$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft File: QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft (raw, json) Hash identifier: 1DZzN7yf8IRA4ZlihorR5rBDpR1iVVQ6+4OqNErM1vQ= Subject key identifier: FC:EE:79:2F:3E:50:5A:43:A7:C1:B8:92:66:89:76:80:7A:60:42:9C Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a Certificate serial: 019DA30AABA436A2D9FCF3581563007EBF55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft Manifest number: 162F Signing time: Sun 19 Apr 2026 00:01:18 +0000 Manifest this update: Sun 19 Apr 2026 00:01:18 +0000 Manifest next update: Mon 20 Apr 2026 00:01:18 +0000 Files and hashes: 1: FsJFy4QzX3uJ4UdyViwCikynttA.roa (hash: RlB8FaaAry3OAsuD+Dw02lKQL3ZJpmsn7VXQvAtrEQQ=) 2: IDKO7jIqiR_FuIZh_0QPOX0acJY.roa (hash: SUuyXo0XyLewTNjHOeFN03+QZPEkWcPb1M5NStmw+t0=) 3: QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl (hash: nwSZiMtYfazBLesjtHzZf8hWJIZ1eG9uQEfrO3mgkII=) 4: UqFzq2RNZbWlDFVYyZprB1_1sEM.roa (hash: hO5jaxlS37jXDAccfSZYbNyHj2vkt1PuodFiaALX0Zg=) 5: baqSF0nqYusoIFECKjM-YPjRpPk.roa (hash: Qah7uqDRXltB4WrVjydJLT6cz2tOioqH5UQyq3ujOpo=) 6: g5msJEmtAZPPrNxROEFPbba5x4Y.roa (hash: v9nQWaRHu8tQFbTyot3EjdNkPUX42kWmDF8q/n+QqQQ=) 7: jQ-BZ183u_LUlZapfx_6bO5Fcbo.roa (hash: evJDPjhd4Xd7GaOP8Tsnz8tSIn8B3VRESbVEgJ+Ho4g=) 8: pvcqoNvJFdWoEMg8QFJEzHm8z7E.roa (hash: zuVd/wlnRktcFRrJxR1l3ksJPeEonfLjGaEKrFvnF9w=) 9: qHPixUdDjxrc91U2LNL_GHETLss.roa (hash: 5esutnCHRhEckm/D5dPi2+exRvIyK9kg1fmZT+vC/MU=) 10: qUc0afIdRt8-UOWMIe3SQvVz1n4.roa (hash: /uRdEodyR9sUKrVW+MpbljN4of9z2bshibIE/GFUwdc=) 11: u4NX6hKZvEh_-TMWnB5C6f5ezPk.roa (hash: UZfjswVY8ckqGOGEovj9QQT567PHMAI/NKar7oipK5E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 00:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a3:0a:ab:a4:36:a2:d9:fc:f3:58:15:63:00:7e:bf:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a Validity Not Before: Apr 19 00:01:18 2026 GMT Not After : Apr 20 00:01:18 2026 GMT Subject: CN=fcee792f3e505a43a7c1b892668976807a60429c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:dc:ee:09:95:6e:54:58:55:35:e8:43:e3:a7: 92:6f:bb:08:3b:e6:ec:4e:85:c1:f7:00:73:90:ee: c3:9a:30:57:26:be:c0:79:b1:b8:3d:ca:e7:46:ca: 69:50:f0:86:f0:02:c1:8e:b5:38:8e:5c:b6:36:16: 02:a5:a6:fb:c8:e1:27:f8:b6:d0:0f:68:0e:3b:e0: 70:13:51:64:88:80:37:8a:75:78:64:bf:e5:8b:ae: e5:8b:c2:cc:a3:2f:98:00:ad:9a:02:2c:2d:99:58: e4:79:7e:6f:d1:b6:d0:b9:08:51:5d:c1:15:f6:6e: 24:ce:52:2a:41:41:30:33:30:45:73:d2:77:0c:d8: 7c:7e:9b:cc:7e:21:3a:e0:21:73:7e:45:78:09:25: dc:51:90:1f:d1:da:e7:03:aa:ad:32:72:e9:53:2d: 6e:c5:cb:88:7f:22:69:20:2c:c8:c9:04:d5:6d:3c: 2d:46:02:48:0c:c8:90:51:ef:54:cc:0a:15:ef:bb: 67:a0:7a:fc:36:18:4b:c0:17:80:a4:36:88:6b:dc: 5f:7e:d1:01:89:03:82:bd:cb:e7:5d:c6:8c:32:25: ba:48:02:40:40:c1:db:76:09:a4:c5:79:a8:fa:20: 9a:4a:a4:8a:40:e7:f8:04:1e:12:5c:6e:ef:13:16: f3:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:EE:79:2F:3E:50:5A:43:A7:C1:B8:92:66:89:76:80:7A:60:42:9C X509v3 Authority Key Identifier: keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:53:d6:e5:fa:50:55:20:92:cf:27:48:16:81:62:4e:2d:91: ee:f3:bd:f2:02:9b:e2:95:57:ee:f3:65:d3:3d:a7:d2:fd:c0: d5:1b:e9:4c:9f:8e:01:e2:59:4e:3f:74:fe:75:45:3b:3a:c0: 50:c6:14:73:55:1e:97:cc:96:a7:23:22:9c:77:13:1b:ab:5e: 1a:a1:c9:9e:31:72:df:7b:6f:5c:b0:57:ff:57:ab:23:85:85: 47:a1:a5:c0:0d:f8:f7:d5:5e:8c:be:e4:ba:7f:aa:d4:5a:b9: 26:2b:91:89:a0:6a:26:4f:41:b5:21:01:81:fc:aa:4d:92:d8: fd:35:32:35:f2:46:79:e4:69:c6:14:30:ec:a6:a9:f5:35:5a: 9f:97:b3:c4:a0:6d:ad:23:11:2c:72:8f:09:60:4f:30:88:ef: 18:25:aa:c5:e7:71:48:6d:03:7e:c0:9f:b1:df:4f:e5:b0:eb: 7c:18:2b:c1:86:0a:6b:81:4b:6c:86:13:fe:5f:e9:79:35:50: f0:c9:72:93:f0:07:e3:b5:ed:f4:40:28:7c:76:95:2e:f3:40: 47:6a:de:28:bd:5c:aa:a9:c1:52:f3:74:8f:b4:88:90:96:e9: d7:84:93:68:4f:57:18:5e:a1:c7:2e:28:3b:42:ab:12:8e:8e: 0c:f3:ae:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2jCqukNqLZ/PNYFWMAfr9VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZjhhYjJiYTI0ODc5ZTQ1YzQ0NTQ4NmZjZWIyMWFmNDY2 NTZkNWEwHhcNMjYwNDE5MDAwMTE4WhcNMjYwNDIwMDAwMTE4WjAzMTEwLwYDVQQD EyhmY2VlNzkyZjNlNTA1YTQzYTdjMWI4OTI2Njg5NzY4MDdhNjA0MjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dzuCZVuVFhVNehD46eSb7sIO+bs ToXB9wBzkO7DmjBXJr7AebG4PcrnRsppUPCG8ALBjrU4jly2NhYCpab7yOEn+LbQ D2gOO+BwE1FkiIA3inV4ZL/li67li8LMoy+YAK2aAiwtmVjkeX5v0bbQuQhRXcEV 9m4kzlIqQUEwMzBFc9J3DNh8fpvMfiE64CFzfkV4CSXcUZAf0drnA6qtMnLpUy1u xcuIfyJpICzIyQTVbTwtRgJIDMiQUe9UzAoV77tnoHr8NhhLwBeApDaIa9xfftEB iQOCvcvnXcaMMiW6SAJAQMHbdgmkxXmo+iCaSqSKQOf4BB4SXG7vExbzzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPzueS8+UFpDp8G4kmaJdoB6YEKcMB8GA1UdIwQY MBaAFEL4qyuiSHnkXERUhvzrIa9GZW1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYt MTc2OWZlZjZiZTk2LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYtMTc2OWZlZjZiZTk2 LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFVPW5fpQ VSCSzydIFoFiTi2R7vO98gKb4pVX7vNl0z2n0v3A1RvpTJ+OAeJZTj90/nVFOzrA UMYUc1Uel8yWpyMinHcTG6teGqHJnjFy33tvXLBX/1erI4WFR6GlwA3499VejL7k un+q1Fq5JiuRiaBqJk9BtSEBgfyqTZLY/TUyNfJGeeRpxhQw7Kap9TVan5ezxKBt rSMRLHKPCWBPMIjvGCWqxedxSG0DfsCfsd9P5bDrfBgrwYYKa4FLbIYT/l/peTVQ 8Mlyk/AH47Xt9EAofHaVLvNAR2reKL1cqqnBUvN0j7SIkJbp14STaE9XGF6hxy4o O0KrEo6ODPOuvQ== -----END CERTIFICATE-----Generated at Sun Apr 19 10:40:14 2026 by rpki-client