
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft
File: QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft (raw, json)
Hash identifier: Dr9miIPWtzdcvGQ20+8d/l8YW9qOAB6yuQtDmZiDzRM=
Subject key identifier: 10:F2:A1:93:51:DC:0E:75:7C:93:37:49:A8:A6:B6:39:39:AC:C2:7F
Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Certificate serial: 019FF9ED60214CD1908146D8C0D8E85D9BFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft
Manifest number: 1766
Signing time: Thu 13 Aug 2026 07:01:51 +0000
Manifest this update: Thu 13 Aug 2026 07:01:51 +0000
Manifest next update: Fri 14 Aug 2026 07:01:51 +0000
Files and hashes: 1: FsJFy4QzX3uJ4UdyViwCikynttA.roa (hash: RlB8FaaAry3OAsuD+Dw02lKQL3ZJpmsn7VXQvAtrEQQ=)
2: QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl (hash: ZgXpHBrUbflcdB90abNlQxQKFnEG96SRTtd/BnsZ0Bk=)
3: UqFzq2RNZbWlDFVYyZprB1_1sEM.roa (hash: hO5jaxlS37jXDAccfSZYbNyHj2vkt1PuodFiaALX0Zg=)
4: g5msJEmtAZPPrNxROEFPbba5x4Y.roa (hash: v9nQWaRHu8tQFbTyot3EjdNkPUX42kWmDF8q/n+QqQQ=)
5: hgOUaLDuSDgtlA1yV7iafLhOlwA.roa (hash: XrD4uNDjxERXMxfbMB+mRGApe2Tpr/A7+Ol/LsFJK7o=)
6: jQ-BZ183u_LUlZapfx_6bO5Fcbo.roa (hash: evJDPjhd4Xd7GaOP8Tsnz8tSIn8B3VRESbVEgJ+Ho4g=)
7: pvcqoNvJFdWoEMg8QFJEzHm8z7E.roa (hash: zuVd/wlnRktcFRrJxR1l3ksJPeEonfLjGaEKrFvnF9w=)
8: qHPixUdDjxrc91U2LNL_GHETLss.roa (hash: 5esutnCHRhEckm/D5dPi2+exRvIyK9kg1fmZT+vC/MU=)
9: qUc0afIdRt8-UOWMIe3SQvVz1n4.roa (hash: /uRdEodyR9sUKrVW+MpbljN4of9z2bshibIE/GFUwdc=)
10: u4NX6hKZvEh_-TMWnB5C6f5ezPk.roa (hash: UZfjswVY8ckqGOGEovj9QQT567PHMAI/NKar7oipK5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 07:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:ed:60:21:4c:d1:90:81:46:d8:c0:d8:e8:5d:9b:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Validity
Not Before: Aug 13 07:01:51 2026 GMT
Not After : Aug 14 07:01:51 2026 GMT
Subject: CN=10f2a19351dc0e757c933749a8a6b63939acc27f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e8:dc:f8:fd:1e:fd:c5:cc:f4:4b:35:46:1a:
c1:db:5c:20:fa:73:83:5e:65:ba:0a:31:99:b5:52:
91:07:e3:04:57:b9:4e:5d:3b:9a:b9:33:59:32:18:
0b:a8:bb:1a:89:60:76:d7:4a:18:45:bf:70:c0:ae:
8c:28:aa:07:b1:98:3f:ea:6b:e7:fd:42:02:12:26:
b1:1a:1a:f9:28:dc:d5:1f:22:20:4d:e0:29:a3:a6:
49:75:43:93:aa:dc:34:b5:56:31:62:41:f0:8b:51:
9d:7c:25:76:b6:5b:5d:33:4a:90:0a:a8:da:33:c7:
18:0f:b3:06:f6:27:af:38:ba:77:be:3a:59:2b:7b:
37:87:31:fb:5d:b0:ec:eb:26:5a:bb:55:86:c4:aa:
fe:c4:ef:cf:6b:cf:34:b9:16:09:00:72:6e:f2:bc:
31:78:2a:bd:a3:1e:3a:33:36:a7:70:c2:f0:8a:d5:
a1:80:a7:ac:c4:2a:20:08:50:f6:c3:70:84:31:f3:
a5:19:27:83:4d:53:32:33:e2:b7:5d:65:ef:e5:51:
5e:c1:f3:eb:6c:c2:77:30:58:06:0b:86:70:84:d2:
db:fe:2d:45:f3:38:a4:3f:47:24:ad:0d:dd:ed:77:
af:5b:31:b0:39:94:77:67:13:6b:93:1a:97:3d:07:
42:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F2:A1:93:51:DC:0E:75:7C:93:37:49:A8:A6:B6:39:39:AC:C2:7F
X509v3 Authority Key Identifier:
keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:3f:8c:3d:de:95:72:98:53:e1:75:32:9f:ef:a5:42:d4:2b:
56:fc:40:fa:18:5e:0d:0c:7d:4a:5e:57:b0:bd:6e:86:04:05:
a8:0f:82:02:d1:0e:4c:b1:a0:a4:ae:57:97:ef:50:2c:83:e8:
4b:d3:0b:1b:ce:56:ad:26:53:f0:6c:fb:04:1f:c8:17:78:1b:
a0:00:75:26:37:66:e5:75:ee:61:99:b5:a2:ed:e3:fe:67:1e:
bb:24:ed:c3:fc:02:8f:a0:07:52:7d:8a:f3:5d:e4:49:a9:bf:
c1:f3:16:75:f0:b4:48:e3:17:2a:3d:5b:41:56:77:15:38:3d:
98:63:c9:f9:52:ae:3b:6a:d6:ad:11:f2:20:20:b6:50:e0:3e:
a0:62:ae:9d:b3:52:6c:42:b9:f8:f5:65:01:79:d8:8b:58:98:
b8:8c:75:b8:53:2c:53:3d:ab:46:9a:fc:32:a3:83:e2:8d:53:
c5:2a:33:39:0f:87:f0:33:3f:2e:b5:b6:96:eb:3e:d4:83:b0:
ff:78:b5:62:06:4c:44:88:64:c7:fe:6b:59:33:8d:4a:7a:e7:
df:31:76:ed:6e:8f:ca:ea:40:81:20:f8:36:ae:55:f4:64:b1:
89:2d:e6:e7:90:0b:43:89:57:9b:42:37:c3:d6:32:9d:0d:82:
05:34:05:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 17:13:08 2026 by rpki-client