Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
File: QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft (raw, json)
Hash identifier: ryCQYvyqfOA5AM5jcoZZHn4JNwL67yqj8bKMV+tvuIw=
Subject key identifier: 05:D1:E3:44:99:EA:2D:F0:A3:D0:96:BF:CA:8D:88:C5:FE:25:58:A0
Authority key identifier: 40:03:35:0B:CC:7B:54:0F:AD:EA:95:1E:04:60:81:D8:DA:06:C1:45
Certificate issuer: /CN=4003350bcc7b540fadea951e046081d8da06c145
Certificate serial: 019CA8D808A67536D8388BBCC9E55EC4915E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
Manifest number: 0A1F
Signing time: Sun 01 Mar 2026 10:00:56 +0000
Manifest this update: Sun 01 Mar 2026 10:00:56 +0000
Manifest next update: Mon 02 Mar 2026 10:00:56 +0000
Files and hashes: 1: 4rFWGG1hCLjpdzpnntCtvivktok.roa (hash: h+b3VUlMYpjtGHgCeteMfY7E2bpp8Imly4GOvLLhOSc=)
2: QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl (hash: Y0g6+5cbgbFtQgaiOfLXWBxe5I58kW3GpVxhvrH44o8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:d8:08:a6:75:36:d8:38:8b:bc:c9:e5:5e:c4:91:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4003350bcc7b540fadea951e046081d8da06c145
Validity
Not Before: Mar 1 10:00:56 2026 GMT
Not After : Mar 2 10:00:56 2026 GMT
Subject: CN=05d1e34499ea2df0a3d096bfca8d88c5fe2558a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e8:08:db:dd:1d:2b:8d:78:b2:36:85:ff:4d:
70:90:e3:60:25:84:2f:ea:d5:df:d2:51:52:a5:ba:
44:db:99:19:88:e0:f4:07:b2:19:73:db:36:17:65:
a6:5e:7b:2e:92:fd:99:a5:c3:74:5f:47:67:a3:e0:
62:90:69:28:f6:b6:ac:93:a0:77:18:40:82:84:d3:
28:46:f9:1c:53:c5:f1:16:19:45:32:93:1e:94:75:
05:47:5d:7f:dc:00:01:02:08:88:3e:5d:87:63:5b:
52:21:6d:0d:90:49:4f:93:0d:6c:5a:e9:88:d7:c3:
93:bf:e0:5c:ba:f4:ab:bf:4c:7f:2e:37:59:68:58:
8c:48:b7:48:49:f6:e1:47:d9:4b:4b:8d:8d:4a:f6:
79:5a:60:c6:ad:39:c5:4d:51:f4:1c:b0:7a:f4:0f:
3d:b2:74:6e:4d:4a:f0:b2:97:69:23:35:be:5c:b9:
e2:f3:f5:c2:1c:44:04:85:0b:74:6d:8d:19:fa:4b:
a8:47:06:70:dd:61:58:12:9a:d2:98:79:20:cb:04:
eb:9d:cc:b1:ba:2d:e7:22:47:49:f2:70:6d:75:ea:
4a:50:70:7e:69:0a:5a:14:9c:8a:59:24:36:a6:e1:
0f:0b:75:93:a6:09:78:fd:2f:37:79:56:1b:b2:a9:
51:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D1:E3:44:99:EA:2D:F0:A3:D0:96:BF:CA:8D:88:C5:FE:25:58:A0
X509v3 Authority Key Identifier:
keyid:40:03:35:0B:CC:7B:54:0F:AD:EA:95:1E:04:60:81:D8:DA:06:C1:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:8c:e1:f8:10:df:95:30:fc:77:93:4c:13:9a:6b:33:30:9f:
fc:3a:cd:a0:98:2e:d2:ac:9f:da:f4:a4:1e:f6:59:0e:21:d6:
1e:b8:20:8e:df:9d:4c:1c:f7:d5:09:86:54:6c:a7:c9:7e:5f:
45:31:5c:b6:14:72:53:98:ea:9a:88:13:40:11:84:ec:56:d3:
f0:02:a6:5a:2e:e8:dd:c2:e3:36:c9:05:89:8a:ec:d8:28:77:
38:6e:8a:0d:5d:b0:d1:96:00:02:9d:e0:1a:3b:4f:3e:a2:9e:
c0:14:c0:cc:01:e9:30:86:5a:85:b5:74:02:5a:d5:fd:73:5b:
85:5d:bb:f6:9d:a7:30:5f:1e:df:39:c5:47:4f:d4:0f:9b:05:
36:04:cc:52:f9:22:37:40:c7:a9:5a:7c:d9:a8:a7:61:38:c8:
78:4e:35:db:bc:5a:27:ab:15:cf:e6:99:10:c7:82:f5:d5:a1:
03:d7:66:23:a1:99:53:3b:a3:bb:ed:bf:f9:b6:10:78:d3:2d:
92:b6:ba:1c:ef:1c:4b:0b:d3:c2:30:ad:c2:40:cd:92:e7:5c:
cb:4e:3b:d1:8b:24:67:70:89:b9:d6:66:64:37:78:bd:ae:7f:
07:b9:d0:b1:2a:9a:a7:04:25:59:bd:15:e5:88:81:48:11:98:
e4:e5:12:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:22:30 2026 by rpki-client