Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft
File: QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft (raw, json)
Hash identifier: Ih0JGw94MNJCnlZrwypcOYFjyx5lc3zcr0NOPLg29yE=
Subject key identifier: 59:13:D5:04:7C:B0:C6:83:E1:25:E1:04:D1:1D:DD:C3:38:15:3E:EC
Authority key identifier: 42:91:96:31:0A:7F:7D:D9:99:9E:C4:3E:93:8F:D9:06:98:5A:3F:87
Certificate issuer: /CN=429196310a7f7dd9999ec43e938fd906985a3f87
Certificate serial: 019F946D9E6C9FEB7E970BF0F0D7EEE1B5E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft
Manifest number: 0F25
Signing time: Fri 24 Jul 2026 14:00:39 +0000
Manifest this update: Fri 24 Jul 2026 14:00:39 +0000
Manifest next update: Sat 25 Jul 2026 14:00:39 +0000
Files and hashes: 1: 4-pw4uLEo4VnWcR86rkNPjJNRVs.roa (hash: WG5Ck6gXAP87uE0pDUMDgFNMmC5kc/oQd4zsYjgc8g8=)
2: LTTM0DzHrzWGlqkY-5zEeQSgoUo.roa (hash: 3JzQl1ZmDDQ+FM0DDHENCmm9FT3/85lOBaUMGb8N8SM=)
3: QpGWMQp_fdmZnsQ-k4_ZBphaP4c.crl (hash: 1+1h/MknHzqE7MNX5EuYh9gp4dkxV3F4MpbTz1p/3pE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:9e:6c:9f:eb:7e:97:0b:f0:f0:d7:ee:e1:b5:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429196310a7f7dd9999ec43e938fd906985a3f87
Validity
Not Before: Jul 24 14:00:39 2026 GMT
Not After : Jul 25 14:00:39 2026 GMT
Subject: CN=5913d5047cb0c683e125e104d11dddc338153eec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d4:a0:f0:e1:6a:0f:fa:a7:ab:ff:a8:6a:c3:
b2:93:e5:20:5c:4c:49:7d:55:5d:09:39:97:1f:52:
9a:6d:f2:ca:60:54:8f:26:c5:6d:9f:56:66:92:87:
e6:da:c2:fa:eb:aa:f8:bf:df:16:4a:31:4d:8e:7b:
39:6d:e5:ad:dc:3c:25:01:9f:9f:3c:73:7d:77:19:
23:48:66:77:33:d4:b5:c9:3c:c8:c3:be:8c:46:2d:
f0:7d:25:e4:19:02:81:e9:18:8d:89:64:31:36:02:
0b:3e:39:ae:cb:01:05:0c:af:0e:7f:1f:00:30:67:
11:f4:85:39:fc:8c:73:23:c2:6c:62:3b:33:c7:64:
16:67:7c:7c:bc:b5:52:7a:b9:c9:4b:90:9c:ff:56:
04:0d:a4:c9:40:99:67:8a:be:92:73:63:3e:fc:61:
db:a3:33:7f:a9:13:f7:7e:b6:d9:93:9d:9a:0b:ca:
f2:a4:1b:5f:af:80:57:8e:f4:8e:89:b0:58:01:50:
ce:b7:34:3e:3d:e5:d6:d5:47:d0:c0:95:ad:54:35:
fc:92:a0:03:e6:78:ba:df:a4:f5:35:c8:f1:ba:99:
c3:8e:08:de:e0:94:21:c8:1c:86:5f:b6:1a:62:01:
ce:55:63:cf:98:f8:84:45:0e:f4:43:15:7f:35:cb:
af:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:13:D5:04:7C:B0:C6:83:E1:25:E1:04:D1:1D:DD:C3:38:15:3E:EC
X509v3 Authority Key Identifier:
keyid:42:91:96:31:0A:7F:7D:D9:99:9E:C4:3E:93:8F:D9:06:98:5A:3F:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:14:b6:ca:6a:1e:fb:d6:f4:bf:c2:b1:14:67:7c:50:da:9b:
44:a9:88:53:29:a2:db:0d:d5:8f:86:ae:1b:00:be:45:78:e6:
53:a0:b0:f4:cd:61:e0:06:e8:80:18:85:20:f0:c9:83:d8:39:
83:51:fe:93:2c:22:cb:fd:7f:34:bc:70:b4:a2:18:d8:26:27:
89:d2:c1:dc:73:8e:4e:66:04:e8:47:e7:ee:45:bb:de:a8:37:
d9:c7:97:90:4a:c2:39:21:e2:6e:82:79:46:c3:9f:a8:84:c0:
2c:29:34:45:44:57:ff:24:5f:4e:63:76:7d:9f:da:f7:92:2d:
f6:0c:ef:93:89:82:12:d4:60:9c:fd:c2:6a:cc:bd:fa:4f:ed:
b6:3d:6b:a7:2e:29:1d:79:14:91:cc:cb:68:92:91:0d:66:73:
e1:34:4c:ce:34:e2:8b:e7:0a:13:c8:b7:74:fe:f6:a1:83:8b:
41:ed:25:bb:a3:30:40:dc:51:0c:88:49:1e:a9:89:6f:3d:3d:
95:7b:7f:65:82:15:96:00:44:2e:fe:27:db:ad:73:0c:79:f7:
8b:46:51:53:25:68:57:7c:46:74:36:18:db:44:64:45:44:c1:
63:40:7d:2c:da:c1:0c:36:6c:c6:e1:1d:0c:65:38:5d:ae:e1:
59:47:6b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:14:14 2026 by rpki-client