Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
File: QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft (raw, json)
Hash identifier: uSdZj9iTetDkPWA8JkwMqEUrhNHSNuL0RKOvDd8ZHqo=
Subject key identifier: 74:26:DC:4D:40:A4:45:A3:87:EE:B9:C6:53:E0:B6:0B:2C:73:29:21
Authority key identifier: 40:03:35:0B:CC:7B:54:0F:AD:EA:95:1E:04:60:81:D8:DA:06:C1:45
Certificate issuer: /CN=4003350bcc7b540fadea951e046081d8da06c145
Certificate serial: 01A0DA970215FDDEFEF8958C31B0E9D0C0D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
Manifest number: 0C4B
Signing time: Fri 25 Sep 2026 22:02:04 +0000
Manifest this update: Fri 25 Sep 2026 22:02:04 +0000
Manifest next update: Sat 26 Sep 2026 22:02:04 +0000
Files and hashes: 1: 4rFWGG1hCLjpdzpnntCtvivktok.roa (hash: h+b3VUlMYpjtGHgCeteMfY7E2bpp8Imly4GOvLLhOSc=)
2: QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl (hash: y0w5QW7suWaHOrTbS2Z7tRKReS6C5/QJexetJfY/u/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:97:02:15:fd:de:fe:f8:95:8c:31:b0:e9:d0:c0:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4003350bcc7b540fadea951e046081d8da06c145
Validity
Not Before: Sep 25 22:02:04 2026 GMT
Not After : Sep 26 22:02:04 2026 GMT
Subject: CN=7426dc4d40a445a387eeb9c653e0b60b2c732921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:26:67:bc:df:23:ab:73:cf:d4:36:63:f2:04:
3b:fc:ec:69:e1:81:3f:4f:73:99:17:04:14:9e:d9:
d9:d3:2e:f9:dc:2e:89:16:64:d9:55:fd:10:8e:9a:
b6:92:8c:9f:a0:ba:ec:2d:5c:98:a5:17:54:3c:43:
c1:32:f9:8e:d0:aa:dd:7e:4e:26:2d:01:16:17:d8:
ad:f7:c7:df:61:c9:7d:69:88:55:9c:a1:be:96:b3:
c3:dc:c7:d9:ac:a4:eb:ba:32:7f:8f:47:c9:43:3a:
47:69:ea:c9:39:dc:01:19:e9:44:d4:0d:64:76:8b:
1b:9f:5b:6e:25:ae:70:09:12:87:27:52:dd:73:a9:
2d:90:11:55:0b:ed:8d:b5:a2:f8:dd:75:a6:b8:50:
70:34:08:fe:41:33:b9:60:3f:03:2f:1b:a8:93:cb:
b3:67:41:80:f8:15:3d:b1:ee:31:46:99:81:e9:d5:
07:81:68:ef:b4:45:84:70:d5:65:4f:65:2d:de:64:
c0:88:78:d2:d3:4e:6b:d2:1c:06:98:e1:53:f4:58:
de:48:6a:bb:68:f1:f0:1d:2e:2a:d8:6a:58:e9:0e:
48:56:da:ac:e4:90:f2:69:d3:2f:c0:ae:dd:57:af:
ca:ac:eb:ed:47:7c:7e:78:08:d1:d6:be:84:c9:0a:
6f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:26:DC:4D:40:A4:45:A3:87:EE:B9:C6:53:E0:B6:0B:2C:73:29:21
X509v3 Authority Key Identifier:
keyid:40:03:35:0B:CC:7B:54:0F:AD:EA:95:1E:04:60:81:D8:DA:06:C1:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ba:71:1b:54:9d:d3:25:3a:db:74:6d:a1:d6:81:78:09:07:
78:38:d0:ec:99:72:44:61:d7:a8:21:ef:07:88:73:df:17:0a:
51:39:56:00:26:00:4b:25:f5:ef:19:e4:4f:37:b3:48:69:e2:
9a:8a:05:31:e3:45:71:62:88:01:80:99:52:04:3f:64:ae:4b:
15:95:d3:f6:ac:5f:45:b5:22:88:0b:7f:81:76:60:d2:d2:f6:
17:31:de:4e:10:9e:69:2e:66:16:82:09:78:b3:4a:c9:cb:82:
5d:57:15:40:10:e5:67:cf:06:10:8d:05:71:be:1a:c5:dd:88:
90:f2:16:7b:c8:de:45:0d:a7:42:20:24:d8:37:2a:57:49:7f:
ca:23:15:4c:2d:90:7d:72:75:4c:93:48:dc:ba:27:0a:4c:c9:
b1:46:3a:6c:ad:ce:60:38:ea:26:c5:cf:db:a6:34:56:0b:b1:
b2:b9:9f:f6:9b:9b:72:64:ab:7f:f8:31:ab:7d:3b:76:c0:be:
a8:da:39:35:6d:38:94:1d:e5:c8:5e:c9:b9:80:89:73:d9:3d:
cd:0c:69:53:b8:8d:07:d6:26:05:24:96:a6:e6:c6:96:95:2b:
0d:07:96:f4:58:32:8f:f6:96:85:99:94:f2:cb:25:91:cb:ce:
84:2f:b6:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:09:52 2026 by rpki-client