Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft
File: QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft (raw, json)
Hash identifier: tt5fY1omxaLzbA0yazfCju39jNkW//Tn34XGeWDp2n4=
Subject key identifier: 07:30:A5:1D:B4:E0:C5:C9:FB:69:88:BA:3F:9C:52:AE:54:D7:55:B3
Authority key identifier: 42:91:96:31:0A:7F:7D:D9:99:9E:C4:3E:93:8F:D9:06:98:5A:3F:87
Certificate issuer: /CN=429196310a7f7dd9999ec43e938fd906985a3f87
Certificate serial: 019D9A750F20F79D968363EEC868529ECBA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft
Manifest number: 0E1F
Signing time: Fri 17 Apr 2026 08:00:55 +0000
Manifest this update: Fri 17 Apr 2026 08:00:55 +0000
Manifest next update: Sat 18 Apr 2026 08:00:55 +0000
Files and hashes: 1: 4-pw4uLEo4VnWcR86rkNPjJNRVs.roa (hash: WG5Ck6gXAP87uE0pDUMDgFNMmC5kc/oQd4zsYjgc8g8=)
2: LTTM0DzHrzWGlqkY-5zEeQSgoUo.roa (hash: 3JzQl1ZmDDQ+FM0DDHENCmm9FT3/85lOBaUMGb8N8SM=)
3: QpGWMQp_fdmZnsQ-k4_ZBphaP4c.crl (hash: nTUYK9OpMnOhxpHWJM7Mk1e3t+lqcXGCqQlHpO9duI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:0f:20:f7:9d:96:83:63:ee:c8:68:52:9e:cb:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429196310a7f7dd9999ec43e938fd906985a3f87
Validity
Not Before: Apr 17 08:00:55 2026 GMT
Not After : Apr 18 08:00:55 2026 GMT
Subject: CN=0730a51db4e0c5c9fb6988ba3f9c52ae54d755b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:21:c6:66:2a:d0:de:ee:40:56:81:c9:73:93:
27:09:dc:2c:e6:a2:ce:71:07:89:aa:bb:a0:28:d0:
c6:81:7e:55:49:db:8d:53:08:cc:32:45:2c:7d:41:
ee:70:a2:20:9d:36:3b:9f:98:8a:fc:0f:71:51:78:
bf:9d:79:b2:16:ba:0f:7a:40:b1:bf:bf:3b:0e:d9:
e7:a1:36:9f:5f:8c:c9:52:15:ed:49:e4:57:75:0e:
af:88:78:4a:fd:df:4b:4d:e0:96:73:2b:e3:df:71:
f6:57:0b:b6:4d:eb:92:ad:fd:2a:85:a3:84:85:ad:
1d:0b:b7:16:63:0e:00:9d:14:f0:d9:6e:d6:16:58:
dd:12:42:0e:9e:eb:10:93:5c:7a:46:0f:ba:c7:0a:
7c:c5:02:32:13:89:3c:27:5a:af:c6:d5:1a:fe:61:
fb:3d:47:65:1f:1d:4b:95:61:99:dd:b0:90:8b:e1:
e6:1d:53:d8:8f:e6:33:a8:3a:b7:c8:c5:7b:16:96:
6e:b4:f8:f0:99:fc:c7:04:dd:2b:3b:e6:bc:1e:ff:
84:5d:24:24:56:a9:c4:be:74:d3:f6:85:40:3f:59:
c6:cf:32:62:a5:a8:3d:ca:fa:05:d2:b2:14:21:80:
39:d5:f4:c2:4f:82:6e:23:b4:33:ea:72:91:a5:c2:
8c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:30:A5:1D:B4:E0:C5:C9:FB:69:88:BA:3F:9C:52:AE:54:D7:55:B3
X509v3 Authority Key Identifier:
keyid:42:91:96:31:0A:7F:7D:D9:99:9E:C4:3E:93:8F:D9:06:98:5A:3F:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:88:04:ac:fc:97:45:6a:72:07:37:03:8d:20:a9:6f:1e:d1:
c8:60:03:b2:f2:83:51:fa:a4:a3:6b:3d:1f:69:f8:ac:a1:2e:
3e:ca:fb:15:51:27:e6:07:53:5a:d7:c0:62:79:2a:10:89:c0:
a3:84:7d:fc:ed:67:99:49:52:47:07:3f:d0:ee:b0:4b:4b:ed:
e9:14:a9:52:2f:64:e1:cd:d5:9e:12:d8:09:3a:41:26:fe:57:
b7:6a:43:06:a2:08:a2:63:e3:3b:ce:39:38:58:40:97:19:1f:
f9:27:43:ab:4a:d5:5d:7d:50:78:41:8e:8a:c1:35:33:ab:76:
55:91:74:48:4a:30:59:05:93:4d:38:6f:46:c1:68:de:07:c2:
3e:2b:12:98:03:d8:8a:82:93:7f:7c:f3:7f:30:51:e2:45:5e:
11:c3:7c:d1:41:e4:10:59:5b:36:04:d1:d2:40:7e:2a:d8:52:
48:d7:41:3b:7c:82:18:eb:6b:1b:82:8f:41:4f:db:b0:9f:3d:
55:44:a1:b8:7b:05:f7:59:f2:a9:48:9a:cb:05:d4:89:17:f7:
ac:35:c8:88:41:5d:51:3f:db:84:7c:ec:0d:b5:bb:f3:f1:e1:
65:e4:a3:fd:23:5b:72:18:67:57:45:7c:d3:10:92:6c:fb:bd:
06:40:7d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:00:20 2026 by rpki-client