$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft File: Qk_v-1duQR3lEYcdweC9eiDixNc.mft (raw, json) Hash identifier: B+jnjUQ5r66VkpwifJqUs0uEGxxPCRBJFjhHZnxh6/U= Subject key identifier: 7E:03:C6:7E:CF:D9:C2:DB:AC:F3:A3:31:00:44:61:B4:E3:DA:0F:1D Authority key identifier: 42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7 Certificate issuer: /CN=424feffb576e411de511871dc1e0bd7a20e2c4d7 Certificate serial: 01A1DB3897F8CF77209A675EC51FE3A59B3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft Manifest number: 16D5 Signing time: Sat 14 Nov 2026 18:01:21 +0000 Manifest this update: Sat 14 Nov 2026 18:01:21 +0000 Manifest next update: Sun 15 Nov 2026 18:01:21 +0000 Files and hashes: 1: 17Np1y-dxxhXZQRQoDGfhlgHSac.roa (hash: AmSzrL+ixbKTyqpiqkExdglo4ra/UrlgCqcfSDgSmgM=) 2: G6olI-VvDp9ALlLPdV58qA5xPYI.roa (hash: 2fsCXn2dUvoQvSbjEln1rfEBr4e643A4tQ2VNOf+74w=) 3: LF_8Nc9ZG4x2hfVpD6ng-Xw9W84.roa (hash: ZUOEzaCiK3yAvVDZRgehq5Q9Z7Hz/VbhnM2QFVFIzbg=) 4: Qk_v-1duQR3lEYcdweC9eiDixNc.crl (hash: 7thsUTIxRdrvPOm06YoMIXYNjL0LRJ/RcEL3vBsAaW0=) 5: Vx8Q4nTQTZu0HJqRpDNNFvvmG5Y.roa (hash: aOaC++2x4KyJJvhaR/qiM7sOgi46fJa7BbumrEhC7kc=) 6: bwylWe3CdnWe9jj8najvjwfcqt4.roa (hash: qtMSlaGUcmfEHPPp9StGHAcyvutX/FbfstzyO7BM1O0=) 7: jhgr_kqWn0P8kZgzQ4rStaVm9lU.roa (hash: 51PKmpvyPy1LPgxOcO2i5rd0p3mx3xfr6KylJBv2xsM=) 8: nCw-8U_e-vesUJrIZdav3xNtIF8.roa (hash: lsbhSmxHJ+rDA4NzpyD8vAFiMv8avAe680sgNxpRv1E=) 9: nUsb4McCUGoVLzb61SmYYxwkFCU.roa (hash: Kql7INdZrgxo8TWzAiXsnbs/TLgYXHD6OczED6pBuxI=) 10: zlCSnRuq7fXaqQjldkiFbWuXQxA.roa (hash: qa9yNfqriW76nUwB9t/osTdrCLM4tWgEY60WfaKBs+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 18:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:db:38:97:f8:cf:77:20:9a:67:5e:c5:1f:e3:a5:9b:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=424feffb576e411de511871dc1e0bd7a20e2c4d7 Validity Not Before: Nov 14 18:01:21 2026 GMT Not After : Nov 15 18:01:21 2026 GMT Subject: CN=7e03c67ecfd9c2dbacf3a331004461b4e3da0f1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:22:e0:55:83:e7:9c:94:b4:4c:10:1e:78:73: fe:33:7a:4e:d8:bf:b7:34:92:79:60:93:61:13:1a: e4:26:35:75:15:6e:06:13:80:6e:a6:31:4d:3e:5b: 81:ec:b3:1d:e3:23:b4:4f:eb:bb:f6:b4:59:4a:1f: 05:1c:dd:6f:1a:73:47:7c:ef:0a:49:e5:b7:0a:0f: f3:61:6d:ed:96:ae:6e:4f:ab:38:13:4e:98:42:da: d6:65:5c:73:cd:5f:4b:6f:c9:d2:f2:6f:4e:df:f5: 5b:06:54:17:ab:f7:27:35:94:81:32:ec:46:86:ce: f6:21:65:5d:4e:f9:69:0b:07:78:22:12:aa:94:25: b9:02:35:97:8e:f5:fe:97:f8:07:f7:f2:bd:b5:52: 52:74:ba:1a:9b:85:4d:79:cd:0c:a6:4a:5f:ce:1f: cd:60:21:59:b0:0a:d2:72:fd:d8:05:32:d0:bc:a4: 69:4f:07:1e:e6:69:77:16:2d:01:f5:ea:8e:76:36: 23:5d:92:42:2b:75:da:9d:91:a6:ba:62:0f:82:98: 80:41:e2:39:2e:23:74:0e:cf:50:f4:1e:66:26:2f: df:dc:4c:5d:d9:8c:77:aa:69:89:20:1b:5b:bd:a1: 79:2e:9b:31:03:ea:50:60:12:2a:11:e1:46:c2:9d: a3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:03:C6:7E:CF:D9:C2:DB:AC:F3:A3:31:00:44:61:B4:E3:DA:0F:1D X509v3 Authority Key Identifier: keyid:42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:ca:d0:e3:3f:28:74:5c:4a:ec:c8:42:41:7d:5e:dd:71:f4: 17:17:c8:23:33:3e:bd:3f:1b:a6:75:b9:97:81:8c:52:e0:7a: 57:b6:55:d6:65:78:9c:c7:82:25:1b:04:42:95:3f:0a:88:79: 95:53:f3:9f:3c:7c:9f:9b:ab:e8:b1:69:3b:5e:e6:6e:78:73: fb:be:e8:f9:86:42:bf:ac:2b:a3:21:26:05:a7:af:39:ef:41: 51:8e:d0:ef:2e:98:a4:e0:1a:17:a6:60:f3:48:5e:14:f4:1f: cb:f0:6a:70:7c:4d:8e:dd:c0:a4:c3:c0:e2:63:3f:a2:2c:4b: 73:53:96:5c:08:aa:9f:ba:fd:b3:12:cf:bc:60:a4:c4:52:d0: 62:e1:28:1c:fa:37:e9:db:0a:47:51:68:ad:4b:06:af:a7:82: 14:78:67:48:93:d4:a4:52:ec:bd:8c:d1:41:50:4c:19:30:c7: 90:b8:71:50:a3:d4:54:b3:c1:a2:f0:b4:d7:3b:1d:6d:d1:fd: 36:97:27:69:01:88:39:40:61:b0:e8:d4:5b:cd:52:4e:13:6f: eb:9f:a0:6c:8f:26:4d:83:1e:0e:b1:92:4e:5d:e4:cb:9a:c6: c7:a0:7c:d0:ee:5d:23:04:3c:73:39:a8:e9:c9:32:77:12:c9: bd:7b:90:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHbOJf4z3cgmmdexR/jpZs6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyNGZlZmZiNTc2ZTQxMWRlNTExODcxZGMxZTBiZDdhMjBl MmM0ZDcwHhcNMjYxMTE0MTgwMTIxWhcNMjYxMTE1MTgwMTIxWjAzMTEwLwYDVQQD Eyg3ZTAzYzY3ZWNmZDljMmRiYWNmM2EzMzEwMDQ0NjFiNGUzZGEwZjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+iLgVYPnnJS0TBAeeHP+M3pO2L+3 NJJ5YJNhExrkJjV1FW4GE4BupjFNPluB7LMd4yO0T+u79rRZSh8FHN1vGnNHfO8K SeW3Cg/zYW3tlq5uT6s4E06YQtrWZVxzzV9Lb8nS8m9O3/VbBlQXq/cnNZSBMuxG hs72IWVdTvlpCwd4IhKqlCW5AjWXjvX+l/gH9/K9tVJSdLoam4VNec0Mpkpfzh/N YCFZsArScv3YBTLQvKRpTwce5ml3Fi0B9eqOdjYjXZJCK3XanZGmumIPgpiAQeI5 LiN0Ds9Q9B5mJi/f3Exd2Yx3qmmJIBtbvaF5LpsxA+pQYBIqEeFGwp2j2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH4Dxn7P2cLbrPOjMQBEYbTj2g8dMB8GA1UdIwQY MBaAFEJP7/tXbkEd5RGHHcHgvXog4sTXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy82MTM1MDgtMDgzMi00MWY2LWFjYjct ODMxZjdlNmY1Y2NkLzEvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy82MTM1MDgtMDgzMi00MWY2LWFjYjctODMxZjdlNmY1Y2Nk LzEvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbsrQ4z8o dFxK7MhCQX1e3XH0FxfIIzM+vT8bpnW5l4GMUuB6V7ZV1mV4nMeCJRsEQpU/Coh5 lVPznzx8n5ur6LFpO17mbnhz+77o+YZCv6wroyEmBaevOe9BUY7Q7y6YpOAaF6Zg 80heFPQfy/BqcHxNjt3ApMPA4mM/oixLc1OWXAiqn7r9sxLPvGCkxFLQYuEoHPo3 6dsKR1ForUsGr6eCFHhnSJPUpFLsvYzRQVBMGTDHkLhxUKPUVLPBovC01zsdbdH9 NpcnaQGIOUBhsOjUW81SThNv65+gbI8mTYMeDrGSTl3ky5rGx6B80O5dIwQ8czmo 6ckydxLJvXuQpQ== -----END CERTIFICATE-----Generated at Sun Nov 15 06:38:16 2026 by rpki-client