Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft
File: QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft (raw, json)
Hash identifier: A27Dki1y7U/cQK0cnWKs3gIAHOTbKxCHqYYImo8jb88=
Subject key identifier: 93:16:C1:60:B7:CC:82:35:38:EC:C8:C4:F7:17:51:A8:DB:D2:D8:86
Authority key identifier: 42:91:96:31:0A:7F:7D:D9:99:9E:C4:3E:93:8F:D9:06:98:5A:3F:87
Certificate issuer: /CN=429196310a7f7dd9999ec43e938fd906985a3f87
Certificate serial: 019D37F712074C6C7C940B3625096DCAF8E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft
Manifest number: 0DEC
Signing time: Sun 29 Mar 2026 05:00:31 +0000
Manifest this update: Sun 29 Mar 2026 05:00:31 +0000
Manifest next update: Mon 30 Mar 2026 05:00:31 +0000
Files and hashes: 1: 4-pw4uLEo4VnWcR86rkNPjJNRVs.roa (hash: WG5Ck6gXAP87uE0pDUMDgFNMmC5kc/oQd4zsYjgc8g8=)
2: LTTM0DzHrzWGlqkY-5zEeQSgoUo.roa (hash: 3JzQl1ZmDDQ+FM0DDHENCmm9FT3/85lOBaUMGb8N8SM=)
3: QpGWMQp_fdmZnsQ-k4_ZBphaP4c.crl (hash: sxUQqI1u+aMEwXVMQKtihy8LPzmsootrSEpgodjbHZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:12:07:4c:6c:7c:94:0b:36:25:09:6d:ca:f8:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429196310a7f7dd9999ec43e938fd906985a3f87
Validity
Not Before: Mar 29 05:00:31 2026 GMT
Not After : Mar 30 05:00:31 2026 GMT
Subject: CN=9316c160b7cc823538ecc8c4f71751a8dbd2d886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d2:ff:c8:34:d7:e5:a3:12:ac:d1:6b:f3:73:
59:40:46:d8:14:c1:4d:1e:da:03:6f:71:3d:79:b3:
e2:80:55:c0:e0:eb:2e:c2:76:f5:b9:1e:49:51:65:
28:ea:08:b1:17:4f:f9:78:6f:3b:b4:dc:68:73:e0:
3b:9f:d2:3c:23:19:cd:04:90:05:80:17:f9:50:fa:
6b:02:c1:77:19:54:9d:2f:f0:18:a5:0a:b8:6e:80:
1d:21:bf:d3:74:76:99:1b:96:6c:91:b1:a0:74:ac:
36:0c:21:84:ff:af:5f:ba:f6:f1:36:2f:2d:ac:6a:
d2:a1:cf:90:34:3c:f4:55:ba:f5:8d:8c:4b:16:10:
b9:d9:bd:17:5b:2a:eb:86:3c:94:d9:6a:08:30:ba:
0f:aa:1c:14:03:e2:a8:1d:2e:cd:af:bc:28:b8:a0:
b4:10:33:cc:06:3c:27:3b:b0:bc:d2:9a:4e:31:53:
44:80:23:57:81:2d:9b:6c:e7:8d:27:ba:9b:b5:fd:
ed:6d:fd:f3:6d:d7:fb:61:36:ac:40:5f:5c:33:09:
9a:d9:e2:e0:92:df:6e:fe:aa:ea:a1:02:a5:6b:4d:
b5:e3:ba:1b:2a:b6:d5:52:ea:5c:01:b4:a1:bf:be:
3a:66:76:04:74:b2:1c:ba:b5:c1:67:5d:9d:b6:eb:
9c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:16:C1:60:B7:CC:82:35:38:EC:C8:C4:F7:17:51:A8:DB:D2:D8:86
X509v3 Authority Key Identifier:
keyid:42:91:96:31:0A:7F:7D:D9:99:9E:C4:3E:93:8F:D9:06:98:5A:3F:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:04:c8:4b:64:91:64:95:cb:82:90:da:a3:b5:1c:73:e8:f5:
6d:30:80:1c:8b:b1:23:77:eb:4f:ea:9a:de:08:92:4f:08:b1:
e4:49:b4:70:2f:aa:a4:69:69:d0:90:60:ca:92:74:56:c4:06:
75:fe:ef:f6:e4:4f:5f:08:db:1e:c1:f6:e9:ec:3d:08:09:a9:
62:02:aa:6c:ca:89:c0:be:ef:39:1d:79:e3:fe:2d:4d:45:08:
55:cb:92:28:ea:ba:3b:a2:38:bc:11:01:8f:ed:c0:74:1e:b3:
b9:05:cd:a7:25:cc:65:d9:11:38:c0:71:66:41:37:e9:d4:6e:
24:53:29:5b:ee:ed:30:03:46:89:ba:f6:43:12:5b:e5:d0:98:
15:37:23:f8:2e:32:b7:4b:cb:70:ca:09:60:21:ae:60:b3:d9:
9b:bb:33:f9:a6:50:d7:c1:2b:17:3c:2a:09:b5:56:c6:69:c5:
3d:32:b9:f2:71:f6:f7:71:24:65:49:8c:94:11:4a:3c:55:07:
e5:7f:89:ad:a6:8e:da:3c:a0:d6:f4:ba:20:65:ef:5f:07:4b:
3e:68:e2:99:52:ea:de:c1:36:f3:d8:9f:fa:df:d7:2d:2a:4d:
eb:2d:d6:e0:3b:7e:48:00:cd:c5:bd:d7:00:fd:4e:cf:4a:50:
31:07:2a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:54 2026 by rpki-client