Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
File: QpK12ktP_q9yBklRj7qqEMXLKBE.mft (raw, json)
Hash identifier: 3L4TJr6DtDFV0sRupB7HMyqCNrxC81iL8uN+ip60CUE=
Subject key identifier: 32:E1:FB:82:A8:41:94:70:7D:2F:81:EF:A0:5E:19:41:C8:B8:DA:90
Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
Certificate issuer: /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Certificate serial: 019D2816A8B50B248CE25BAA6405066569A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
Manifest number: 157F
Signing time: Thu 26 Mar 2026 03:01:06 +0000
Manifest this update: Thu 26 Mar 2026 03:01:06 +0000
Manifest next update: Fri 27 Mar 2026 03:01:06 +0000
Files and hashes: 1: 1-zKeb-IeX8t9rg1jjNFl_xTAf8k.roa (hash: x/2HWodFxHIIakQ067uMyNqGJxCZUgbeCuK82JlyTVE=)
2: 2ApePr27C2Mxz5cN7WWk4U2tDDk.roa (hash: CD0cmU5ZM9bBvaZuSvXRxXdU7JshBZqKvAkjtm5OfiY=)
3: 3djyl22f-p0y1ATvkQjBV19gaTY.roa (hash: jUbyPz81HGv4KSalEDkzBpcXbqg6wngIGk3uloRyvjk=)
4: 7FJVYVN98VNVQnUXzxLPoJeoiaA.roa (hash: F4/DBsFDr9yR6nMLsl05TEcPKZ7vaecFKVkddQKtGmM=)
5: QpK12ktP_q9yBklRj7qqEMXLKBE.crl (hash: +KlT8NlQF6/wdOr+hu+cUnZhIf7h2RyzDKl3LRdCoro=)
6: aLtWeupezBLiYrwMc00VinuvN_k.roa (hash: T8m+LUOBdylJKBiUGmraIgCBwgzPA5xxWmLAvriQrm0=)
7: k3EyxzEGO684lLpKgy_muF8oOKo.roa (hash: W5sM5cj+H6IIPNHWDPzvbGLEH/hSqzWhtRK9Is/t5Pg=)
8: lt0uHb3Ja0C6EHrT16AvTUA7wtE.roa (hash: RTDdcV/67H1P8/R68XrIpR/Fz3ncNmWbnwOYUbaK6Y8=)
9: n-1zO1mkbkpAK25DKPeRknT2Xwk.roa (hash: fAsIaj/DFcfGvej8sp2fgwVMTS7hWzp8nJHPmFLM/NM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:a8:b5:0b:24:8c:e2:5b:aa:64:05:06:65:69:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Validity
Not Before: Mar 26 03:01:06 2026 GMT
Not After : Mar 27 03:01:06 2026 GMT
Subject: CN=32e1fb82a84194707d2f81efa05e1941c8b8da90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6a:c0:a5:41:6e:84:60:67:b0:e0:a5:e8:bb:
c2:06:be:92:08:e2:64:1f:d9:72:2c:79:83:fe:6f:
a7:c7:ef:86:a2:c7:d6:d8:63:68:df:c9:80:e6:26:
06:71:e4:0d:50:96:af:07:90:66:88:49:e5:8c:b0:
6f:34:59:58:74:fc:c5:88:12:83:cd:58:8c:a8:bc:
12:24:36:db:7c:54:96:e1:59:de:68:b1:5c:f0:b3:
86:f1:a7:d7:83:37:39:60:3b:c6:c8:43:c8:b8:76:
c7:9d:96:c9:7f:24:f4:31:17:e3:91:70:79:2c:27:
40:7f:7e:0b:76:fe:47:e2:0f:78:ee:33:c7:1e:09:
06:47:62:fb:36:04:f0:7e:5b:9e:8b:a3:cf:c1:d0:
be:1b:33:3e:4e:f2:68:ed:b9:fe:62:db:8b:40:67:
22:43:77:a8:06:aa:b8:9b:13:75:8b:2e:ce:d0:18:
6f:6f:7f:fa:49:a4:aa:66:a7:52:fb:e8:8d:63:1f:
0f:75:9f:36:ed:d6:73:0a:96:50:a1:62:44:27:7f:
8f:cd:7c:3c:2d:35:d8:50:61:73:33:af:21:f3:24:
d5:14:61:cc:43:64:8d:c3:85:fd:f9:74:4e:03:4b:
f1:8a:79:5e:38:6e:55:82:5c:98:69:6f:0b:0e:61:
01:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E1:FB:82:A8:41:94:70:7D:2F:81:EF:A0:5E:19:41:C8:B8:DA:90
X509v3 Authority Key Identifier:
keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:45:7f:63:0b:63:0e:0c:86:df:c1:b2:6d:d0:df:f5:6c:df:
7f:e0:56:be:80:e0:5c:86:ef:d9:d5:af:9b:22:91:39:a5:73:
16:5a:95:71:4e:e5:1e:6d:96:39:b5:ff:1e:41:53:8b:4f:97:
9e:8c:b7:3f:7f:4d:0e:a8:ea:58:49:f6:59:e7:7e:fb:52:1e:
94:5a:cf:73:9d:9c:b1:5b:db:8e:4c:c8:1c:4e:9a:49:a5:74:
07:27:9d:40:d9:d3:13:d3:31:c8:f7:ba:3d:91:c7:67:44:a7:
4d:05:6a:17:55:1b:81:50:32:e5:13:1b:0c:40:da:1d:65:9c:
f1:61:87:8d:5f:22:89:2f:0f:74:fa:5e:86:43:79:1c:d3:e4:
70:46:c6:fd:8b:5b:e6:35:75:9c:0f:ab:31:89:34:1b:db:05:
41:1e:1e:0a:e5:f1:80:c2:42:e8:80:89:ae:c1:7b:bb:f1:c7:
67:89:89:17:1a:e9:09:80:b5:64:3c:78:97:94:dd:4f:38:03:
54:99:b1:38:a4:5c:58:16:7f:3f:f2:46:cc:42:89:5d:39:39:
55:b0:e0:90:a8:ff:65:37:db:cc:f3:68:4d:07:70:bb:ea:6c:
72:fd:05:4f:a3:e2:4d:e6:66:06:e4:f0:8c:47:de:76:07:0f:
e8:da:24:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFqi1CySM4luqZAUGZWmkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyOTJiNWRhNGI0ZmZlYWY3MjA2NDk1MThmYmFhYTEwYzVj
YjI4MTEwHhcNMjYwMzI2MDMwMTA2WhcNMjYwMzI3MDMwMTA2WjAzMTEwLwYDVQQD
EygzMmUxZmI4MmE4NDE5NDcwN2QyZjgxZWZhMDVlMTk0MWM4YjhkYTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmrApUFuhGBnsOCl6LvCBr6SCOJk
H9lyLHmD/m+nx++GosfW2GNo38mA5iYGceQNUJavB5BmiEnljLBvNFlYdPzFiBKD
zViMqLwSJDbbfFSW4VneaLFc8LOG8afXgzc5YDvGyEPIuHbHnZbJfyT0MRfjkXB5
LCdAf34Ldv5H4g947jPHHgkGR2L7NgTwfluei6PPwdC+GzM+TvJo7bn+YtuLQGci
Q3eoBqq4mxN1iy7O0Bhvb3/6SaSqZqdS++iNYx8PdZ827dZzCpZQoWJEJ3+PzXw8
LTXYUGFzM68h8yTVFGHMQ2SNw4X9+XROA0vxinleOG5VglyYaW8LDmEBdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDLh+4KoQZRwfS+B76BeGUHIuNqQMB8GA1UdIwQY
MBaAFEKStdpLT/6vcgZJUY+6qhDFyygRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80NTIyZmItYzFkYS00Y2NjLWE3Yzct
YTA0M2UxYjY3Yjk0LzEvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS80NTIyZmItYzFkYS00Y2NjLWE3YzctYTA0M2UxYjY3Yjk0
LzEvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlkV/Ywtj
DgyG38GybdDf9Wzff+BWvoDgXIbv2dWvmyKROaVzFlqVcU7lHm2WObX/HkFTi0+X
noy3P39NDqjqWEn2Wed++1IelFrPc52csVvbjkzIHE6aSaV0ByedQNnTE9MxyPe6
PZHHZ0SnTQVqF1UbgVAy5RMbDEDaHWWc8WGHjV8iiS8PdPpehkN5HNPkcEbG/Ytb
5jV1nA+rMYk0G9sFQR4eCuXxgMJC6ICJrsF7u/HHZ4mJFxrpCYC1ZDx4l5TdTzgD
VJmxOKRcWBZ/P/JGzEKJXTk5VbDgkKj/ZTfbzPNoTQdwu+pscv0FT6PiTeZmBuTw
jEfedgcP6Nok0w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:02:52 2026 by rpki-client