
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
File: QpK12ktP_q9yBklRj7qqEMXLKBE.mft (raw, json)
Hash identifier: WpXP97biTOOws7iuijMF5rRU0BfsWhjQNCTbca/uLZQ=
Subject key identifier: 00:9B:45:A8:F0:F8:E4:19:45:4C:4B:76:FA:0D:F3:00:55:EB:8C:C7
Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
Certificate issuer: /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Certificate serial: 01A0D5A6D2E3AC493696A9D853617803605D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
Manifest number: 176A
Signing time: Thu 24 Sep 2026 23:01:14 +0000
Manifest this update: Thu 24 Sep 2026 23:01:14 +0000
Manifest next update: Fri 25 Sep 2026 23:01:14 +0000
Files and hashes: 1: 1-zKeb-IeX8t9rg1jjNFl_xTAf8k.roa (hash: x/2HWodFxHIIakQ067uMyNqGJxCZUgbeCuK82JlyTVE=)
2: 3djyl22f-p0y1ATvkQjBV19gaTY.roa (hash: jUbyPz81HGv4KSalEDkzBpcXbqg6wngIGk3uloRyvjk=)
3: 7FJVYVN98VNVQnUXzxLPoJeoiaA.roa (hash: F4/DBsFDr9yR6nMLsl05TEcPKZ7vaecFKVkddQKtGmM=)
4: GXWJE-8eL7U4sVeXlOtFxZ7vcr8.roa (hash: HYQsYXLOcua0ABFdCgere8a70Mi6wAtAionAH1YPaTE=)
5: QpK12ktP_q9yBklRj7qqEMXLKBE.crl (hash: 7l2sCA52gq6NGctNzqFPibCNU7XV4jtIGpcJ9jFdqXs=)
6: aLtWeupezBLiYrwMc00VinuvN_k.roa (hash: T8m+LUOBdylJKBiUGmraIgCBwgzPA5xxWmLAvriQrm0=)
7: k3EyxzEGO684lLpKgy_muF8oOKo.roa (hash: W5sM5cj+H6IIPNHWDPzvbGLEH/hSqzWhtRK9Is/t5Pg=)
8: n-1zO1mkbkpAK25DKPeRknT2Xwk.roa (hash: fAsIaj/DFcfGvej8sp2fgwVMTS7hWzp8nJHPmFLM/NM=)
9: sQplr-AwbR_8RYI_FgYOZ178ZrI.roa (hash: qt7B9tBIkTrdehiRfoggQYOaAs6JsLoSpAJd9A7A7Xg=)
10: tVRKIzEi3C5oivV0NSF6cpvQXxw.roa (hash: DCE8qPP2+ixczk2thpFiZupianuMg94BL32mNt6WYVg=)
11: woAOb4AN3cSy4oY_QAjYETncO0E.roa (hash: nKozfVGE5cnQbfzUetkE8F54sr9HFGBho4qeVuXBxKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:a6:d2:e3:ac:49:36:96:a9:d8:53:61:78:03:60:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Validity
Not Before: Sep 24 23:01:14 2026 GMT
Not After : Sep 25 23:01:14 2026 GMT
Subject: CN=009b45a8f0f8e419454c4b76fa0df30055eb8cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ae:ea:13:78:75:66:24:4a:9f:dd:ab:6a:a8:
30:74:e5:cf:7f:6d:f3:08:f8:a1:53:44:ab:b7:b6:
a0:56:79:ae:7b:22:c8:55:d0:d9:e0:08:d7:59:96:
e3:52:cc:4b:80:a5:ad:8e:d8:1e:e7:fd:e2:04:59:
12:b5:65:6f:7f:99:6e:24:bc:be:a4:a1:68:6d:74:
03:47:6c:09:36:98:1a:47:4b:ba:ea:4d:7e:0b:a9:
a6:d5:f8:f2:40:86:08:30:b3:e7:9b:bf:8e:14:61:
b5:2b:a8:80:f9:a1:e6:8e:46:65:8a:e5:5d:1a:8e:
8f:3b:72:54:4d:76:14:d9:db:a1:75:9b:42:db:e1:
45:38:12:fc:90:a5:04:36:d1:88:fc:af:66:49:9d:
f1:ea:72:e0:b5:5d:ee:5f:9b:75:18:c9:24:d6:d4:
32:91:d2:09:3d:41:32:0e:5c:af:13:de:ab:87:f9:
f7:32:d2:ed:e9:b6:36:4a:93:68:6d:12:62:90:f4:
8a:e3:9b:90:23:c7:7c:04:a0:3c:c0:45:6e:40:a0:
f1:cd:cf:9c:3e:ca:1e:97:43:e1:76:bd:67:df:ba:
d6:e4:48:d0:df:9e:56:43:11:47:9b:cd:86:ab:dc:
fe:ad:81:4f:04:7b:77:77:fb:f0:51:f3:d5:22:07:
b4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:9B:45:A8:F0:F8:E4:19:45:4C:4B:76:FA:0D:F3:00:55:EB:8C:C7
X509v3 Authority Key Identifier:
keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:d8:8e:56:06:0c:65:ba:51:58:34:6f:7a:81:28:49:04:a6:
95:ff:c9:f9:f8:73:94:81:e4:c3:37:88:3c:4a:79:5f:81:a4:
17:63:37:bc:96:d9:2d:06:71:40:b6:0b:fe:78:7c:a5:db:79:
d6:71:6a:47:93:5b:7a:86:bf:e5:6c:f9:e1:9e:4f:4b:d3:d9:
e2:13:e9:d8:74:35:ce:55:72:83:b9:1e:89:1f:83:82:80:f3:
f6:04:1a:e4:0c:fd:bf:8b:d6:f3:62:f1:1c:18:96:27:9e:fc:
50:c1:eb:eb:65:1e:2c:7a:c9:8b:72:eb:2d:9e:99:1a:7e:e8:
4b:3d:ac:41:ff:90:88:a0:eb:42:92:cc:11:9e:c2:47:1f:99:
ca:9e:df:60:77:2c:4f:3b:26:e5:94:d7:04:7f:40:71:ae:28:
d8:e1:b0:db:ac:ea:ea:70:fa:79:aa:7a:2a:1b:a6:16:cf:95:
07:a4:5e:be:4a:b2:d9:7e:9e:bf:82:30:c6:29:69:ba:f6:a9:
45:b0:a1:60:9d:ad:89:16:e0:6c:26:13:a7:ca:ff:bb:4f:c4:
e0:7f:d2:f5:d6:23:31:d9:14:7d:b3:2c:0d:6e:57:fe:c0:37:
30:b6:b1:5c:b0:72:99:ee:b2:9d:71:64:89:ad:40:6e:01:71:
61:0d:f4:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:27:18 2026 by rpki-client