Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft
File: QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft (raw, json)
Hash identifier: EGio7uLXMTx/4c8voe/zZ/YyQEAJRmZdcYmdNVUwpYc=
Subject key identifier: 56:B7:9E:5A:E2:45:EB:10:1D:07:4D:C5:01:5D:60:1C:74:BA:18:D7
Authority key identifier: 42:91:96:31:0A:7F:7D:D9:99:9E:C4:3E:93:8F:D9:06:98:5A:3F:87
Certificate issuer: /CN=429196310a7f7dd9999ec43e938fd906985a3f87
Certificate serial: 019D28849B4FB647DCD8667B7C7E14174FB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft
Manifest number: 0DE4
Signing time: Thu 26 Mar 2026 05:01:12 +0000
Manifest this update: Thu 26 Mar 2026 05:01:12 +0000
Manifest next update: Fri 27 Mar 2026 05:01:12 +0000
Files and hashes: 1: 4-pw4uLEo4VnWcR86rkNPjJNRVs.roa (hash: WG5Ck6gXAP87uE0pDUMDgFNMmC5kc/oQd4zsYjgc8g8=)
2: LTTM0DzHrzWGlqkY-5zEeQSgoUo.roa (hash: 3JzQl1ZmDDQ+FM0DDHENCmm9FT3/85lOBaUMGb8N8SM=)
3: QpGWMQp_fdmZnsQ-k4_ZBphaP4c.crl (hash: 1cNVusn6+ygxW7qa/dOQO9jT1RyG8FJ6klqQILttE2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:9b:4f:b6:47:dc:d8:66:7b:7c:7e:14:17:4f:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429196310a7f7dd9999ec43e938fd906985a3f87
Validity
Not Before: Mar 26 05:01:12 2026 GMT
Not After : Mar 27 05:01:12 2026 GMT
Subject: CN=56b79e5ae245eb101d074dc5015d601c74ba18d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ca:69:24:0a:94:f8:e9:ef:eb:ce:4b:bf:67:
da:77:05:c1:da:0d:61:7e:f8:ed:85:38:f3:fe:5d:
b5:e9:0a:b6:36:95:4e:2c:ae:5a:d6:76:ba:f2:4e:
5c:0c:fb:44:86:5f:18:6a:e7:32:06:95:65:48:57:
69:df:84:b2:7a:8e:50:3b:63:f8:ca:24:ae:54:5a:
42:88:b4:f1:72:d8:3e:c5:f9:c1:7f:f8:fd:59:5f:
fd:91:fc:53:03:f4:cc:25:7c:61:28:17:c0:57:fe:
8a:48:30:30:a6:d4:d8:65:73:4e:72:45:c2:e9:6b:
08:72:82:25:5d:34:92:f8:d9:ae:c1:23:bd:f9:b2:
ed:be:1e:43:4d:39:d7:0d:aa:be:74:84:e5:d5:d8:
31:eb:a7:48:ba:27:41:03:c5:d1:58:6a:0c:c5:f0:
06:51:98:6a:67:ff:6d:1a:48:85:b2:19:5c:eb:b4:
8f:f7:68:84:5d:51:bb:41:c7:47:27:cf:45:fc:8a:
7e:d2:cd:14:dd:b5:7b:38:60:70:d8:f7:12:0c:ba:
85:fd:09:a1:3b:44:47:95:c9:83:41:16:7a:c1:04:
1b:d1:68:39:06:88:13:59:ba:4d:7b:95:92:9c:0d:
80:0c:70:bc:21:bd:a8:06:8f:3b:ec:3b:7b:a9:ad:
e4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B7:9E:5A:E2:45:EB:10:1D:07:4D:C5:01:5D:60:1C:74:BA:18:D7
X509v3 Authority Key Identifier:
keyid:42:91:96:31:0A:7F:7D:D9:99:9E:C4:3E:93:8F:D9:06:98:5A:3F:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:e0:62:6b:79:c7:fc:be:ab:4f:b4:26:0a:3b:4c:4e:13:5e:
c6:28:4d:e4:12:60:a7:82:1d:e5:dd:74:c7:eb:6e:84:5d:f9:
75:5d:a5:69:0a:aa:1f:a0:8d:93:61:6b:4e:c5:d1:1a:21:8d:
00:26:7c:d3:c1:b1:93:8a:d7:04:a4:9d:d4:e7:bb:98:21:25:
3b:9c:8d:c0:b1:e7:6d:c8:fe:28:73:da:44:a1:2e:6a:48:93:
68:ed:79:3a:96:0e:de:84:6d:4c:a4:01:f4:52:6b:5f:60:4b:
cb:f8:d0:37:e8:f2:99:92:95:7f:c5:c9:13:d0:7c:b1:07:48:
3a:84:29:1c:67:6d:16:cd:1b:bb:f9:e2:8e:7b:6b:74:57:5b:
b2:98:90:3a:c3:2a:e4:67:80:7d:ce:37:ee:3c:83:07:99:86:
9c:fb:ab:11:0c:47:d4:59:d2:ab:8c:82:7a:26:da:84:54:e0:
ad:79:6a:da:46:ab:cd:dd:90:a9:9d:f0:53:be:35:b6:44:81:
f4:95:1e:f7:c3:9b:79:49:73:ab:3d:df:21:e5:9a:b7:e3:29:
c2:e9:08:66:80:ce:32:b2:b0:03:2a:1d:4b:df:7f:da:7f:0c:
0d:8d:04:fc:f4:e4:62:33:26:75:26:51:e2:9c:f5:a7:d0:6b:
07:5b:2e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:39:46 2026 by rpki-client