$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft File: QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft (raw, json) Hash identifier: A1YEdtJghsodsAgEPbxJ9UfqBPvReuDf95FJ22j5RBE= Subject key identifier: 89:C6:64:AD:85:B3:22:B5:50:14:58:E1:7B:6E:2B:DA:C0:4F:87:46 Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a Certificate serial: 019EBEED3DCA5F92B7DAFE8180E6DB0A79CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft Manifest number: 16C2 Signing time: Sat 13 Jun 2026 03:01:19 +0000 Manifest this update: Sat 13 Jun 2026 03:01:19 +0000 Manifest next update: Sun 14 Jun 2026 03:01:19 +0000 Files and hashes: 1: FsJFy4QzX3uJ4UdyViwCikynttA.roa (hash: RlB8FaaAry3OAsuD+Dw02lKQL3ZJpmsn7VXQvAtrEQQ=) 2: IDKO7jIqiR_FuIZh_0QPOX0acJY.roa (hash: SUuyXo0XyLewTNjHOeFN03+QZPEkWcPb1M5NStmw+t0=) 3: QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl (hash: Wa7UeTqnmnW4rl5e6QjTaGMTOSYNLBTHC+xIdCoQ+E4=) 4: UqFzq2RNZbWlDFVYyZprB1_1sEM.roa (hash: hO5jaxlS37jXDAccfSZYbNyHj2vkt1PuodFiaALX0Zg=) 5: baqSF0nqYusoIFECKjM-YPjRpPk.roa (hash: Qah7uqDRXltB4WrVjydJLT6cz2tOioqH5UQyq3ujOpo=) 6: g5msJEmtAZPPrNxROEFPbba5x4Y.roa (hash: v9nQWaRHu8tQFbTyot3EjdNkPUX42kWmDF8q/n+QqQQ=) 7: jQ-BZ183u_LUlZapfx_6bO5Fcbo.roa (hash: evJDPjhd4Xd7GaOP8Tsnz8tSIn8B3VRESbVEgJ+Ho4g=) 8: pvcqoNvJFdWoEMg8QFJEzHm8z7E.roa (hash: zuVd/wlnRktcFRrJxR1l3ksJPeEonfLjGaEKrFvnF9w=) 9: qHPixUdDjxrc91U2LNL_GHETLss.roa (hash: 5esutnCHRhEckm/D5dPi2+exRvIyK9kg1fmZT+vC/MU=) 10: qUc0afIdRt8-UOWMIe3SQvVz1n4.roa (hash: /uRdEodyR9sUKrVW+MpbljN4of9z2bshibIE/GFUwdc=) 11: u4NX6hKZvEh_-TMWnB5C6f5ezPk.roa (hash: UZfjswVY8ckqGOGEovj9QQT567PHMAI/NKar7oipK5E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 03:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:be:ed:3d:ca:5f:92:b7:da:fe:81:80:e6:db:0a:79:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a Validity Not Before: Jun 13 03:01:19 2026 GMT Not After : Jun 14 03:01:19 2026 GMT Subject: CN=89c664ad85b322b5501458e17b6e2bdac04f8746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:33:35:f8:8a:e2:52:2e:7b:8a:73:4a:3f:64: 53:3b:33:2c:0a:7f:26:e4:30:02:f9:06:b4:98:d2: 42:73:48:c2:90:7d:f5:b7:0b:e7:54:eb:e6:e4:83: ab:9e:b1:f6:5b:3f:df:5c:a3:0d:f4:5f:ee:eb:c6: 88:2d:c6:03:e7:c8:81:19:43:ec:52:ea:d1:68:f0: bc:7a:85:04:53:0b:4b:06:b3:ce:de:2e:6f:ca:26: 13:52:5a:42:33:f7:9a:47:f3:16:41:d6:f4:7a:3a: e7:4a:1f:1b:61:d4:f4:67:69:67:42:fa:61:6e:78: 67:cd:a6:1e:5a:e3:6c:5b:bb:79:9a:8e:77:88:b9: f0:52:2d:05:07:ad:84:fc:63:59:0d:ea:68:0e:79: f8:9c:cc:90:76:0a:6b:18:75:c0:1b:ca:c3:90:9d: 46:ee:2d:5a:76:c0:49:3d:50:87:bf:66:a8:c8:2a: 48:f1:ef:02:0b:7c:97:8b:1c:c1:26:60:be:42:e7: 1f:6f:68:ba:af:f0:45:94:ec:50:85:93:89:81:ce: 74:f0:79:0f:56:c6:a0:98:db:fc:bb:45:fb:bc:7d: 10:2e:1f:fa:be:94:52:3f:25:00:10:f6:d1:6f:7a: c6:ea:04:52:ff:ee:0d:e7:50:c0:66:6f:5c:c7:34: f6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:C6:64:AD:85:B3:22:B5:50:14:58:E1:7B:6E:2B:DA:C0:4F:87:46 X509v3 Authority Key Identifier: keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:a1:8a:f2:4d:3b:0a:48:dd:dd:83:91:f9:06:d5:48:af:e6: 7f:80:b4:5f:e1:8a:c1:f1:a6:30:e0:27:84:1b:9d:fa:8b:3a: 4c:40:d6:11:88:ae:61:b9:fc:33:d1:f6:98:cb:f4:fc:59:c6: ca:90:2d:09:99:00:f3:ed:ee:c5:20:d8:6b:74:99:13:2d:dc: 9d:5f:b8:36:63:41:a8:9d:3f:19:7e:e5:69:92:08:e7:b3:11: b1:bc:c0:8b:ac:d1:ee:b9:9b:94:0c:ff:ea:5f:b1:57:e0:ca: ac:06:8a:b4:9e:60:9e:42:f7:4a:8f:69:5c:b4:a8:d3:4b:1a: d0:54:b8:c3:90:a4:c5:6e:20:25:22:c8:99:bf:57:81:63:f1: db:c8:57:86:65:b6:c4:61:6d:e5:c2:2a:2f:9b:1e:e3:a8:b6: 26:2e:d4:c3:47:6b:70:c5:a5:14:c5:33:12:1e:bf:71:aa:8b: c6:df:dd:3c:ae:db:b2:a6:4a:56:90:7d:f2:ff:6c:d7:2f:2c: 63:48:1f:67:91:3a:0f:ad:8e:fd:f9:82:7b:3d:2a:7b:f0:2a: e2:37:89:1e:cb:40:93:28:66:52:5d:dd:02:e9:4f:42:fb:aa: f9:d7:b4:ef:f4:c8:f0:1c:fb:a1:02:5c:b0:77:4c:57:30:5f: 27:c3:e1:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6+7T3KX5K32v6BgObbCnnPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZjhhYjJiYTI0ODc5ZTQ1YzQ0NTQ4NmZjZWIyMWFmNDY2 NTZkNWEwHhcNMjYwNjEzMDMwMTE5WhcNMjYwNjE0MDMwMTE5WjAzMTEwLwYDVQQD Eyg4OWM2NjRhZDg1YjMyMmI1NTAxNDU4ZTE3YjZlMmJkYWMwNGY4NzQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujM1+IriUi57inNKP2RTOzMsCn8m 5DAC+Qa0mNJCc0jCkH31twvnVOvm5IOrnrH2Wz/fXKMN9F/u68aILcYD58iBGUPs UurRaPC8eoUEUwtLBrPO3i5vyiYTUlpCM/eaR/MWQdb0ejrnSh8bYdT0Z2lnQvph bnhnzaYeWuNsW7t5mo53iLnwUi0FB62E/GNZDepoDnn4nMyQdgprGHXAG8rDkJ1G 7i1adsBJPVCHv2aoyCpI8e8CC3yXixzBJmC+Qucfb2i6r/BFlOxQhZOJgc508HkP VsagmNv8u0X7vH0QLh/6vpRSPyUAEPbRb3rG6gRS/+4N51DAZm9cxzT2fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFInGZK2FsyK1UBRY4XtuK9rAT4dGMB8GA1UdIwQY MBaAFEL4qyuiSHnkXERUhvzrIa9GZW1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYt MTc2OWZlZjZiZTk2LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYtMTc2OWZlZjZiZTk2 LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH6GK8k07 Ckjd3YOR+QbVSK/mf4C0X+GKwfGmMOAnhBud+os6TEDWEYiuYbn8M9H2mMv0/FnG ypAtCZkA8+3uxSDYa3SZEy3cnV+4NmNBqJ0/GX7laZII57MRsbzAi6zR7rmblAz/ 6l+xV+DKrAaKtJ5gnkL3So9pXLSo00sa0FS4w5CkxW4gJSLImb9XgWPx28hXhmW2 xGFt5cIqL5se46i2Ji7Uw0drcMWlFMUzEh6/caqLxt/dPK7bsqZKVpB98v9s1y8s Y0gfZ5E6D62O/fmCez0qe/Aq4jeJHstAkyhmUl3dAulPQvuq+de07/TI8Bz7oQJc sHdMVzBfJ8Ph1A== -----END CERTIFICATE-----Generated at Sat Jun 13 13:23:40 2026 by rpki-client