Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
File: qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft (raw, json)
Hash identifier: MZErPKDrGGTsgIniogEtkoJ7UWhRr7SAsuj/VRoh1Kg=
Subject key identifier: FE:A9:EB:2E:58:95:A9:2F:37:8A:C9:0C:59:ED:AA:8B:54:0B:E7:AB
Authority key identifier: A8:23:FE:6D:AD:8A:D4:FD:AE:E6:DD:69:83:C1:E5:5C:DE:84:82:A2
Certificate issuer: /CN=a823fe6dad8ad4fdaee6dd6983c1e55cde8482a2
Certificate serial: 019D2996F10CFA9DFBA10BCCDA2B74683C31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
Manifest number: 15D5
Signing time: Thu 26 Mar 2026 10:00:51 +0000
Manifest this update: Thu 26 Mar 2026 10:00:51 +0000
Manifest next update: Fri 27 Mar 2026 10:00:51 +0000
Files and hashes: 1: SbmHVzvJLZyr_oPkt5P1usWrh6Q.roa (hash: +6pflE25NuOpLZJ9n8zoa9cmzK6oT49Q5ARbBS4vrXQ=)
2: qCP-ba2K1P2u5t1pg8HlXN6EgqI.crl (hash: 6MmeJjzeg0AmPtG3eKEG6KwLur8zFtgcSZGtHVLjIWA=)
3: y1xvK7lHBhE4mJfORtJta3k7QLw.roa (hash: ifW/r0S+8T3HM1pq3eDXlZA/lxPnTJhYCS5bj7w7VBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:f1:0c:fa:9d:fb:a1:0b:cc:da:2b:74:68:3c:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a823fe6dad8ad4fdaee6dd6983c1e55cde8482a2
Validity
Not Before: Mar 26 10:00:51 2026 GMT
Not After : Mar 27 10:00:51 2026 GMT
Subject: CN=fea9eb2e5895a92f378ac90c59edaa8b540be7ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7b:90:fd:68:a8:c2:08:fb:46:22:a9:82:6b:
57:ba:10:f4:64:25:d9:b7:70:2d:22:ec:ca:ac:1b:
73:80:b7:69:c4:0f:d3:8a:b2:49:38:1c:64:80:2e:
bf:11:6e:fa:ae:59:e1:8c:81:2a:5e:e7:75:80:cd:
01:a2:9f:79:08:4d:c5:86:d8:c1:96:e6:a2:f4:7f:
96:ff:a2:23:8b:2a:8a:41:5c:73:d0:84:81:3b:04:
ac:b0:17:43:4e:2c:01:fd:58:2d:d5:87:0e:08:c1:
d1:da:e8:41:83:ad:aa:88:13:fb:3d:60:87:9b:49:
25:20:45:d9:52:e5:a9:fe:a4:0c:f3:39:bf:14:4e:
11:36:13:27:3d:57:5a:34:e6:5d:7a:56:3b:12:85:
73:10:e9:46:97:31:70:c9:b6:9a:cf:ef:ae:8e:15:
dd:e5:87:b5:4b:cd:59:45:2f:c3:85:e9:3a:3e:00:
5d:40:07:ec:ef:0e:8f:21:04:87:49:22:30:a2:f5:
06:86:c5:8c:ef:0a:95:94:db:ea:51:be:4f:fc:1b:
d3:5a:ad:b9:cb:07:fb:db:bf:18:8d:ba:70:14:79:
4a:0a:63:97:0e:6e:f0:a6:c2:fc:0d:ea:b4:66:95:
5b:6a:bc:0f:3d:e3:55:19:de:99:fd:fb:a9:5a:91:
8f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A9:EB:2E:58:95:A9:2F:37:8A:C9:0C:59:ED:AA:8B:54:0B:E7:AB
X509v3 Authority Key Identifier:
keyid:A8:23:FE:6D:AD:8A:D4:FD:AE:E6:DD:69:83:C1:E5:5C:DE:84:82:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:2f:0a:54:e7:68:25:00:87:8f:20:4d:71:17:f6:52:d8:2e:
3a:bc:4f:df:d2:26:c8:ce:71:b3:63:67:cb:20:5d:b3:18:40:
45:44:b6:f1:8f:16:aa:14:32:a8:35:37:e8:f7:b2:05:b5:fb:
20:9f:d1:0a:9d:d0:6f:c4:1c:68:89:92:27:8a:09:c0:3d:3b:
8f:32:30:c4:a4:23:9e:08:a7:19:a0:db:dc:49:f5:ee:ea:17:
97:5c:73:84:47:c1:66:ed:c2:d9:50:f6:5b:c0:2b:fd:b7:63:
88:26:b9:d1:4f:15:d9:92:05:a4:6f:bd:dd:61:ba:32:f8:b5:
4f:7a:65:fa:3c:8d:fa:d5:ac:df:2d:78:a5:87:04:f0:3e:a4:
c0:e5:07:08:37:12:b6:68:a0:8b:54:35:77:4f:11:7d:88:92:
d0:00:48:1e:b9:c1:3c:a6:3b:d2:3f:ea:ca:22:71:d3:f3:79:
0b:fa:a8:b7:0e:ed:91:1a:a6:87:9d:89:f4:7f:98:c7:fd:72:
a8:95:6a:e9:e2:f6:5d:55:d6:45:aa:45:b4:a7:a9:87:42:7e:
91:fd:7f:09:85:ab:66:f5:f1:b7:c3:bf:ce:64:08:75:f2:b0:
33:12:79:5b:07:9c:1e:6a:85:4f:5f:f3:d9:46:2a:0a:8b:5d:
6d:94:ac:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:52:18 2026 by rpki-client