$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft File: QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft (raw, json) Hash identifier: 0bItLUb1kjneywQq9ZZT4P+59EpMunHKMRE39uU+99U= Subject key identifier: 66:F6:57:F0:A1:AC:0A:E3:A9:02:F5:6C:36:73:40:CE:0F:64:74:89 Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a Certificate serial: 01A0BF8C52F602EFF07495B7B1E806535BDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft Manifest number: 17CD Signing time: Sun 20 Sep 2026 16:00:39 +0000 Manifest this update: Sun 20 Sep 2026 16:00:39 +0000 Manifest next update: Mon 21 Sep 2026 16:00:39 +0000 Files and hashes: 1: OY_SE1N8ame6r8ii8x89C85c4VU.roa (hash: iSDJaXe98DJ3SvpFfDjaOj1ZRysi5CL+UHjwiAlKl2k=) 2: QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl (hash: 6rylE1cf+Th+jKPF+wxXgcYuXfXXmBQDkmbyq/DvT7A=) 3: UqFzq2RNZbWlDFVYyZprB1_1sEM.roa (hash: hO5jaxlS37jXDAccfSZYbNyHj2vkt1PuodFiaALX0Zg=) 4: g5msJEmtAZPPrNxROEFPbba5x4Y.roa (hash: v9nQWaRHu8tQFbTyot3EjdNkPUX42kWmDF8q/n+QqQQ=) 5: hgOUaLDuSDgtlA1yV7iafLhOlwA.roa (hash: XrD4uNDjxERXMxfbMB+mRGApe2Tpr/A7+Ol/LsFJK7o=) 6: jQ-BZ183u_LUlZapfx_6bO5Fcbo.roa (hash: evJDPjhd4Xd7GaOP8Tsnz8tSIn8B3VRESbVEgJ+Ho4g=) 7: pvcqoNvJFdWoEMg8QFJEzHm8z7E.roa (hash: zuVd/wlnRktcFRrJxR1l3ksJPeEonfLjGaEKrFvnF9w=) 8: qHPixUdDjxrc91U2LNL_GHETLss.roa (hash: 5esutnCHRhEckm/D5dPi2+exRvIyK9kg1fmZT+vC/MU=) 9: qUc0afIdRt8-UOWMIe3SQvVz1n4.roa (hash: /uRdEodyR9sUKrVW+MpbljN4of9z2bshibIE/GFUwdc=) 10: u4NX6hKZvEh_-TMWnB5C6f5ezPk.roa (hash: UZfjswVY8ckqGOGEovj9QQT567PHMAI/NKar7oipK5E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 14:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:bf:8c:52:f6:02:ef:f0:74:95:b7:b1:e8:06:53:5b:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a Validity Not Before: Sep 20 16:00:39 2026 GMT Not After : Sep 21 16:00:39 2026 GMT Subject: CN=66f657f0a1ac0ae3a902f56c367340ce0f647489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:18:42:c8:b3:e3:2e:7a:6b:ef:78:9b:70:a2: 06:69:dd:4d:b0:f7:c5:70:ce:a5:71:44:73:40:f8: 49:42:63:36:10:58:9a:ea:c4:6d:ec:b0:ef:c7:72: a8:96:02:92:1d:30:6f:05:87:3c:1b:fe:76:96:53: 4a:cf:b3:97:c3:94:42:0e:41:95:a7:78:6d:7d:73: 2f:8c:e9:46:19:79:d9:13:7e:24:cb:f9:fd:19:5a: 0a:43:1e:fa:ef:50:76:bb:6e:bc:65:28:10:bc:4d: e7:b7:bd:71:44:83:96:af:1a:00:00:4c:16:1d:6b: de:3a:73:fa:66:94:29:cb:7f:26:be:73:2b:a4:1d: c1:6d:e7:7c:76:54:14:3d:b7:78:d1:3b:20:58:80: d7:21:45:9f:4c:9f:7f:0b:95:10:3d:6a:5c:e1:12: df:61:8a:3f:6c:35:0b:d6:d8:96:6d:94:aa:3f:4d: d9:0c:74:70:02:93:a0:90:43:63:55:e7:df:77:8d: 09:22:a8:24:92:4a:8b:20:f2:40:df:d7:d9:71:27: ff:be:41:5a:e6:57:1d:cc:1b:63:be:63:09:73:8b: 0b:bc:1b:58:17:dd:27:e6:46:ca:06:b8:0d:03:e3: b6:91:c2:e9:bf:f4:38:e9:ef:29:ab:18:e9:9c:da: b3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:F6:57:F0:A1:AC:0A:E3:A9:02:F5:6C:36:73:40:CE:0F:64:74:89 X509v3 Authority Key Identifier: keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:21:d4:b6:16:15:e7:8b:86:e6:4d:89:c6:bf:8f:37:3d:80: 2c:ed:d5:d0:c3:22:c4:20:04:d2:4f:4e:28:5d:06:1d:f0:de: 34:7f:d5:f3:b7:2e:a9:54:04:84:c9:a9:96:46:d4:ed:6f:1e: 33:24:db:08:6e:3a:3b:e3:e5:ae:7d:0e:a6:e0:e0:ba:30:1c: 60:e3:ba:5a:15:7a:d6:04:4b:0c:7f:46:9b:d4:60:d9:60:20: 76:eb:d1:8a:65:42:82:22:ea:47:2e:27:29:c0:03:bb:5f:06: 8b:ae:27:ad:13:d1:0a:44:2e:ae:aa:ec:20:ea:63:b0:e5:96: de:6c:ec:fa:b4:c9:8f:5d:21:4b:ba:de:b7:81:d2:80:e5:18: 15:1e:99:7a:fe:cd:c5:7c:4c:a7:a7:4a:77:b7:04:8a:f5:b6: d8:3d:ab:c2:dd:0b:05:7e:15:53:81:22:b8:b3:1c:e7:15:2a: 15:6a:28:0b:89:9a:72:8d:aa:15:dd:2a:6d:2e:3a:7d:b0:7b: e5:5f:2c:02:86:db:6e:0b:ab:75:d9:ba:9a:2e:0d:ac:06:03: 58:a9:8e:1e:5c:65:06:50:79:47:4b:44:85:45:1c:cd:df:27: ae:03:06:49:58:f6:99:20:db:47:71:10:be:86:4d:da:10:59: 9d:10:49:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC/jFL2Au/wdJW3segGU1veMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZjhhYjJiYTI0ODc5ZTQ1YzQ0NTQ4NmZjZWIyMWFmNDY2 NTZkNWEwHhcNMjYwOTIwMTYwMDM5WhcNMjYwOTIxMTYwMDM5WjAzMTEwLwYDVQQD Eyg2NmY2NTdmMGExYWMwYWUzYTkwMmY1NmMzNjczNDBjZTBmNjQ3NDg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphhCyLPjLnpr73ibcKIGad1NsPfF cM6lcURzQPhJQmM2EFia6sRt7LDvx3KolgKSHTBvBYc8G/52llNKz7OXw5RCDkGV p3htfXMvjOlGGXnZE34ky/n9GVoKQx7671B2u268ZSgQvE3nt71xRIOWrxoAAEwW HWveOnP6ZpQpy38mvnMrpB3Bbed8dlQUPbd40TsgWIDXIUWfTJ9/C5UQPWpc4RLf YYo/bDUL1tiWbZSqP03ZDHRwApOgkENjVeffd40JIqgkkkqLIPJA39fZcSf/vkFa 5lcdzBtjvmMJc4sLvBtYF90n5kbKBrgNA+O2kcLpv/Q46e8pqxjpnNqzOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGb2V/ChrArjqQL1bDZzQM4PZHSJMB8GA1UdIwQY MBaAFEL4qyuiSHnkXERUhvzrIa9GZW1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYt MTc2OWZlZjZiZTk2LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYtMTc2OWZlZjZiZTk2 LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfSHUthYV 54uG5k2Jxr+PNz2ALO3V0MMixCAE0k9OKF0GHfDeNH/V87cuqVQEhMmplkbU7W8e MyTbCG46O+Plrn0OpuDgujAcYOO6WhV61gRLDH9Gm9Rg2WAgduvRimVCgiLqRy4n KcADu18Gi64nrRPRCkQurqrsIOpjsOWW3mzs+rTJj10hS7ret4HSgOUYFR6Zev7N xXxMp6dKd7cEivW22D2rwt0LBX4VU4EiuLMc5xUqFWooC4maco2qFd0qbS46fbB7 5V8sAobbbgurddm6mi4NrAYDWKmOHlxlBlB5R0tEhUUczd8nrgMGSVj2mSDbR3EQ voZN2hBZnRBJFg== -----END CERTIFICATE-----Generated at Sun Sep 20 20:32:10 2026 by rpki-client