
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft
File: QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft (raw, json)
Hash identifier: 5KzrWALkNYr/1YOOKD3fp7sq8FTIbuJiCyrEMrFSj7M=
Subject key identifier: A7:95:2D:12:A5:97:6F:FA:CD:88:EC:C0:F7:DA:70:21:73:E2:C5:64
Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Certificate serial: 01A157784C69E1FFB0D48C15E325A0F711C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft
Manifest number: 181D
Signing time: Tue 20 Oct 2026 04:01:04 +0000
Manifest this update: Tue 20 Oct 2026 04:01:04 +0000
Manifest next update: Wed 21 Oct 2026 04:01:04 +0000
Files and hashes: 1: OJirt1wFzwbAHrdg81cQDXpKVE4.roa (hash: ZrhMeJvZbCUyLVGp+g8LjIbIo+0t4e1qLJNqV5+TNAY=)
2: QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl (hash: Tvif+oWTL5FAiL56vMKxMtSjzLB46BC2vKr7e91rN+w=)
3: UqFzq2RNZbWlDFVYyZprB1_1sEM.roa (hash: hO5jaxlS37jXDAccfSZYbNyHj2vkt1PuodFiaALX0Zg=)
4: g5msJEmtAZPPrNxROEFPbba5x4Y.roa (hash: v9nQWaRHu8tQFbTyot3EjdNkPUX42kWmDF8q/n+QqQQ=)
5: hgOUaLDuSDgtlA1yV7iafLhOlwA.roa (hash: XrD4uNDjxERXMxfbMB+mRGApe2Tpr/A7+Ol/LsFJK7o=)
6: jQ-BZ183u_LUlZapfx_6bO5Fcbo.roa (hash: evJDPjhd4Xd7GaOP8Tsnz8tSIn8B3VRESbVEgJ+Ho4g=)
7: pvcqoNvJFdWoEMg8QFJEzHm8z7E.roa (hash: zuVd/wlnRktcFRrJxR1l3ksJPeEonfLjGaEKrFvnF9w=)
8: qHPixUdDjxrc91U2LNL_GHETLss.roa (hash: 5esutnCHRhEckm/D5dPi2+exRvIyK9kg1fmZT+vC/MU=)
9: qUc0afIdRt8-UOWMIe3SQvVz1n4.roa (hash: /uRdEodyR9sUKrVW+MpbljN4of9z2bshibIE/GFUwdc=)
10: u4NX6hKZvEh_-TMWnB5C6f5ezPk.roa (hash: UZfjswVY8ckqGOGEovj9QQT567PHMAI/NKar7oipK5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:57:78:4c:69:e1:ff:b0:d4:8c:15:e3:25:a0:f7:11:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Validity
Not Before: Oct 20 04:01:04 2026 GMT
Not After : Oct 21 04:01:04 2026 GMT
Subject: CN=a7952d12a5976ffacd88ecc0f7da702173e2c564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:70:0e:93:dc:64:c3:14:90:d2:b3:4c:11:e4:
9f:f1:b0:c3:7e:24:4b:a7:e9:fb:f3:9d:aa:8a:0d:
90:70:52:ce:b2:5a:32:c0:b1:73:97:af:ca:28:48:
c7:a1:a0:0b:40:a9:34:27:6a:63:a7:0d:6d:02:6f:
ab:2b:7c:7b:13:c3:1f:a6:bb:05:c0:73:e0:f8:cc:
ff:d3:7c:6c:9c:cf:24:cf:ed:ee:1a:fe:ca:09:99:
bc:8c:f2:79:7d:f5:d9:b7:c7:d4:b5:1e:25:2c:24:
46:2c:3e:59:d4:1b:4b:e5:d4:27:ed:7c:36:8a:b8:
86:7b:f0:4e:c5:63:d3:ee:29:24:9c:6f:2b:61:be:
9c:86:60:48:df:1e:9d:ec:14:4f:a6:18:7f:8c:65:
bb:a4:f0:8a:9e:7c:65:0d:51:aa:5e:a5:c2:04:2b:
c3:aa:97:8f:15:5f:28:ca:cb:e1:a6:9c:66:fe:0c:
61:92:d2:e9:fd:f5:86:50:e1:6a:94:44:c7:11:35:
2e:4e:c9:01:a6:59:30:6d:27:2a:f7:e6:d3:36:8b:
7c:e3:64:08:18:44:da:f0:21:91:09:02:75:1d:94:
ee:98:35:90:c7:b9:76:d5:23:5e:f7:da:e5:3d:b1:
96:97:0a:43:d4:e7:61:a8:cd:cc:3d:53:80:25:b0:
3f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:95:2D:12:A5:97:6F:FA:CD:88:EC:C0:F7:DA:70:21:73:E2:C5:64
X509v3 Authority Key Identifier:
keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c4:16:4b:53:7d:a4:ac:bc:6a:35:fe:73:1a:72:4a:7e:0f:
dc:fe:3a:fa:27:93:d0:70:41:d3:1b:20:0e:57:7b:0d:e3:9a:
ca:05:d4:4e:80:99:07:49:68:ed:cf:6a:f2:aa:f3:f9:c8:b0:
af:b6:56:a9:c3:f7:c9:a5:55:0b:87:cd:1c:1f:85:de:ad:c3:
b8:a6:82:a5:71:78:48:0e:10:48:82:a3:88:74:7e:e3:23:96:
be:28:78:2d:5c:9d:0d:e7:0e:db:3a:80:8e:ab:f4:b3:0e:9a:
7b:bc:b2:81:7a:61:ad:5e:7a:b8:bd:4f:69:33:31:5a:a2:45:
28:e3:2c:94:75:41:71:47:2a:6d:9d:01:84:a8:f6:0c:3e:dc:
ff:08:26:9e:fa:49:0b:2a:c1:0b:98:e2:9c:fe:07:c2:73:da:
db:83:f6:51:ba:3f:de:28:3a:ce:b3:78:79:54:be:2a:8a:0c:
e9:a6:8d:0d:dc:14:a4:9d:62:1a:f4:65:d3:79:9e:f2:27:da:
6d:09:89:c3:45:ec:79:e5:19:13:d2:bf:1c:e5:29:41:a6:c4:
f9:68:ad:e0:a0:81:f2:3a:f5:3c:dc:2f:fd:2e:05:d4:46:93:
b8:6a:42:3e:f3:2a:6b:c5:c1:bc:68:d0:19:62:68:1f:81:c7:
52:6e:e6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 12:29:37 2026 by rpki-client