Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft
File: QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft (raw, json)
Hash identifier: DQKC0otNpJT09o99+QnKthnGVxctIynPPRByXJMxoRE=
Subject key identifier: BE:19:7B:9F:B9:81:37:3C:95:B6:0E:A6:04:AD:2A:88:54:8D:9C:92
Authority key identifier: 42:91:96:31:0A:7F:7D:D9:99:9E:C4:3E:93:8F:D9:06:98:5A:3F:87
Certificate issuer: /CN=429196310a7f7dd9999ec43e938fd906985a3f87
Certificate serial: 01A12052E118404C934FAD49AD7621AFBE25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft
Manifest number: 0FF2
Signing time: Fri 09 Oct 2026 11:01:04 +0000
Manifest this update: Fri 09 Oct 2026 11:01:04 +0000
Manifest next update: Sat 10 Oct 2026 11:01:04 +0000
Files and hashes: 1: 4-pw4uLEo4VnWcR86rkNPjJNRVs.roa (hash: WG5Ck6gXAP87uE0pDUMDgFNMmC5kc/oQd4zsYjgc8g8=)
2: LTTM0DzHrzWGlqkY-5zEeQSgoUo.roa (hash: 3JzQl1ZmDDQ+FM0DDHENCmm9FT3/85lOBaUMGb8N8SM=)
3: QpGWMQp_fdmZnsQ-k4_ZBphaP4c.crl (hash: 6p6Ji4+1RYRlT2iuNYJgWku4kjzmHScnLVoXi1P9Xms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 11:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:52:e1:18:40:4c:93:4f:ad:49:ad:76:21:af:be:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429196310a7f7dd9999ec43e938fd906985a3f87
Validity
Not Before: Oct 9 11:01:04 2026 GMT
Not After : Oct 10 11:01:04 2026 GMT
Subject: CN=be197b9fb981373c95b60ea604ad2a88548d9c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7a:d5:26:5f:8f:a4:e0:78:27:65:27:e9:0b:
d1:b5:0b:84:4c:05:b0:83:d4:2d:1e:bc:f2:42:f5:
24:05:c8:b2:26:bc:99:4c:f6:d1:64:0f:55:1d:69:
d4:dd:c0:0d:35:d2:f9:54:ae:a0:9b:df:e3:79:94:
d1:da:d1:83:e4:7c:79:a0:83:dd:67:be:dd:a6:62:
3b:f1:de:b0:b3:47:14:3e:5a:6d:bb:b5:29:5c:62:
b2:c4:d4:a9:71:7d:b3:f2:04:9b:2f:fb:83:81:7d:
04:5d:7c:d5:77:5a:99:1d:8b:a2:ad:9b:19:5b:fe:
4a:cf:a0:5b:97:34:1c:83:52:4e:7b:a5:b1:19:dd:
99:85:dc:91:9a:7b:21:c8:53:0a:8d:b5:03:82:76:
ad:a9:55:19:25:40:fa:b1:5f:e4:64:dd:ce:7b:2d:
f4:e5:63:e4:86:c9:58:ea:71:46:71:ed:4e:b0:46:
04:cb:48:6c:4d:cf:c9:a2:cd:6b:3c:7a:62:4e:b3:
2b:73:3a:1a:28:97:6c:de:96:cd:16:10:fb:8c:6b:
9d:77:ab:75:d9:94:2d:75:11:9d:b8:76:56:29:5e:
51:92:65:c0:66:e8:f0:f4:51:aa:5d:45:6d:d6:13:
96:5b:a3:51:32:5a:99:be:b8:5a:8d:99:6a:23:95:
7b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:19:7B:9F:B9:81:37:3C:95:B6:0E:A6:04:AD:2A:88:54:8D:9C:92
X509v3 Authority Key Identifier:
keyid:42:91:96:31:0A:7F:7D:D9:99:9E:C4:3E:93:8F:D9:06:98:5A:3F:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:bb:08:b9:a1:ac:02:89:64:5c:56:fa:fb:f8:6e:e1:f9:96:
ed:cb:68:73:99:70:95:1e:96:73:ec:19:b7:6a:75:18:91:40:
c6:b0:8c:0e:b4:a0:ba:73:e4:2d:5e:92:26:83:9d:f4:0a:ab:
89:f4:37:8f:e0:57:7a:dc:64:95:12:87:b1:6a:1c:f7:74:ca:
c4:b1:0a:78:72:36:70:bb:e9:17:b4:54:f8:e3:ff:bf:d4:e1:
1b:b1:9b:2a:df:89:4e:ed:aa:d7:da:41:09:94:58:00:09:5c:
4f:47:6c:3c:ef:b5:f3:5a:c5:94:1c:46:af:be:6b:8d:28:fa:
35:d2:ec:72:a3:1d:c7:b8:a2:cf:09:56:ce:9f:9f:0d:33:83:
ac:e0:98:77:76:fc:48:e5:22:e1:f6:75:40:8a:b9:79:34:5d:
5b:a7:de:58:00:1f:cb:db:9d:4a:2b:fe:35:45:83:19:15:23:
fe:48:58:fe:80:dd:b7:09:13:f3:4c:1e:75:4d:89:b6:b7:d9:
8f:18:23:fb:6b:b0:29:35:6c:28:69:34:81:f3:f9:93:6c:7c:
53:12:46:88:19:14:65:9a:2b:34:53:e1:e2:1e:ad:d6:df:3b:
80:6a:8c:08:36:63:f9:b1:22:72:5a:51:08:ea:76:43:f7:df:
cc:3e:4b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 18:58:44 2026 by rpki-client