Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.mft
File: qafBolN_0DVAh1mXh8qoQv7WC38.mft (raw, json)
Hash identifier: YX6SPmCuhrl/oOVGjzRqDVW0jYuSwVPffZwo//Rm0gE=
Subject key identifier: 1A:15:A6:6D:3D:0E:89:2E:0C:F3:C3:D0:60:90:D8:A0:D9:07:50:49
Authority key identifier: A9:A7:C1:A2:53:7F:D0:35:40:87:59:97:87:CA:A8:42:FE:D6:0B:7F
Certificate issuer: /CN=a9a7c1a2537fd0354087599787caa842fed60b7f
Certificate serial: 01A04160FA3FF1D48B3C9786EA4BC72F5088
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qafBolN_0DVAh1mXh8qoQv7WC38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.mft
Manifest number: 0CC3
Signing time: Thu 27 Aug 2026 04:01:09 +0000
Manifest this update: Thu 27 Aug 2026 04:01:09 +0000
Manifest next update: Fri 28 Aug 2026 04:01:09 +0000
Files and hashes: 1: ciL412e7YxD0dUNoDylFdeftCgE.roa (hash: zeH95vcJIChb0o4sHPA6BcslnlL9BGF1C0+mhOtRPBc=)
2: qafBolN_0DVAh1mXh8qoQv7WC38.crl (hash: /BY9puGp94PWBK+o30y1kaw8Ee1Fh+e2ZhWbG2Cxqvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.mft
rsync://rpki.ripe.net/repository/DEFAULT/qafBolN_0DVAh1mXh8qoQv7WC38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:60:fa:3f:f1:d4:8b:3c:97:86:ea:4b:c7:2f:50:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a7c1a2537fd0354087599787caa842fed60b7f
Validity
Not Before: Aug 27 04:01:09 2026 GMT
Not After : Aug 28 04:01:09 2026 GMT
Subject: CN=1a15a66d3d0e892e0cf3c3d06090d8a0d9075049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:69:72:c4:fa:96:75:9d:48:32:36:59:b9:f0:
6b:f1:8b:78:d4:51:a0:37:73:99:58:83:c7:40:eb:
cc:bc:b3:2b:73:6b:6b:59:c6:9f:e8:ee:f5:c2:25:
be:a4:8e:4c:4d:a1:af:d1:06:bb:99:c8:5c:88:3b:
e1:b7:c0:7e:11:02:70:c0:96:cc:ea:09:81:26:f2:
35:d1:e9:c6:eb:c7:66:5b:fb:9a:0e:7c:62:5c:48:
b9:dc:46:6c:2a:ad:48:10:80:1c:80:c7:25:9a:da:
6f:4d:92:03:31:65:35:7f:51:07:f9:21:1d:a5:c2:
fb:50:00:c0:d5:1b:cf:51:fa:37:aa:1d:6c:6e:9c:
0a:ba:cf:d0:4f:c0:36:98:3a:5d:8a:c8:2b:2b:3b:
99:3c:96:d2:60:0c:04:6c:9f:9b:e3:e6:9e:04:4c:
fd:40:3c:31:d9:7b:32:79:36:b6:cd:54:2e:90:0a:
d7:2b:2f:c7:6a:07:b3:a2:bf:df:c9:a7:33:ca:6c:
b8:10:22:32:52:42:a7:b8:58:7d:12:16:c3:2f:1b:
e6:bf:b5:10:28:79:db:8c:88:14:75:d3:8c:c2:00:
a1:8b:53:d9:c8:bc:f2:dc:f3:05:19:9b:e5:a6:dc:
49:49:71:da:a1:25:dd:4f:c5:8a:f8:e6:1c:a5:bd:
74:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:15:A6:6D:3D:0E:89:2E:0C:F3:C3:D0:60:90:D8:A0:D9:07:50:49
X509v3 Authority Key Identifier:
keyid:A9:A7:C1:A2:53:7F:D0:35:40:87:59:97:87:CA:A8:42:FE:D6:0B:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qafBolN_0DVAh1mXh8qoQv7WC38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:5c:70:75:62:ee:9e:d0:24:8e:b2:77:60:26:8d:c2:c7:d9:
7d:85:50:76:fb:c4:17:2a:a8:bd:8e:7f:c8:00:36:2d:06:2c:
0c:67:67:55:07:26:41:76:66:1a:49:4e:0f:98:2e:b3:3d:72:
83:0f:e7:ba:c0:b6:9a:b9:3d:98:6e:13:bd:97:7d:cb:a1:48:
42:7c:8b:d8:e2:fb:94:79:26:8c:88:29:53:93:79:b6:f2:87:
5a:8e:d7:ae:03:d6:fc:1d:62:9f:9f:8c:f5:b5:68:78:ef:63:
bf:6a:41:50:02:77:31:58:aa:6c:cb:ab:cc:76:82:ea:85:1f:
de:f9:6d:8f:47:e6:ef:e0:ba:f6:c7:c9:16:f2:36:fe:ba:81:
e1:73:71:e4:a5:dc:f7:06:5c:75:28:d3:c2:df:b8:fd:5f:44:
0c:f1:23:ad:e8:e7:a9:31:6f:b0:16:42:2b:77:2d:7a:0f:dd:
95:2c:f2:03:c6:7f:4d:b2:83:fa:6a:13:22:27:72:1a:52:f6:
f5:f9:c8:df:c3:58:9d:93:0e:78:35:55:8d:e7:53:54:67:49:
04:50:7e:33:d8:76:18:01:1b:08:9e:96:3c:cd:48:20:be:ec:
b4:47:45:db:4e:40:15:02:7b:49:4e:51:6c:ff:b4:2a:47:fd:
34:f1:51:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 08:08:36 2026 by rpki-client