
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft
File: QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft (raw, json)
Hash identifier: AVi3KaMHL1osflViDy3ipXjjcuWJZQvMVq4s1GBk7xI=
Subject key identifier: FA:4E:6F:69:9F:F1:A1:2F:0B:9C:BA:66:68:E9:AD:3C:C2:BD:DB:5F
Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Certificate serial: 019CA9B38F2D963743A256B1A4B420A11D1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft
Manifest number: 15AD
Signing time: Sun 01 Mar 2026 14:00:42 +0000
Manifest this update: Sun 01 Mar 2026 14:00:42 +0000
Manifest next update: Mon 02 Mar 2026 14:00:42 +0000
Files and hashes: 1: GWyAGqdOn5bYyHYnvLDvJP7OcDo.roa (hash: aePs2l3qizlCTkevGtE9e7vqvgCIXjUea/ZI4K6j0lQ=)
2: QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl (hash: 2yn2NyqmIx9EgANmMZC4Yon/6ZlAn9cgMjE9C5S3HZw=)
3: UqFzq2RNZbWlDFVYyZprB1_1sEM.roa (hash: hO5jaxlS37jXDAccfSZYbNyHj2vkt1PuodFiaALX0Zg=)
4: baqSF0nqYusoIFECKjM-YPjRpPk.roa (hash: Qah7uqDRXltB4WrVjydJLT6cz2tOioqH5UQyq3ujOpo=)
5: g5msJEmtAZPPrNxROEFPbba5x4Y.roa (hash: v9nQWaRHu8tQFbTyot3EjdNkPUX42kWmDF8q/n+QqQQ=)
6: jQ-BZ183u_LUlZapfx_6bO5Fcbo.roa (hash: evJDPjhd4Xd7GaOP8Tsnz8tSIn8B3VRESbVEgJ+Ho4g=)
7: pvcqoNvJFdWoEMg8QFJEzHm8z7E.roa (hash: zuVd/wlnRktcFRrJxR1l3ksJPeEonfLjGaEKrFvnF9w=)
8: qHPixUdDjxrc91U2LNL_GHETLss.roa (hash: 5esutnCHRhEckm/D5dPi2+exRvIyK9kg1fmZT+vC/MU=)
9: qUc0afIdRt8-UOWMIe3SQvVz1n4.roa (hash: /uRdEodyR9sUKrVW+MpbljN4of9z2bshibIE/GFUwdc=)
10: u4NX6hKZvEh_-TMWnB5C6f5ezPk.roa (hash: UZfjswVY8ckqGOGEovj9QQT567PHMAI/NKar7oipK5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:8f:2d:96:37:43:a2:56:b1:a4:b4:20:a1:1d:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Validity
Not Before: Mar 1 14:00:42 2026 GMT
Not After : Mar 2 14:00:42 2026 GMT
Subject: CN=fa4e6f699ff1a12f0b9cba6668e9ad3cc2bddb5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b5:c1:a0:23:34:59:5f:88:fb:4c:c5:6f:a4:
f0:8c:5b:18:e7:fb:ae:5d:35:f6:be:4e:df:14:38:
51:e4:4b:2b:c1:8e:c5:3e:35:48:33:07:c1:83:6e:
a1:88:4e:d5:bb:05:08:3a:63:6c:44:7a:6e:0d:ef:
66:d4:fe:96:36:24:80:08:7b:9d:ed:8d:40:48:c2:
f4:50:11:9a:9f:d5:00:bd:03:b4:72:0c:91:3b:a7:
07:88:20:8f:e6:67:e0:19:f5:58:0f:d9:d5:a1:d1:
3c:3a:ae:32:82:2c:e4:ef:50:9f:53:52:ad:a5:8c:
b1:e8:6b:34:19:4d:78:2e:3d:f7:c0:3b:ea:4d:85:
2a:c1:4f:a5:aa:a8:2d:be:b9:db:59:8b:5a:b9:ea:
b5:75:b7:5a:c0:30:ff:1b:a6:40:41:2f:ed:b9:cc:
fd:4d:c5:26:a8:88:d7:58:33:a3:f5:0d:3d:d7:02:
e4:89:1d:75:5c:45:3d:fc:07:1e:30:fb:ab:f5:65:
96:cb:83:d5:29:af:8a:eb:b7:5b:28:f5:af:4c:aa:
27:64:54:fd:9a:9c:32:b2:38:ea:2c:59:d9:bc:dc:
46:bb:82:e5:5e:8c:9a:b6:81:8f:77:4e:6a:c9:1b:
9d:05:5e:ce:8f:f2:77:da:b2:ec:9d:ba:db:f9:36:
05:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:4E:6F:69:9F:F1:A1:2F:0B:9C:BA:66:68:E9:AD:3C:C2:BD:DB:5F
X509v3 Authority Key Identifier:
keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:4f:4a:66:08:ad:2c:33:66:6e:f3:0f:43:60:11:1b:99:af:
3e:46:d3:7f:33:e6:4f:df:d5:c6:2f:20:e2:8f:08:dc:8c:b5:
e7:9f:8f:00:57:ca:d4:fa:d6:38:66:eb:b5:4d:b6:f3:1f:56:
6c:e9:d5:06:ce:b2:ce:7d:f3:5a:60:f0:73:7e:5a:96:07:a6:
46:e9:ba:52:5f:66:3b:db:74:48:90:9c:b7:c1:f8:c0:39:de:
7d:83:e2:80:0f:7e:59:9d:0f:b4:78:bd:e4:de:65:91:b2:e3:
ac:fa:1b:ba:22:1f:b5:b0:a0:b3:b9:0a:5a:da:64:4e:08:b1:
23:6d:b4:10:78:24:07:e7:c3:77:05:31:9b:74:ce:43:5f:b3:
d6:d1:17:05:37:7c:7a:c0:2a:99:16:08:2b:aa:0a:79:ad:9e:
d4:71:3d:63:b8:a0:74:dd:22:4a:16:84:04:dc:ac:64:8a:bc:
23:3a:a3:ba:4f:b3:c3:1e:23:e6:ad:63:d3:ca:1a:06:fe:c6:
fa:d8:37:51:64:ae:c7:b8:71:5e:44:52:66:c6:df:e6:a0:0d:
b9:cc:da:07:87:18:58:77:4b:a5:73:c2:d5:36:c3:f1:40:69:
ad:eb:ca:43:d9:37:0f:55:fd:31:fb:e9:c2:88:4b:2d:51:93:
8f:52:fa:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:32 2026 by rpki-client