Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
File: QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft (raw, json)
Hash identifier: rH96+YPXbbLY2By+rkAjhbwfBalTlVkC/YguIpCLo+0=
Subject key identifier: 97:5D:29:E4:75:83:FC:8C:10:D3:BE:B4:A0:10:E5:E4:A6:FC:15:0E
Authority key identifier: 40:03:35:0B:CC:7B:54:0F:AD:EA:95:1E:04:60:81:D8:DA:06:C1:45
Certificate issuer: /CN=4003350bcc7b540fadea951e046081d8da06c145
Certificate serial: 019EBFC8F17D3979D120D53F83309058E302
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
Manifest number: 0B34
Signing time: Sat 13 Jun 2026 07:01:17 +0000
Manifest this update: Sat 13 Jun 2026 07:01:17 +0000
Manifest next update: Sun 14 Jun 2026 07:01:17 +0000
Files and hashes: 1: 4rFWGG1hCLjpdzpnntCtvivktok.roa (hash: h+b3VUlMYpjtGHgCeteMfY7E2bpp8Imly4GOvLLhOSc=)
2: QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl (hash: WMFr1Fb3BffinIcLEfJ3oWFHFCmwA6gAyauhCsf7WTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:f1:7d:39:79:d1:20:d5:3f:83:30:90:58:e3:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4003350bcc7b540fadea951e046081d8da06c145
Validity
Not Before: Jun 13 07:01:17 2026 GMT
Not After : Jun 14 07:01:17 2026 GMT
Subject: CN=975d29e47583fc8c10d3beb4a010e5e4a6fc150e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a1:03:7d:ba:98:7e:4b:35:6f:2e:d7:ef:00:
83:17:e4:e6:d8:06:bc:c0:cd:ab:7b:5c:a8:74:13:
67:f3:83:f0:99:8e:7a:2a:bf:41:10:8d:27:40:be:
9c:a8:71:f3:bb:16:cf:c3:43:4d:6c:c4:4d:25:7c:
c4:14:00:a2:2a:1b:54:a6:e3:d0:95:07:91:bf:5c:
34:ca:7d:d2:8f:e5:80:43:3d:b5:7b:25:ae:cc:6a:
e5:d2:ad:19:69:98:82:e6:7a:6b:79:9d:a9:f4:6e:
ec:df:63:b2:40:03:bd:56:54:7a:3c:dd:3b:b3:f2:
05:61:85:fe:de:4f:81:91:f7:55:d0:0f:27:35:f1:
e2:54:84:98:dc:ab:30:ce:40:1b:58:72:43:92:86:
06:7e:64:8d:09:ba:6a:17:86:c4:ba:02:c2:c9:28:
91:3a:d0:7b:20:2f:75:3b:53:28:a3:30:79:00:3e:
90:cc:cf:92:a5:e5:42:18:1a:e7:2c:d0:0e:8f:fc:
3e:bc:e1:1e:ad:1b:d7:41:75:e4:02:9e:80:54:26:
bf:a3:bf:c0:a1:fb:0c:cd:d4:94:3a:d2:d8:93:74:
05:03:7e:02:a4:6c:3f:36:82:a1:0e:11:45:1f:51:
31:b0:a8:d7:13:6f:61:e1:83:e3:0a:ea:9d:36:b2:
c4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:5D:29:E4:75:83:FC:8C:10:D3:BE:B4:A0:10:E5:E4:A6:FC:15:0E
X509v3 Authority Key Identifier:
keyid:40:03:35:0B:CC:7B:54:0F:AD:EA:95:1E:04:60:81:D8:DA:06:C1:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:78:d8:42:2a:7c:1a:43:40:ec:c0:11:e8:0a:b3:00:93:e7:
7e:82:d9:bc:55:05:5b:28:f1:77:a1:00:d1:5e:70:12:01:f1:
e2:ec:4e:eb:5a:82:a8:8d:33:42:38:91:1a:24:9e:fb:15:70:
0c:01:53:e2:bb:47:41:61:65:ed:7f:25:9b:58:f8:ef:67:21:
41:d4:e1:9b:bb:5d:01:84:e4:b6:44:1b:94:9f:b0:e2:c2:3d:
11:01:b9:a3:a4:9e:b9:c3:3f:16:c9:75:84:85:e2:9e:2d:a2:
5e:fd:89:71:a7:85:53:5a:a0:5e:84:8f:37:fb:19:5c:19:d0:
73:79:56:7e:82:71:1e:37:d2:e7:0c:b9:c3:07:2b:72:e2:7e:
5a:e1:c9:0e:d6:27:21:3a:a0:4a:0c:e5:56:8c:fd:e3:52:52:
dc:35:57:6e:f6:80:ab:d1:bc:3a:a3:76:b4:20:c5:b5:91:c1:
ec:cd:b5:7e:93:4b:e7:f9:d0:15:3d:d7:8e:2d:1b:77:92:ae:
7e:00:98:b8:c9:bc:3b:0d:7e:12:8e:ed:7c:80:3b:66:0a:21:
a8:a2:94:d7:c3:7c:7b:65:9f:d3:6b:15:f0:6b:42:58:e2:0d:
e0:ca:03:34:4c:c3:16:7b:68:11:62:93:0f:17:7e:6d:56:22:
48:96:71:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/yPF9OXnRINU/gzCQWOMCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwMDMzNTBiY2M3YjU0MGZhZGVhOTUxZTA0NjA4MWQ4ZGEw
NmMxNDUwHhcNMjYwNjEzMDcwMTE3WhcNMjYwNjE0MDcwMTE3WjAzMTEwLwYDVQQD
Eyg5NzVkMjllNDc1ODNmYzhjMTBkM2JlYjRhMDEwZTVlNGE2ZmMxNTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqEDfbqYfks1by7X7wCDF+Tm2Aa8
wM2re1yodBNn84PwmY56Kr9BEI0nQL6cqHHzuxbPw0NNbMRNJXzEFACiKhtUpuPQ
lQeRv1w0yn3Sj+WAQz21eyWuzGrl0q0ZaZiC5npreZ2p9G7s32OyQAO9VlR6PN07
s/IFYYX+3k+BkfdV0A8nNfHiVISY3KswzkAbWHJDkoYGfmSNCbpqF4bEugLCySiR
OtB7IC91O1MoozB5AD6QzM+SpeVCGBrnLNAOj/w+vOEerRvXQXXkAp6AVCa/o7/A
ofsMzdSUOtLYk3QFA34CpGw/NoKhDhFFH1ExsKjXE29h4YPjCuqdNrLEEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJddKeR1g/yMENO+tKAQ5eSm/BUOMB8GA1UdIwQY
MBaAFEADNQvMe1QPreqVHgRggdjaBsFFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUFNMUM4eDdWQS10NnBVZUJHQ0IyTm9Hd1VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9kZDg4NzctZDA4Mi00MWVhLTlmODUt
Njk2YjYxNWNiZWMzLzEvUUFNMUM4eDdWQS10NnBVZUJHQ0IyTm9Hd1VVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9kZDg4NzctZDA4Mi00MWVhLTlmODUtNjk2YjYxNWNiZWMz
LzEvUUFNMUM4eDdWQS10NnBVZUJHQ0IyTm9Hd1VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARHjYQip8
GkNA7MAR6AqzAJPnfoLZvFUFWyjxd6EA0V5wEgHx4uxO61qCqI0zQjiRGiSe+xVw
DAFT4rtHQWFl7X8lm1j472chQdThm7tdAYTktkQblJ+w4sI9EQG5o6SeucM/Fsl1
hIXini2iXv2JcaeFU1qgXoSPN/sZXBnQc3lWfoJxHjfS5wy5wwcrcuJ+WuHJDtYn
ITqgSgzlVoz941JS3DVXbvaAq9G8OqN2tCDFtZHB7M21fpNL5/nQFT3Xji0bd5Ku
fgCYuMm8Ow1+Eo7tfIA7ZgohqKKU18N8e2Wf02sV8GtCWOIN4MoDNEzDFntoEWKT
Dxd+bVYiSJZxXw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:47:52 2026 by rpki-client