$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft File: QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft (raw, json) Hash identifier: EE4qW/PlWIGhDmlAK8UPbjbtG64vsgmzpmZLlVqoMPI= Subject key identifier: 1B:FD:1C:BF:63:E1:A5:53:BF:3C:2E:1B:D1:52:E2:25:F9:6D:89:FE Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a Certificate serial: 019E2A394F9EB7AA5EC64EAAEBC40382CA1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft Manifest number: 1675 Signing time: Fri 15 May 2026 06:00:59 +0000 Manifest this update: Fri 15 May 2026 06:00:59 +0000 Manifest next update: Sat 16 May 2026 06:00:59 +0000 Files and hashes: 1: FsJFy4QzX3uJ4UdyViwCikynttA.roa (hash: RlB8FaaAry3OAsuD+Dw02lKQL3ZJpmsn7VXQvAtrEQQ=) 2: IDKO7jIqiR_FuIZh_0QPOX0acJY.roa (hash: SUuyXo0XyLewTNjHOeFN03+QZPEkWcPb1M5NStmw+t0=) 3: QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl (hash: 9MjxTMSKM/gSZq0Ig6DaSSagfI4lgdF7twxinFvKlwA=) 4: UqFzq2RNZbWlDFVYyZprB1_1sEM.roa (hash: hO5jaxlS37jXDAccfSZYbNyHj2vkt1PuodFiaALX0Zg=) 5: baqSF0nqYusoIFECKjM-YPjRpPk.roa (hash: Qah7uqDRXltB4WrVjydJLT6cz2tOioqH5UQyq3ujOpo=) 6: g5msJEmtAZPPrNxROEFPbba5x4Y.roa (hash: v9nQWaRHu8tQFbTyot3EjdNkPUX42kWmDF8q/n+QqQQ=) 7: jQ-BZ183u_LUlZapfx_6bO5Fcbo.roa (hash: evJDPjhd4Xd7GaOP8Tsnz8tSIn8B3VRESbVEgJ+Ho4g=) 8: pvcqoNvJFdWoEMg8QFJEzHm8z7E.roa (hash: zuVd/wlnRktcFRrJxR1l3ksJPeEonfLjGaEKrFvnF9w=) 9: qHPixUdDjxrc91U2LNL_GHETLss.roa (hash: 5esutnCHRhEckm/D5dPi2+exRvIyK9kg1fmZT+vC/MU=) 10: qUc0afIdRt8-UOWMIe3SQvVz1n4.roa (hash: /uRdEodyR9sUKrVW+MpbljN4of9z2bshibIE/GFUwdc=) 11: u4NX6hKZvEh_-TMWnB5C6f5ezPk.roa (hash: UZfjswVY8ckqGOGEovj9QQT567PHMAI/NKar7oipK5E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 16 May 2026 02:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:2a:39:4f:9e:b7:aa:5e:c6:4e:aa:eb:c4:03:82:ca:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a Validity Not Before: May 15 06:00:59 2026 GMT Not After : May 16 06:00:59 2026 GMT Subject: CN=1bfd1cbf63e1a553bf3c2e1bd152e225f96d89fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8f:20:ae:65:29:c4:7c:d4:af:57:18:15:39: d0:af:c7:d7:0c:8a:02:a9:b3:13:3a:df:2d:0c:1a: 3e:a4:e4:a9:0b:d8:3f:33:e4:3b:00:bc:23:69:01: f7:ee:a4:15:a1:3a:91:9e:80:54:c5:75:0a:5c:06: 0d:a3:05:8d:82:76:fc:ea:88:e2:64:9f:36:a7:51: 8c:61:3f:35:d7:cb:94:e3:2c:bf:ec:a2:c0:b8:bc: 9c:87:ad:cf:c0:14:a2:dc:dc:ee:58:2a:60:63:0c: ce:ed:18:9e:70:2b:c5:7b:94:91:83:7e:d3:af:0a: 8a:e7:b6:8e:35:65:75:cc:4e:31:db:92:d6:ca:c2: 3a:17:ff:d4:75:56:c8:5e:49:ff:31:6c:16:66:fa: 63:e5:e6:34:ee:33:f8:dd:3e:4d:34:5c:79:6b:9d: b3:83:f3:b9:55:52:a0:28:b6:a4:bd:76:e1:04:11: c3:51:9e:9d:b2:08:3b:45:6c:c0:71:fd:fb:6a:e1: 46:1c:fc:55:e6:c0:0d:29:2d:06:dc:40:05:1d:56: 6c:0c:59:68:aa:a2:d0:6e:bb:8f:64:84:ca:9d:71: 09:67:52:5f:2c:98:f4:1a:bd:7b:64:90:00:27:b4: b9:57:52:42:c7:46:1c:a5:d4:4f:b7:8a:0a:23:58: d6:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:FD:1C:BF:63:E1:A5:53:BF:3C:2E:1B:D1:52:E2:25:F9:6D:89:FE X509v3 Authority Key Identifier: keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:15:32:ca:0b:72:b9:1a:04:fb:ee:17:72:c0:35:e4:55:e6: 32:4c:4c:54:52:87:ec:ca:f3:5c:4f:86:cb:ce:2b:02:d6:00: 0e:1e:da:3e:b1:5d:95:18:1f:d6:1a:da:70:dc:f0:52:19:fe: d9:aa:1d:55:59:18:27:c7:b4:5f:da:2c:66:98:82:c2:2d:b8: 70:0d:a8:c2:fa:29:fb:52:b7:ba:54:b4:a7:a1:10:6c:60:c9: c9:d6:fd:04:0f:23:46:b5:c8:05:e4:33:e7:93:18:d9:65:eb: 42:a5:07:da:ea:13:2e:fa:2c:88:c5:42:84:14:26:e3:28:29: b1:e0:27:c1:4b:1c:cb:e4:3d:a7:0f:6b:aa:84:2b:8f:2e:59: ea:59:11:62:5d:ba:55:82:13:7d:54:e5:7e:f5:f7:80:80:d8: 18:fb:22:45:78:03:92:96:c5:2e:32:30:f4:64:de:13:94:73: 0f:f1:71:03:83:cd:41:02:3d:be:69:78:e2:dd:e5:c6:a3:ac: 5c:ca:81:9f:ea:ff:c8:20:2d:f0:63:4d:99:e6:c4:d4:09:27: f2:61:ab:7e:42:b3:c2:05:a6:26:ee:b6:81:0a:7c:21:0d:3b: 95:bd:9a:8a:eb:1f:f5:94:c5:54:96:bf:c6:2f:d8:00:7a:d2: 25:a6:91:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4qOU+et6pexk6q68QDgsoeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZjhhYjJiYTI0ODc5ZTQ1YzQ0NTQ4NmZjZWIyMWFmNDY2 NTZkNWEwHhcNMjYwNTE1MDYwMDU5WhcNMjYwNTE2MDYwMDU5WjAzMTEwLwYDVQQD EygxYmZkMWNiZjYzZTFhNTUzYmYzYzJlMWJkMTUyZTIyNWY5NmQ4OWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvo8grmUpxHzUr1cYFTnQr8fXDIoC qbMTOt8tDBo+pOSpC9g/M+Q7ALwjaQH37qQVoTqRnoBUxXUKXAYNowWNgnb86oji ZJ82p1GMYT8118uU4yy/7KLAuLych63PwBSi3NzuWCpgYwzO7RiecCvFe5SRg37T rwqK57aONWV1zE4x25LWysI6F//UdVbIXkn/MWwWZvpj5eY07jP43T5NNFx5a52z g/O5VVKgKLakvXbhBBHDUZ6dsgg7RWzAcf37auFGHPxV5sANKS0G3EAFHVZsDFlo qqLQbruPZITKnXEJZ1JfLJj0Gr17ZJAAJ7S5V1JCx0YcpdRPt4oKI1jWLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBv9HL9j4aVTvzwuG9FS4iX5bYn+MB8GA1UdIwQY MBaAFEL4qyuiSHnkXERUhvzrIa9GZW1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYt MTc2OWZlZjZiZTk2LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYtMTc2OWZlZjZiZTk2 LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlRUyygty uRoE++4XcsA15FXmMkxMVFKH7MrzXE+Gy84rAtYADh7aPrFdlRgf1hracNzwUhn+ 2aodVVkYJ8e0X9osZpiCwi24cA2owvop+1K3ulS0p6EQbGDJydb9BA8jRrXIBeQz 55MY2WXrQqUH2uoTLvosiMVChBQm4ygpseAnwUscy+Q9pw9rqoQrjy5Z6lkRYl26 VYITfVTlfvX3gIDYGPsiRXgDkpbFLjIw9GTeE5RzD/FxA4PNQQI9vml44t3lxqOs XMqBn+r/yCAt8GNNmebE1Akn8mGrfkKzwgWmJu62gQp8IQ07lb2aiusf9ZTFVJa/ xi/YAHrSJaaR8w== -----END CERTIFICATE-----Generated at Fri May 15 09:51:43 2026 by rpki-client