Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
File: QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft (raw, json)
Hash identifier: P9koUKYYjHigjdW+VNvjTmk1YLMjE5r+/570zE2ZiQg=
Subject key identifier: 8E:AC:60:2B:35:52:16:4E:CF:6A:02:7B:94:D8:6E:8D:37:F5:44:55
Authority key identifier: 40:03:35:0B:CC:7B:54:0F:AD:EA:95:1E:04:60:81:D8:DA:06:C1:45
Certificate issuer: /CN=4003350bcc7b540fadea951e046081d8da06c145
Certificate serial: 01A0BF8C08D313BDF7A0DD88D4E55229AD6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
Manifest number: 0C3D
Signing time: Sun 20 Sep 2026 16:00:20 +0000
Manifest this update: Sun 20 Sep 2026 16:00:20 +0000
Manifest next update: Mon 21 Sep 2026 16:00:20 +0000
Files and hashes: 1: 4rFWGG1hCLjpdzpnntCtvivktok.roa (hash: h+b3VUlMYpjtGHgCeteMfY7E2bpp8Imly4GOvLLhOSc=)
2: QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl (hash: 9WkLd0Uq3qFpvSa2a29IwHTcF12jFNAvmGkgSAqnPe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:8c:08:d3:13:bd:f7:a0:dd:88:d4:e5:52:29:ad:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4003350bcc7b540fadea951e046081d8da06c145
Validity
Not Before: Sep 20 16:00:20 2026 GMT
Not After : Sep 21 16:00:20 2026 GMT
Subject: CN=8eac602b3552164ecf6a027b94d86e8d37f54455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c1:33:2e:d5:44:72:c3:43:71:29:f0:4b:0a:
6c:a4:bd:3a:fb:c9:7a:e4:2a:31:8a:75:4c:82:24:
42:90:aa:03:6d:d5:64:6a:aa:14:49:72:02:56:96:
be:cd:46:c7:d0:e4:09:28:93:48:2c:11:46:68:57:
3e:87:ae:ae:e6:e1:86:71:c5:75:b4:36:4e:15:76:
d9:3e:7f:0d:80:e3:79:3c:81:b8:29:34:cd:d1:af:
5d:15:7d:67:a2:3f:b3:27:8f:95:1f:4f:14:49:94:
a5:16:51:d5:58:7e:ea:fd:ca:49:ee:8a:52:e5:d7:
f3:cd:f3:07:90:0c:ba:58:66:ad:52:9a:30:16:f7:
54:f1:d9:f7:c7:e2:b3:dd:94:67:82:4a:bc:2a:4b:
24:f7:6c:a6:c8:df:66:ef:f3:73:2c:0d:c4:15:f0:
c9:27:54:cd:69:1f:66:60:bb:90:2d:f3:aa:55:1e:
7d:4f:6a:b7:61:b4:da:bf:8d:75:1f:d3:de:34:01:
8d:b6:c3:4f:e4:81:7d:0f:17:f6:75:30:ee:f1:0e:
9c:af:51:e7:51:78:df:e9:14:16:b5:65:21:8a:01:
7d:8d:ac:ba:cc:b5:4a:ac:0d:62:e6:98:8d:50:a5:
bc:34:4a:ac:f0:2c:de:e1:2a:3c:2f:d4:08:f4:40:
f5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:AC:60:2B:35:52:16:4E:CF:6A:02:7B:94:D8:6E:8D:37:F5:44:55
X509v3 Authority Key Identifier:
keyid:40:03:35:0B:CC:7B:54:0F:AD:EA:95:1E:04:60:81:D8:DA:06:C1:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:11:cd:8e:45:c0:ce:87:18:d8:cf:53:45:b4:91:58:05:46:
48:93:01:db:ec:2c:49:bb:b8:87:98:8a:f7:da:3c:47:aa:4e:
68:a7:60:09:64:2e:a3:e8:7d:e3:34:8f:fe:d9:1f:7f:25:1b:
50:3c:7a:b9:62:c0:5e:d2:77:75:55:39:5e:2d:34:5a:a2:99:
3a:82:e7:21:77:5f:38:f2:77:f3:70:21:36:25:79:10:af:63:
af:39:6d:02:14:e6:01:e1:86:f4:17:d9:7f:13:6c:7f:b1:11:
2d:31:6e:81:00:47:43:47:30:a8:a4:2b:57:53:f5:57:64:9d:
cd:fc:c9:39:16:8d:b3:15:2b:ef:50:0c:79:df:95:29:51:72:
2c:b6:97:1d:39:f7:b7:d6:0e:0c:46:ec:a7:58:56:1e:a9:ea:
23:60:e9:15:ed:fb:6f:2d:77:38:aa:03:03:69:4a:cb:fc:01:
fe:4f:77:3e:a0:d1:0f:19:d7:86:69:d2:9c:32:ec:dd:49:99:
da:b8:ad:59:fb:ad:ba:fc:5c:a8:b5:69:21:a0:22:3a:c3:11:
87:5e:db:65:3d:91:1d:3c:32:55:79:89:e7:1c:8f:80:5a:39:
5e:d1:b0:a9:a3:bb:68:da:f7:c5:4b:6f:e4:80:af:be:81:82:
8f:3a:bd:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:31:48 2026 by rpki-client