
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
File: Qk_v-1duQR3lEYcdweC9eiDixNc.mft (raw, json)
Hash identifier: 2/gRXy580vhuhN+JazBvSmsMPV4i0uwuP/5tIVaSJZg=
Subject key identifier: CB:93:5E:6B:E0:FF:92:0E:61:28:75:6E:01:2B:9A:44:36:9D:D5:B3
Authority key identifier: 42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
Certificate issuer: /CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
Certificate serial: 019FA1841D55CF102DEE1011F3D4D6701393
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
Manifest number: 15AE
Signing time: Mon 27 Jul 2026 03:00:17 +0000
Manifest this update: Mon 27 Jul 2026 03:00:17 +0000
Manifest next update: Tue 28 Jul 2026 03:00:17 +0000
Files and hashes: 1: 17Np1y-dxxhXZQRQoDGfhlgHSac.roa (hash: AmSzrL+ixbKTyqpiqkExdglo4ra/UrlgCqcfSDgSmgM=)
2: G6olI-VvDp9ALlLPdV58qA5xPYI.roa (hash: 2fsCXn2dUvoQvSbjEln1rfEBr4e643A4tQ2VNOf+74w=)
3: LF_8Nc9ZG4x2hfVpD6ng-Xw9W84.roa (hash: ZUOEzaCiK3yAvVDZRgehq5Q9Z7Hz/VbhnM2QFVFIzbg=)
4: Qk_v-1duQR3lEYcdweC9eiDixNc.crl (hash: BRVo+0aYevEE6Rsj4H7Soj/1BIqbI2+lwioeOP8aHIw=)
5: Vx8Q4nTQTZu0HJqRpDNNFvvmG5Y.roa (hash: aOaC++2x4KyJJvhaR/qiM7sOgi46fJa7BbumrEhC7kc=)
6: bwylWe3CdnWe9jj8najvjwfcqt4.roa (hash: qtMSlaGUcmfEHPPp9StGHAcyvutX/FbfstzyO7BM1O0=)
7: jhgr_kqWn0P8kZgzQ4rStaVm9lU.roa (hash: 51PKmpvyPy1LPgxOcO2i5rd0p3mx3xfr6KylJBv2xsM=)
8: nCw-8U_e-vesUJrIZdav3xNtIF8.roa (hash: lsbhSmxHJ+rDA4NzpyD8vAFiMv8avAe680sgNxpRv1E=)
9: nUsb4McCUGoVLzb61SmYYxwkFCU.roa (hash: Kql7INdZrgxo8TWzAiXsnbs/TLgYXHD6OczED6pBuxI=)
10: zlCSnRuq7fXaqQjldkiFbWuXQxA.roa (hash: qa9yNfqriW76nUwB9t/osTdrCLM4tWgEY60WfaKBs+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:84:1d:55:cf:10:2d:ee:10:11:f3:d4:d6:70:13:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
Validity
Not Before: Jul 27 03:00:17 2026 GMT
Not After : Jul 28 03:00:17 2026 GMT
Subject: CN=cb935e6be0ff920e6128756e012b9a44369dd5b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:07:35:20:a9:ef:89:8f:a3:34:10:82:c2:3b:
40:2c:ed:8f:cd:9c:80:26:b8:b7:6c:7a:9c:a3:44:
15:2e:39:e9:d0:08:62:d3:14:cd:dd:ad:15:b0:07:
10:b4:d1:1d:e5:93:c0:0f:bd:76:87:6d:54:8d:ba:
93:be:d5:c8:c3:e9:2b:b9:45:7e:e3:9a:26:d6:c2:
25:06:86:c1:51:65:3c:eb:40:1b:82:15:01:c9:0b:
17:23:54:c7:bc:7f:34:96:43:e0:91:21:9c:e0:41:
b0:97:42:58:0f:15:b9:40:e4:da:26:b8:54:a8:52:
53:aa:3d:05:7f:e1:1c:21:c9:cb:99:d0:f7:1d:5c:
bd:51:3e:b6:6d:f2:c0:c6:5b:40:fb:61:24:6c:20:
36:86:1f:01:70:2e:3c:9d:2c:44:e7:56:e5:9d:93:
48:9a:81:30:9c:91:29:a2:85:6a:c3:43:69:1a:39:
f0:73:68:50:41:bd:88:1f:fc:d1:fa:f6:a9:fe:ad:
d7:8a:40:05:35:14:6c:9c:f7:f8:c9:23:74:ce:3a:
af:89:b4:c8:7a:e1:43:0a:57:07:76:4e:ae:df:13:
76:c8:46:80:09:0d:a4:c9:8c:74:50:c5:ce:03:f3:
79:ed:98:43:44:8e:72:aa:df:4d:45:b4:cd:ff:03:
e4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:93:5E:6B:E0:FF:92:0E:61:28:75:6E:01:2B:9A:44:36:9D:D5:B3
X509v3 Authority Key Identifier:
keyid:42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:5d:07:49:54:af:d7:39:d4:de:83:1e:39:dd:c3:0c:b3:15:
3b:df:ac:e8:e8:f2:89:0a:35:b2:cf:28:41:21:12:6e:71:61:
b4:88:82:4d:7b:8c:30:d0:19:ad:c0:0e:4c:3a:b0:11:ca:83:
2b:43:4d:00:d2:19:ff:6d:97:d4:22:a4:d5:be:76:45:4c:18:
35:ed:20:e3:ba:ce:d6:1a:f0:ea:4f:f9:bb:fe:86:9d:06:d8:
b4:a7:00:15:88:d1:9c:ea:86:fa:c7:52:df:13:70:6a:c2:f8:
15:12:b2:75:da:5a:03:10:5a:2c:e3:72:e9:c9:23:56:c4:28:
48:ca:fd:a7:0c:0e:70:ec:28:81:e5:26:7a:2c:7f:12:97:d3:
f3:16:9d:de:b3:29:31:85:dd:1f:b2:93:b0:d6:4f:97:88:d5:
ff:b2:47:e9:05:89:ea:bc:cb:94:46:91:bf:ea:d6:80:7a:30:
16:54:04:63:9b:eb:a0:37:db:9d:b4:ba:76:06:2f:c4:12:85:
5d:61:bd:d6:11:10:e0:d3:fa:76:b0:3b:05:fd:86:bd:3b:79:
2e:25:f5:36:11:e7:6b:41:1f:b6:79:6d:e3:f4:ce:bf:3e:b5:
4f:da:75:7b:17:fd:b8:bf:10:ce:c8:cf:ee:94:44:9a:30:87:
1f:21:05:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:49:17 2026 by rpki-client