$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft File: QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft (raw, json) Hash identifier: GpxeGo8RQ7MU7VUZiSSL3mMrhKJ2iD8n4BBJOM3RPto= Subject key identifier: BF:84:CD:F9:74:4F:AA:BC:A7:7E:F4:71:39:36:B2:E7:3A:87:57:2C Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a Certificate serial: 019D25F0FE4E03E83EA2F71450CDE958F3D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft Manifest number: 15EE Signing time: Wed 25 Mar 2026 17:00:43 +0000 Manifest this update: Wed 25 Mar 2026 17:00:43 +0000 Manifest next update: Thu 26 Mar 2026 17:00:43 +0000 Files and hashes: 1: QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl (hash: W9Uge/nOdYEHDM2jjQWEqm6bH0Tjo+YSeCEEKjFlYUw=) 2: UqFzq2RNZbWlDFVYyZprB1_1sEM.roa (hash: hO5jaxlS37jXDAccfSZYbNyHj2vkt1PuodFiaALX0Zg=) 3: baqSF0nqYusoIFECKjM-YPjRpPk.roa (hash: Qah7uqDRXltB4WrVjydJLT6cz2tOioqH5UQyq3ujOpo=) 4: g5msJEmtAZPPrNxROEFPbba5x4Y.roa (hash: v9nQWaRHu8tQFbTyot3EjdNkPUX42kWmDF8q/n+QqQQ=) 5: jQ-BZ183u_LUlZapfx_6bO5Fcbo.roa (hash: evJDPjhd4Xd7GaOP8Tsnz8tSIn8B3VRESbVEgJ+Ho4g=) 6: pvcqoNvJFdWoEMg8QFJEzHm8z7E.roa (hash: zuVd/wlnRktcFRrJxR1l3ksJPeEonfLjGaEKrFvnF9w=) 7: qHPixUdDjxrc91U2LNL_GHETLss.roa (hash: 5esutnCHRhEckm/D5dPi2+exRvIyK9kg1fmZT+vC/MU=) 8: qUc0afIdRt8-UOWMIe3SQvVz1n4.roa (hash: /uRdEodyR9sUKrVW+MpbljN4of9z2bshibIE/GFUwdc=) 9: u4NX6hKZvEh_-TMWnB5C6f5ezPk.roa (hash: UZfjswVY8ckqGOGEovj9QQT567PHMAI/NKar7oipK5E=) 10: u7ZWAaBzlABZ-QZA-Bd1Xl5OXBQ.roa (hash: S84OvzHgnNB7KAJknamEKhkwMOlgRvtVcLZBEin8FQM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:25:f0:fe:4e:03:e8:3e:a2:f7:14:50:cd:e9:58:f3:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a Validity Not Before: Mar 25 17:00:43 2026 GMT Not After : Mar 26 17:00:43 2026 GMT Subject: CN=bf84cdf9744faabca77ef4713936b2e73a87572c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:a2:6f:55:f7:86:e5:7d:78:23:f6:9b:ed:38: 0e:4a:26:eb:ad:15:65:27:85:2a:3e:b9:cb:fe:ab: d2:8b:3f:da:b1:d9:71:78:c9:f9:fe:cb:b4:3b:9b: 1b:e5:93:ec:6c:9e:75:a8:9a:53:2f:e6:4e:3b:75: 2e:ec:bf:06:1c:25:1b:af:9b:68:79:65:f6:81:39: 38:1d:2c:b7:de:2c:70:84:bf:db:67:05:a4:f5:8f: 50:3b:8a:9b:2c:b8:b1:f8:6e:68:c1:77:ae:79:37: 4d:3a:17:66:b7:c4:44:51:fe:f2:76:66:60:0c:3d: 4f:14:52:58:67:b8:e1:bb:ab:f0:e3:86:56:95:b1: 68:20:09:b8:89:9a:19:fc:6f:5d:76:58:c2:fd:b9: 99:85:89:3e:8e:2a:52:98:91:1d:b2:d3:c9:17:8d: 1c:b2:a6:f8:8d:5f:54:b4:ee:b1:25:c5:9c:72:49: e9:85:c1:55:71:b1:d7:7e:c4:8c:d6:c6:f3:f7:52: 9d:9e:c4:2c:de:e5:88:e7:6e:c0:a7:dc:f7:75:22: 97:96:2d:6e:43:c4:a9:91:d7:13:3a:24:ba:d6:9a: ca:35:dc:96:1d:2e:d6:47:84:17:a2:f9:b7:a1:3a: 4d:89:86:3b:d0:ef:e8:bd:57:79:79:06:2a:4a:53: ea:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:84:CD:F9:74:4F:AA:BC:A7:7E:F4:71:39:36:B2:E7:3A:87:57:2C X509v3 Authority Key Identifier: keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:d2:47:06:c3:d3:05:4b:46:35:94:ac:be:b9:ca:22:2c:1e: 6b:2b:f8:4a:5e:12:c9:7c:3f:de:e5:1f:08:db:90:5d:46:9d: b4:3a:4e:38:49:54:10:10:cb:69:ec:57:17:8c:ba:be:d6:c2: 11:38:41:74:ae:12:87:7b:2c:24:88:74:76:a5:31:23:a3:5f: 5e:9e:27:c7:16:ee:7d:dd:7c:45:f6:32:0b:af:94:f6:d0:d7: 69:dd:7f:cd:29:2e:68:88:18:c1:2e:10:f5:8e:80:76:e0:c5: 0d:2b:8d:ea:02:a2:48:0d:04:aa:e7:8e:d1:e3:7a:5a:fe:1c: f1:d2:4d:7d:00:f6:fe:40:73:b3:60:26:d5:35:4b:ac:ca:7e: dc:c4:77:62:6f:1c:4b:1d:ff:fd:2c:0f:ea:2c:95:ae:4a:d4: b8:f2:51:1e:8a:e7:c8:55:b4:a6:5f:67:7d:dc:ad:cb:b9:f4: 1c:83:cb:b1:77:0d:4b:b4:35:25:90:a0:37:8d:f9:c5:50:e1: b7:62:da:da:ce:0b:f4:6d:a1:14:18:ee:66:8a:8b:3e:bd:7f: a4:f3:6a:15:9b:97:27:9b:c1:6a:3b:5f:40:10:42:9d:0c:63: c0:ef:40:8d:5a:bf:c0:47:41:83:86:9b:11:dd:ce:0b:0e:b9: 02:8d:f3:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0l8P5OA+g+ovcUUM3pWPPWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZjhhYjJiYTI0ODc5ZTQ1YzQ0NTQ4NmZjZWIyMWFmNDY2 NTZkNWEwHhcNMjYwMzI1MTcwMDQzWhcNMjYwMzI2MTcwMDQzWjAzMTEwLwYDVQQD EyhiZjg0Y2RmOTc0NGZhYWJjYTc3ZWY0NzEzOTM2YjJlNzNhODc1NzJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9qJvVfeG5X14I/ab7TgOSibrrRVl J4UqPrnL/qvSiz/asdlxeMn5/su0O5sb5ZPsbJ51qJpTL+ZOO3Uu7L8GHCUbr5to eWX2gTk4HSy33ixwhL/bZwWk9Y9QO4qbLLix+G5owXeueTdNOhdmt8REUf7ydmZg DD1PFFJYZ7jhu6vw44ZWlbFoIAm4iZoZ/G9ddljC/bmZhYk+jipSmJEdstPJF40c sqb4jV9UtO6xJcWccknphcFVcbHXfsSM1sbz91KdnsQs3uWI527Ap9z3dSKXli1u Q8SpkdcTOiS61prKNdyWHS7WR4QXovm3oTpNiYY70O/ovVd5eQYqSlPq8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL+Ezfl0T6q8p370cTk2suc6h1csMB8GA1UdIwQY MBaAFEL4qyuiSHnkXERUhvzrIa9GZW1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYt MTc2OWZlZjZiZTk2LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYtMTc2OWZlZjZiZTk2 LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcdJHBsPT BUtGNZSsvrnKIiweayv4Sl4SyXw/3uUfCNuQXUadtDpOOElUEBDLaexXF4y6vtbC EThBdK4Sh3ssJIh0dqUxI6NfXp4nxxbufd18RfYyC6+U9tDXad1/zSkuaIgYwS4Q 9Y6AduDFDSuN6gKiSA0EqueO0eN6Wv4c8dJNfQD2/kBzs2Am1TVLrMp+3MR3Ym8c Sx3//SwP6iyVrkrUuPJRHornyFW0pl9nfdyty7n0HIPLsXcNS7Q1JZCgN435xVDh t2La2s4L9G2hFBjuZoqLPr1/pPNqFZuXJ5vBajtfQBBCnQxjwO9AjVq/wEdBg4ab Ed3OCw65Ao3zKA== -----END CERTIFICATE-----Generated at Wed Mar 25 21:49:51 2026 by rpki-client