$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft File: Qk_v-1duQR3lEYcdweC9eiDixNc.mft (raw, json) Hash identifier: YbtsDfv1pQE6NVCIdq5nnpYibynGRtUysV0Mcax/F/U= Subject key identifier: D4:4A:52:16:21:F8:5B:B6:AA:14:84:B1:F5:39:CF:17:E8:D8:17:2A Authority key identifier: 42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7 Certificate issuer: /CN=424feffb576e411de511871dc1e0bd7a20e2c4d7 Certificate serial: 019E1D59D39FD44519D2178FE70CB2542194 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft Manifest number: 14E5 Signing time: Tue 12 May 2026 18:01:26 +0000 Manifest this update: Tue 12 May 2026 18:01:26 +0000 Manifest next update: Wed 13 May 2026 18:01:26 +0000 Files and hashes: 1: 17Np1y-dxxhXZQRQoDGfhlgHSac.roa (hash: AmSzrL+ixbKTyqpiqkExdglo4ra/UrlgCqcfSDgSmgM=) 2: G6olI-VvDp9ALlLPdV58qA5xPYI.roa (hash: 2fsCXn2dUvoQvSbjEln1rfEBr4e643A4tQ2VNOf+74w=) 3: LF_8Nc9ZG4x2hfVpD6ng-Xw9W84.roa (hash: ZUOEzaCiK3yAvVDZRgehq5Q9Z7Hz/VbhnM2QFVFIzbg=) 4: Qk_v-1duQR3lEYcdweC9eiDixNc.crl (hash: 9/Z3dNYrtcgFYkILg+pmvpTv1lZkpljhvWotWHTbh8c=) 5: Vx8Q4nTQTZu0HJqRpDNNFvvmG5Y.roa (hash: aOaC++2x4KyJJvhaR/qiM7sOgi46fJa7BbumrEhC7kc=) 6: bwylWe3CdnWe9jj8najvjwfcqt4.roa (hash: qtMSlaGUcmfEHPPp9StGHAcyvutX/FbfstzyO7BM1O0=) 7: jhgr_kqWn0P8kZgzQ4rStaVm9lU.roa (hash: 51PKmpvyPy1LPgxOcO2i5rd0p3mx3xfr6KylJBv2xsM=) 8: nCw-8U_e-vesUJrIZdav3xNtIF8.roa (hash: lsbhSmxHJ+rDA4NzpyD8vAFiMv8avAe680sgNxpRv1E=) 9: nUsb4McCUGoVLzb61SmYYxwkFCU.roa (hash: Kql7INdZrgxo8TWzAiXsnbs/TLgYXHD6OczED6pBuxI=) 10: zlCSnRuq7fXaqQjldkiFbWuXQxA.roa (hash: qa9yNfqriW76nUwB9t/osTdrCLM4tWgEY60WfaKBs+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 18:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:59:d3:9f:d4:45:19:d2:17:8f:e7:0c:b2:54:21:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=424feffb576e411de511871dc1e0bd7a20e2c4d7 Validity Not Before: May 12 18:01:26 2026 GMT Not After : May 13 18:01:26 2026 GMT Subject: CN=d44a521621f85bb6aa1484b1f539cf17e8d8172a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f4:5f:68:30:fd:fc:d7:d3:26:5c:80:14:94: 00:d1:b9:d5:c2:95:a2:d1:59:d0:46:38:1e:59:d5: 20:3a:90:97:f2:8d:bc:20:90:4e:42:79:67:ef:8d: 2a:45:3c:b3:e1:6d:9e:53:1d:b1:5f:61:44:e6:43: 83:ce:99:81:72:73:e7:2a:3c:c6:76:ea:d5:26:0f: a5:d3:dc:34:f2:72:f2:fb:69:23:09:26:58:fa:65: 99:cc:75:4a:60:ab:c2:42:85:51:6b:21:f3:7d:75: 91:6d:64:6f:60:c8:41:bd:a9:3e:6e:b3:1a:be:c8: a1:44:d0:65:b4:d9:b3:38:06:3a:3b:ae:1d:ef:26: dd:b9:fc:4c:af:93:93:a8:06:b6:46:0c:a7:d9:b5: b7:86:fc:50:61:53:d8:08:b6:a0:42:a7:4d:64:70: 41:fe:1d:ea:bd:95:54:84:71:64:61:e0:42:ed:0e: 25:ca:e8:cd:f8:ff:a6:f0:95:07:84:f3:b4:7e:72: 64:92:ac:79:15:cf:f4:c3:bd:57:93:df:19:f9:24: ad:fc:80:e1:2d:c0:9b:d4:1d:93:26:d3:10:f6:86: 29:94:3b:a0:15:d8:8f:80:6c:53:87:f3:2e:53:95: 15:62:56:24:44:66:ca:57:70:30:80:4f:0b:3a:4d: 7c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:4A:52:16:21:F8:5B:B6:AA:14:84:B1:F5:39:CF:17:E8:D8:17:2A X509v3 Authority Key Identifier: keyid:42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:7b:f6:54:a1:5a:e3:b7:b6:95:46:4e:8f:12:b6:82:92:81: 51:86:86:0c:54:9c:31:46:94:25:9f:7d:0e:8c:a3:00:bf:77: dc:f3:81:3c:98:fd:e6:bd:77:8b:3f:26:31:9c:fd:2b:84:eb: df:8d:04:0e:8a:1c:9b:ef:20:ab:95:9d:2a:05:d1:cc:88:24: 40:cc:8e:a2:fd:ac:bc:b2:3e:3e:89:f7:de:00:2b:3f:d1:5e: fb:f1:8e:f7:b2:27:d1:68:62:ec:b8:7c:f7:ba:de:6d:7b:34: b1:86:87:df:7d:6d:d7:ee:c5:b9:72:2a:36:29:a6:03:32:67: 27:56:c7:47:1d:b8:d2:cd:61:5e:0b:56:b3:87:1c:bc:12:22: 9f:25:db:e9:4f:7e:cb:af:d3:c7:3e:4d:e0:92:4c:0e:aa:bd: 0b:b2:a9:71:66:ea:38:b5:4b:3b:cc:1b:05:31:77:38:fc:83: e2:fb:ad:d1:a6:ad:a9:f9:48:5a:f5:7c:27:c8:d7:d3:ac:0d: d2:93:58:0e:1e:a9:cc:89:41:fb:5d:be:88:a5:cb:9e:72:7b: 4c:38:13:e1:17:bf:65:52:e3:a1:1f:86:71:c1:75:bb:48:9c: 1e:ea:3c:ae:1b:5d:cd:e7:0b:c7:52:d7:0a:92:3a:b3:37:7b: a6:af:84:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dWdOf1EUZ0heP5wyyVCGUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyNGZlZmZiNTc2ZTQxMWRlNTExODcxZGMxZTBiZDdhMjBl MmM0ZDcwHhcNMjYwNTEyMTgwMTI2WhcNMjYwNTEzMTgwMTI2WjAzMTEwLwYDVQQD EyhkNDRhNTIxNjIxZjg1YmI2YWExNDg0YjFmNTM5Y2YxN2U4ZDgxNzJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/RfaDD9/NfTJlyAFJQA0bnVwpWi 0VnQRjgeWdUgOpCX8o28IJBOQnln740qRTyz4W2eUx2xX2FE5kODzpmBcnPnKjzG durVJg+l09w08nLy+2kjCSZY+mWZzHVKYKvCQoVRayHzfXWRbWRvYMhBvak+brMa vsihRNBltNmzOAY6O64d7ybdufxMr5OTqAa2Rgyn2bW3hvxQYVPYCLagQqdNZHBB /h3qvZVUhHFkYeBC7Q4lyujN+P+m8JUHhPO0fnJkkqx5Fc/0w71Xk98Z+SSt/IDh LcCb1B2TJtMQ9oYplDugFdiPgGxTh/MuU5UVYlYkRGbKV3AwgE8LOk18IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNRKUhYh+Fu2qhSEsfU5zxfo2BcqMB8GA1UdIwQY MBaAFEJP7/tXbkEd5RGHHcHgvXog4sTXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy82MTM1MDgtMDgzMi00MWY2LWFjYjct ODMxZjdlNmY1Y2NkLzEvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy82MTM1MDgtMDgzMi00MWY2LWFjYjctODMxZjdlNmY1Y2Nk LzEvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuXv2VKFa 47e2lUZOjxK2gpKBUYaGDFScMUaUJZ99DoyjAL933POBPJj95r13iz8mMZz9K4Tr 340EDoocm+8gq5WdKgXRzIgkQMyOov2svLI+Pon33gArP9Fe+/GO97In0Whi7Lh8 97rebXs0sYaH331t1+7FuXIqNimmAzJnJ1bHRx240s1hXgtWs4ccvBIinyXb6U9+ y6/Txz5N4JJMDqq9C7KpcWbqOLVLO8wbBTF3OPyD4vut0aatqflIWvV8J8jX06wN 0pNYDh6pzIlB+12+iKXLnnJ7TDgT4Re/ZVLjoR+GccF1u0icHuo8rhtdzecLx1LX CpI6szd7pq+EqA== -----END CERTIFICATE-----Generated at Wed May 13 03:35:32 2026 by rpki-client