Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
File: QpK12ktP_q9yBklRj7qqEMXLKBE.mft (raw, json)
Hash identifier: Vns/x6uRKarHAO4J1duOJveSyw95QpQkbygAw6jxZxc=
Subject key identifier: BC:BD:54:2F:8B:0C:43:36:1C:73:B3:50:DC:F6:38:EC:41:E5:7D:44
Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
Certificate issuer: /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Certificate serial: 019D9A076EE3F0319B42A9264B7FE7594491
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
Manifest number: 15BA
Signing time: Fri 17 Apr 2026 06:01:11 +0000
Manifest this update: Fri 17 Apr 2026 06:01:11 +0000
Manifest next update: Sat 18 Apr 2026 06:01:11 +0000
Files and hashes: 1: 1-zKeb-IeX8t9rg1jjNFl_xTAf8k.roa (hash: x/2HWodFxHIIakQ067uMyNqGJxCZUgbeCuK82JlyTVE=)
2: 2ApePr27C2Mxz5cN7WWk4U2tDDk.roa (hash: CD0cmU5ZM9bBvaZuSvXRxXdU7JshBZqKvAkjtm5OfiY=)
3: 3djyl22f-p0y1ATvkQjBV19gaTY.roa (hash: jUbyPz81HGv4KSalEDkzBpcXbqg6wngIGk3uloRyvjk=)
4: 7FJVYVN98VNVQnUXzxLPoJeoiaA.roa (hash: F4/DBsFDr9yR6nMLsl05TEcPKZ7vaecFKVkddQKtGmM=)
5: QpK12ktP_q9yBklRj7qqEMXLKBE.crl (hash: 9h4wCUS79Hv44QO1ARCO5/ZvFXBCdywiz68steXE35U=)
6: aLtWeupezBLiYrwMc00VinuvN_k.roa (hash: T8m+LUOBdylJKBiUGmraIgCBwgzPA5xxWmLAvriQrm0=)
7: k3EyxzEGO684lLpKgy_muF8oOKo.roa (hash: W5sM5cj+H6IIPNHWDPzvbGLEH/hSqzWhtRK9Is/t5Pg=)
8: lt0uHb3Ja0C6EHrT16AvTUA7wtE.roa (hash: RTDdcV/67H1P8/R68XrIpR/Fz3ncNmWbnwOYUbaK6Y8=)
9: n-1zO1mkbkpAK25DKPeRknT2Xwk.roa (hash: fAsIaj/DFcfGvej8sp2fgwVMTS7hWzp8nJHPmFLM/NM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:6e:e3:f0:31:9b:42:a9:26:4b:7f:e7:59:44:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Validity
Not Before: Apr 17 06:01:11 2026 GMT
Not After : Apr 18 06:01:11 2026 GMT
Subject: CN=bcbd542f8b0c43361c73b350dcf638ec41e57d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:29:21:5d:8e:e0:49:45:fe:73:47:7a:0f:1d:
2e:e5:c2:35:5e:b5:81:3c:62:e9:21:14:b8:6f:6b:
eb:8a:1e:3e:93:da:1c:87:92:6a:28:5f:91:44:c3:
4d:bc:7f:9f:18:1f:8f:b8:07:fc:c3:53:05:9c:4c:
fd:c5:9f:c7:a5:ff:21:87:16:e3:c3:39:8d:ca:5f:
e5:1a:05:0b:d8:38:dd:3b:50:cc:02:a8:64:e4:63:
76:24:e3:1a:7e:fd:a6:36:38:f1:b9:3f:60:03:e6:
4f:46:64:b7:b6:fd:e8:a1:a0:03:62:ed:fb:ea:92:
09:8d:16:e8:93:25:1d:f2:3f:bc:af:5f:26:08:36:
ae:78:a3:a8:1b:8f:91:7e:9e:4a:a4:74:e4:d4:3d:
24:68:35:51:5f:fe:b1:d5:4a:44:53:1f:92:54:2f:
af:e5:9a:84:e3:a0:db:da:e1:83:a1:a9:85:d6:36:
30:0c:2a:bc:e3:72:46:c6:89:eb:36:c6:ab:42:f5:
3c:ed:95:a7:a3:8e:a1:5c:59:3f:29:ee:06:1f:18:
82:57:21:dc:21:22:a9:1a:73:b3:38:46:26:bd:b7:
66:6d:c7:7d:53:ba:b7:20:9b:af:b6:b9:63:e6:8f:
38:93:8b:a7:32:7e:98:2a:59:55:43:45:ed:42:dd:
dc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:BD:54:2F:8B:0C:43:36:1C:73:B3:50:DC:F6:38:EC:41:E5:7D:44
X509v3 Authority Key Identifier:
keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:01:25:f4:4c:8b:d7:60:1a:83:79:02:3a:ce:26:98:3f:1f:
da:d9:0b:10:72:d2:f1:33:b6:f6:f8:a2:12:b7:27:e0:87:62:
96:f5:b8:2d:cc:c5:ec:ed:2d:cc:fe:2f:89:46:3e:30:f4:9b:
38:71:95:fa:df:46:25:2e:6a:d5:98:8c:98:5f:a1:33:02:cd:
14:b8:08:4c:9e:61:fb:8c:50:cc:cf:ce:f2:19:b1:89:77:4f:
e7:df:95:82:8d:49:36:49:d9:74:6d:ac:09:58:e5:f6:2f:2f:
27:74:8e:ab:ff:5b:f6:65:61:47:05:6c:83:43:c6:d3:6c:6f:
10:3c:ad:03:38:f2:eb:1d:f8:91:82:08:e4:f1:85:42:de:67:
10:91:06:75:49:f1:fd:9c:79:a3:c3:28:3a:04:cf:2f:47:6f:
eb:25:0a:25:d9:fc:19:99:ee:3e:8e:f8:21:2d:a7:0d:04:7b:
14:32:c4:bd:04:e8:32:c9:6e:a9:2c:75:74:fe:51:45:d2:f9:
44:d1:3f:59:16:bf:6b:0f:1d:85:5e:bc:52:b7:3e:1e:53:88:
8a:68:86:cc:5c:a6:30:7f:db:7e:13:f6:7b:50:a8:01:86:2e:
ac:ea:ce:ea:7a:73:f0:e2:fe:bf:fb:e0:76:69:1a:88:77:d9:
ef:c5:12:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aB27j8DGbQqkmS3/nWUSRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyOTJiNWRhNGI0ZmZlYWY3MjA2NDk1MThmYmFhYTEwYzVj
YjI4MTEwHhcNMjYwNDE3MDYwMTExWhcNMjYwNDE4MDYwMTExWjAzMTEwLwYDVQQD
EyhiY2JkNTQyZjhiMGM0MzM2MWM3M2IzNTBkY2Y2MzhlYzQxZTU3ZDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuykhXY7gSUX+c0d6Dx0u5cI1XrWB
PGLpIRS4b2vrih4+k9och5JqKF+RRMNNvH+fGB+PuAf8w1MFnEz9xZ/Hpf8hhxbj
wzmNyl/lGgUL2DjdO1DMAqhk5GN2JOMafv2mNjjxuT9gA+ZPRmS3tv3ooaADYu37
6pIJjRbokyUd8j+8r18mCDaueKOoG4+Rfp5KpHTk1D0kaDVRX/6x1UpEUx+SVC+v
5ZqE46Db2uGDoamF1jYwDCq843JGxonrNsarQvU87ZWno46hXFk/Ke4GHxiCVyHc
ISKpGnOzOEYmvbdmbcd9U7q3IJuvtrlj5o84k4unMn6YKllVQ0XtQt3crQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLy9VC+LDEM2HHOzUNz2OOxB5X1EMB8GA1UdIwQY
MBaAFEKStdpLT/6vcgZJUY+6qhDFyygRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80NTIyZmItYzFkYS00Y2NjLWE3Yzct
YTA0M2UxYjY3Yjk0LzEvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS80NTIyZmItYzFkYS00Y2NjLWE3YzctYTA0M2UxYjY3Yjk0
LzEvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYQEl9EyL
12Aag3kCOs4mmD8f2tkLEHLS8TO29viiErcn4IdilvW4LczF7O0tzP4viUY+MPSb
OHGV+t9GJS5q1ZiMmF+hMwLNFLgITJ5h+4xQzM/O8hmxiXdP59+Vgo1JNknZdG2s
CVjl9i8vJ3SOq/9b9mVhRwVsg0PG02xvEDytAzjy6x34kYII5PGFQt5nEJEGdUnx
/Zx5o8MoOgTPL0dv6yUKJdn8GZnuPo74IS2nDQR7FDLEvQToMsluqSx1dP5RRdL5
RNE/WRa/aw8dhV68Urc+HlOIimiGzFymMH/bfhP2e1CoAYYurOrO6npz8OL+v/vg
dmkaiHfZ78USbw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:24:50 2026 by rpki-client