$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft File: QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft (raw, json) Hash identifier: hpibonI/KopaNzS+wFhIFt0lPzqvwTMpS0FXenjxYqw= Subject key identifier: B0:E1:10:04:AA:7D:01:CA:4A:B3:60:42:95:40:9A:5E:40:F6:7F:0F Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a Certificate serial: 019D9B50880F59CE3B7C74883B4366AE3155 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft Manifest number: 162B Signing time: Fri 17 Apr 2026 12:00:39 +0000 Manifest this update: Fri 17 Apr 2026 12:00:39 +0000 Manifest next update: Sat 18 Apr 2026 12:00:39 +0000 Files and hashes: 1: FsJFy4QzX3uJ4UdyViwCikynttA.roa (hash: RlB8FaaAry3OAsuD+Dw02lKQL3ZJpmsn7VXQvAtrEQQ=) 2: IDKO7jIqiR_FuIZh_0QPOX0acJY.roa (hash: SUuyXo0XyLewTNjHOeFN03+QZPEkWcPb1M5NStmw+t0=) 3: QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl (hash: qshEOfzOFRuzDvZU9R9QvojrcOhY3PW2U/9Xp9BUxKs=) 4: UqFzq2RNZbWlDFVYyZprB1_1sEM.roa (hash: hO5jaxlS37jXDAccfSZYbNyHj2vkt1PuodFiaALX0Zg=) 5: baqSF0nqYusoIFECKjM-YPjRpPk.roa (hash: Qah7uqDRXltB4WrVjydJLT6cz2tOioqH5UQyq3ujOpo=) 6: g5msJEmtAZPPrNxROEFPbba5x4Y.roa (hash: v9nQWaRHu8tQFbTyot3EjdNkPUX42kWmDF8q/n+QqQQ=) 7: jQ-BZ183u_LUlZapfx_6bO5Fcbo.roa (hash: evJDPjhd4Xd7GaOP8Tsnz8tSIn8B3VRESbVEgJ+Ho4g=) 8: pvcqoNvJFdWoEMg8QFJEzHm8z7E.roa (hash: zuVd/wlnRktcFRrJxR1l3ksJPeEonfLjGaEKrFvnF9w=) 9: qHPixUdDjxrc91U2LNL_GHETLss.roa (hash: 5esutnCHRhEckm/D5dPi2+exRvIyK9kg1fmZT+vC/MU=) 10: qUc0afIdRt8-UOWMIe3SQvVz1n4.roa (hash: /uRdEodyR9sUKrVW+MpbljN4of9z2bshibIE/GFUwdc=) 11: u4NX6hKZvEh_-TMWnB5C6f5ezPk.roa (hash: UZfjswVY8ckqGOGEovj9QQT567PHMAI/NKar7oipK5E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9b:50:88:0f:59:ce:3b:7c:74:88:3b:43:66:ae:31:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a Validity Not Before: Apr 17 12:00:39 2026 GMT Not After : Apr 18 12:00:39 2026 GMT Subject: CN=b0e11004aa7d01ca4ab3604295409a5e40f67f0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a4:78:4d:aa:bc:0f:8a:d0:ef:0b:69:18:84: 0c:c7:fa:be:a0:91:dd:17:c5:53:88:fd:61:66:68: 17:66:9d:af:f7:00:e0:28:d0:eb:af:e4:c3:74:ef: 8a:94:b3:1c:e7:c5:1c:c9:40:30:33:97:f0:3d:1a: 8e:4c:f4:bc:c9:7f:09:71:ba:94:3b:f0:4a:53:86: b0:40:d7:9b:03:4c:4d:5f:38:ee:c0:79:11:74:5c: a0:03:2e:56:e0:4c:8b:c4:90:e4:c2:c2:2d:4e:25: 8d:e5:7e:6b:d9:fb:88:fc:bc:5f:8a:65:ae:67:47: 32:9c:bd:bc:97:bd:bb:56:85:a4:16:fc:73:ad:6d: 2a:c7:cc:17:bc:f8:ab:87:2d:4d:84:91:65:ba:9f: 57:34:8e:20:d4:a8:0d:da:f6:77:a8:88:11:4f:d7: 59:aa:c1:ab:85:3c:71:87:42:5f:95:1f:9a:5e:8f: fd:2e:fd:ef:7f:f1:11:b8:09:53:05:1c:b7:d7:9a: 88:7d:f8:2a:ba:a2:8d:8b:34:c7:59:11:79:c3:89: 5d:7e:ea:e1:d6:bc:b3:23:3c:e9:a7:7a:e5:33:30: c4:aa:71:66:85:c6:32:61:46:13:e1:96:61:a8:8b: b8:3a:be:9c:9d:b3:87:57:b7:a1:5d:c7:c3:ba:5d: fe:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:E1:10:04:AA:7D:01:CA:4A:B3:60:42:95:40:9A:5E:40:F6:7F:0F X509v3 Authority Key Identifier: keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:9c:47:63:ad:59:1f:aa:71:66:7b:c2:e5:2c:38:38:6d:6e: 0b:d9:39:cb:aa:27:0e:c5:c2:3f:15:5f:59:e9:5e:a4:34:58: 99:24:79:e0:76:61:b8:2a:64:5d:9a:85:3b:0b:bf:b1:ce:e6: bf:1e:ce:97:21:5f:76:f9:bf:c8:00:2c:62:2f:59:cc:15:cc: f8:f5:ee:9a:ae:33:7d:89:40:c9:28:ec:20:ef:67:21:ef:32: 0c:2e:30:50:f3:93:d6:10:cb:27:42:83:53:6b:e7:84:43:8b: 27:e1:e4:8b:98:8f:2e:18:68:e0:2b:b7:7c:09:d3:fb:31:51: de:6d:17:29:14:b3:75:38:e1:07:cb:59:e0:28:49:b1:b0:b8: 32:0e:00:c8:41:63:d9:bf:1b:95:88:00:e0:d9:57:96:45:70: 6f:f6:f5:18:9a:06:1b:00:34:3a:3b:24:42:92:5a:0b:8a:f1: 02:23:12:6b:66:c7:45:a2:3f:a7:c2:8c:43:a6:dd:17:04:94: d2:44:de:fc:61:56:48:72:48:ac:7c:b9:f4:33:e3:81:71:27: ec:44:69:0c:16:d2:9e:4a:ea:b6:6e:bd:61:25:28:24:e5:a8: 7e:44:39:e2:a2:ae:86:79:f1:e4:13:14:7e:f1:47:31:85:af: a6:4c:e8:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2bUIgPWc47fHSIO0NmrjFVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZjhhYjJiYTI0ODc5ZTQ1YzQ0NTQ4NmZjZWIyMWFmNDY2 NTZkNWEwHhcNMjYwNDE3MTIwMDM5WhcNMjYwNDE4MTIwMDM5WjAzMTEwLwYDVQQD EyhiMGUxMTAwNGFhN2QwMWNhNGFiMzYwNDI5NTQwOWE1ZTQwZjY3ZjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKR4Taq8D4rQ7wtpGIQMx/q+oJHd F8VTiP1hZmgXZp2v9wDgKNDrr+TDdO+KlLMc58UcyUAwM5fwPRqOTPS8yX8JcbqU O/BKU4awQNebA0xNXzjuwHkRdFygAy5W4EyLxJDkwsItTiWN5X5r2fuI/LxfimWu Z0cynL28l727VoWkFvxzrW0qx8wXvPirhy1NhJFlup9XNI4g1KgN2vZ3qIgRT9dZ qsGrhTxxh0JflR+aXo/9Lv3vf/ERuAlTBRy315qIffgquqKNizTHWRF5w4ldfurh 1ryzIzzpp3rlMzDEqnFmhcYyYUYT4ZZhqIu4Or6cnbOHV7ehXcfDul3++wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLDhEASqfQHKSrNgQpVAml5A9n8PMB8GA1UdIwQY MBaAFEL4qyuiSHnkXERUhvzrIa9GZW1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYt MTc2OWZlZjZiZTk2LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYtMTc2OWZlZjZiZTk2 LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaJxHY61Z H6pxZnvC5Sw4OG1uC9k5y6onDsXCPxVfWelepDRYmSR54HZhuCpkXZqFOwu/sc7m vx7OlyFfdvm/yAAsYi9ZzBXM+PXumq4zfYlAySjsIO9nIe8yDC4wUPOT1hDLJ0KD U2vnhEOLJ+Hki5iPLhho4Cu3fAnT+zFR3m0XKRSzdTjhB8tZ4ChJsbC4Mg4AyEFj 2b8blYgA4NlXlkVwb/b1GJoGGwA0OjskQpJaC4rxAiMSa2bHRaI/p8KMQ6bdFwSU 0kTe/GFWSHJIrHy59DPjgXEn7ERpDBbSnkrqtm69YSUoJOWofkQ54qKuhnnx5BMU fvFHMYWvpkzozg== -----END CERTIFICATE-----Generated at Fri Apr 17 13:52:28 2026 by rpki-client