
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
File: Qk_v-1duQR3lEYcdweC9eiDixNc.mft (raw, json)
Hash identifier: GO2Fh3FID+J+WOC2EKcNXWehKccKIm6B8gbv4Ysg4lU=
Subject key identifier: 85:C8:7E:51:74:29:E9:A3:3E:73:84:62:A8:63:BB:71:D1:B2:BE:F1
Authority key identifier: 42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
Certificate issuer: /CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
Certificate serial: 01A1144EA5DB0FFE799BF22B0F1B0F8FB3EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
Manifest number: 166E
Signing time: Wed 07 Oct 2026 03:01:00 +0000
Manifest this update: Wed 07 Oct 2026 03:01:00 +0000
Manifest next update: Thu 08 Oct 2026 03:01:00 +0000
Files and hashes: 1: 17Np1y-dxxhXZQRQoDGfhlgHSac.roa (hash: AmSzrL+ixbKTyqpiqkExdglo4ra/UrlgCqcfSDgSmgM=)
2: G6olI-VvDp9ALlLPdV58qA5xPYI.roa (hash: 2fsCXn2dUvoQvSbjEln1rfEBr4e643A4tQ2VNOf+74w=)
3: LF_8Nc9ZG4x2hfVpD6ng-Xw9W84.roa (hash: ZUOEzaCiK3yAvVDZRgehq5Q9Z7Hz/VbhnM2QFVFIzbg=)
4: Qk_v-1duQR3lEYcdweC9eiDixNc.crl (hash: 2693xESkHqOn0jdngdKqgM9GPtUL+zcuVZYp58lvwnA=)
5: Vx8Q4nTQTZu0HJqRpDNNFvvmG5Y.roa (hash: aOaC++2x4KyJJvhaR/qiM7sOgi46fJa7BbumrEhC7kc=)
6: bwylWe3CdnWe9jj8najvjwfcqt4.roa (hash: qtMSlaGUcmfEHPPp9StGHAcyvutX/FbfstzyO7BM1O0=)
7: jhgr_kqWn0P8kZgzQ4rStaVm9lU.roa (hash: 51PKmpvyPy1LPgxOcO2i5rd0p3mx3xfr6KylJBv2xsM=)
8: nCw-8U_e-vesUJrIZdav3xNtIF8.roa (hash: lsbhSmxHJ+rDA4NzpyD8vAFiMv8avAe680sgNxpRv1E=)
9: nUsb4McCUGoVLzb61SmYYxwkFCU.roa (hash: Kql7INdZrgxo8TWzAiXsnbs/TLgYXHD6OczED6pBuxI=)
10: zlCSnRuq7fXaqQjldkiFbWuXQxA.roa (hash: qa9yNfqriW76nUwB9t/osTdrCLM4tWgEY60WfaKBs+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:14:4e:a5:db:0f:fe:79:9b:f2:2b:0f:1b:0f:8f:b3:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
Validity
Not Before: Oct 7 03:01:00 2026 GMT
Not After : Oct 8 03:01:00 2026 GMT
Subject: CN=85c87e517429e9a33e738462a863bb71d1b2bef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c8:92:4b:e4:6b:b5:d2:3a:78:25:14:20:d5:
1f:b9:2e:46:4d:08:15:a5:a0:6d:19:01:af:e6:b3:
09:a5:45:ff:a7:69:a4:7f:46:eb:18:de:f8:ca:c3:
5a:b0:c2:81:74:88:42:b4:40:db:87:40:6e:13:28:
c4:0d:db:09:18:45:16:e7:a8:17:24:9b:22:10:d3:
f8:77:41:e7:35:1a:7e:8c:fc:29:be:d5:09:bd:cd:
1f:0a:88:ff:db:ff:92:b1:93:9c:2c:66:0a:de:7a:
02:b2:e0:a4:3f:b1:e1:e2:c3:9a:3e:c8:fc:81:d8:
db:af:c8:74:3e:fd:d4:b8:44:11:d9:ac:a1:d2:50:
1c:77:41:50:6b:0b:1f:49:ca:52:d4:32:23:7e:dd:
a4:3c:6d:d7:57:a5:86:78:b7:e1:4a:70:15:78:69:
ab:83:89:39:35:bd:6c:40:ce:3e:dc:09:7c:82:4f:
55:c2:04:c9:cb:0e:10:cf:9d:bc:2b:91:2b:e1:8e:
54:44:b2:0f:42:6f:16:aa:84:f3:67:94:95:5f:32:
86:ad:78:d6:55:5a:5e:b6:c7:f0:94:fd:48:1c:50:
3a:35:e2:04:1f:23:b9:ea:a5:a5:59:30:f8:7d:c1:
d9:5b:76:98:2e:32:b1:58:1c:37:8f:ab:c4:1d:1b:
b2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C8:7E:51:74:29:E9:A3:3E:73:84:62:A8:63:BB:71:D1:B2:BE:F1
X509v3 Authority Key Identifier:
keyid:42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:6d:e0:58:a3:99:06:8d:e0:27:16:e0:2c:72:2c:58:68:7a:
4d:1a:9f:51:e6:51:05:52:34:d7:39:b1:7f:57:8c:48:ff:cf:
1a:8a:f7:48:8c:c3:19:d5:3d:a9:9f:d1:5f:e1:20:09:a6:bc:
25:d2:bc:ee:fb:0d:3b:7e:91:cd:76:35:be:11:b9:03:c2:fb:
c6:64:bd:0b:a6:ac:1f:11:ca:ca:a0:ef:93:78:30:bf:ce:a0:
96:fe:9c:ea:d0:28:be:fd:29:19:71:32:2e:ff:d0:66:ec:65:
4e:6a:5d:8f:38:86:b8:6c:f5:4e:47:62:14:ab:cb:80:44:33:
e8:1e:42:3c:4e:48:34:b5:91:6e:3d:78:ea:ec:9f:53:03:f2:
89:5e:1d:f0:ec:71:db:99:ec:94:e1:fa:d9:a5:13:c9:76:93:
d0:92:13:ba:43:f4:b4:0f:1d:ac:92:73:71:a8:ef:94:e2:dc:
18:05:34:54:7a:44:37:8b:b7:19:32:c1:08:0d:b3:1a:09:a4:
46:a4:e0:9c:e2:77:a4:fb:53:df:63:65:4f:c1:e7:76:dd:6d:
92:78:e6:cf:c7:4e:bb:99:97:8c:79:65:6c:7a:99:9c:ec:bd:
69:9d:2a:0e:ea:d4:7e:6e:a3:c6:ba:af:94:17:49:fe:de:ed:
a0:25:9b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 12:32:24 2026 by rpki-client