
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
File: Qk_v-1duQR3lEYcdweC9eiDixNc.mft (raw, json)
Hash identifier: DPPbcHuQN3e5SfqN2ZPLpjh/UJtedDjE3259XLDiO8E=
Subject key identifier: 24:00:35:9E:CF:EE:6D:CE:BB:CC:42:85:CD:E6:2A:23:16:2E:81:21
Authority key identifier: 42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
Certificate issuer: /CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
Certificate serial: 019D2628199F318F3CC3449AD786C72EF1B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
Manifest number: 1465
Signing time: Wed 25 Mar 2026 18:00:55 +0000
Manifest this update: Wed 25 Mar 2026 18:00:55 +0000
Manifest next update: Thu 26 Mar 2026 18:00:55 +0000
Files and hashes: 1: 17Np1y-dxxhXZQRQoDGfhlgHSac.roa (hash: AmSzrL+ixbKTyqpiqkExdglo4ra/UrlgCqcfSDgSmgM=)
2: G6olI-VvDp9ALlLPdV58qA5xPYI.roa (hash: 2fsCXn2dUvoQvSbjEln1rfEBr4e643A4tQ2VNOf+74w=)
3: LF_8Nc9ZG4x2hfVpD6ng-Xw9W84.roa (hash: ZUOEzaCiK3yAvVDZRgehq5Q9Z7Hz/VbhnM2QFVFIzbg=)
4: Qk_v-1duQR3lEYcdweC9eiDixNc.crl (hash: jkBbAsHgaXdCIqbX0Tr/UIUALvBGYlGvQlSNrO/AzEg=)
5: Vx8Q4nTQTZu0HJqRpDNNFvvmG5Y.roa (hash: aOaC++2x4KyJJvhaR/qiM7sOgi46fJa7BbumrEhC7kc=)
6: bwylWe3CdnWe9jj8najvjwfcqt4.roa (hash: qtMSlaGUcmfEHPPp9StGHAcyvutX/FbfstzyO7BM1O0=)
7: jhgr_kqWn0P8kZgzQ4rStaVm9lU.roa (hash: 51PKmpvyPy1LPgxOcO2i5rd0p3mx3xfr6KylJBv2xsM=)
8: nCw-8U_e-vesUJrIZdav3xNtIF8.roa (hash: lsbhSmxHJ+rDA4NzpyD8vAFiMv8avAe680sgNxpRv1E=)
9: nUsb4McCUGoVLzb61SmYYxwkFCU.roa (hash: Kql7INdZrgxo8TWzAiXsnbs/TLgYXHD6OczED6pBuxI=)
10: zlCSnRuq7fXaqQjldkiFbWuXQxA.roa (hash: qa9yNfqriW76nUwB9t/osTdrCLM4tWgEY60WfaKBs+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:19:9f:31:8f:3c:c3:44:9a:d7:86:c7:2e:f1:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
Validity
Not Before: Mar 25 18:00:55 2026 GMT
Not After : Mar 26 18:00:55 2026 GMT
Subject: CN=2400359ecfee6dcebbcc4285cde62a23162e8121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:92:a6:9c:43:e6:51:8b:ce:4f:2f:c5:4d:8c:
f4:6d:5a:9e:7a:87:14:0d:0f:b5:6a:b9:24:c3:6d:
df:a1:b9:9f:30:b8:92:46:d2:ba:19:9a:a5:e0:9f:
ba:89:5c:fa:4a:20:cf:c3:ca:21:4a:8d:92:3d:79:
9d:09:32:0d:74:1a:b1:b2:d1:1f:b8:92:4d:7e:9d:
e9:31:27:29:43:fc:4e:0e:08:d6:9e:f4:ca:28:c7:
5f:16:8d:c2:58:75:57:90:00:19:c0:01:91:3a:57:
06:19:79:01:24:b4:07:96:aa:56:46:0f:e5:c8:74:
67:ce:d4:d1:bd:33:f8:3d:19:bf:17:b0:04:3b:8e:
ff:ec:cd:01:fb:42:ed:46:15:33:02:58:e4:b2:e3:
f5:6f:34:e6:db:26:ed:4d:c8:17:9c:a1:55:f7:80:
22:c1:26:10:6f:8c:22:5c:11:8b:d1:87:6c:7f:e8:
26:a9:56:88:ac:bd:b9:fc:eb:84:cc:46:bc:1d:e5:
33:25:d1:a9:f8:f6:e8:04:ec:a0:5a:a0:d9:0b:e4:
f3:47:5b:19:94:dd:ba:ca:6f:a1:3c:74:d0:a9:e8:
cf:50:a0:03:2d:58:49:2e:e2:e0:36:ac:82:3f:58:
83:5e:af:8d:5b:df:3d:18:a3:4b:2f:6a:17:2b:5d:
1a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:00:35:9E:CF:EE:6D:CE:BB:CC:42:85:CD:E6:2A:23:16:2E:81:21
X509v3 Authority Key Identifier:
keyid:42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:53:f9:87:ba:54:11:f3:8e:8a:89:31:0e:a1:d3:de:01:dd:
58:6b:d3:e4:51:df:f1:aa:cc:fa:ad:32:fb:5d:46:f3:a9:e3:
7a:35:79:f6:a0:47:66:94:e6:28:a5:2d:ea:8e:db:2c:48:96:
39:1b:79:80:7d:38:5c:d0:84:87:13:32:b6:32:97:65:62:5f:
f3:96:0c:8e:8f:9e:d2:65:e2:79:de:68:6c:7e:3b:1f:1d:6e:
b6:83:b2:4d:92:55:34:66:7f:70:eb:6b:d7:b5:aa:77:c6:69:
4d:bd:fa:14:86:58:34:00:65:66:e9:e4:cb:18:cc:01:09:ba:
a9:ca:76:63:ba:63:b7:b4:28:61:8f:1d:56:7b:2c:31:57:35:
ea:ac:88:8b:79:56:dd:10:c4:4a:ca:b0:ab:a2:09:92:c5:8e:
6a:87:08:8e:79:f3:76:43:64:d8:0e:df:f0:f6:19:a2:5d:f1:
97:c2:13:06:2f:23:bc:b6:e0:69:a4:e6:16:d9:8c:41:4e:d2:
96:17:f3:ad:ab:91:47:84:79:8b:0b:fe:85:29:cc:df:72:4d:
a0:89:67:74:1e:bd:a9:12:4b:5a:f0:69:cb:ae:04:27:99:2a:
dc:12:8a:91:d3:8c:38:a6:5e:eb:b9:ec:3e:1d:32:6f:a9:be:
bd:d6:c3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:17:54 2026 by rpki-client