$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft File: Qk_v-1duQR3lEYcdweC9eiDixNc.mft (raw, json) Hash identifier: yZ4zrRtOhpvsZOvZ6G3l3bDGKzkqKocEDt39wbJeSmg= Subject key identifier: F8:2E:C0:E4:F1:34:67:4D:D6:23:7B:73:A5:7D:BC:AD:91:00:E2:08 Authority key identifier: 42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7 Certificate issuer: /CN=424feffb576e411de511871dc1e0bd7a20e2c4d7 Certificate serial: 019F9022A3E877B714E3450F7BD337250C26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft Manifest number: 15A5 Signing time: Thu 23 Jul 2026 18:00:16 +0000 Manifest this update: Thu 23 Jul 2026 18:00:16 +0000 Manifest next update: Fri 24 Jul 2026 18:00:16 +0000 Files and hashes: 1: 17Np1y-dxxhXZQRQoDGfhlgHSac.roa (hash: AmSzrL+ixbKTyqpiqkExdglo4ra/UrlgCqcfSDgSmgM=) 2: G6olI-VvDp9ALlLPdV58qA5xPYI.roa (hash: 2fsCXn2dUvoQvSbjEln1rfEBr4e643A4tQ2VNOf+74w=) 3: LF_8Nc9ZG4x2hfVpD6ng-Xw9W84.roa (hash: ZUOEzaCiK3yAvVDZRgehq5Q9Z7Hz/VbhnM2QFVFIzbg=) 4: Qk_v-1duQR3lEYcdweC9eiDixNc.crl (hash: XfTXkp/kBGR1sq5m2Te0M1yrjusMXjR2RyKAM1rOWeU=) 5: Vx8Q4nTQTZu0HJqRpDNNFvvmG5Y.roa (hash: aOaC++2x4KyJJvhaR/qiM7sOgi46fJa7BbumrEhC7kc=) 6: bwylWe3CdnWe9jj8najvjwfcqt4.roa (hash: qtMSlaGUcmfEHPPp9StGHAcyvutX/FbfstzyO7BM1O0=) 7: jhgr_kqWn0P8kZgzQ4rStaVm9lU.roa (hash: 51PKmpvyPy1LPgxOcO2i5rd0p3mx3xfr6KylJBv2xsM=) 8: nCw-8U_e-vesUJrIZdav3xNtIF8.roa (hash: lsbhSmxHJ+rDA4NzpyD8vAFiMv8avAe680sgNxpRv1E=) 9: nUsb4McCUGoVLzb61SmYYxwkFCU.roa (hash: Kql7INdZrgxo8TWzAiXsnbs/TLgYXHD6OczED6pBuxI=) 10: zlCSnRuq7fXaqQjldkiFbWuXQxA.roa (hash: qa9yNfqriW76nUwB9t/osTdrCLM4tWgEY60WfaKBs+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:22:a3:e8:77:b7:14:e3:45:0f:7b:d3:37:25:0c:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=424feffb576e411de511871dc1e0bd7a20e2c4d7 Validity Not Before: Jul 23 18:00:16 2026 GMT Not After : Jul 24 18:00:16 2026 GMT Subject: CN=f82ec0e4f134674dd6237b73a57dbcad9100e208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:6d:ec:02:d9:44:d3:f9:7a:cb:28:5a:c3:f7: 89:ec:1a:44:45:9b:78:d2:54:56:a4:17:85:6d:3e: 10:18:19:ee:b3:7a:6b:31:71:2b:0c:99:6d:1b:e2: a8:63:90:97:e2:8e:47:19:ac:1d:94:01:97:f1:ff: 6f:7d:43:92:10:a7:1e:4a:d0:3b:42:6c:0a:22:e8: 3e:13:9c:8e:6e:0c:7e:8b:49:99:40:ab:e7:59:15: ab:8a:05:11:4c:dc:4f:17:47:7e:95:5e:24:d8:ad: 47:8e:d7:cf:bb:f6:f4:34:4c:00:ba:d1:6b:e2:1a: 75:0c:6e:06:2c:57:40:08:94:c3:27:28:8d:43:3e: ae:26:43:b4:cb:18:51:a5:06:6a:74:90:32:ec:7e: 20:92:cd:05:ef:c0:5f:0f:60:f2:4e:6c:23:48:33: 5f:2a:e7:dd:9f:0f:3d:09:65:d9:f2:75:20:19:e1: 71:c1:6e:b8:3c:09:9c:6d:9b:49:f4:0a:39:e9:2f: d4:43:fc:b9:c6:af:b6:a8:1a:e5:b7:e0:b1:95:39: 02:5d:87:e0:4c:60:9a:7b:f9:82:7a:1d:1e:b7:2e: c6:47:61:b6:db:2b:1e:9a:bd:bd:23:58:3f:4b:31: 5a:cc:f3:a7:04:27:7c:71:14:5b:12:e6:f6:c5:8d: d3:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:2E:C0:E4:F1:34:67:4D:D6:23:7B:73:A5:7D:BC:AD:91:00:E2:08 X509v3 Authority Key Identifier: keyid:42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:c4:a5:76:be:ba:ee:22:c5:0e:01:25:0f:3c:dd:b2:50:f7: df:6a:a1:f6:c7:f5:ac:37:7b:68:81:e0:b1:83:64:ef:eb:3e: 5b:cf:00:ed:fd:1d:14:72:31:aa:81:c0:e6:04:8f:44:a2:41: 7d:dc:f7:51:c5:77:08:07:de:ae:ec:52:a8:9e:d6:86:db:04: 93:5a:d4:e8:4d:e1:e4:22:15:59:64:f7:c7:89:81:0d:6c:91: d5:49:b2:d2:eb:23:52:d6:4d:d9:ed:56:c1:01:31:48:7b:68: 0b:cc:d1:e1:7b:4f:7f:c1:5b:cb:93:db:7f:88:b7:94:d5:06: ea:da:6d:85:cc:13:ed:1c:15:99:68:08:ad:b4:79:c9:f4:12: a1:b6:b3:02:26:c7:a0:ff:09:6c:ec:2a:07:7b:95:72:d7:d4: 8a:52:df:49:f0:50:04:f4:db:2a:92:89:f1:55:fd:d8:aa:a0: b9:06:26:e7:1b:56:84:f5:ef:42:5d:cc:4f:26:a3:d3:27:0e: 2f:52:ac:d8:ea:07:a7:6e:dd:ee:17:59:07:f9:97:ca:f6:27: 8f:d5:e3:eb:08:e9:eb:c5:60:82:41:1d:57:51:d4:59:67:65: 9e:df:22:da:fc:0a:15:ac:ea:96:d4:1a:8f:e3:32:83:34:9f: f5:bc:91:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+QIqPod7cU40UPe9M3JQwmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyNGZlZmZiNTc2ZTQxMWRlNTExODcxZGMxZTBiZDdhMjBl MmM0ZDcwHhcNMjYwNzIzMTgwMDE2WhcNMjYwNzI0MTgwMDE2WjAzMTEwLwYDVQQD EyhmODJlYzBlNGYxMzQ2NzRkZDYyMzdiNzNhNTdkYmNhZDkxMDBlMjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgm3sAtlE0/l6yyhaw/eJ7BpERZt4 0lRWpBeFbT4QGBnus3prMXErDJltG+KoY5CX4o5HGawdlAGX8f9vfUOSEKceStA7 QmwKIug+E5yObgx+i0mZQKvnWRWrigURTNxPF0d+lV4k2K1HjtfPu/b0NEwAutFr 4hp1DG4GLFdACJTDJyiNQz6uJkO0yxhRpQZqdJAy7H4gks0F78BfD2DyTmwjSDNf Kufdnw89CWXZ8nUgGeFxwW64PAmcbZtJ9Ao56S/UQ/y5xq+2qBrlt+CxlTkCXYfg TGCae/mCeh0ety7GR2G22ysemr29I1g/SzFazPOnBCd8cRRbEub2xY3T/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPguwOTxNGdN1iN7c6V9vK2RAOIIMB8GA1UdIwQY MBaAFEJP7/tXbkEd5RGHHcHgvXog4sTXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy82MTM1MDgtMDgzMi00MWY2LWFjYjct ODMxZjdlNmY1Y2NkLzEvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy82MTM1MDgtMDgzMi00MWY2LWFjYjctODMxZjdlNmY1Y2Nk LzEvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApsSldr66 7iLFDgElDzzdslD332qh9sf1rDd7aIHgsYNk7+s+W88A7f0dFHIxqoHA5gSPRKJB fdz3UcV3CAferuxSqJ7WhtsEk1rU6E3h5CIVWWT3x4mBDWyR1Umy0usjUtZN2e1W wQExSHtoC8zR4XtPf8Fby5Pbf4i3lNUG6tpthcwT7RwVmWgIrbR5yfQSobazAibH oP8JbOwqB3uVctfUilLfSfBQBPTbKpKJ8VX92KqguQYm5xtWhPXvQl3MTyaj0ycO L1Ks2OoHp27d7hdZB/mXyvYnj9Xj6wjp68VggkEdV1HUWWdlnt8i2vwKFazqltQa j+MygzSf9byRfA== -----END CERTIFICATE-----Generated at Thu Jul 23 20:27:00 2026 by rpki-client