$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft File: QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft (raw, json) Hash identifier: kX09ij+Yrtdk/kF7SRXskjFRhkG4gWdsU80IAPehVAQ= Subject key identifier: 16:50:6B:DA:F4:67:BF:74:C9:0D:7E:EC:B0:BF:05:ED:2A:2C:3C:AB Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a Certificate serial: 019F11F812467BE9378E0DF5830DF1E09E5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft Manifest number: 16ED Signing time: Mon 29 Jun 2026 06:01:38 +0000 Manifest this update: Mon 29 Jun 2026 06:01:38 +0000 Manifest next update: Tue 30 Jun 2026 06:01:38 +0000 Files and hashes: 1: FsJFy4QzX3uJ4UdyViwCikynttA.roa (hash: RlB8FaaAry3OAsuD+Dw02lKQL3ZJpmsn7VXQvAtrEQQ=) 2: IDKO7jIqiR_FuIZh_0QPOX0acJY.roa (hash: SUuyXo0XyLewTNjHOeFN03+QZPEkWcPb1M5NStmw+t0=) 3: QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl (hash: HDmQE2H03xRPDjyEhWg6hfVts0rpugYQGSZyHDeWkiE=) 4: UqFzq2RNZbWlDFVYyZprB1_1sEM.roa (hash: hO5jaxlS37jXDAccfSZYbNyHj2vkt1PuodFiaALX0Zg=) 5: baqSF0nqYusoIFECKjM-YPjRpPk.roa (hash: Qah7uqDRXltB4WrVjydJLT6cz2tOioqH5UQyq3ujOpo=) 6: g5msJEmtAZPPrNxROEFPbba5x4Y.roa (hash: v9nQWaRHu8tQFbTyot3EjdNkPUX42kWmDF8q/n+QqQQ=) 7: jQ-BZ183u_LUlZapfx_6bO5Fcbo.roa (hash: evJDPjhd4Xd7GaOP8Tsnz8tSIn8B3VRESbVEgJ+Ho4g=) 8: pvcqoNvJFdWoEMg8QFJEzHm8z7E.roa (hash: zuVd/wlnRktcFRrJxR1l3ksJPeEonfLjGaEKrFvnF9w=) 9: qHPixUdDjxrc91U2LNL_GHETLss.roa (hash: 5esutnCHRhEckm/D5dPi2+exRvIyK9kg1fmZT+vC/MU=) 10: qUc0afIdRt8-UOWMIe3SQvVz1n4.roa (hash: /uRdEodyR9sUKrVW+MpbljN4of9z2bshibIE/GFUwdc=) 11: u4NX6hKZvEh_-TMWnB5C6f5ezPk.roa (hash: UZfjswVY8ckqGOGEovj9QQT567PHMAI/NKar7oipK5E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Jun 2026 02:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:11:f8:12:46:7b:e9:37:8e:0d:f5:83:0d:f1:e0:9e:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a Validity Not Before: Jun 29 06:01:38 2026 GMT Not After : Jun 30 06:01:38 2026 GMT Subject: CN=16506bdaf467bf74c90d7eecb0bf05ed2a2c3cab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:56:a8:30:98:16:34:4e:0a:56:84:76:e1:e3: 91:c0:33:63:a5:0c:13:db:5d:1c:69:76:86:46:bf: bc:3c:4e:a9:9e:ed:68:a5:ed:38:27:96:34:35:41: 2e:a7:14:10:27:b0:86:16:e4:af:df:b6:bc:5f:b3: ea:7d:2e:b7:15:3b:5e:84:06:0a:2a:80:c2:7c:39: 37:e6:2b:59:62:1e:3d:be:0a:87:21:52:0e:e3:ff: d4:ed:2d:f4:73:cd:d3:5e:d6:72:2e:eb:1e:b1:d0: 80:85:e1:2a:7c:f1:e5:be:c6:36:10:d7:81:fa:75: 25:78:b4:49:ba:78:17:bd:ba:48:96:8e:3a:4d:0f: 41:76:d5:fa:11:8a:e3:74:db:da:71:74:94:d9:ef: 64:04:57:e1:30:3f:2e:e7:55:95:be:c3:08:f6:cf: 75:83:3d:43:a8:23:25:0c:ea:c0:54:60:be:fb:92: 13:2d:04:88:a7:cc:77:94:67:4e:8c:8b:b0:19:62: 8d:fc:63:81:40:af:39:c7:98:b9:68:e5:ba:4c:85: 24:5a:ba:26:89:bc:34:b8:b2:dc:0b:b9:8a:1c:6e: 5d:37:5a:1d:28:89:a7:f1:ea:37:4c:03:fb:3d:a1: ac:99:93:2b:ab:24:4e:6d:1d:4a:12:dc:4c:58:56: c0:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:50:6B:DA:F4:67:BF:74:C9:0D:7E:EC:B0:BF:05:ED:2A:2C:3C:AB X509v3 Authority Key Identifier: keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:25:ec:76:a9:22:a3:39:04:b8:34:ee:a3:25:c8:b1:98:76: 02:de:dd:4a:2e:5c:f9:11:46:0f:07:62:01:60:72:7a:3b:5a: 2b:8b:78:94:24:f6:10:87:3d:29:8c:92:38:f6:cd:6f:3e:46: 7d:35:c8:21:61:6c:f6:33:fb:d1:dd:77:a7:27:28:ea:8f:5c: 62:9e:ce:cb:fa:61:8b:2e:22:0e:89:28:fa:86:02:67:e8:b7: 3a:50:fa:d0:f3:f3:47:ef:08:3a:4d:19:77:a9:91:fc:39:0f: d5:0e:85:0d:c6:56:54:ad:43:90:e2:26:9f:8a:78:60:1a:cb: c8:91:36:8d:0d:d8:27:4d:e7:cb:0b:c2:55:8a:48:1b:d5:1b: 49:47:5a:7c:fc:80:73:55:d6:7f:75:56:a7:72:df:4b:42:7c: 79:42:57:a8:30:13:7f:7a:e9:6c:7e:85:18:5c:40:59:a6:f7: e2:af:56:c9:29:36:d6:e1:06:24:ce:ab:54:e0:6c:d3:a1:d7: 55:95:1c:f2:d9:6f:98:53:1b:12:88:9d:54:9c:26:7b:c3:51: 56:db:20:ac:b8:6e:00:74:0a:4c:53:b5:9a:85:92:a2:fe:ca: 9b:f0:92:4c:92:26:b5:b9:63:59:68:d6:59:e8:52:04:fa:07: d8:59:0d:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ8R+BJGe+k3jg31gw3x4J5cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZjhhYjJiYTI0ODc5ZTQ1YzQ0NTQ4NmZjZWIyMWFmNDY2 NTZkNWEwHhcNMjYwNjI5MDYwMTM4WhcNMjYwNjMwMDYwMTM4WjAzMTEwLwYDVQQD EygxNjUwNmJkYWY0NjdiZjc0YzkwZDdlZWNiMGJmMDVlZDJhMmMzY2FiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FaoMJgWNE4KVoR24eORwDNjpQwT 210caXaGRr+8PE6pnu1ope04J5Y0NUEupxQQJ7CGFuSv37a8X7PqfS63FTtehAYK KoDCfDk35itZYh49vgqHIVIO4//U7S30c83TXtZyLusesdCAheEqfPHlvsY2ENeB +nUleLRJungXvbpIlo46TQ9BdtX6EYrjdNvacXSU2e9kBFfhMD8u51WVvsMI9s91 gz1DqCMlDOrAVGC++5ITLQSIp8x3lGdOjIuwGWKN/GOBQK85x5i5aOW6TIUkWrom ibw0uLLcC7mKHG5dN1odKImn8eo3TAP7PaGsmZMrqyRObR1KEtxMWFbAVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBZQa9r0Z790yQ1+7LC/Be0qLDyrMB8GA1UdIwQY MBaAFEL4qyuiSHnkXERUhvzrIa9GZW1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYt MTc2OWZlZjZiZTk2LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYtMTc2OWZlZjZiZTk2 LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAViXsdqki ozkEuDTuoyXIsZh2At7dSi5c+RFGDwdiAWByejtaK4t4lCT2EIc9KYySOPbNbz5G fTXIIWFs9jP70d13pyco6o9cYp7Oy/phiy4iDoko+oYCZ+i3OlD60PPzR+8IOk0Z d6mR/DkP1Q6FDcZWVK1DkOImn4p4YBrLyJE2jQ3YJ03nywvCVYpIG9UbSUdafPyA c1XWf3VWp3LfS0J8eUJXqDATf3rpbH6FGFxAWab34q9WySk21uEGJM6rVOBs06HX VZUc8tlvmFMbEoidVJwme8NRVtsgrLhuAHQKTFO1moWSov7Km/CSTJImtbljWWjW WehSBPoH2FkN0A== -----END CERTIFICATE-----Generated at Mon Jun 29 11:09:55 2026 by rpki-client