
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft
File: QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft (raw, json)
Hash identifier: 23YxueMR+Al9KvJbh/P49G1lWRj9APWdXUiY4+rTq2w=
Subject key identifier: 5F:C5:C6:E9:C6:28:A3:5F:2D:C9:4D:0F:7E:95:A9:67:53:12:5B:66
Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Certificate serial: 01A15B54E67FA84DB78F4294ADC48AB056E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft
Manifest number: 181F
Signing time: Tue 20 Oct 2026 22:00:53 +0000
Manifest this update: Tue 20 Oct 2026 22:00:53 +0000
Manifest next update: Wed 21 Oct 2026 22:00:53 +0000
Files and hashes: 1: OJirt1wFzwbAHrdg81cQDXpKVE4.roa (hash: ZrhMeJvZbCUyLVGp+g8LjIbIo+0t4e1qLJNqV5+TNAY=)
2: QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl (hash: S9YzIQXE5bhupt+ts6eYQDVD6x53rRhKSHuthtD7yeA=)
3: UqFzq2RNZbWlDFVYyZprB1_1sEM.roa (hash: hO5jaxlS37jXDAccfSZYbNyHj2vkt1PuodFiaALX0Zg=)
4: g5msJEmtAZPPrNxROEFPbba5x4Y.roa (hash: v9nQWaRHu8tQFbTyot3EjdNkPUX42kWmDF8q/n+QqQQ=)
5: hgOUaLDuSDgtlA1yV7iafLhOlwA.roa (hash: XrD4uNDjxERXMxfbMB+mRGApe2Tpr/A7+Ol/LsFJK7o=)
6: jQ-BZ183u_LUlZapfx_6bO5Fcbo.roa (hash: evJDPjhd4Xd7GaOP8Tsnz8tSIn8B3VRESbVEgJ+Ho4g=)
7: pvcqoNvJFdWoEMg8QFJEzHm8z7E.roa (hash: zuVd/wlnRktcFRrJxR1l3ksJPeEonfLjGaEKrFvnF9w=)
8: qHPixUdDjxrc91U2LNL_GHETLss.roa (hash: 5esutnCHRhEckm/D5dPi2+exRvIyK9kg1fmZT+vC/MU=)
9: qUc0afIdRt8-UOWMIe3SQvVz1n4.roa (hash: /uRdEodyR9sUKrVW+MpbljN4of9z2bshibIE/GFUwdc=)
10: u4NX6hKZvEh_-TMWnB5C6f5ezPk.roa (hash: UZfjswVY8ckqGOGEovj9QQT567PHMAI/NKar7oipK5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5b:54:e6:7f:a8:4d:b7:8f:42:94:ad:c4:8a:b0:56:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Validity
Not Before: Oct 20 22:00:53 2026 GMT
Not After : Oct 21 22:00:53 2026 GMT
Subject: CN=5fc5c6e9c628a35f2dc94d0f7e95a96753125b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d2:0c:da:ef:73:7b:10:7f:78:cf:ee:dc:d2:
64:e1:91:8d:19:b4:83:bd:ce:32:c7:81:b5:0b:bd:
fe:89:d1:ca:9d:7b:27:cb:8e:16:12:a5:55:fa:c2:
6a:58:c9:fe:e1:78:4d:2d:e0:a8:16:28:bd:17:92:
6e:cd:70:55:c9:2b:d5:65:bd:af:32:27:b9:48:b6:
93:f0:f3:66:09:f7:00:a9:56:f6:77:53:c8:77:8f:
9a:3a:f4:9a:e0:b3:01:8c:40:1a:03:80:4c:76:2b:
74:f5:57:2f:77:be:08:55:0b:9c:50:f9:69:90:4d:
c7:04:14:0d:21:60:c6:37:19:89:e4:5c:d8:31:c3:
ad:a9:ca:e9:ba:89:51:1c:93:f0:69:8d:ef:13:63:
da:ac:4a:c7:ed:1f:a7:19:be:ea:d0:a9:b4:80:a0:
e0:9a:9f:66:cb:9c:eb:db:9b:5c:b7:b8:db:ec:1b:
46:93:d5:ae:14:62:6f:54:84:b0:e8:3b:d4:81:d9:
b1:52:1b:8c:ea:3f:57:9e:9c:40:59:48:70:d5:d7:
f5:cc:da:4b:65:64:9e:47:6c:79:85:68:e2:f8:db:
e0:03:cd:5c:c1:91:b4:bf:98:6d:fa:5d:e4:ec:16:
86:61:c3:1b:e2:5d:88:5c:bc:c6:0d:ab:ae:41:43:
68:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C5:C6:E9:C6:28:A3:5F:2D:C9:4D:0F:7E:95:A9:67:53:12:5B:66
X509v3 Authority Key Identifier:
keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:53:75:01:3a:ba:18:53:ff:e2:20:f5:88:48:29:7d:b0:be:
81:51:c9:da:3d:f1:de:53:90:39:7e:be:35:bb:a5:62:72:e9:
b3:e3:5d:69:10:74:e3:7d:d1:12:d5:03:43:0c:17:8a:9a:21:
05:59:f7:f1:04:30:c0:61:b2:2c:4a:47:ef:94:3d:05:c0:db:
10:12:f6:77:30:67:d3:66:3d:f7:e3:40:f0:56:b7:e7:96:fd:
97:e3:25:82:f3:79:8b:a6:05:86:c9:1c:ea:26:0b:4a:98:0f:
f0:09:6b:c6:c6:3e:31:e4:b1:13:35:a1:a3:f4:cd:e5:d1:4f:
ee:d0:bc:b5:61:50:0b:8c:cb:4e:c7:8c:b8:07:81:22:66:e5:
fc:c1:02:0b:0e:07:3f:0b:a6:df:3a:7e:f5:fc:13:84:28:d1:
5d:06:28:33:70:93:c1:c1:a6:42:91:71:51:2e:59:69:8c:eb:
85:f8:d8:61:66:a7:5c:1b:ef:d1:d5:90:ce:32:b6:35:aa:2d:
dc:0f:50:32:86:b6:99:f6:53:17:6d:82:f7:2d:40:47:4f:43:
d0:45:aa:db:17:ed:08:28:e3:e6:95:19:dd:25:26:76:47:b6:
3c:57:22:fa:74:ea:18:53:00:2b:5f:13:d6:96:39:fb:4c:9c:
1e:0c:86:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 05:48:58 2026 by rpki-client