$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft File: QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft (raw, json) Hash identifier: DhAhDDSgz9YfHCfhnmwUm9C15Iqqhu0HmkW1nqVZU0o= Subject key identifier: 8E:62:9A:2E:BF:CA:96:3D:8F:47:93:D2:DB:EC:ED:39:B6:F1:E3:85 Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a Certificate serial: 019D27DFC935E8239AAF355A5D3AC35D79FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft Manifest number: 15EF Signing time: Thu 26 Mar 2026 02:01:10 +0000 Manifest this update: Thu 26 Mar 2026 02:01:10 +0000 Manifest next update: Fri 27 Mar 2026 02:01:10 +0000 Files and hashes: 1: QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl (hash: GSFdDFSZxwELq1lnmomMrBH/ELvMmzxMNMGb3TkrLzs=) 2: UqFzq2RNZbWlDFVYyZprB1_1sEM.roa (hash: hO5jaxlS37jXDAccfSZYbNyHj2vkt1PuodFiaALX0Zg=) 3: baqSF0nqYusoIFECKjM-YPjRpPk.roa (hash: Qah7uqDRXltB4WrVjydJLT6cz2tOioqH5UQyq3ujOpo=) 4: g5msJEmtAZPPrNxROEFPbba5x4Y.roa (hash: v9nQWaRHu8tQFbTyot3EjdNkPUX42kWmDF8q/n+QqQQ=) 5: jQ-BZ183u_LUlZapfx_6bO5Fcbo.roa (hash: evJDPjhd4Xd7GaOP8Tsnz8tSIn8B3VRESbVEgJ+Ho4g=) 6: pvcqoNvJFdWoEMg8QFJEzHm8z7E.roa (hash: zuVd/wlnRktcFRrJxR1l3ksJPeEonfLjGaEKrFvnF9w=) 7: qHPixUdDjxrc91U2LNL_GHETLss.roa (hash: 5esutnCHRhEckm/D5dPi2+exRvIyK9kg1fmZT+vC/MU=) 8: qUc0afIdRt8-UOWMIe3SQvVz1n4.roa (hash: /uRdEodyR9sUKrVW+MpbljN4of9z2bshibIE/GFUwdc=) 9: u4NX6hKZvEh_-TMWnB5C6f5ezPk.roa (hash: UZfjswVY8ckqGOGEovj9QQT567PHMAI/NKar7oipK5E=) 10: u7ZWAaBzlABZ-QZA-Bd1Xl5OXBQ.roa (hash: S84OvzHgnNB7KAJknamEKhkwMOlgRvtVcLZBEin8FQM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:df:c9:35:e8:23:9a:af:35:5a:5d:3a:c3:5d:79:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a Validity Not Before: Mar 26 02:01:10 2026 GMT Not After : Mar 27 02:01:10 2026 GMT Subject: CN=8e629a2ebfca963d8f4793d2dbeced39b6f1e385 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:cd:e7:31:ef:fa:02:44:ab:c8:e2:66:dd:12: d0:b9:6a:a4:d5:bf:ac:bb:79:9c:62:1c:c5:51:b3: ed:d0:4b:c2:f9:fd:cb:0e:16:7b:61:d0:68:5f:29: b2:41:f6:2f:5a:03:10:c2:3a:17:9f:d2:f6:9e:11: e0:13:1e:89:2e:01:cb:cd:1d:df:45:d2:48:6c:3b: 2e:a0:72:2d:fd:e6:46:a3:7b:ad:f5:ab:1c:25:83: e6:51:89:4e:ce:9c:f9:c0:21:b8:2d:83:86:7a:d3: 6f:3d:4c:52:cf:18:12:b5:a8:09:ce:c8:5d:3e:69: 1a:9b:a1:89:f7:08:50:d1:4a:a0:4a:f6:3b:3b:34: c3:79:37:a3:37:61:dc:e5:fa:f2:ce:c8:4b:86:df: a0:12:6e:dd:07:13:fa:f6:54:21:b0:b5:3a:45:d4: 6e:6c:a4:75:ee:5c:1a:41:13:d3:7b:9b:89:d1:0e: ef:9a:05:59:17:72:d9:43:4d:16:ff:0f:b8:ac:fc: 63:e3:a3:2b:17:97:9d:4e:98:a6:21:07:53:28:4f: 37:c7:7c:e0:1e:92:f5:67:60:c3:18:3c:03:3a:95: e1:a7:79:30:20:73:88:f2:00:ec:0c:a5:17:25:ed: e3:86:c1:d2:bc:55:27:f0:4a:60:34:ee:44:68:7f: fb:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:62:9A:2E:BF:CA:96:3D:8F:47:93:D2:DB:EC:ED:39:B6:F1:E3:85 X509v3 Authority Key Identifier: keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:d0:0e:45:90:27:92:a8:35:03:43:35:b9:ab:ee:95:58:4a: 8e:45:3b:5a:d2:9d:ca:b7:eb:90:4a:47:8f:12:2f:3d:27:96: 3f:7b:1f:25:3c:bd:e8:26:74:3e:c6:41:63:3c:a8:4f:d9:de: d8:f0:8c:a3:1b:96:13:de:56:d3:a4:ba:09:78:e0:82:fc:e7: a7:96:db:ed:b9:c3:7a:8b:9e:e6:01:7d:94:52:78:ac:91:7c: fe:f0:96:c7:d8:d4:88:10:83:77:69:2b:18:82:b2:3c:52:a1: f8:92:33:46:f6:10:3c:39:59:75:0c:bb:73:7a:e1:8f:0a:0b: 74:72:4e:0e:61:c0:54:1b:fc:ba:56:66:f4:a7:c9:51:74:d9: 0e:0c:7a:4f:fd:b3:ca:4f:bc:20:68:77:c4:b4:7c:a7:f7:d5: 23:a4:44:68:7a:ef:c8:ae:8f:b7:63:19:69:7d:48:6e:c8:b5: 67:9e:1a:00:32:f9:d0:b6:f0:5a:2f:1b:e0:1a:e6:16:76:1d: be:26:53:ab:3f:60:9e:47:85:3e:56:c6:f2:93:56:e3:36:c9: 9a:d4:aa:52:d0:a4:9a:cf:36:0d:7b:19:c4:39:83:c5:e1:8c: 5e:44:05:c3:8c:ae:a1:75:d7:41:93:34:37:1f:72:01:3c:33: 20:7f:68:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0n38k16COarzVaXTrDXXn8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZjhhYjJiYTI0ODc5ZTQ1YzQ0NTQ4NmZjZWIyMWFmNDY2 NTZkNWEwHhcNMjYwMzI2MDIwMTEwWhcNMjYwMzI3MDIwMTEwWjAzMTEwLwYDVQQD Eyg4ZTYyOWEyZWJmY2E5NjNkOGY0NzkzZDJkYmVjZWQzOWI2ZjFlMzg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzc3nMe/6AkSryOJm3RLQuWqk1b+s u3mcYhzFUbPt0EvC+f3LDhZ7YdBoXymyQfYvWgMQwjoXn9L2nhHgEx6JLgHLzR3f RdJIbDsuoHIt/eZGo3ut9ascJYPmUYlOzpz5wCG4LYOGetNvPUxSzxgStagJzshd Pmkam6GJ9whQ0UqgSvY7OzTDeTejN2Hc5fryzshLht+gEm7dBxP69lQhsLU6RdRu bKR17lwaQRPTe5uJ0Q7vmgVZF3LZQ00W/w+4rPxj46MrF5edTpimIQdTKE83x3zg HpL1Z2DDGDwDOpXhp3kwIHOI8gDsDKUXJe3jhsHSvFUn8EpgNO5EaH/7/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI5imi6/ypY9j0eT0tvs7Tm28eOFMB8GA1UdIwQY MBaAFEL4qyuiSHnkXERUhvzrIa9GZW1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYt MTc2OWZlZjZiZTk2LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYtMTc2OWZlZjZiZTk2 LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWdAORZAn kqg1A0M1uavulVhKjkU7WtKdyrfrkEpHjxIvPSeWP3sfJTy96CZ0PsZBYzyoT9ne 2PCMoxuWE95W06S6CXjggvznp5bb7bnDeoue5gF9lFJ4rJF8/vCWx9jUiBCDd2kr GIKyPFKh+JIzRvYQPDlZdQy7c3rhjwoLdHJODmHAVBv8ulZm9KfJUXTZDgx6T/2z yk+8IGh3xLR8p/fVI6REaHrvyK6Pt2MZaX1Ibsi1Z54aADL50LbwWi8b4BrmFnYd viZTqz9gnkeFPlbG8pNW4zbJmtSqUtCkms82DXsZxDmDxeGMXkQFw4yuoXXXQZM0 Nx9yATwzIH9olA== -----END CERTIFICATE-----Generated at Thu Mar 26 06:53:45 2026 by rpki-client