$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft File: Qk_v-1duQR3lEYcdweC9eiDixNc.mft (raw, json) Hash identifier: An24y8Pa/BSwqS/aFfMzWJDPWhhV4hPW7O5jznuqCjs= Subject key identifier: BD:E3:7C:DB:F4:A3:C7:DA:0D:8B:62:BB:74:3A:38:65:45:9E:1C:A4 Authority key identifier: 42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7 Certificate issuer: /CN=424feffb576e411de511871dc1e0bd7a20e2c4d7 Certificate serial: 01A1826291F000F5A2AE44102B552BF7D853 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft Manifest number: 16A7 Signing time: Wed 28 Oct 2026 12:01:00 +0000 Manifest this update: Wed 28 Oct 2026 12:01:00 +0000 Manifest next update: Thu 29 Oct 2026 12:01:00 +0000 Files and hashes: 1: 17Np1y-dxxhXZQRQoDGfhlgHSac.roa (hash: AmSzrL+ixbKTyqpiqkExdglo4ra/UrlgCqcfSDgSmgM=) 2: G6olI-VvDp9ALlLPdV58qA5xPYI.roa (hash: 2fsCXn2dUvoQvSbjEln1rfEBr4e643A4tQ2VNOf+74w=) 3: LF_8Nc9ZG4x2hfVpD6ng-Xw9W84.roa (hash: ZUOEzaCiK3yAvVDZRgehq5Q9Z7Hz/VbhnM2QFVFIzbg=) 4: Qk_v-1duQR3lEYcdweC9eiDixNc.crl (hash: 9f28L1mmeI6X8UB1fOjmYCIR61Gc9ZFWFhMCw4l/kOU=) 5: Vx8Q4nTQTZu0HJqRpDNNFvvmG5Y.roa (hash: aOaC++2x4KyJJvhaR/qiM7sOgi46fJa7BbumrEhC7kc=) 6: bwylWe3CdnWe9jj8najvjwfcqt4.roa (hash: qtMSlaGUcmfEHPPp9StGHAcyvutX/FbfstzyO7BM1O0=) 7: jhgr_kqWn0P8kZgzQ4rStaVm9lU.roa (hash: 51PKmpvyPy1LPgxOcO2i5rd0p3mx3xfr6KylJBv2xsM=) 8: nCw-8U_e-vesUJrIZdav3xNtIF8.roa (hash: lsbhSmxHJ+rDA4NzpyD8vAFiMv8avAe680sgNxpRv1E=) 9: nUsb4McCUGoVLzb61SmYYxwkFCU.roa (hash: Kql7INdZrgxo8TWzAiXsnbs/TLgYXHD6OczED6pBuxI=) 10: zlCSnRuq7fXaqQjldkiFbWuXQxA.roa (hash: qa9yNfqriW76nUwB9t/osTdrCLM4tWgEY60WfaKBs+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Oct 2026 07:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:82:62:91:f0:00:f5:a2:ae:44:10:2b:55:2b:f7:d8:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=424feffb576e411de511871dc1e0bd7a20e2c4d7 Validity Not Before: Oct 28 12:01:00 2026 GMT Not After : Oct 29 12:01:00 2026 GMT Subject: CN=bde37cdbf4a3c7da0d8b62bb743a3865459e1ca4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:30:d1:2d:d4:e3:b7:0b:a0:b6:fb:8f:64:0c: 0d:06:6e:07:7d:39:ce:44:ab:60:77:c6:98:ea:c7: 42:5f:2a:78:d6:4f:6b:3f:f1:05:77:d8:23:02:05: 4b:f3:f6:12:4c:6f:13:a5:a3:4a:5e:0f:9c:72:a4: b9:52:24:62:fe:97:98:95:d2:94:9b:1f:e2:63:96: 9e:09:ba:87:90:45:b4:18:a8:f5:44:9a:88:84:22: 95:54:06:f1:db:fe:e8:79:41:d3:d4:16:1d:6f:55: 02:89:3a:aa:eb:ae:d9:39:2d:21:c3:61:ce:da:77: f2:7e:f7:5f:65:7c:50:cc:ee:3c:ff:b4:2f:1d:6a: 2b:44:17:e4:a0:b1:c2:ab:b1:ea:83:74:9e:1f:d1: 06:85:88:53:5d:6b:0c:b3:76:93:49:69:e0:06:76: 38:51:3c:58:c5:23:dd:cd:02:f9:5f:7b:e9:97:81: b5:82:e8:85:64:fc:fe:c8:c6:16:fd:dd:64:e6:aa: c4:cc:40:bf:7a:11:b4:c2:7f:50:e8:fd:35:41:19: 3d:9b:4b:bf:a0:84:64:37:8e:7f:3b:1d:77:49:f5: 52:73:22:d8:e5:30:81:fb:40:3b:5e:db:77:91:d2: 1e:16:af:65:54:b9:ae:bf:3a:a0:f8:57:22:c8:e4: 01:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:E3:7C:DB:F4:A3:C7:DA:0D:8B:62:BB:74:3A:38:65:45:9E:1C:A4 X509v3 Authority Key Identifier: keyid:42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:2c:bf:6f:e1:0e:65:75:2d:b5:51:f8:dd:86:40:94:6e:f4: 8d:1a:9f:e4:ac:a7:ae:2c:16:4f:3f:3b:7c:c6:c4:02:09:7a: ef:cf:b0:b7:60:45:f3:66:e1:03:62:f5:86:ee:09:dd:2b:19: 62:9a:54:4d:7f:a7:d8:29:1c:50:c1:eb:7f:fe:3c:45:59:5f: f8:f0:f9:3d:f9:f9:b7:b7:af:67:f2:02:ba:3e:ee:66:79:5b: 87:50:03:a9:6b:fc:45:79:a5:58:ed:06:c9:c6:01:18:b2:07: 33:d5:6c:2d:2b:ed:58:f7:e2:b9:dd:98:4d:fc:99:1d:f3:24: 08:63:15:f3:16:89:30:fd:92:1b:25:2b:ab:9a:20:af:c0:8f: 61:3f:1f:68:31:cb:ae:04:24:e4:b4:cf:7f:96:a9:89:32:42: d6:45:64:29:83:31:97:73:53:d6:db:09:56:cf:86:a5:42:0c: 3e:8f:e2:02:84:b0:f8:61:35:4b:13:0f:f8:5d:e0:ce:b5:d2: 79:f1:6e:03:bb:91:0f:8b:b1:46:7b:ce:3e:39:12:d7:9e:f5: 21:60:7f:8f:20:f3:de:a1:c6:b1:74:d9:24:cf:2f:e1:21:9f: a6:c0:e2:65:82:ef:b0:71:8b:fe:77:d8:01:bc:db:dd:d8:f8: e0:6a:77:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGCYpHwAPWirkQQK1Ur99hTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyNGZlZmZiNTc2ZTQxMWRlNTExODcxZGMxZTBiZDdhMjBl MmM0ZDcwHhcNMjYxMDI4MTIwMTAwWhcNMjYxMDI5MTIwMTAwWjAzMTEwLwYDVQQD EyhiZGUzN2NkYmY0YTNjN2RhMGQ4YjYyYmI3NDNhMzg2NTQ1OWUxY2E0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjDRLdTjtwugtvuPZAwNBm4HfTnO RKtgd8aY6sdCXyp41k9rP/EFd9gjAgVL8/YSTG8TpaNKXg+ccqS5UiRi/peYldKU mx/iY5aeCbqHkEW0GKj1RJqIhCKVVAbx2/7oeUHT1BYdb1UCiTqq667ZOS0hw2HO 2nfyfvdfZXxQzO48/7QvHWorRBfkoLHCq7Hqg3SeH9EGhYhTXWsMs3aTSWngBnY4 UTxYxSPdzQL5X3vpl4G1guiFZPz+yMYW/d1k5qrEzEC/ehG0wn9Q6P01QRk9m0u/ oIRkN45/Ox13SfVScyLY5TCB+0A7Xtt3kdIeFq9lVLmuvzqg+FciyOQBBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL3jfNv0o8faDYtiu3Q6OGVFnhykMB8GA1UdIwQY MBaAFEJP7/tXbkEd5RGHHcHgvXog4sTXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy82MTM1MDgtMDgzMi00MWY2LWFjYjct ODMxZjdlNmY1Y2NkLzEvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy82MTM1MDgtMDgzMi00MWY2LWFjYjctODMxZjdlNmY1Y2Nk LzEvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXCy/b+EO ZXUttVH43YZAlG70jRqf5KynriwWTz87fMbEAgl678+wt2BF82bhA2L1hu4J3SsZ YppUTX+n2CkcUMHrf/48RVlf+PD5Pfn5t7evZ/ICuj7uZnlbh1ADqWv8RXmlWO0G ycYBGLIHM9VsLSvtWPfiud2YTfyZHfMkCGMV8xaJMP2SGyUrq5ogr8CPYT8faDHL rgQk5LTPf5apiTJC1kVkKYMxl3NT1tsJVs+GpUIMPo/iAoSw+GE1SxMP+F3gzrXS efFuA7uRD4uxRnvOPjkS1571IWB/jyDz3qHGsXTZJM8v4SGfpsDiZYLvsHGL/nfY Abzb3dj44Gp3Hg== -----END CERTIFICATE-----Generated at Wed Oct 28 16:29:22 2026 by rpki-client