Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
File: QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft (raw, json)
Hash identifier: rMAAVlOcDMq0vBLQDiprPKfap8u5tkWpdkSKbvk9Evg=
Subject key identifier: EC:26:31:76:AE:AD:48:E5:94:EE:AB:8A:C8:8F:65:32:51:EF:9A:7F
Authority key identifier: 40:03:35:0B:CC:7B:54:0F:AD:EA:95:1E:04:60:81:D8:DA:06:C1:45
Certificate issuer: /CN=4003350bcc7b540fadea951e046081d8da06c145
Certificate serial: 019FA974AD3859AD33762A1BDC190A6DC51D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
Manifest number: 0BAD
Signing time: Tue 28 Jul 2026 16:00:23 +0000
Manifest this update: Tue 28 Jul 2026 16:00:23 +0000
Manifest next update: Wed 29 Jul 2026 16:00:23 +0000
Files and hashes: 1: 4rFWGG1hCLjpdzpnntCtvivktok.roa (hash: h+b3VUlMYpjtGHgCeteMfY7E2bpp8Imly4GOvLLhOSc=)
2: QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl (hash: tOfnpihMJHZx95tqAkP+z0KM+7VkJyLH3ipNJHEF1PY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:ad:38:59:ad:33:76:2a:1b:dc:19:0a:6d:c5:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4003350bcc7b540fadea951e046081d8da06c145
Validity
Not Before: Jul 28 16:00:23 2026 GMT
Not After : Jul 29 16:00:23 2026 GMT
Subject: CN=ec263176aead48e594eeab8ac88f653251ef9a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:be:0c:d1:2b:ef:7d:d7:b5:7a:da:1e:1d:19:
87:0e:cf:f6:01:02:43:72:a5:0b:89:aa:1e:c4:7a:
3b:d3:49:a3:08:81:2b:51:b8:28:11:00:3a:80:8a:
b5:47:a2:d0:0f:4c:8a:b6:3b:37:a1:0a:c8:c0:96:
4f:ea:a7:90:71:cf:3b:b7:e0:aa:b5:b1:49:bf:cb:
1e:2a:33:a8:92:2b:66:b8:78:df:71:7a:0b:85:76:
6d:79:47:46:b8:9f:9d:85:b8:b8:fe:84:07:48:37:
ac:54:b4:b2:66:08:84:03:74:b9:58:27:43:5c:40:
53:18:1a:b4:c2:74:a4:7d:fe:c4:39:ef:92:f0:f5:
c0:2c:40:e9:1d:2b:61:5f:8e:14:85:b6:86:9e:7c:
b5:e6:24:2b:e8:83:bf:d9:74:35:96:50:09:47:7d:
e8:82:e5:67:20:63:be:ce:c1:a1:6e:66:6a:4b:49:
7d:f4:7d:e2:b0:3f:84:ca:2e:9e:e9:cf:d5:8c:41:
6a:b8:07:ec:28:1f:cc:93:c8:ed:b7:7d:92:7a:70:
f2:3f:f8:83:41:09:0b:48:1e:bf:06:e4:97:1d:ee:
bd:34:54:df:ed:ff:f7:da:f6:d0:e2:93:7c:46:68:
0d:84:05:5a:c4:19:cf:3f:0f:c0:56:0e:fb:ba:2b:
df:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:26:31:76:AE:AD:48:E5:94:EE:AB:8A:C8:8F:65:32:51:EF:9A:7F
X509v3 Authority Key Identifier:
keyid:40:03:35:0B:CC:7B:54:0F:AD:EA:95:1E:04:60:81:D8:DA:06:C1:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:32:b2:d1:54:1b:f5:32:10:f1:6d:54:a0:d9:d5:ca:0e:d9:
de:a2:fc:e6:f1:01:22:23:ff:bc:cd:f5:e1:05:bf:5d:e2:d1:
ac:a6:36:e5:b5:ab:e7:49:11:7b:db:30:1e:58:d4:3e:7c:3e:
4d:95:f4:8a:7b:7a:69:cb:14:dc:8a:87:ea:f7:29:95:01:50:
d6:a4:97:8e:d8:b4:b7:4c:b3:f4:95:98:2d:7d:a3:97:de:04:
0c:90:3e:35:35:8c:74:9b:3f:72:4c:c3:a3:08:ee:c5:27:5b:
59:bb:65:94:c9:35:f9:1a:e3:92:0b:c1:9d:80:b5:0a:f9:fd:
df:a2:b1:31:97:13:a2:2e:8e:9f:7e:1b:07:d2:da:b3:fe:96:
ed:4c:40:00:d1:fb:9a:aa:7c:81:48:6b:bd:d5:22:76:aa:ff:
d9:84:87:94:27:54:05:2a:41:10:54:e9:36:14:5d:2a:c7:c5:
b6:74:89:b2:c1:16:97:2f:04:75:3f:02:8b:70:41:52:fa:69:
06:f1:36:b2:f5:e7:39:8a:99:e6:0d:e5:6a:11:0c:e8:72:eb:
eb:19:d2:11:ec:89:5a:cb:ed:59:8d:2a:27:1b:82:52:c9:92:
27:90:c1:e7:17:b2:3b:10:71:f9:86:80:20:48:50:dd:71:39:
fc:5e:a8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:17:40 2026 by rpki-client