Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft
File: QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft (raw, json)
Hash identifier: laZf976OvDvwfyv4ypc5a+B6VHic7/DcMceQyCxEP1k=
Subject key identifier: 37:16:3B:BD:52:CB:5D:88:9B:24:9B:CA:79:97:90:EF:40:4E:62:FD
Authority key identifier: 42:91:96:31:0A:7F:7D:D9:99:9E:C4:3E:93:8F:D9:06:98:5A:3F:87
Certificate issuer: /CN=429196310a7f7dd9999ec43e938fd906985a3f87
Certificate serial: 019E615EBB9B8254128596D521A9D4A75382
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft
Manifest number: 0E86
Signing time: Mon 25 May 2026 23:00:58 +0000
Manifest this update: Mon 25 May 2026 23:00:58 +0000
Manifest next update: Tue 26 May 2026 23:00:58 +0000
Files and hashes: 1: 4-pw4uLEo4VnWcR86rkNPjJNRVs.roa (hash: WG5Ck6gXAP87uE0pDUMDgFNMmC5kc/oQd4zsYjgc8g8=)
2: LTTM0DzHrzWGlqkY-5zEeQSgoUo.roa (hash: 3JzQl1ZmDDQ+FM0DDHENCmm9FT3/85lOBaUMGb8N8SM=)
3: QpGWMQp_fdmZnsQ-k4_ZBphaP4c.crl (hash: utRgrbdiWf26Fcj9uNk9xXvnE9T9fSvy3VLGkSb+BJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 May 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:61:5e:bb:9b:82:54:12:85:96:d5:21:a9:d4:a7:53:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429196310a7f7dd9999ec43e938fd906985a3f87
Validity
Not Before: May 25 23:00:58 2026 GMT
Not After : May 26 23:00:58 2026 GMT
Subject: CN=37163bbd52cb5d889b249bca799790ef404e62fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:03:db:56:45:ce:c6:04:d8:59:2b:21:7c:b8:
0c:fb:ea:74:65:c2:00:03:99:9f:fa:46:34:8d:76:
b6:33:3f:3c:cf:bf:a3:5b:cd:0b:45:7a:9f:cc:af:
7d:37:fa:50:14:4b:5d:cb:94:80:88:90:7e:9b:98:
16:33:50:9f:05:74:0a:ba:51:48:02:e1:2e:48:b2:
d5:06:17:c0:7b:20:55:4f:ed:bb:d4:1f:90:e4:e9:
6b:36:7b:11:de:63:93:a1:e2:7f:62:94:9d:31:d0:
e1:b7:85:26:3f:6d:38:1d:7e:bd:76:c0:09:38:0f:
ff:94:86:73:fe:f2:ac:6b:66:e6:45:96:cf:4b:b0:
a3:2f:24:4c:bb:35:3e:76:e8:55:be:3c:6b:90:ce:
ed:bb:02:c8:a0:a4:f4:f2:15:c1:c5:87:0b:4b:59:
eb:6d:51:da:2c:39:11:d6:4e:09:15:36:0f:35:d2:
16:28:eb:11:2b:77:bb:a6:25:34:b0:14:ce:9d:f6:
37:6b:d5:ed:7c:3c:cc:3b:cd:f5:14:46:79:20:69:
25:9a:72:be:cc:3a:07:7c:cf:6f:71:c8:89:1d:37:
ab:3b:fc:fb:88:2d:43:fc:f7:53:58:83:d1:bb:64:
2a:df:45:9b:a0:ec:5e:84:37:20:7f:0d:4a:6c:ba:
78:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:16:3B:BD:52:CB:5D:88:9B:24:9B:CA:79:97:90:EF:40:4E:62:FD
X509v3 Authority Key Identifier:
keyid:42:91:96:31:0A:7F:7D:D9:99:9E:C4:3E:93:8F:D9:06:98:5A:3F:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:c6:1f:10:36:cf:29:bd:77:70:b7:b1:99:dc:0b:f4:b9:1c:
d1:13:26:0d:52:7a:31:aa:62:7b:ff:32:62:5a:34:f9:54:df:
d4:24:c0:5e:6d:38:78:b5:8c:67:7e:8e:a4:d0:b7:ee:1b:cc:
30:46:64:cd:9d:dd:47:2a:d5:9e:4e:f0:c3:a7:30:78:03:89:
c0:4a:a3:fa:7c:10:d5:15:3e:b6:6d:53:47:96:3c:7c:e5:d0:
33:87:95:56:37:37:f1:20:33:76:67:3e:4a:6e:fc:1b:8f:2e:
4f:ed:04:70:49:1b:9f:20:f2:6e:60:f2:9c:50:55:c8:92:39:
5e:3d:86:4b:79:72:20:3a:aa:b7:b1:8d:c4:31:46:dd:4c:a1:
e2:51:28:5c:c2:15:96:d7:79:62:6b:b9:e8:69:08:c0:6a:75:
94:b3:b0:48:c1:74:2a:72:00:53:01:1b:c6:00:93:ad:5e:fb:
23:bd:cc:4d:74:c8:11:79:0e:e2:8a:7e:d2:da:a2:1e:34:79:
0c:31:3e:ad:2a:3e:7f:66:c0:df:d8:aa:c3:56:16:89:94:60:
54:5d:76:ab:86:b7:a9:14:56:a9:f9:a6:8f:eb:01:7b:36:a1:
c1:b1:02:46:61:7a:39:fa:da:73:a7:89:95:d2:e1:a3:7f:7e:
59:31:55:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 26 07:45:58 2026 by rpki-client