Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
File: QpK12ktP_q9yBklRj7qqEMXLKBE.mft (raw, json)
Hash identifier: 3FGFqFfzFUMDni5BAeedmGZNKPVElo1NpoGQFzSVKTY=
Subject key identifier: 87:66:65:3F:6E:75:6D:C4:0D:79:AB:12:39:97:B0:65:38:9C:6A:64
Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
Certificate issuer: /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Certificate serial: 019DD01A1C55D45840A52EBEE4DADD3791B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
Manifest number: 15D6
Signing time: Mon 27 Apr 2026 18:01:05 +0000
Manifest this update: Mon 27 Apr 2026 18:01:05 +0000
Manifest next update: Tue 28 Apr 2026 18:01:05 +0000
Files and hashes: 1: 1-zKeb-IeX8t9rg1jjNFl_xTAf8k.roa (hash: x/2HWodFxHIIakQ067uMyNqGJxCZUgbeCuK82JlyTVE=)
2: 2ApePr27C2Mxz5cN7WWk4U2tDDk.roa (hash: CD0cmU5ZM9bBvaZuSvXRxXdU7JshBZqKvAkjtm5OfiY=)
3: 3djyl22f-p0y1ATvkQjBV19gaTY.roa (hash: jUbyPz81HGv4KSalEDkzBpcXbqg6wngIGk3uloRyvjk=)
4: 7FJVYVN98VNVQnUXzxLPoJeoiaA.roa (hash: F4/DBsFDr9yR6nMLsl05TEcPKZ7vaecFKVkddQKtGmM=)
5: QpK12ktP_q9yBklRj7qqEMXLKBE.crl (hash: LkqodzEeYMlQW9FdHY4vfpPDYurcvQ3xkETW2EQXgxc=)
6: aLtWeupezBLiYrwMc00VinuvN_k.roa (hash: T8m+LUOBdylJKBiUGmraIgCBwgzPA5xxWmLAvriQrm0=)
7: k3EyxzEGO684lLpKgy_muF8oOKo.roa (hash: W5sM5cj+H6IIPNHWDPzvbGLEH/hSqzWhtRK9Is/t5Pg=)
8: lt0uHb3Ja0C6EHrT16AvTUA7wtE.roa (hash: RTDdcV/67H1P8/R68XrIpR/Fz3ncNmWbnwOYUbaK6Y8=)
9: n-1zO1mkbkpAK25DKPeRknT2Xwk.roa (hash: fAsIaj/DFcfGvej8sp2fgwVMTS7hWzp8nJHPmFLM/NM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:1a:1c:55:d4:58:40:a5:2e:be:e4:da:dd:37:91:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Validity
Not Before: Apr 27 18:01:05 2026 GMT
Not After : Apr 28 18:01:05 2026 GMT
Subject: CN=8766653f6e756dc40d79ab123997b065389c6a64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a0:e2:16:9a:18:2e:0f:bc:b6:1b:ca:c0:36:
ac:fd:44:73:61:fc:f6:ba:9a:7b:f3:28:05:5c:0b:
f1:ce:fe:c2:19:42:08:49:b8:23:22:b1:ad:2e:8c:
97:c9:46:dd:87:a5:9e:34:1e:98:a6:16:ab:ec:83:
ba:3d:69:c6:cf:70:5a:9d:16:2b:29:33:6e:78:e9:
7d:30:16:95:c3:af:d5:db:53:fa:e4:97:30:ac:c2:
f7:ca:bd:35:87:e3:02:3d:85:a5:73:09:27:60:7f:
7d:67:35:c2:98:0f:3d:87:fb:4c:0f:a4:1d:8e:ed:
6c:27:94:91:f0:a7:0a:ec:26:e4:ae:5e:57:63:b0:
32:1e:d9:c0:45:41:d7:47:aa:87:bf:50:e4:85:d7:
4d:34:0c:bf:97:89:c2:7d:b3:a2:89:26:10:9a:23:
b9:04:4a:e5:db:c7:13:4f:78:4a:c7:97:e0:fc:db:
64:0f:31:8d:bb:b9:35:3d:c7:c5:cb:91:a3:54:0c:
d9:35:e3:48:fd:2b:8e:b6:e4:af:85:66:3b:69:07:
5f:83:7c:8c:f5:e1:ae:f5:eb:53:00:da:8d:9b:74:
40:19:c7:56:69:cf:f8:03:51:6a:31:c3:e1:f9:9e:
7b:4e:45:0e:00:9f:0c:fe:3f:69:0c:b1:f3:6d:da:
7f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:66:65:3F:6E:75:6D:C4:0D:79:AB:12:39:97:B0:65:38:9C:6A:64
X509v3 Authority Key Identifier:
keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:65:02:a0:49:46:a9:c8:b2:8f:75:87:ff:b8:80:8d:f9:fe:
9b:cc:f9:d7:31:a2:ac:24:a0:72:cd:21:68:97:4e:0e:d6:12:
4c:96:c5:83:11:50:f9:57:cb:0d:12:06:6e:ed:16:db:3a:eb:
d5:7e:9e:41:e8:fd:45:e2:c7:c8:13:9a:59:78:a6:b8:db:81:
01:0e:a7:5a:9d:44:4a:db:10:c7:69:74:97:71:70:19:5c:45:
7a:15:d9:e1:4b:ea:21:32:7d:dc:a5:46:91:6e:53:f5:10:2b:
71:0f:4e:48:0a:dc:03:6d:47:8d:e4:8e:34:e5:0c:0c:35:b8:
c0:0b:6c:32:4a:75:d4:62:55:85:d2:80:22:d2:41:77:d3:b5:
2a:52:e7:58:54:b8:75:d3:2c:7d:1c:81:a1:68:4b:e5:54:3d:
19:3e:ef:29:a6:6b:84:1e:d4:86:ac:5b:1d:7a:a8:c4:b8:c8:
4c:f7:a5:e3:b8:23:63:a7:93:2c:65:d0:e5:6e:81:6a:25:a1:
0d:98:86:cb:2e:64:98:78:2d:e9:b1:96:6e:1c:64:c4:2b:c8:
ce:6a:46:ad:d3:24:bb:ea:84:e6:8a:55:91:cf:3a:43:04:7a:
af:6d:1f:a5:95:aa:84:65:2c:c4:7d:83:38:6c:7f:1f:81:67:
6a:c3:d9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:19:05 2026 by rpki-client