Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
File: QpK12ktP_q9yBklRj7qqEMXLKBE.mft (raw, json)
Hash identifier: TnXiuTu3OJW2DKlvJSvMIQFX9ZluehQbxtcGoO44ypM=
Subject key identifier: DD:83:55:6C:95:4F:E1:39:25:28:42:B2:1D:9D:7C:6B:30:23:2D:40
Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
Certificate issuer: /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Certificate serial: 019CAA8F78A69EBDBF6DCEDDCA20ECC65873
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
Manifest number: 153E
Signing time: Sun 01 Mar 2026 18:00:54 +0000
Manifest this update: Sun 01 Mar 2026 18:00:54 +0000
Manifest next update: Mon 02 Mar 2026 18:00:54 +0000
Files and hashes: 1: 1-zKeb-IeX8t9rg1jjNFl_xTAf8k.roa (hash: x/2HWodFxHIIakQ067uMyNqGJxCZUgbeCuK82JlyTVE=)
2: 2ApePr27C2Mxz5cN7WWk4U2tDDk.roa (hash: CD0cmU5ZM9bBvaZuSvXRxXdU7JshBZqKvAkjtm5OfiY=)
3: 3djyl22f-p0y1ATvkQjBV19gaTY.roa (hash: jUbyPz81HGv4KSalEDkzBpcXbqg6wngIGk3uloRyvjk=)
4: 7FJVYVN98VNVQnUXzxLPoJeoiaA.roa (hash: F4/DBsFDr9yR6nMLsl05TEcPKZ7vaecFKVkddQKtGmM=)
5: QpK12ktP_q9yBklRj7qqEMXLKBE.crl (hash: F9Em39NKBn5T9RcVVPilXwYhxoGI5cHvkrNY9n9XdEg=)
6: aLtWeupezBLiYrwMc00VinuvN_k.roa (hash: T8m+LUOBdylJKBiUGmraIgCBwgzPA5xxWmLAvriQrm0=)
7: k3EyxzEGO684lLpKgy_muF8oOKo.roa (hash: W5sM5cj+H6IIPNHWDPzvbGLEH/hSqzWhtRK9Is/t5Pg=)
8: lt0uHb3Ja0C6EHrT16AvTUA7wtE.roa (hash: RTDdcV/67H1P8/R68XrIpR/Fz3ncNmWbnwOYUbaK6Y8=)
9: n-1zO1mkbkpAK25DKPeRknT2Xwk.roa (hash: fAsIaj/DFcfGvej8sp2fgwVMTS7hWzp8nJHPmFLM/NM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:78:a6:9e:bd:bf:6d:ce:dd:ca:20:ec:c6:58:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Validity
Not Before: Mar 1 18:00:54 2026 GMT
Not After : Mar 2 18:00:54 2026 GMT
Subject: CN=dd83556c954fe139252842b21d9d7c6b30232d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d5:82:5e:97:6f:1a:2e:66:b3:18:05:04:07:
f0:b0:db:96:03:d3:13:73:ba:04:dc:91:40:10:14:
ff:7c:bf:a4:30:44:61:8e:d1:17:9a:31:ea:4b:36:
43:34:5c:bf:ab:70:14:8d:94:8e:00:71:a1:74:bb:
c4:d2:8e:90:b4:15:3f:f2:e9:5c:74:45:0d:05:e2:
60:45:75:96:30:9f:41:2a:34:7b:6a:99:d6:02:a9:
5b:d3:9a:00:d2:0d:28:a1:29:7e:61:b0:37:2f:63:
96:9d:a0:db:7a:83:87:d3:47:85:26:21:a0:3e:07:
e4:c7:64:e3:57:0b:45:9e:2d:89:10:e1:04:e6:8d:
ea:1c:2c:34:8f:4b:0e:f5:bb:0a:45:d2:73:50:76:
e2:69:4b:4d:b4:27:1a:c2:88:06:79:84:37:7f:b5:
ce:8d:33:26:3b:31:7f:a9:ac:2e:96:1a:2e:ac:e3:
53:11:a4:02:2e:95:ad:1f:3b:dc:2e:12:29:04:90:
4e:37:61:9e:5e:89:94:42:bf:db:8a:b3:15:65:df:
25:2f:83:14:5c:ec:ca:e4:7e:9d:af:f3:ab:c1:02:
e1:ff:8b:53:c6:70:cb:aa:b2:7d:5b:47:f0:3d:b9:
a5:3d:ab:fd:02:12:6e:7b:3e:cb:17:bb:7b:47:7b:
be:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:83:55:6C:95:4F:E1:39:25:28:42:B2:1D:9D:7C:6B:30:23:2D:40
X509v3 Authority Key Identifier:
keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:68:45:49:65:56:1c:58:e6:15:4a:46:13:de:97:e6:03:d0:
31:5b:2c:6a:3f:5f:2b:58:13:ee:e4:11:a5:22:db:a1:79:19:
a1:c6:44:7e:9a:4b:d6:59:78:4a:ec:35:45:85:33:2f:e6:9c:
7e:84:12:2e:81:13:57:42:ca:06:ad:01:9c:42:0c:27:5d:3f:
14:19:ef:c7:37:42:bc:8a:24:0b:d4:50:4e:ca:ba:27:61:41:
b6:6f:e1:a0:d1:87:61:6f:d0:c8:fb:c6:ab:e2:ad:15:c6:e5:
0b:8f:81:5a:11:92:8d:f4:15:5d:85:ba:03:23:4b:25:2f:50:
1e:57:0b:64:a5:05:eb:3b:5f:dd:a6:56:f5:06:0a:ce:68:d3:
1a:0b:6f:20:17:9d:7a:1a:58:7d:db:d0:53:cd:9e:03:6b:f2:
a8:37:93:56:3c:c9:7d:c9:00:69:38:86:98:fb:68:ea:fb:4f:
67:21:c1:e0:87:ef:ae:fc:11:8e:40:34:6f:59:c7:4d:98:af:
6b:2e:49:32:11:fd:06:57:ab:86:9d:e6:44:98:11:ba:15:c4:
e0:3b:ab:3f:1f:e3:1e:6f:97:ae:67:08:06:9b:a4:95:1f:1e:
25:df:c8:e6:24:08:95:bd:04:40:e4:8c:0b:00:e8:c9:77:7e:
f1:c7:75:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:17:26 2026 by rpki-client