Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
File: QpK12ktP_q9yBklRj7qqEMXLKBE.mft (raw, json)
Hash identifier: weYgdqKVpEi5N+ooNsPeuZED3GCSHWlMctzRPB1s4CE=
Subject key identifier: 52:3B:1A:4B:3B:62:C0:EF:71:F6:1B:50:86:3D:25:A0:C5:D7:86:7B
Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
Certificate issuer: /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Certificate serial: 019CE66D5AF5C2E729B7D0BF8ABE0D2926DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
Manifest number: 155D
Signing time: Fri 13 Mar 2026 09:00:52 +0000
Manifest this update: Fri 13 Mar 2026 09:00:52 +0000
Manifest next update: Sat 14 Mar 2026 09:00:52 +0000
Files and hashes: 1: 1-zKeb-IeX8t9rg1jjNFl_xTAf8k.roa (hash: x/2HWodFxHIIakQ067uMyNqGJxCZUgbeCuK82JlyTVE=)
2: 2ApePr27C2Mxz5cN7WWk4U2tDDk.roa (hash: CD0cmU5ZM9bBvaZuSvXRxXdU7JshBZqKvAkjtm5OfiY=)
3: 3djyl22f-p0y1ATvkQjBV19gaTY.roa (hash: jUbyPz81HGv4KSalEDkzBpcXbqg6wngIGk3uloRyvjk=)
4: 7FJVYVN98VNVQnUXzxLPoJeoiaA.roa (hash: F4/DBsFDr9yR6nMLsl05TEcPKZ7vaecFKVkddQKtGmM=)
5: QpK12ktP_q9yBklRj7qqEMXLKBE.crl (hash: oBhPZaLGQ+9geA5WO1z93LYZnwNVv42i1mv0H02r9D8=)
6: aLtWeupezBLiYrwMc00VinuvN_k.roa (hash: T8m+LUOBdylJKBiUGmraIgCBwgzPA5xxWmLAvriQrm0=)
7: k3EyxzEGO684lLpKgy_muF8oOKo.roa (hash: W5sM5cj+H6IIPNHWDPzvbGLEH/hSqzWhtRK9Is/t5Pg=)
8: lt0uHb3Ja0C6EHrT16AvTUA7wtE.roa (hash: RTDdcV/67H1P8/R68XrIpR/Fz3ncNmWbnwOYUbaK6Y8=)
9: n-1zO1mkbkpAK25DKPeRknT2Xwk.roa (hash: fAsIaj/DFcfGvej8sp2fgwVMTS7hWzp8nJHPmFLM/NM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:6d:5a:f5:c2:e7:29:b7:d0:bf:8a:be:0d:29:26:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Validity
Not Before: Mar 13 09:00:52 2026 GMT
Not After : Mar 14 09:00:52 2026 GMT
Subject: CN=523b1a4b3b62c0ef71f61b50863d25a0c5d7867b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fe:3c:89:08:7e:5d:8d:dd:8b:e0:48:f1:0a:
4e:b2:3b:a7:f5:e0:2c:da:5c:ac:fc:d0:ad:46:8a:
78:7a:0d:33:a2:b4:9a:18:89:62:79:e3:98:07:2e:
43:6a:c2:c0:9a:19:07:27:d4:97:be:0f:ab:84:26:
b8:a7:68:98:89:44:88:82:3b:73:eb:87:8c:1e:f9:
4a:21:88:cf:c7:7e:99:7a:91:5d:38:40:5d:08:a1:
bd:27:0a:9a:da:90:7c:04:c5:81:d9:ce:a6:14:c1:
03:9a:7a:4d:06:91:5f:24:53:25:1c:59:e3:18:1e:
f7:d3:a8:9c:54:24:7b:2b:8a:a2:5a:9e:06:85:24:
af:3a:d7:ef:ce:de:8d:b0:f7:df:07:ec:2a:a9:42:
aa:05:7a:1f:2b:ee:f5:ef:16:f8:cb:c0:24:70:1f:
48:f3:af:b8:51:65:77:11:f0:f9:bd:d1:a2:37:fb:
f9:2b:91:4e:0a:ee:02:79:37:27:fa:b4:ff:2d:56:
47:cf:ac:cd:a4:b1:a9:c3:c8:74:3c:5b:64:ac:97:
23:26:64:67:75:8c:e1:a1:a7:24:92:0a:24:9b:a0:
e6:32:dc:f5:5b:41:41:66:e4:b1:44:d0:ef:58:3e:
31:df:72:05:57:cf:04:cd:38:e3:3b:89:99:51:9f:
6e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:3B:1A:4B:3B:62:C0:EF:71:F6:1B:50:86:3D:25:A0:C5:D7:86:7B
X509v3 Authority Key Identifier:
keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:b9:f5:5e:8d:0a:be:f5:b4:b2:37:bc:cc:07:73:45:ff:65:
37:50:94:fc:c2:14:41:ed:33:51:f6:d3:73:9c:14:80:b4:8d:
6d:f4:b6:a4:52:04:a2:fc:8d:14:38:ec:fe:07:d9:74:4d:cf:
07:75:b3:e7:66:a0:d1:c0:9d:16:a5:85:06:ad:98:8e:38:b8:
33:a7:9f:c5:02:d7:59:bb:a5:56:5c:35:ac:56:75:4f:45:0b:
57:d7:2b:94:5b:39:83:7c:61:b5:87:a3:eb:25:5a:a2:23:4f:
57:77:b8:cb:cc:54:3d:d5:f8:be:ec:ed:ee:4e:92:34:86:96:
17:6c:4e:09:8b:8d:1e:8b:7c:bc:34:6d:e1:63:0e:07:56:5f:
2a:e8:29:73:a1:55:6d:61:19:8b:7d:86:56:5b:bd:81:d2:ef:
4b:01:c3:9f:55:d7:cb:f3:d0:7c:e3:11:73:c7:c9:dc:ab:4a:
b4:13:d1:84:e2:1a:68:6e:8f:ea:5f:9f:c8:20:89:27:e0:0a:
53:a1:7b:84:60:3c:8e:f5:e9:cc:26:46:9d:ba:44:bd:db:93:
85:45:20:e2:bd:9d:35:ec:36:ee:56:d9:00:c7:ca:5e:6d:c8:
1c:49:03:54:83:33:65:c8:c8:2d:f5:78:ff:00:ef:2d:f2:14:
be:2a:c0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:46:56 2026 by rpki-client