$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft File: Qk_v-1duQR3lEYcdweC9eiDixNc.mft (raw, json) Hash identifier: /VYVNv39bSdyi25wGhdyqlwtyRiz55/PFDN+wUAuYy0= Subject key identifier: 4B:B9:22:D3:A1:C4:7C:70:CE:A4:D2:78:A6:0C:B4:1A:65:CB:D6:F6 Authority key identifier: 42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7 Certificate issuer: /CN=424feffb576e411de511871dc1e0bd7a20e2c4d7 Certificate serial: 01A0C3326B9FE46DE4E39E60B95EACE0EF09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft Manifest number: 1644 Signing time: Mon 21 Sep 2026 09:00:56 +0000 Manifest this update: Mon 21 Sep 2026 09:00:56 +0000 Manifest next update: Tue 22 Sep 2026 09:00:56 +0000 Files and hashes: 1: 17Np1y-dxxhXZQRQoDGfhlgHSac.roa (hash: AmSzrL+ixbKTyqpiqkExdglo4ra/UrlgCqcfSDgSmgM=) 2: G6olI-VvDp9ALlLPdV58qA5xPYI.roa (hash: 2fsCXn2dUvoQvSbjEln1rfEBr4e643A4tQ2VNOf+74w=) 3: LF_8Nc9ZG4x2hfVpD6ng-Xw9W84.roa (hash: ZUOEzaCiK3yAvVDZRgehq5Q9Z7Hz/VbhnM2QFVFIzbg=) 4: Qk_v-1duQR3lEYcdweC9eiDixNc.crl (hash: 9Oy2U09ihDGvK3MKbXA7Uav9u+8Fl9CmcJvSMaeJV1w=) 5: Vx8Q4nTQTZu0HJqRpDNNFvvmG5Y.roa (hash: aOaC++2x4KyJJvhaR/qiM7sOgi46fJa7BbumrEhC7kc=) 6: bwylWe3CdnWe9jj8najvjwfcqt4.roa (hash: qtMSlaGUcmfEHPPp9StGHAcyvutX/FbfstzyO7BM1O0=) 7: jhgr_kqWn0P8kZgzQ4rStaVm9lU.roa (hash: 51PKmpvyPy1LPgxOcO2i5rd0p3mx3xfr6KylJBv2xsM=) 8: nCw-8U_e-vesUJrIZdav3xNtIF8.roa (hash: lsbhSmxHJ+rDA4NzpyD8vAFiMv8avAe680sgNxpRv1E=) 9: nUsb4McCUGoVLzb61SmYYxwkFCU.roa (hash: Kql7INdZrgxo8TWzAiXsnbs/TLgYXHD6OczED6pBuxI=) 10: zlCSnRuq7fXaqQjldkiFbWuXQxA.roa (hash: qa9yNfqriW76nUwB9t/osTdrCLM4tWgEY60WfaKBs+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 09:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c3:32:6b:9f:e4:6d:e4:e3:9e:60:b9:5e:ac:e0:ef:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=424feffb576e411de511871dc1e0bd7a20e2c4d7 Validity Not Before: Sep 21 09:00:56 2026 GMT Not After : Sep 22 09:00:56 2026 GMT Subject: CN=4bb922d3a1c47c70cea4d278a60cb41a65cbd6f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:81:ee:f5:16:7b:41:22:8f:c7:51:0a:3f:52: b0:18:28:cb:81:89:b6:34:33:75:2c:58:02:25:c4: 14:73:ec:aa:2a:9f:6f:93:44:7e:69:71:44:62:2f: 5d:d2:9e:d1:f4:ba:29:cf:37:7f:56:c7:7a:16:37: 6e:1b:27:a9:c3:51:c0:55:a3:1d:2e:8d:12:61:d6: d2:2d:33:d4:69:65:e2:98:a9:bf:b6:e0:d6:c5:fa: 7d:a0:69:c8:8f:40:9e:7b:a3:c6:8b:b7:2e:1b:52: 33:59:70:69:39:28:1d:7e:a2:31:b6:2a:01:d4:f0: cb:b2:0c:f7:41:4a:3f:26:53:1d:1e:00:83:4e:f7: 3b:c3:c5:3c:4c:e2:59:88:14:ae:66:d1:d1:a5:a2: 3a:cb:d4:3b:4f:fc:6f:ea:d2:0f:af:b1:9d:45:c5: fc:ba:60:35:04:aa:1e:69:57:ca:07:8f:ad:27:62: 02:6a:f9:8b:8b:4c:20:9c:7c:4b:92:97:0a:b8:5c: c8:84:06:ab:08:5d:5a:74:3a:b8:c3:77:94:34:f5: 85:cf:97:fb:1f:e3:2f:78:06:0d:f3:c1:a5:84:e9: 49:3c:6e:b8:9d:b4:88:45:dd:68:ca:45:86:a8:7c: b5:24:8b:ec:b7:a4:ff:d9:1e:33:e4:11:b4:04:3c: 93:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:B9:22:D3:A1:C4:7C:70:CE:A4:D2:78:A6:0C:B4:1A:65:CB:D6:F6 X509v3 Authority Key Identifier: keyid:42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:b7:03:fc:ff:9f:aa:dd:be:10:f7:a2:04:75:7d:5b:e2:4c: 1c:e7:f7:7c:43:9a:28:49:61:10:11:e0:9c:4b:a0:7c:b5:bd: 1f:31:71:66:b0:39:1e:63:1b:9b:29:10:af:2b:09:b1:90:11: 51:2d:c1:3e:e3:7d:a9:ff:ba:76:56:6b:f0:4f:8f:b2:0f:68: b6:96:f4:ce:7e:64:92:66:88:87:32:8b:32:cf:ac:4a:54:bd: 1a:9a:04:49:0a:7a:9d:c1:09:1d:e0:54:6e:f3:ea:49:f5:c2: 01:20:b6:fd:5b:35:4a:d1:c4:fb:70:d3:d4:85:4e:97:24:08: 0e:7b:99:3d:fc:21:46:b2:6b:fc:27:5d:cf:af:f0:ef:38:37: 72:04:49:98:29:a5:ad:b6:66:c8:4e:cf:09:fc:1f:6b:f6:2d: cd:5b:0b:7d:20:76:49:c7:fa:c8:62:df:9b:4b:c3:99:26:70: f9:a1:2e:66:74:42:c2:e7:29:5d:31:32:90:a8:e9:6b:5a:2e: 1e:16:cc:3f:aa:49:ae:c2:1c:21:42:09:bc:c7:71:c7:51:59: 5b:ec:a4:55:4d:5b:e0:f1:53:b5:3d:15:b6:97:c0:59:6b:30: c4:6b:20:42:15:6b:c2:c9:5c:fe:35:7f:7a:a0:8d:23:3c:ec: 53:3f:a9:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDDMmuf5G3k455guV6s4O8JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyNGZlZmZiNTc2ZTQxMWRlNTExODcxZGMxZTBiZDdhMjBl MmM0ZDcwHhcNMjYwOTIxMDkwMDU2WhcNMjYwOTIyMDkwMDU2WjAzMTEwLwYDVQQD Eyg0YmI5MjJkM2ExYzQ3YzcwY2VhNGQyNzhhNjBjYjQxYTY1Y2JkNmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4Hu9RZ7QSKPx1EKP1KwGCjLgYm2 NDN1LFgCJcQUc+yqKp9vk0R+aXFEYi9d0p7R9Lopzzd/Vsd6FjduGyepw1HAVaMd Lo0SYdbSLTPUaWXimKm/tuDWxfp9oGnIj0Cee6PGi7cuG1IzWXBpOSgdfqIxtioB 1PDLsgz3QUo/JlMdHgCDTvc7w8U8TOJZiBSuZtHRpaI6y9Q7T/xv6tIPr7GdRcX8 umA1BKoeaVfKB4+tJ2ICavmLi0wgnHxLkpcKuFzIhAarCF1adDq4w3eUNPWFz5f7 H+MveAYN88GlhOlJPG64nbSIRd1oykWGqHy1JIvst6T/2R4z5BG0BDyTlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEu5ItOhxHxwzqTSeKYMtBply9b2MB8GA1UdIwQY MBaAFEJP7/tXbkEd5RGHHcHgvXog4sTXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy82MTM1MDgtMDgzMi00MWY2LWFjYjct ODMxZjdlNmY1Y2NkLzEvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy82MTM1MDgtMDgzMi00MWY2LWFjYjctODMxZjdlNmY1Y2Nk LzEvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArbcD/P+f qt2+EPeiBHV9W+JMHOf3fEOaKElhEBHgnEugfLW9HzFxZrA5HmMbmykQrysJsZAR US3BPuN9qf+6dlZr8E+Psg9otpb0zn5kkmaIhzKLMs+sSlS9GpoESQp6ncEJHeBU bvPqSfXCASC2/Vs1StHE+3DT1IVOlyQIDnuZPfwhRrJr/Cddz6/w7zg3cgRJmCml rbZmyE7PCfwfa/YtzVsLfSB2Scf6yGLfm0vDmSZw+aEuZnRCwucpXTEykKjpa1ou HhbMP6pJrsIcIUIJvMdxx1FZW+ykVU1b4PFTtT0VtpfAWWswxGsgQhVrwslc/jV/ eqCNIzzsUz+pDw== -----END CERTIFICATE-----Generated at Mon Sep 21 17:45:11 2026 by rpki-client