Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
File: QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft (raw, json)
Hash identifier: HbH8qvzbHhWIobV7JenPq0vjnfu/zrXwqkRqqmTJRd0=
Subject key identifier: 17:15:6F:C8:9B:2D:06:E6:BA:96:05:8D:88:A4:6E:FE:68:C7:DA:77
Authority key identifier: 40:03:35:0B:CC:7B:54:0F:AD:EA:95:1E:04:60:81:D8:DA:06:C1:45
Certificate issuer: /CN=4003350bcc7b540fadea951e046081d8da06c145
Certificate serial: 01A0D2DEFAD116CD83E6C2A11AE4034F966D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
Manifest number: 0C47
Signing time: Thu 24 Sep 2026 10:03:43 +0000
Manifest this update: Thu 24 Sep 2026 10:03:43 +0000
Manifest next update: Fri 25 Sep 2026 10:03:43 +0000
Files and hashes: 1: 4rFWGG1hCLjpdzpnntCtvivktok.roa (hash: h+b3VUlMYpjtGHgCeteMfY7E2bpp8Imly4GOvLLhOSc=)
2: QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl (hash: irhiC3kheENrjVnnf4I4/dqvYWcrsT0jx930kG0EDDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:de:fa:d1:16:cd:83:e6:c2:a1:1a:e4:03:4f:96:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4003350bcc7b540fadea951e046081d8da06c145
Validity
Not Before: Sep 24 10:03:43 2026 GMT
Not After : Sep 25 10:03:43 2026 GMT
Subject: CN=17156fc89b2d06e6ba96058d88a46efe68c7da77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6b:73:7a:9d:50:5a:2e:b4:a9:73:dd:fa:3c:
9e:ea:3d:ac:8b:9a:ec:c4:46:31:80:53:0c:a1:76:
36:ea:83:ca:a3:a6:5f:16:35:84:5d:cb:66:40:97:
21:e0:2e:43:6e:2a:64:a3:f2:ce:64:d8:74:4e:c3:
e3:57:2d:68:d4:7b:47:1f:3c:18:fa:58:fe:94:0c:
33:8a:ee:e1:64:4c:95:5e:74:cc:5b:1d:a6:f3:61:
a2:0f:75:d4:28:da:02:cf:b3:8a:76:a1:5a:5d:fb:
87:d9:62:3b:37:d2:af:5b:23:9e:e1:16:42:72:0f:
59:d7:7a:0e:d5:26:b6:76:0f:e0:7b:02:f8:57:b7:
f0:af:70:11:f3:d7:5b:82:fe:7f:66:9a:de:dc:41:
fd:d0:05:6f:90:1c:13:9f:97:c1:b3:6a:2a:41:ee:
ed:83:08:da:f6:eb:58:04:a4:a8:42:25:15:a5:08:
19:fb:aa:0c:cb:94:38:31:88:5d:df:b1:ce:0d:1a:
44:49:76:41:57:ca:67:42:bd:b7:21:d4:4a:17:c1:
de:6b:25:c8:ec:2b:16:e0:35:9e:93:5d:07:8b:a6:
51:53:12:8c:81:66:20:a2:36:f0:6f:b7:bd:dc:72:
b9:19:4c:84:fa:3c:44:e2:9a:86:95:8e:a1:8d:19:
e9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:15:6F:C8:9B:2D:06:E6:BA:96:05:8D:88:A4:6E:FE:68:C7:DA:77
X509v3 Authority Key Identifier:
keyid:40:03:35:0B:CC:7B:54:0F:AD:EA:95:1E:04:60:81:D8:DA:06:C1:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:6d:a8:89:eb:3c:03:ff:6f:19:0a:fc:fb:37:2c:19:b8:db:
46:7f:1f:70:1a:5b:84:dc:2e:79:ee:48:93:2e:ab:ea:1b:8e:
ed:57:19:05:94:b2:26:fb:a8:b5:0b:42:4e:01:f7:64:6e:05:
96:4a:f9:3e:19:85:b2:19:05:55:96:ee:77:59:4f:bd:76:68:
94:32:9f:58:cd:8b:ef:98:09:77:e0:60:01:68:d8:0d:9d:e0:
38:13:ce:97:71:9a:e2:32:6c:15:ee:52:af:d2:b9:81:b8:5c:
23:c8:7c:e7:65:d9:9c:91:03:0b:3a:59:eb:b6:31:e4:52:2b:
30:29:36:55:3a:0d:95:49:c2:cd:3c:30:96:76:ee:82:33:95:
23:91:e7:0d:ef:de:4d:21:86:fc:97:2a:30:c9:77:a5:a3:ec:
7e:9c:e9:25:13:e7:a9:eb:47:45:5a:74:97:4b:3e:66:f1:8e:
56:5a:3e:cc:25:0e:7b:36:2a:68:ca:97:0e:84:66:ee:b5:43:
66:67:88:7f:46:c7:f1:d4:64:fc:15:91:de:41:98:4f:e0:22:
d1:0c:e2:94:9f:8e:23:ff:18:01:e3:16:33:ab:15:8b:54:17:
56:78:5d:53:f5:99:67:1a:22:b6:d9:fb:fb:dd:b8:ed:2d:8d:
c7:a4:f5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:15:48 2026 by rpki-client