
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
File: Qk_v-1duQR3lEYcdweC9eiDixNc.mft (raw, json)
Hash identifier: GyXDv2PZN2b2bpqvk6zhHpfeX0b9MGSZ70+aMc3WSn0=
Subject key identifier: C8:80:5C:40:E0:7B:2F:1B:56:19:DA:49:63:11:23:51:2F:2C:91:F1
Authority key identifier: 42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
Certificate issuer: /CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
Certificate serial: 019D9A071799D1D80A37ADD6BD3AC6CBF3B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
Manifest number: 14A1
Signing time: Fri 17 Apr 2026 06:00:49 +0000
Manifest this update: Fri 17 Apr 2026 06:00:49 +0000
Manifest next update: Sat 18 Apr 2026 06:00:49 +0000
Files and hashes: 1: 17Np1y-dxxhXZQRQoDGfhlgHSac.roa (hash: AmSzrL+ixbKTyqpiqkExdglo4ra/UrlgCqcfSDgSmgM=)
2: G6olI-VvDp9ALlLPdV58qA5xPYI.roa (hash: 2fsCXn2dUvoQvSbjEln1rfEBr4e643A4tQ2VNOf+74w=)
3: LF_8Nc9ZG4x2hfVpD6ng-Xw9W84.roa (hash: ZUOEzaCiK3yAvVDZRgehq5Q9Z7Hz/VbhnM2QFVFIzbg=)
4: Qk_v-1duQR3lEYcdweC9eiDixNc.crl (hash: r4jx+56JCAKQ9n2GR0qRXAimT1UJy8AO+5/9i9j2U+g=)
5: Vx8Q4nTQTZu0HJqRpDNNFvvmG5Y.roa (hash: aOaC++2x4KyJJvhaR/qiM7sOgi46fJa7BbumrEhC7kc=)
6: bwylWe3CdnWe9jj8najvjwfcqt4.roa (hash: qtMSlaGUcmfEHPPp9StGHAcyvutX/FbfstzyO7BM1O0=)
7: jhgr_kqWn0P8kZgzQ4rStaVm9lU.roa (hash: 51PKmpvyPy1LPgxOcO2i5rd0p3mx3xfr6KylJBv2xsM=)
8: nCw-8U_e-vesUJrIZdav3xNtIF8.roa (hash: lsbhSmxHJ+rDA4NzpyD8vAFiMv8avAe680sgNxpRv1E=)
9: nUsb4McCUGoVLzb61SmYYxwkFCU.roa (hash: Kql7INdZrgxo8TWzAiXsnbs/TLgYXHD6OczED6pBuxI=)
10: zlCSnRuq7fXaqQjldkiFbWuXQxA.roa (hash: qa9yNfqriW76nUwB9t/osTdrCLM4tWgEY60WfaKBs+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:17:99:d1:d8:0a:37:ad:d6:bd:3a:c6:cb:f3:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
Validity
Not Before: Apr 17 06:00:49 2026 GMT
Not After : Apr 18 06:00:49 2026 GMT
Subject: CN=c8805c40e07b2f1b5619da49631123512f2c91f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5b:c4:3e:1a:22:6a:80:c3:6b:8c:5a:2e:3c:
08:17:5c:74:51:a2:e1:98:da:97:e3:8f:53:04:9b:
14:0b:f8:f6:e0:65:37:c9:77:a6:79:ad:06:65:31:
56:57:97:39:db:ab:17:60:65:19:38:30:9c:e2:2e:
10:98:9e:b9:4a:ca:17:c6:e1:cf:2f:32:a4:2e:a7:
a2:ab:6a:22:74:53:6a:0f:7f:17:d9:79:04:3a:f9:
58:08:63:5e:5f:c8:dc:aa:bb:b9:92:e3:54:36:4b:
a3:d8:51:a4:23:10:f9:a8:5c:38:df:1d:85:3b:07:
4a:30:be:7f:55:bb:b9:44:17:66:44:ee:33:4d:94:
46:4e:0f:93:d8:78:7c:8c:74:2e:f4:04:0f:8f:26:
43:dc:96:15:30:fd:91:38:b5:ff:ec:d8:92:d5:9e:
ff:3c:8e:33:d7:2b:bb:03:2f:0b:69:ff:1f:74:05:
1d:64:91:a7:3b:a6:c6:11:77:93:26:58:8b:6f:e9:
2e:00:df:bb:36:6d:42:4e:9d:66:a3:cc:e0:4e:fa:
96:11:5c:04:71:23:09:13:23:b8:34:a5:85:76:f6:
0e:fe:fb:fd:e3:48:9e:47:73:3f:5e:7f:b5:ab:42:
df:dc:67:39:a1:cd:0d:16:08:6e:6d:87:1e:ac:8a:
21:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:80:5C:40:E0:7B:2F:1B:56:19:DA:49:63:11:23:51:2F:2C:91:F1
X509v3 Authority Key Identifier:
keyid:42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:12:35:dc:96:28:be:7e:fb:86:f0:2d:8b:ba:13:90:5c:c9:
f0:0e:9e:b8:b4:df:9a:71:48:82:04:08:56:3a:ba:4a:e3:23:
16:fb:aa:fe:e5:56:7f:4c:95:d8:03:cc:ab:6a:05:44:27:8f:
9a:65:e7:7c:2d:0f:01:86:a1:fa:ee:7d:e6:40:5a:b4:c1:21:
c9:8e:5f:e9:1d:12:27:5a:d2:27:c9:3c:97:9e:ee:f2:48:68:
fb:5b:36:47:ee:be:b4:d4:30:b7:85:6d:bb:d5:d2:1b:ac:3b:
c0:a0:20:96:b7:f9:47:3e:3e:d1:55:54:0d:1d:a0:a3:3c:9c:
5f:6d:f0:d8:ab:fc:a8:c4:77:33:22:a4:6f:28:61:e4:c4:a4:
b6:a8:23:9d:29:ed:b7:38:2f:e4:2f:b1:b8:9f:5b:20:99:fe:
e9:7a:20:7f:55:43:61:c6:b6:dd:60:9e:3c:e3:82:f7:dc:61:
ba:d3:60:19:95:ed:e4:bc:69:87:36:34:05:aa:33:df:6b:4a:
c8:74:2a:7f:f4:0c:32:d7:8c:ba:7b:6d:1d:2e:cf:4c:26:46:
e4:ba:f4:e8:7a:d6:3a:c5:f0:7f:19:55:8e:d6:23:92:9e:64:
8c:a5:5a:50:a9:e4:96:c5:d6:1c:a0:4b:09:fd:da:ff:e2:5d:
8e:f8:c4:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:59:59 2026 by rpki-client