Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft
File: QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft (raw, json)
Hash identifier: u4OAsLW4tklsQWZQ8gSZKsDl41JTqDN1ea9vljLX/10=
Subject key identifier: 97:AE:D2:CC:AF:15:30:0D:11:25:AB:E1:1A:7C:8B:54:E7:38:10:04
Authority key identifier: 42:91:96:31:0A:7F:7D:D9:99:9E:C4:3E:93:8F:D9:06:98:5A:3F:87
Certificate issuer: /CN=429196310a7f7dd9999ec43e938fd906985a3f87
Certificate serial: 019CACEBBEC3CD99B5414F8ECAFC03FB0E02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft
Manifest number: 0DA4
Signing time: Mon 02 Mar 2026 05:00:56 +0000
Manifest this update: Mon 02 Mar 2026 05:00:56 +0000
Manifest next update: Tue 03 Mar 2026 05:00:56 +0000
Files and hashes: 1: 4-pw4uLEo4VnWcR86rkNPjJNRVs.roa (hash: WG5Ck6gXAP87uE0pDUMDgFNMmC5kc/oQd4zsYjgc8g8=)
2: LTTM0DzHrzWGlqkY-5zEeQSgoUo.roa (hash: 3JzQl1ZmDDQ+FM0DDHENCmm9FT3/85lOBaUMGb8N8SM=)
3: QpGWMQp_fdmZnsQ-k4_ZBphaP4c.crl (hash: Hls7jltQPSf/C0okcWl81k+VEpm8uo2owlf65ybJYC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:be:c3:cd:99:b5:41:4f:8e:ca:fc:03:fb:0e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429196310a7f7dd9999ec43e938fd906985a3f87
Validity
Not Before: Mar 2 05:00:56 2026 GMT
Not After : Mar 3 05:00:56 2026 GMT
Subject: CN=97aed2ccaf15300d1125abe11a7c8b54e7381004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b7:29:bf:8c:d4:70:43:5f:8c:4f:55:89:8f:
8b:da:28:49:6d:7a:d4:14:1c:f7:b8:24:b8:0c:86:
e6:69:d9:24:c5:bf:62:70:99:90:d7:12:20:82:42:
f5:a1:d5:92:91:90:a1:8a:aa:10:22:29:8e:1e:d6:
12:44:4e:19:e4:a9:37:e3:2b:d0:f1:50:06:55:c1:
f2:ab:af:f1:3e:ee:db:11:fd:d5:de:d2:1a:fc:a6:
18:a9:4f:dc:fd:21:1f:ff:e5:56:69:d2:16:0d:94:
60:25:c8:8f:f6:10:0c:a7:35:f1:9f:44:b2:a3:cf:
2c:2f:68:77:c9:ba:15:1a:06:d3:73:6a:87:58:e7:
eb:38:23:41:68:ca:e0:94:ee:db:10:c4:70:13:a2:
fe:54:0e:bd:33:4e:6e:4c:6f:b3:94:86:2f:08:2a:
66:1a:08:47:1e:ea:dc:b0:bc:98:eb:ee:d5:16:83:
89:bf:20:6f:9a:3b:23:7c:a9:57:84:62:0d:d2:e5:
4f:89:5a:eb:35:ea:73:2f:2a:00:e4:ca:a4:0f:cf:
94:f4:97:7e:90:0f:81:b6:29:39:5e:9e:7a:d7:2a:
e1:51:de:a8:84:3f:fe:23:15:d7:4a:31:aa:53:fe:
3f:6d:6e:b8:64:4a:7f:eb:d0:06:e5:70:f6:53:b9:
b0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:AE:D2:CC:AF:15:30:0D:11:25:AB:E1:1A:7C:8B:54:E7:38:10:04
X509v3 Authority Key Identifier:
keyid:42:91:96:31:0A:7F:7D:D9:99:9E:C4:3E:93:8F:D9:06:98:5A:3F:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:c3:cb:cf:70:f6:74:1b:ce:af:c9:c0:79:91:42:e9:b3:4e:
33:c9:c4:fd:14:63:d9:b0:71:85:94:e7:33:aa:49:b6:96:1d:
a6:91:8e:80:dc:36:2a:dc:22:a3:41:ac:30:e2:66:3b:b3:20:
a9:a9:b2:82:63:70:c3:7a:83:f1:bd:78:31:8f:4d:db:27:aa:
b8:f7:32:ca:8f:fc:c2:e2:2f:ca:dd:4d:e9:cc:84:4c:35:bc:
9d:6e:56:dd:90:2a:c6:92:f2:53:62:e1:d8:43:f5:88:78:32:
76:40:fc:06:0a:ee:1c:2e:ec:67:95:97:2c:55:9c:3f:c1:8b:
9f:6e:7e:5e:86:c4:44:ae:b9:36:b9:27:74:08:70:33:c9:08:
1b:bc:da:c2:95:32:da:2d:a2:93:6a:e0:db:4d:c7:de:ba:d8:
0c:5b:a8:84:eb:02:d7:db:15:ef:7e:da:30:b6:f5:b0:d9:7d:
a5:f9:05:31:3c:cf:51:04:eb:d9:d7:4c:63:39:44:59:dd:34:
9f:72:b5:da:7f:fc:e7:14:af:fd:13:9d:c9:2b:87:0e:21:e3:
67:cd:67:42:f2:9f:1b:f2:0e:aa:27:10:26:08:b9:5c:50:a8:
b8:aa:23:b3:9a:1b:e0:42:c6:a1:5c:64:8c:47:75:cc:80:cf:
0a:e2:7b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:13:09 2026 by rpki-client