Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
File: QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft (raw, json)
Hash identifier: wzyPv2d3VlkX6Nr9h9Hce7Iy9zmwa1HHu4TI6O0zWnc=
Subject key identifier: DA:C5:5A:8B:73:B1:A3:42:56:01:3F:52:B4:8D:E4:97:28:E5:01:E5
Authority key identifier: 40:03:35:0B:CC:7B:54:0F:AD:EA:95:1E:04:60:81:D8:DA:06:C1:45
Certificate issuer: /CN=4003350bcc7b540fadea951e046081d8da06c145
Certificate serial: 019D265FB85737B85D3D58F0D48695124246
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
Manifest number: 0A60
Signing time: Wed 25 Mar 2026 19:01:40 +0000
Manifest this update: Wed 25 Mar 2026 19:01:40 +0000
Manifest next update: Thu 26 Mar 2026 19:01:40 +0000
Files and hashes: 1: 4rFWGG1hCLjpdzpnntCtvivktok.roa (hash: h+b3VUlMYpjtGHgCeteMfY7E2bpp8Imly4GOvLLhOSc=)
2: QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl (hash: Zicxkg7Og5xTpc+Dx7lLsKOWVO0N/BNp2syw3/+A2Wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:b8:57:37:b8:5d:3d:58:f0:d4:86:95:12:42:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4003350bcc7b540fadea951e046081d8da06c145
Validity
Not Before: Mar 25 19:01:40 2026 GMT
Not After : Mar 26 19:01:40 2026 GMT
Subject: CN=dac55a8b73b1a34256013f52b48de49728e501e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2b:dc:8f:84:51:54:5d:89:73:53:af:a7:de:
8b:0c:d7:19:9e:71:6b:53:9c:13:df:ed:8a:2d:6d:
3e:6d:4e:74:cf:54:e6:30:b9:5e:b0:71:c7:f8:a6:
ee:52:9f:99:0c:ea:7e:71:5a:8d:8e:17:a2:7b:8a:
47:4c:2e:96:0e:09:1c:62:b9:89:81:d9:a9:59:d3:
60:03:92:51:13:40:49:62:72:01:5f:3d:a4:2b:c1:
a7:73:1a:a0:58:d3:44:28:9d:3b:14:28:a8:d0:42:
83:a0:bd:83:b1:42:32:2d:5a:33:34:93:0b:d8:01:
db:f4:70:bf:44:62:0c:3b:7f:04:a1:43:c9:24:87:
03:c5:74:37:d4:58:2e:19:92:3c:2c:e4:2c:1d:81:
32:5d:e5:5b:33:2c:4e:6d:3c:17:38:2a:41:64:80:
b6:55:25:fa:f9:66:7c:c4:c9:48:c8:18:ed:fc:99:
2c:81:a0:6b:97:6d:14:e6:c5:5d:b6:da:86:41:21:
16:2c:af:69:46:1b:b5:75:f1:4c:85:b1:87:2b:70:
d8:03:d6:ab:61:23:f3:3a:f4:cb:30:e4:69:a5:d3:
34:b8:a0:d2:20:19:31:34:aa:75:40:10:7f:61:be:
6b:25:fd:e6:b8:8a:8d:b0:0d:2b:8f:e6:07:b4:ef:
60:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C5:5A:8B:73:B1:A3:42:56:01:3F:52:B4:8D:E4:97:28:E5:01:E5
X509v3 Authority Key Identifier:
keyid:40:03:35:0B:CC:7B:54:0F:AD:EA:95:1E:04:60:81:D8:DA:06:C1:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d7:d7:97:64:19:72:8f:fa:b5:12:e7:62:8e:37:98:93:83:
b7:7f:45:fa:da:d9:ce:f0:5d:29:cc:c0:af:11:c9:61:87:1d:
e0:f5:91:a1:40:56:39:2a:95:df:77:9b:c9:27:b1:83:5b:17:
73:46:b3:d2:5a:18:eb:29:8d:22:c8:5f:c8:9d:67:f1:c3:e7:
be:31:85:ee:e1:c4:72:fb:87:e6:a9:07:d2:13:6c:29:0b:b6:
19:33:ce:17:7f:3e:30:30:00:49:68:ba:4f:b2:2b:a9:b6:9f:
73:89:71:08:0b:97:fa:d0:41:71:90:e5:cf:e0:29:d2:87:fc:
47:d3:31:4f:21:db:71:40:cd:86:99:3c:9f:54:0f:d7:41:3a:
7d:59:28:ac:b3:2b:79:2b:32:01:26:7f:80:da:40:34:1a:57:
7e:06:12:92:f3:51:a7:b7:f0:88:c5:6a:21:79:b7:3e:92:07:
9c:ad:35:2b:26:2d:bf:29:0f:b0:83:09:c1:01:b5:95:fb:c9:
89:0d:47:5e:15:0d:6d:d5:a7:8a:76:2b:80:00:4f:c6:7c:69:
1b:75:5f:6e:e3:0b:93:c0:34:8f:d2:e2:2c:26:98:ee:fc:5f:
e4:4c:79:39:8c:e8:7e:c5:78:98:4a:a2:44:84:db:da:d0:58:
b5:cd:56:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:20 2026 by rpki-client