$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft File: Qk_v-1duQR3lEYcdweC9eiDixNc.mft (raw, json) Hash identifier: pyeMMXzRZE9aU/32A9G1sZc1V000g3BfGok9Tp6Cj3g= Subject key identifier: A3:D0:B8:31:B8:2F:88:D9:24:8F:AF:EE:0E:32:D9:76:38:9E:CB:6F Authority key identifier: 42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7 Certificate issuer: /CN=424feffb576e411de511871dc1e0bd7a20e2c4d7 Certificate serial: 019DCC3CEE539199211CB465DEA2E96EB57A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft Manifest number: 14BB Signing time: Mon 27 Apr 2026 00:00:38 +0000 Manifest this update: Mon 27 Apr 2026 00:00:38 +0000 Manifest next update: Tue 28 Apr 2026 00:00:38 +0000 Files and hashes: 1: 17Np1y-dxxhXZQRQoDGfhlgHSac.roa (hash: AmSzrL+ixbKTyqpiqkExdglo4ra/UrlgCqcfSDgSmgM=) 2: G6olI-VvDp9ALlLPdV58qA5xPYI.roa (hash: 2fsCXn2dUvoQvSbjEln1rfEBr4e643A4tQ2VNOf+74w=) 3: LF_8Nc9ZG4x2hfVpD6ng-Xw9W84.roa (hash: ZUOEzaCiK3yAvVDZRgehq5Q9Z7Hz/VbhnM2QFVFIzbg=) 4: Qk_v-1duQR3lEYcdweC9eiDixNc.crl (hash: aaUGsLxVb+W1/UZyDy92LGVVEIl+GMEbq2WGo20XURE=) 5: Vx8Q4nTQTZu0HJqRpDNNFvvmG5Y.roa (hash: aOaC++2x4KyJJvhaR/qiM7sOgi46fJa7BbumrEhC7kc=) 6: bwylWe3CdnWe9jj8najvjwfcqt4.roa (hash: qtMSlaGUcmfEHPPp9StGHAcyvutX/FbfstzyO7BM1O0=) 7: jhgr_kqWn0P8kZgzQ4rStaVm9lU.roa (hash: 51PKmpvyPy1LPgxOcO2i5rd0p3mx3xfr6KylJBv2xsM=) 8: nCw-8U_e-vesUJrIZdav3xNtIF8.roa (hash: lsbhSmxHJ+rDA4NzpyD8vAFiMv8avAe680sgNxpRv1E=) 9: nUsb4McCUGoVLzb61SmYYxwkFCU.roa (hash: Kql7INdZrgxo8TWzAiXsnbs/TLgYXHD6OczED6pBuxI=) 10: zlCSnRuq7fXaqQjldkiFbWuXQxA.roa (hash: qa9yNfqriW76nUwB9t/osTdrCLM4tWgEY60WfaKBs+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Apr 2026 23:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:cc:3c:ee:53:91:99:21:1c:b4:65:de:a2:e9:6e:b5:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=424feffb576e411de511871dc1e0bd7a20e2c4d7 Validity Not Before: Apr 27 00:00:38 2026 GMT Not After : Apr 28 00:00:38 2026 GMT Subject: CN=a3d0b831b82f88d9248fafee0e32d976389ecb6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6c:4b:80:b6:55:05:45:1f:91:60:25:1b:ef: 89:d5:d4:96:f9:77:e6:4b:b0:e5:f5:dc:9f:78:14: 50:0e:5c:4d:7d:b6:32:33:ce:af:21:e2:79:9c:67: 4e:33:2d:39:47:d9:71:16:d9:48:ea:0d:6a:5e:9b: 6a:f2:5b:36:2d:a7:ac:3f:f7:70:3d:ba:71:04:a1: 6e:26:9d:3b:ed:e8:47:69:31:62:14:b8:13:bd:5c: 23:4f:db:3e:b6:5b:3a:56:d1:99:23:33:04:0e:2c: f5:af:b5:54:89:92:6c:aa:14:cc:ee:16:71:56:af: 93:e4:1c:29:e9:ce:76:3b:c6:96:4a:eb:da:8b:ae: c9:09:2c:6d:a7:21:fd:46:84:7e:75:71:04:be:4c: b7:32:7c:26:07:c2:92:c7:ba:dc:58:49:36:c5:81: da:fc:65:32:df:b4:0f:eb:5d:93:29:00:5c:13:f8: 01:e8:35:b3:00:3e:70:91:b0:fc:bd:88:25:91:4a: 62:3e:7c:64:f1:67:94:52:f1:9f:21:79:94:43:36: 94:fd:b2:71:08:8d:18:ad:ae:a1:ef:0b:a8:08:ba: a2:ba:96:dc:eb:fa:ad:3d:04:64:28:38:eb:70:29: c8:3f:9b:23:e2:4d:3c:1c:c2:e9:1e:c3:42:a2:b8: 3c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:D0:B8:31:B8:2F:88:D9:24:8F:AF:EE:0E:32:D9:76:38:9E:CB:6F X509v3 Authority Key Identifier: keyid:42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:f0:fd:c8:9f:d7:e7:ac:ed:f6:e9:72:28:59:8c:d4:45:d8: 4d:91:5a:bf:d0:b1:59:0b:60:e5:bf:01:cd:15:e9:ac:b8:ca: 08:ad:43:63:5a:c7:f3:1b:c2:98:40:b6:88:04:82:89:6c:b2: 63:f7:85:ed:67:a0:75:4e:30:e6:d5:c7:73:00:8f:f3:c4:07: 17:77:2f:63:02:f2:2f:e9:ef:e5:f7:f0:2d:2b:e7:0d:88:c4: 83:f4:19:f0:c0:29:b8:e1:3d:ac:15:9a:3c:cf:4c:fc:e0:1e: a2:be:96:49:a5:03:c2:90:78:9c:d3:f9:1e:a6:cd:4c:b0:07: 5b:f2:01:4d:29:1f:06:eb:28:87:c2:84:11:53:96:3d:a3:a5: b7:48:97:a8:6c:fc:ab:b0:a4:c3:1f:10:b7:89:8e:eb:be:f6: b8:6d:19:b3:6d:7f:37:c6:d2:8f:ad:59:bb:3d:9d:ee:fe:65: 6a:eb:37:c6:7d:a6:04:f6:b6:90:0c:7d:56:2a:31:5a:2e:db: f1:d8:cb:24:04:fe:28:cc:3d:6c:c6:be:39:35:eb:91:36:a7: c8:22:30:33:cb:06:86:cf:0f:3e:de:41:6e:84:cf:62:5f:b4: 3a:eb:f3:1f:55:65:38:ea:9d:60:20:83:0a:c8:ba:58:2f:b7: 19:96:73:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3MPO5TkZkhHLRl3qLpbrV6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyNGZlZmZiNTc2ZTQxMWRlNTExODcxZGMxZTBiZDdhMjBl MmM0ZDcwHhcNMjYwNDI3MDAwMDM4WhcNMjYwNDI4MDAwMDM4WjAzMTEwLwYDVQQD EyhhM2QwYjgzMWI4MmY4OGQ5MjQ4ZmFmZWUwZTMyZDk3NjM4OWVjYjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mxLgLZVBUUfkWAlG++J1dSW+Xfm S7Dl9dyfeBRQDlxNfbYyM86vIeJ5nGdOMy05R9lxFtlI6g1qXptq8ls2LaesP/dw PbpxBKFuJp077ehHaTFiFLgTvVwjT9s+tls6VtGZIzMEDiz1r7VUiZJsqhTM7hZx Vq+T5Bwp6c52O8aWSuvai67JCSxtpyH9RoR+dXEEvky3MnwmB8KSx7rcWEk2xYHa /GUy37QP612TKQBcE/gB6DWzAD5wkbD8vYglkUpiPnxk8WeUUvGfIXmUQzaU/bJx CI0Yra6h7wuoCLqiupbc6/qtPQRkKDjrcCnIP5sj4k08HMLpHsNCorg8GQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKPQuDG4L4jZJI+v7g4y2XY4nstvMB8GA1UdIwQY MBaAFEJP7/tXbkEd5RGHHcHgvXog4sTXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy82MTM1MDgtMDgzMi00MWY2LWFjYjct ODMxZjdlNmY1Y2NkLzEvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy82MTM1MDgtMDgzMi00MWY2LWFjYjctODMxZjdlNmY1Y2Nk LzEvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa/D9yJ/X 56zt9ulyKFmM1EXYTZFav9CxWQtg5b8BzRXprLjKCK1DY1rH8xvCmEC2iASCiWyy Y/eF7WegdU4w5tXHcwCP88QHF3cvYwLyL+nv5ffwLSvnDYjEg/QZ8MApuOE9rBWa PM9M/OAeor6WSaUDwpB4nNP5HqbNTLAHW/IBTSkfBusoh8KEEVOWPaOlt0iXqGz8 q7Ckwx8Qt4mO6772uG0Zs21/N8bSj61Zuz2d7v5laus3xn2mBPa2kAx9VioxWi7b 8djLJAT+KMw9bMa+OTXrkTanyCIwM8sGhs8PPt5BboTPYl+0OuvzH1VlOOqdYCCD Csi6WC+3GZZz2w== -----END CERTIFICATE-----Generated at Mon Apr 27 07:15:49 2026 by rpki-client