$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft File: Qk_v-1duQR3lEYcdweC9eiDixNc.mft (raw, json) Hash identifier: OHgzGMGT6czHX98xHKeLJoDGSjaZqzUu1Q83gZ5brLM= Subject key identifier: 4A:2A:C8:0A:80:F4:9E:4C:5A:02:90:42:B4:5C:0C:87:AF:48:C9:C3 Authority key identifier: 42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7 Certificate issuer: /CN=424feffb576e411de511871dc1e0bd7a20e2c4d7 Certificate serial: 01A0CAEBA7F160D1FFC587D314DC8A4092E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft Manifest number: 1648 Signing time: Tue 22 Sep 2026 21:00:36 +0000 Manifest this update: Tue 22 Sep 2026 21:00:36 +0000 Manifest next update: Wed 23 Sep 2026 21:00:36 +0000 Files and hashes: 1: 17Np1y-dxxhXZQRQoDGfhlgHSac.roa (hash: AmSzrL+ixbKTyqpiqkExdglo4ra/UrlgCqcfSDgSmgM=) 2: G6olI-VvDp9ALlLPdV58qA5xPYI.roa (hash: 2fsCXn2dUvoQvSbjEln1rfEBr4e643A4tQ2VNOf+74w=) 3: LF_8Nc9ZG4x2hfVpD6ng-Xw9W84.roa (hash: ZUOEzaCiK3yAvVDZRgehq5Q9Z7Hz/VbhnM2QFVFIzbg=) 4: Qk_v-1duQR3lEYcdweC9eiDixNc.crl (hash: aD2pKdeW/b1/Be1x4ad9ZOKAXkTVf2V0gscL10WWelM=) 5: Vx8Q4nTQTZu0HJqRpDNNFvvmG5Y.roa (hash: aOaC++2x4KyJJvhaR/qiM7sOgi46fJa7BbumrEhC7kc=) 6: bwylWe3CdnWe9jj8najvjwfcqt4.roa (hash: qtMSlaGUcmfEHPPp9StGHAcyvutX/FbfstzyO7BM1O0=) 7: jhgr_kqWn0P8kZgzQ4rStaVm9lU.roa (hash: 51PKmpvyPy1LPgxOcO2i5rd0p3mx3xfr6KylJBv2xsM=) 8: nCw-8U_e-vesUJrIZdav3xNtIF8.roa (hash: lsbhSmxHJ+rDA4NzpyD8vAFiMv8avAe680sgNxpRv1E=) 9: nUsb4McCUGoVLzb61SmYYxwkFCU.roa (hash: Kql7INdZrgxo8TWzAiXsnbs/TLgYXHD6OczED6pBuxI=) 10: zlCSnRuq7fXaqQjldkiFbWuXQxA.roa (hash: qa9yNfqriW76nUwB9t/osTdrCLM4tWgEY60WfaKBs+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:ca:eb:a7:f1:60:d1:ff:c5:87:d3:14:dc:8a:40:92:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=424feffb576e411de511871dc1e0bd7a20e2c4d7 Validity Not Before: Sep 22 21:00:36 2026 GMT Not After : Sep 23 21:00:36 2026 GMT Subject: CN=4a2ac80a80f49e4c5a029042b45c0c87af48c9c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1d:b6:b7:a2:f5:90:52:3f:c0:6f:1d:aa:23: 99:26:b8:26:b8:0e:3e:c2:72:91:ce:6e:44:ff:21: 9d:75:e8:14:55:be:73:71:84:27:94:71:86:e3:ca: 6c:ea:fd:7e:3a:c0:eb:36:11:35:c6:6f:45:3f:ee: e4:83:87:b3:74:6f:cb:c9:b1:ac:be:5c:95:df:f6: b6:bb:b1:c9:74:39:d5:db:43:2f:e0:70:57:26:73: c1:d9:d0:28:b2:06:a9:03:a2:d0:76:e5:b0:d3:26: 23:ee:0e:dc:b6:5c:20:c5:79:38:7e:91:a3:df:83: 5b:26:c6:3b:8e:57:ba:a8:70:c6:75:b9:55:e4:44: 5e:4c:a4:b1:51:46:9e:c6:09:b7:22:94:ca:69:72: dd:74:49:99:7b:7e:0b:07:f7:77:5e:62:eb:17:fb: 02:54:16:3a:3f:6a:9b:02:d8:d9:25:c1:5e:23:45: d7:12:0f:5f:f0:2c:ba:99:6c:ba:79:34:e6:38:42: 8d:f4:75:c2:2b:76:d1:b3:09:ff:95:04:61:f9:62: fd:1d:70:0b:91:63:fd:17:d4:ca:25:f1:70:73:89: 54:c3:c9:fa:af:2f:fa:bf:97:27:15:22:95:44:20: 86:f3:84:4c:74:93:13:09:41:53:2f:a9:a3:bb:96: c8:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:2A:C8:0A:80:F4:9E:4C:5A:02:90:42:B4:5C:0C:87:AF:48:C9:C3 X509v3 Authority Key Identifier: keyid:42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:60:5b:6b:fc:3e:34:b1:00:54:68:d3:04:47:52:e3:9b:38: a0:d6:54:ac:97:f8:68:5c:ac:72:5e:b4:57:7f:11:01:99:01: c7:9d:a3:59:b9:b3:c6:70:91:9d:9f:9a:00:79:13:9a:c4:95: 42:ea:dc:e0:6f:5d:96:ed:86:01:12:b3:ec:34:6f:ba:38:81: 8d:5b:b6:eb:64:51:03:78:2c:fa:03:47:a6:10:2a:62:96:0f: 32:56:0c:9c:f5:ae:c3:e3:f7:43:95:c5:9a:4a:2c:52:ee:60: d5:8d:9a:be:9c:c7:66:1c:a4:2d:e1:f8:01:e1:52:61:71:88: dd:25:c9:b9:be:3a:a2:45:bb:31:50:3c:f3:43:45:bf:5e:ab: 0c:df:e0:6f:74:35:0c:d2:a6:75:f1:b5:41:35:cc:b2:fa:74: c6:ab:d7:2e:a4:39:6e:f8:96:0f:4c:b6:65:3e:94:41:66:57: 21:01:5d:bd:6e:c9:c6:8b:5b:9a:76:58:ed:26:c6:9a:b2:d8: eb:2c:26:cc:b2:51:3b:a2:8e:03:64:fb:f2:dd:84:03:b2:6a: 01:17:37:69:4d:34:ff:7b:c4:d7:14:2a:00:61:c6:1f:59:b1: 49:48:b9:c9:c9:b9:c5:6b:a8:da:bb:f5:9f:d9:c4:5c:88:18: 9a:dd:61:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDK66fxYNH/xYfTFNyKQJLjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyNGZlZmZiNTc2ZTQxMWRlNTExODcxZGMxZTBiZDdhMjBl MmM0ZDcwHhcNMjYwOTIyMjEwMDM2WhcNMjYwOTIzMjEwMDM2WjAzMTEwLwYDVQQD Eyg0YTJhYzgwYTgwZjQ5ZTRjNWEwMjkwNDJiNDVjMGM4N2FmNDhjOWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsh22t6L1kFI/wG8dqiOZJrgmuA4+ wnKRzm5E/yGddegUVb5zcYQnlHGG48ps6v1+OsDrNhE1xm9FP+7kg4ezdG/LybGs vlyV3/a2u7HJdDnV20Mv4HBXJnPB2dAosgapA6LQduWw0yYj7g7ctlwgxXk4fpGj 34NbJsY7jle6qHDGdblV5EReTKSxUUaexgm3IpTKaXLddEmZe34LB/d3XmLrF/sC VBY6P2qbAtjZJcFeI0XXEg9f8Cy6mWy6eTTmOEKN9HXCK3bRswn/lQRh+WL9HXAL kWP9F9TKJfFwc4lUw8n6ry/6v5cnFSKVRCCG84RMdJMTCUFTL6mju5bIywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEoqyAqA9J5MWgKQQrRcDIevSMnDMB8GA1UdIwQY MBaAFEJP7/tXbkEd5RGHHcHgvXog4sTXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy82MTM1MDgtMDgzMi00MWY2LWFjYjct ODMxZjdlNmY1Y2NkLzEvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy82MTM1MDgtMDgzMi00MWY2LWFjYjctODMxZjdlNmY1Y2Nk LzEvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhGBba/w+ NLEAVGjTBEdS45s4oNZUrJf4aFyscl60V38RAZkBx52jWbmzxnCRnZ+aAHkTmsSV Qurc4G9dlu2GARKz7DRvujiBjVu262RRA3gs+gNHphAqYpYPMlYMnPWuw+P3Q5XF mkosUu5g1Y2avpzHZhykLeH4AeFSYXGI3SXJub46okW7MVA880NFv16rDN/gb3Q1 DNKmdfG1QTXMsvp0xqvXLqQ5bviWD0y2ZT6UQWZXIQFdvW7JxotbmnZY7SbGmrLY 6ywmzLJRO6KOA2T78t2EA7JqARc3aU00/3vE1xQqAGHGH1mxSUi5ycm5xWuo2rv1 n9nEXIgYmt1hog== -----END CERTIFICATE-----Generated at Wed Sep 23 04:10:40 2026 by rpki-client