$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft File: QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft (raw, json) Hash identifier: IfXTSPNHGPcIla1lHFf2xNO4NXcYqDYwOdwXWeo7H3w= Subject key identifier: 22:3D:FA:99:A1:CE:86:18:47:48:E0:5F:3F:57:F3:72:DB:96:D9:88 Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a Certificate serial: 01A0D6B9B04E48E42B417122FAFEFF108991 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft Manifest number: 17D9 Signing time: Fri 25 Sep 2026 04:01:28 +0000 Manifest this update: Fri 25 Sep 2026 04:01:28 +0000 Manifest next update: Sat 26 Sep 2026 04:01:28 +0000 Files and hashes: 1: OY_SE1N8ame6r8ii8x89C85c4VU.roa (hash: iSDJaXe98DJ3SvpFfDjaOj1ZRysi5CL+UHjwiAlKl2k=) 2: QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl (hash: drQAoAf+cLrOGatxg994/44IIg/f2nQ9q2kQJ0+vD4Q=) 3: UqFzq2RNZbWlDFVYyZprB1_1sEM.roa (hash: hO5jaxlS37jXDAccfSZYbNyHj2vkt1PuodFiaALX0Zg=) 4: g5msJEmtAZPPrNxROEFPbba5x4Y.roa (hash: v9nQWaRHu8tQFbTyot3EjdNkPUX42kWmDF8q/n+QqQQ=) 5: hgOUaLDuSDgtlA1yV7iafLhOlwA.roa (hash: XrD4uNDjxERXMxfbMB+mRGApe2Tpr/A7+Ol/LsFJK7o=) 6: jQ-BZ183u_LUlZapfx_6bO5Fcbo.roa (hash: evJDPjhd4Xd7GaOP8Tsnz8tSIn8B3VRESbVEgJ+Ho4g=) 7: pvcqoNvJFdWoEMg8QFJEzHm8z7E.roa (hash: zuVd/wlnRktcFRrJxR1l3ksJPeEonfLjGaEKrFvnF9w=) 8: qHPixUdDjxrc91U2LNL_GHETLss.roa (hash: 5esutnCHRhEckm/D5dPi2+exRvIyK9kg1fmZT+vC/MU=) 9: qUc0afIdRt8-UOWMIe3SQvVz1n4.roa (hash: /uRdEodyR9sUKrVW+MpbljN4of9z2bshibIE/GFUwdc=) 10: u4NX6hKZvEh_-TMWnB5C6f5ezPk.roa (hash: UZfjswVY8ckqGOGEovj9QQT567PHMAI/NKar7oipK5E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 04:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d6:b9:b0:4e:48:e4:2b:41:71:22:fa:fe:ff:10:89:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a Validity Not Before: Sep 25 04:01:28 2026 GMT Not After : Sep 26 04:01:28 2026 GMT Subject: CN=223dfa99a1ce86184748e05f3f57f372db96d988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d1:6e:96:5c:37:a4:0e:42:83:f1:17:bb:de: 11:6c:5f:18:e4:b5:a7:12:42:19:a3:5b:8f:c5:98: 7d:45:d9:08:cb:ed:0f:b4:e8:4d:58:a5:a8:1e:2d: 4b:8d:92:01:dc:2e:ba:8c:f8:9c:e9:c4:9d:af:f3: c9:f4:38:17:48:ec:3f:31:50:4c:7d:1b:8f:7c:cf: a0:fe:11:e3:20:ee:2b:50:34:4b:b1:55:31:33:94: 51:d5:a7:6a:a9:46:6f:f5:7f:aa:2b:4a:68:62:da: d7:d1:78:0d:9a:15:42:45:56:55:72:0b:6c:34:58: d8:47:16:6f:2f:e9:cb:c9:6e:af:b7:99:f3:7b:e7: 79:8a:63:16:94:a9:bb:db:92:6c:45:e0:c0:b1:c7: 2f:a3:f5:33:85:2b:5d:51:72:50:92:ae:85:9d:01: 84:02:d8:cf:c9:3e:e4:86:c0:7c:f1:67:a5:e9:ab: 1e:32:85:49:b3:c2:38:48:51:f0:6d:35:3b:2a:85: 96:e4:7b:a6:ff:e9:ad:85:ff:98:1a:3d:cb:e1:40: d6:c4:10:0e:7d:23:42:f1:51:8c:7b:7d:a5:b4:0b: 94:fc:8c:57:ff:fc:c0:4a:99:2c:a4:10:69:b9:db: a8:5c:2b:4f:91:7c:0d:0f:df:c2:28:44:f2:e7:63: 83:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:3D:FA:99:A1:CE:86:18:47:48:E0:5F:3F:57:F3:72:DB:96:D9:88 X509v3 Authority Key Identifier: keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:34:8a:14:de:f4:77:fd:14:7f:2f:17:7b:f1:44:33:af:e1: 15:5b:98:79:3a:34:66:7a:21:47:5f:8d:08:3a:fe:3c:88:3f: b8:19:42:2d:56:a5:8a:5d:44:a2:56:95:41:cc:c0:2f:da:8a: 13:80:84:18:49:55:13:c3:7b:3d:06:41:db:12:e7:73:30:59: 9b:65:a6:3f:15:13:91:32:05:4b:4b:fc:4b:58:08:de:c3:8d: 8c:7e:a3:5f:2b:27:f6:0b:4c:f8:1d:3e:88:01:13:f7:05:ad: 8a:41:43:06:3e:ce:19:d1:1f:d6:f5:81:30:c1:18:b2:82:41: ca:13:cc:dd:f3:38:83:9a:7f:f3:23:e8:73:f7:a9:94:00:be: f2:c0:ce:d2:d4:52:c3:04:4f:20:d3:d1:8e:9b:f8:03:0a:00: 33:60:d1:09:4d:43:df:69:53:4d:c6:8c:42:d6:4b:08:ec:2b: 22:66:42:38:47:5a:11:e2:bb:74:e2:8e:ed:9b:ee:35:83:6c: 84:18:9c:92:f2:e5:2b:57:7e:07:0f:8d:f3:94:04:fe:3c:0f: 3d:f4:4c:0a:28:dd:c6:f7:be:34:20:ef:93:83:e4:7a:72:9b: 35:5f:43:d1:15:da:a9:56:5b:4e:5c:c9:23:a1:ce:88:79:ad: 68:21:a6:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDWubBOSOQrQXEi+v7/EImRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZjhhYjJiYTI0ODc5ZTQ1YzQ0NTQ4NmZjZWIyMWFmNDY2 NTZkNWEwHhcNMjYwOTI1MDQwMTI4WhcNMjYwOTI2MDQwMTI4WjAzMTEwLwYDVQQD EygyMjNkZmE5OWExY2U4NjE4NDc0OGUwNWYzZjU3ZjM3MmRiOTZkOTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNFullw3pA5Cg/EXu94RbF8Y5LWn EkIZo1uPxZh9RdkIy+0PtOhNWKWoHi1LjZIB3C66jPic6cSdr/PJ9DgXSOw/MVBM fRuPfM+g/hHjIO4rUDRLsVUxM5RR1adqqUZv9X+qK0poYtrX0XgNmhVCRVZVcgts NFjYRxZvL+nLyW6vt5nze+d5imMWlKm725JsReDAsccvo/UzhStdUXJQkq6FnQGE AtjPyT7khsB88Wel6aseMoVJs8I4SFHwbTU7KoWW5Hum/+mthf+YGj3L4UDWxBAO fSNC8VGMe32ltAuU/IxX//zASpkspBBpuduoXCtPkXwND9/CKETy52ODVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCI9+pmhzoYYR0jgXz9X83LbltmIMB8GA1UdIwQY MBaAFEL4qyuiSHnkXERUhvzrIa9GZW1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYt MTc2OWZlZjZiZTk2LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYtMTc2OWZlZjZiZTk2 LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmzSKFN70 d/0Ufy8Xe/FEM6/hFVuYeTo0ZnohR1+NCDr+PIg/uBlCLValil1EolaVQczAL9qK E4CEGElVE8N7PQZB2xLnczBZm2WmPxUTkTIFS0v8S1gI3sONjH6jXysn9gtM+B0+ iAET9wWtikFDBj7OGdEf1vWBMMEYsoJByhPM3fM4g5p/8yPoc/eplAC+8sDO0tRS wwRPINPRjpv4AwoAM2DRCU1D32lTTcaMQtZLCOwrImZCOEdaEeK7dOKO7ZvuNYNs hBickvLlK1d+Bw+N85QE/jwPPfRMCijdxve+NCDvk4PkenKbNV9D0RXaqVZbTlzJ I6HOiHmtaCGm8A== -----END CERTIFICATE-----Generated at Fri Sep 25 12:57:56 2026 by rpki-client