:e8:de:b3:ec:9f:1e:39:a1:01:16:06:b2:9b:87:
5d:2a:28:06:f3:b5:2f:87:03:5d:5b:5b:0a:a1:25:cb:df:77:
e3:14:5c:23:b0:7c:81:f4:a0:04:a7:c7:91:e3:f6:1c:c5:ae:
ac:9a:96:0e:19:7e:a4:6f:7b:e5:0f:df:c4:a9:6e:26:df:47:
e2:b2:17:f4:7f:c4:76:38:af:08:d0:bf:c4:fb:a9:5e:e9:1f:
89:d0:4f:72:cb:c7:11:e9:ee:b5:40:51:0a:05:35:76:a3:cd:
59:c7:63:aa:ba:59:d8:91:c9:2d:23:75:91:62:7c:d5:c9:89:
92:50:41:68:6b:31:2b:fa:ca:f3:fe:6c:7a:0f:8a:9b:41:de:
75:36:1e:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCJsOpzdR5xBYVxgWJEVPl1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDE1NjU0MDgyNTc4YzQ5NDZjZDI3YmUxZTg5YTNkZDc1
NjJmYTQwHhcNMjYwOTEwMDUwMTA3WhcNMjYwOTExMDUwMTA3WjAzMTEwLwYDVQQD
Eyg5Zjc5OGYwNDM0MGIxN2I4NmQ3YTU0NDBmMzQwMTYxYmNhZTBjMTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04uleglmsncU7EccTxS//VKK0xUL
rVB21GrK6Ij3YS0s4Bc+uvOlm/ZDTCmLFhYM3A3X9B0wyLJXxS4Xg9dv9TRdBF5r
lrgk+t46XKshtXLzApVa9YWnUVq52zpxgXqfl6UslCOvwqYFwkU/3Ei74e4MZUs3
VSasm0oAXs1Jbz82h1mxDRm+cXkkmB/8yNYbdOnXNxpxBXaCCH+CLSCktm4F80/q
bBSk6dMd9A2TazPD+EQcB366n6CnV5Ukakpa0VTLt4MfLkHVnj3dlk37CMjpZUAt
I3X9zq6oLYAkC5HVtwj7pGRaSETfxEBJzZU6blZK9m1baSpMp6yg7R8ATwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ95jwQ0Cxe4bXpUQPNAFhvK4MGUMB8GA1UdIwQY
MBaAFEMBVlQIJXjElGzSe+Homj3XVi+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTkt
MTAzMGNkYmU2YmQ0LzEvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTktMTAzMGNkYmU2YmQ0
LzEvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARSJKfPdC
xMzUGf6mv9NHygCnDTyz2uwJvMt2+iYIs9l0ev+/hWDchPkk9g4ZVtNhlUlEZYts
vHcKh7nq7d4N7H1CHc1s2wY1PaQIlp+S0lJLmvgL9VX+DksRyLCXxjiZZVoBfTdA
AMBmJERad3dINejes+yfHjmhARYGspuHXSooBvO1L4cDXVtbCqEly9934xRcI7B8
gfSgBKfHkeP2HMWurJqWDhl+pG975Q/fxKluJt9H4rIX9H/EdjivCNC/xPupXukf
idBPcsvHEenutUBRCgU1dqPNWcdjqrpZ2JHJLSN1kWJ81cmJklBBaGsxK/rK8/5s
eg+Km0HedTYe8A==
-----END CERTIFICATE-----
Generated at Thu Sep 10 10:46:25 2026 by rpki-client