$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft File: QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft (raw, json) Hash identifier: sgXRpb/he975bhon7QnMrwj2r4+LV04jSHmU0/X6bmA= Subject key identifier: 9D:AF:66:1D:AE:66:49:BA:8E:07:1C:BD:17:D2:34:06:03:77:21:75 Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a Certificate serial: 019E1EA30248FEEDE1AD4A3BBADD3BFB946D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft Manifest number: 166F Signing time: Wed 13 May 2026 00:00:59 +0000 Manifest this update: Wed 13 May 2026 00:00:59 +0000 Manifest next update: Thu 14 May 2026 00:00:59 +0000 Files and hashes: 1: FsJFy4QzX3uJ4UdyViwCikynttA.roa (hash: RlB8FaaAry3OAsuD+Dw02lKQL3ZJpmsn7VXQvAtrEQQ=) 2: IDKO7jIqiR_FuIZh_0QPOX0acJY.roa (hash: SUuyXo0XyLewTNjHOeFN03+QZPEkWcPb1M5NStmw+t0=) 3: QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl (hash: AG4KHHUKpD4Jn/qOHwAEiZplD34XIYDE3y3tAMROIis=) 4: UqFzq2RNZbWlDFVYyZprB1_1sEM.roa (hash: hO5jaxlS37jXDAccfSZYbNyHj2vkt1PuodFiaALX0Zg=) 5: baqSF0nqYusoIFECKjM-YPjRpPk.roa (hash: Qah7uqDRXltB4WrVjydJLT6cz2tOioqH5UQyq3ujOpo=) 6: g5msJEmtAZPPrNxROEFPbba5x4Y.roa (hash: v9nQWaRHu8tQFbTyot3EjdNkPUX42kWmDF8q/n+QqQQ=) 7: jQ-BZ183u_LUlZapfx_6bO5Fcbo.roa (hash: evJDPjhd4Xd7GaOP8Tsnz8tSIn8B3VRESbVEgJ+Ho4g=) 8: pvcqoNvJFdWoEMg8QFJEzHm8z7E.roa (hash: zuVd/wlnRktcFRrJxR1l3ksJPeEonfLjGaEKrFvnF9w=) 9: qHPixUdDjxrc91U2LNL_GHETLss.roa (hash: 5esutnCHRhEckm/D5dPi2+exRvIyK9kg1fmZT+vC/MU=) 10: qUc0afIdRt8-UOWMIe3SQvVz1n4.roa (hash: /uRdEodyR9sUKrVW+MpbljN4of9z2bshibIE/GFUwdc=) 11: u4NX6hKZvEh_-TMWnB5C6f5ezPk.roa (hash: UZfjswVY8ckqGOGEovj9QQT567PHMAI/NKar7oipK5E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1e:a3:02:48:fe:ed:e1:ad:4a:3b:ba:dd:3b:fb:94:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a Validity Not Before: May 13 00:00:59 2026 GMT Not After : May 14 00:00:59 2026 GMT Subject: CN=9daf661dae6649ba8e071cbd17d2340603772175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2a:1e:be:b8:50:3f:1d:71:1a:c8:51:ba:34: 34:4a:f5:10:71:54:18:8d:0c:dc:50:c0:c3:4f:3a: 61:44:0e:83:ff:5e:0f:a0:f0:d6:c6:a5:d0:d4:fa: 3c:93:d4:b2:ab:9e:ec:98:db:69:4d:21:83:a9:40: 03:99:86:28:13:04:4e:52:6a:29:74:b3:2b:db:f0: 19:69:2d:03:42:78:84:e2:6f:ed:0f:78:52:dd:c0: 8b:09:d5:5e:6b:24:0c:cc:c4:83:42:10:0e:94:aa: ab:9e:16:2a:23:b8:fe:68:b6:4f:21:0b:e7:6f:c0: c7:44:7b:29:0b:57:ad:00:0c:17:05:31:14:99:bd: 90:16:ce:cb:90:f6:ae:06:f6:ef:ea:30:72:99:1c: ae:32:5c:58:3d:2e:c1:b3:15:58:d3:db:5c:b8:5b: ef:9b:de:6d:93:da:46:c9:f2:be:a5:b7:f7:e6:c0: 10:04:35:ab:9f:8c:98:05:c2:3a:e4:f1:8d:08:40: af:eb:f1:b7:5b:ec:96:06:3f:a5:7e:54:e2:fe:25: 55:04:88:c8:c2:9a:73:6e:e5:00:56:ef:73:b0:95: d5:92:e6:65:92:78:9b:af:d8:9e:2c:a9:d4:df:4b: d7:24:a5:91:8b:80:e3:ca:cb:a0:ea:db:ca:78:a9: 56:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:AF:66:1D:AE:66:49:BA:8E:07:1C:BD:17:D2:34:06:03:77:21:75 X509v3 Authority Key Identifier: keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:bd:8e:5d:42:f8:36:68:b4:cb:79:5e:64:07:47:4e:ab:41: 75:a3:00:c8:bb:20:dc:89:1b:3e:c3:3a:46:fc:c8:fe:c5:7c: d3:8c:8b:c8:84:ee:1f:26:bd:7d:92:37:93:d8:1a:dd:07:78: 72:d5:0d:69:08:56:8a:4d:53:40:81:bd:e3:a1:c9:c9:7f:01: 5c:a3:2c:22:66:58:3c:d3:e9:40:ff:0b:f1:4d:1f:88:b3:50: 17:94:bb:3f:33:00:31:12:c7:71:0c:c2:4d:c5:18:a0:b3:81: 4a:32:43:9f:4a:5b:5e:f6:32:20:d6:d7:d4:0c:9f:55:30:39: 7b:bc:63:fc:82:58:8c:76:ea:ac:5a:69:97:30:30:a2:73:a4: 4e:b5:21:c2:02:e4:a0:03:26:37:6a:5a:6e:e2:22:1b:b5:aa: 5d:98:6d:c1:9f:f8:30:33:ab:4f:c4:a8:c4:9d:16:52:f0:a8: 64:c4:6d:61:73:cc:b8:db:66:61:2f:cb:86:5e:bf:bb:0c:3e: a4:e5:a3:a4:30:a0:f6:92:df:56:90:3a:d5:b4:07:99:4c:c0: bb:25:d0:49:15:e1:ce:86:8b:3a:c2:48:3a:0a:c5:ca:ef:f6: 88:b5:3f:49:86:53:cc:df:15:74:bc:ad:dd:aa:e1:09:23:a7: 1f:b8:b3:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4eowJI/u3hrUo7ut07+5RtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZjhhYjJiYTI0ODc5ZTQ1YzQ0NTQ4NmZjZWIyMWFmNDY2 NTZkNWEwHhcNMjYwNTEzMDAwMDU5WhcNMjYwNTE0MDAwMDU5WjAzMTEwLwYDVQQD Eyg5ZGFmNjYxZGFlNjY0OWJhOGUwNzFjYmQxN2QyMzQwNjAzNzcyMTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCoevrhQPx1xGshRujQ0SvUQcVQY jQzcUMDDTzphRA6D/14PoPDWxqXQ1Po8k9Syq57smNtpTSGDqUADmYYoEwROUmop dLMr2/AZaS0DQniE4m/tD3hS3cCLCdVeayQMzMSDQhAOlKqrnhYqI7j+aLZPIQvn b8DHRHspC1etAAwXBTEUmb2QFs7LkPauBvbv6jBymRyuMlxYPS7BsxVY09tcuFvv m95tk9pGyfK+pbf35sAQBDWrn4yYBcI65PGNCECv6/G3W+yWBj+lflTi/iVVBIjI wppzbuUAVu9zsJXVkuZlknibr9ieLKnU30vXJKWRi4Djysug6tvKeKlWVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ2vZh2uZkm6jgccvRfSNAYDdyF1MB8GA1UdIwQY MBaAFEL4qyuiSHnkXERUhvzrIa9GZW1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYt MTc2OWZlZjZiZTk2LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYtMTc2OWZlZjZiZTk2 LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkr2OXUL4 Nmi0y3leZAdHTqtBdaMAyLsg3IkbPsM6RvzI/sV804yLyITuHya9fZI3k9ga3Qd4 ctUNaQhWik1TQIG946HJyX8BXKMsImZYPNPpQP8L8U0fiLNQF5S7PzMAMRLHcQzC TcUYoLOBSjJDn0pbXvYyINbX1AyfVTA5e7xj/IJYjHbqrFpplzAwonOkTrUhwgLk oAMmN2pabuIiG7WqXZhtwZ/4MDOrT8SoxJ0WUvCoZMRtYXPMuNtmYS/Lhl6/uww+ pOWjpDCg9pLfVpA61bQHmUzAuyXQSRXhzoaLOsJIOgrFyu/2iLU/SYZTzN8VdLyt 3arhCSOnH7iziQ== -----END CERTIFICATE-----Generated at Wed May 13 04:07:52 2026 by rpki-client