
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
File: Qk_v-1duQR3lEYcdweC9eiDixNc.mft (raw, json)
Hash identifier: PgFqqiR8O6dWPi+BnQuruorGd8W2kpn5FMpPuXpzRhg=
Subject key identifier: 7F:AB:8B:B3:76:2A:3A:9F:DB:39:41:E8:4C:21:F9:A9:6C:CF:CE:D6
Authority key identifier: 42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
Certificate issuer: /CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
Certificate serial: 019CA8A15A45C9B37C7B393BCA6AC41D72A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
Manifest number: 1424
Signing time: Sun 01 Mar 2026 09:01:12 +0000
Manifest this update: Sun 01 Mar 2026 09:01:12 +0000
Manifest next update: Mon 02 Mar 2026 09:01:12 +0000
Files and hashes: 1: 17Np1y-dxxhXZQRQoDGfhlgHSac.roa (hash: AmSzrL+ixbKTyqpiqkExdglo4ra/UrlgCqcfSDgSmgM=)
2: G6olI-VvDp9ALlLPdV58qA5xPYI.roa (hash: 2fsCXn2dUvoQvSbjEln1rfEBr4e643A4tQ2VNOf+74w=)
3: LF_8Nc9ZG4x2hfVpD6ng-Xw9W84.roa (hash: ZUOEzaCiK3yAvVDZRgehq5Q9Z7Hz/VbhnM2QFVFIzbg=)
4: Qk_v-1duQR3lEYcdweC9eiDixNc.crl (hash: RWeLcExJQ5l5oESPRoJ3c4tDxhyo+KO5Db5/WJkw2l0=)
5: Vx8Q4nTQTZu0HJqRpDNNFvvmG5Y.roa (hash: aOaC++2x4KyJJvhaR/qiM7sOgi46fJa7BbumrEhC7kc=)
6: bwylWe3CdnWe9jj8najvjwfcqt4.roa (hash: qtMSlaGUcmfEHPPp9StGHAcyvutX/FbfstzyO7BM1O0=)
7: jhgr_kqWn0P8kZgzQ4rStaVm9lU.roa (hash: 51PKmpvyPy1LPgxOcO2i5rd0p3mx3xfr6KylJBv2xsM=)
8: nCw-8U_e-vesUJrIZdav3xNtIF8.roa (hash: lsbhSmxHJ+rDA4NzpyD8vAFiMv8avAe680sgNxpRv1E=)
9: nUsb4McCUGoVLzb61SmYYxwkFCU.roa (hash: Kql7INdZrgxo8TWzAiXsnbs/TLgYXHD6OczED6pBuxI=)
10: zlCSnRuq7fXaqQjldkiFbWuXQxA.roa (hash: qa9yNfqriW76nUwB9t/osTdrCLM4tWgEY60WfaKBs+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:a1:5a:45:c9:b3:7c:7b:39:3b:ca:6a:c4:1d:72:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
Validity
Not Before: Mar 1 09:01:12 2026 GMT
Not After : Mar 2 09:01:12 2026 GMT
Subject: CN=7fab8bb3762a3a9fdb3941e84c21f9a96ccfced6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:38:92:c0:a4:ec:94:0d:09:cd:05:f1:9e:07:
48:83:d4:21:5b:44:e0:88:7b:11:50:6f:6b:58:36:
92:5b:4c:f9:13:70:cf:27:49:35:32:1b:99:bf:b0:
d7:5d:e2:3b:1d:51:02:a9:9a:87:90:4b:e9:ec:05:
6b:b9:f0:96:a8:d0:f3:4a:37:89:b6:3b:7f:1e:3d:
83:f7:84:f3:5b:49:21:44:aa:98:54:64:54:e5:2a:
59:1e:e5:26:f9:d8:e7:44:20:e6:cf:10:fb:f8:2d:
80:fa:b1:b2:02:2c:7e:ae:bf:27:25:71:14:b6:47:
72:e2:ec:c4:f2:ef:3b:bd:ad:14:9f:a9:1c:db:3e:
24:f1:cd:c2:92:cc:43:40:71:c0:50:dd:07:3c:e4:
58:3c:81:8d:a1:b5:7f:e7:ce:d6:81:27:af:5b:14:
86:63:d4:8f:37:46:26:72:90:bc:e8:e8:e1:64:1c:
63:2c:7e:c0:bb:50:96:e8:22:23:ed:d0:32:39:4b:
e2:27:23:94:a9:fd:1b:c7:43:b1:1c:29:03:5f:0f:
53:5e:7a:47:d4:41:bf:cc:93:ef:d8:97:79:d5:08:
8a:42:ed:5a:bd:08:cf:b1:fe:a4:3e:1b:09:d2:cd:
8a:66:cb:d3:6f:d5:a8:34:6a:a0:d7:1c:10:4a:48:
4d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:AB:8B:B3:76:2A:3A:9F:DB:39:41:E8:4C:21:F9:A9:6C:CF:CE:D6
X509v3 Authority Key Identifier:
keyid:42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:31:e5:c9:b0:6b:b8:38:16:8f:d1:af:f8:88:31:3a:1c:da:
15:a7:fd:65:2b:01:35:71:1d:5c:25:79:a3:02:6a:3e:a1:2a:
1e:5f:79:9e:ec:22:e6:59:6e:95:b9:84:5a:ee:b0:19:00:72:
a3:ab:70:fb:58:78:ec:66:f7:47:fc:5e:07:92:a0:77:d2:9f:
4b:aa:e3:2e:06:3c:70:90:17:18:83:6b:35:49:34:45:f7:b5:
a5:f4:12:08:01:77:3a:d6:38:94:80:4f:3d:94:38:85:47:e1:
b9:fd:30:1c:7e:5b:1f:ef:b7:bd:4f:22:e0:17:b2:86:ca:b0:
69:50:96:1a:c4:bb:c3:db:b2:19:d3:ec:e6:8b:cc:26:3f:13:
38:65:0d:ff:f9:2a:20:01:b5:62:17:88:72:b6:52:28:67:ee:
a4:61:9c:40:4c:35:58:f6:a7:c4:25:1c:41:5f:f4:6d:9a:5e:
16:a0:c1:f9:3c:76:42:fa:6e:05:48:de:bb:b8:48:6f:81:f8:
db:e4:14:1e:be:fd:d9:cd:cc:ce:69:8e:0f:8a:18:df:0f:c6:
d6:4f:cd:7c:ad:c0:1e:cd:de:b4:28:c8:61:7d:d9:58:fe:53:
75:2d:59:cd:34:ab:a2:66:2a:92:cf:55:cf:e6:8e:e5:17:4a:
ad:9b:24:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyooVpFybN8ezk7ymrEHXKoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyNGZlZmZiNTc2ZTQxMWRlNTExODcxZGMxZTBiZDdhMjBl
MmM0ZDcwHhcNMjYwMzAxMDkwMTEyWhcNMjYwMzAyMDkwMTEyWjAzMTEwLwYDVQQD
Eyg3ZmFiOGJiMzc2MmEzYTlmZGIzOTQxZTg0YzIxZjlhOTZjY2ZjZWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDiSwKTslA0JzQXxngdIg9QhW0Tg
iHsRUG9rWDaSW0z5E3DPJ0k1MhuZv7DXXeI7HVECqZqHkEvp7AVrufCWqNDzSjeJ
tjt/Hj2D94TzW0khRKqYVGRU5SpZHuUm+djnRCDmzxD7+C2A+rGyAix+rr8nJXEU
tkdy4uzE8u87va0Un6kc2z4k8c3CksxDQHHAUN0HPORYPIGNobV/587WgSevWxSG
Y9SPN0YmcpC86OjhZBxjLH7Au1CW6CIj7dAyOUviJyOUqf0bx0OxHCkDXw9TXnpH
1EG/zJPv2Jd51QiKQu1avQjPsf6kPhsJ0s2KZsvTb9WoNGqg1xwQSkhN5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH+ri7N2Kjqf2zlB6Ewh+alsz87WMB8GA1UdIwQY
MBaAFEJP7/tXbkEd5RGHHcHgvXog4sTXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy82MTM1MDgtMDgzMi00MWY2LWFjYjct
ODMxZjdlNmY1Y2NkLzEvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy82MTM1MDgtMDgzMi00MWY2LWFjYjctODMxZjdlNmY1Y2Nk
LzEvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAazHlybBr
uDgWj9Gv+IgxOhzaFaf9ZSsBNXEdXCV5owJqPqEqHl95nuwi5llulbmEWu6wGQBy
o6tw+1h47Gb3R/xeB5Kgd9KfS6rjLgY8cJAXGINrNUk0Rfe1pfQSCAF3OtY4lIBP
PZQ4hUfhuf0wHH5bH++3vU8i4BeyhsqwaVCWGsS7w9uyGdPs5ovMJj8TOGUN//kq
IAG1YheIcrZSKGfupGGcQEw1WPanxCUcQV/0bZpeFqDB+Tx2QvpuBUjeu7hIb4H4
2+QUHr792c3MzmmOD4oY3w/G1k/NfK3AHs3etCjIYX3ZWP5TdS1ZzTSromYqks9V
z+aO5RdKrZskmA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 16:37:44 2026 by rpki-client