
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft
File: QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft (raw, json)
Hash identifier: UOR9cxVL0Emlu8OuGjAHczlOU7UvjPrNCQ9Iy/txGBE=
Subject key identifier: 1A:EE:20:24:34:0C:8E:45:60:06:FA:ED:CB:4E:8A:0F:17:C1:3B:B4
Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Certificate serial: 019FAABEC844F502B82C96FFC5B0AF931598
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft
Manifest number: 173D
Signing time: Tue 28 Jul 2026 22:00:57 +0000
Manifest this update: Tue 28 Jul 2026 22:00:57 +0000
Manifest next update: Wed 29 Jul 2026 22:00:57 +0000
Files and hashes: 1: FsJFy4QzX3uJ4UdyViwCikynttA.roa (hash: RlB8FaaAry3OAsuD+Dw02lKQL3ZJpmsn7VXQvAtrEQQ=)
2: QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl (hash: xhtjBsxszhyXKSJxkA6YUOMmvTaDHY8sdfnoloye3Q8=)
3: UqFzq2RNZbWlDFVYyZprB1_1sEM.roa (hash: hO5jaxlS37jXDAccfSZYbNyHj2vkt1PuodFiaALX0Zg=)
4: g5msJEmtAZPPrNxROEFPbba5x4Y.roa (hash: v9nQWaRHu8tQFbTyot3EjdNkPUX42kWmDF8q/n+QqQQ=)
5: hgOUaLDuSDgtlA1yV7iafLhOlwA.roa (hash: XrD4uNDjxERXMxfbMB+mRGApe2Tpr/A7+Ol/LsFJK7o=)
6: jQ-BZ183u_LUlZapfx_6bO5Fcbo.roa (hash: evJDPjhd4Xd7GaOP8Tsnz8tSIn8B3VRESbVEgJ+Ho4g=)
7: pvcqoNvJFdWoEMg8QFJEzHm8z7E.roa (hash: zuVd/wlnRktcFRrJxR1l3ksJPeEonfLjGaEKrFvnF9w=)
8: qHPixUdDjxrc91U2LNL_GHETLss.roa (hash: 5esutnCHRhEckm/D5dPi2+exRvIyK9kg1fmZT+vC/MU=)
9: qUc0afIdRt8-UOWMIe3SQvVz1n4.roa (hash: /uRdEodyR9sUKrVW+MpbljN4of9z2bshibIE/GFUwdc=)
10: u4NX6hKZvEh_-TMWnB5C6f5ezPk.roa (hash: UZfjswVY8ckqGOGEovj9QQT567PHMAI/NKar7oipK5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:c8:44:f5:02:b8:2c:96:ff:c5:b0:af:93:15:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Validity
Not Before: Jul 28 22:00:57 2026 GMT
Not After : Jul 29 22:00:57 2026 GMT
Subject: CN=1aee2024340c8e456006faedcb4e8a0f17c13bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:50:11:8d:fc:8d:20:7e:d6:82:1d:9b:b3:9b:
e1:14:f3:0f:59:0c:73:9e:98:25:1e:e9:8a:f2:d1:
14:5d:cb:03:f1:d4:07:63:5c:8a:81:b2:7c:94:3e:
d0:20:b3:05:19:f4:d6:c3:c1:d9:40:6f:a7:9d:e9:
c8:23:16:51:75:03:9b:75:65:07:ef:dd:03:d1:bb:
17:eb:91:5d:4e:cb:21:77:61:25:d1:e1:f8:4f:96:
45:f0:35:6e:56:e4:56:10:2e:12:55:19:37:65:fb:
8f:c4:95:78:a3:36:23:ee:b1:49:a9:a3:c5:5e:7b:
ec:da:a5:ba:ca:5f:5b:37:b7:0d:6e:31:d2:9b:a1:
1d:1a:dc:01:61:6a:46:17:a4:22:fe:a2:ef:2e:64:
af:dc:33:e0:41:2e:91:0d:e9:77:2e:0a:09:95:a5:
6b:13:fd:74:73:d4:07:39:65:45:fa:d4:72:67:42:
16:e3:1a:55:c4:6b:e5:b1:fe:2b:52:d2:32:29:43:
e9:00:5a:17:e4:1d:1e:1c:46:97:0a:12:a2:ed:aa:
b9:43:da:88:80:97:a9:35:95:ea:4a:74:f8:0b:72:
e6:85:c2:29:16:f0:45:17:2d:20:f1:8e:bc:1c:7f:
b3:dc:df:ab:e7:46:74:da:7c:cd:bf:65:45:6b:89:
1b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:EE:20:24:34:0C:8E:45:60:06:FA:ED:CB:4E:8A:0F:17:C1:3B:B4
X509v3 Authority Key Identifier:
keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:fe:1e:75:3c:54:3b:cb:40:5b:da:57:ad:97:04:ba:d6:54:
95:85:7f:ef:03:d5:d8:1b:c6:b7:d7:68:ef:16:60:68:1d:e3:
e1:e4:a7:96:54:b7:3b:9a:47:a2:02:b9:81:49:9c:a1:93:c5:
8d:67:d1:70:63:96:5f:eb:bc:b4:79:1f:4b:e1:78:7a:5c:82:
e2:23:b5:cc:13:04:21:d5:26:49:47:a7:89:32:6f:4e:18:ad:
72:57:f5:00:7e:fd:49:c7:75:71:b1:5f:ce:58:e0:8a:77:44:
2f:01:f1:a6:fa:16:9f:cd:ab:ef:5e:d4:9e:d5:15:29:ee:68:
1a:47:6b:bd:dd:b0:0d:87:92:8d:6b:fa:7c:c8:77:1f:7d:9a:
04:11:9d:47:a2:d1:5c:90:cf:48:40:cb:b1:34:46:dc:4a:e0:
80:7c:51:0f:f3:de:54:d3:39:ec:ba:60:bf:e6:bc:d6:65:56:
55:9f:f3:e4:d7:e7:95:a0:45:f5:84:cf:bb:41:69:e2:f1:4b:
2c:7d:9c:d5:cd:d4:46:3a:47:76:d4:56:67:22:ac:e0:83:c8:
b5:80:7f:65:6d:d3:3e:1c:27:4b:3a:41:2d:00:01:76:a8:c9:
11:85:3c:6c:8d:2f:bd:dd:d7:cc:a2:2d:4f:4d:ef:cb:d8:9c:
1d:e5:d5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:48:04 2026 by rpki-client