Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
File: QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft (raw, json)
Hash identifier: HGxPFehpeS04VPhHKNdtRiue55O31hwnhixOtzGem7o=
Subject key identifier: 88:CE:06:36:10:2B:DB:18:2D:75:9C:17:24:43:DF:11:21:FD:42:EE
Authority key identifier: 40:03:35:0B:CC:7B:54:0F:AD:EA:95:1E:04:60:81:D8:DA:06:C1:45
Certificate issuer: /CN=4003350bcc7b540fadea951e046081d8da06c145
Certificate serial: 01A15FD64C1B382115ABEB8D86503492ECAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
Manifest number: 0C90
Signing time: Wed 21 Oct 2026 19:00:41 +0000
Manifest this update: Wed 21 Oct 2026 19:00:41 +0000
Manifest next update: Thu 22 Oct 2026 19:00:41 +0000
Files and hashes: 1: 4rFWGG1hCLjpdzpnntCtvivktok.roa (hash: h+b3VUlMYpjtGHgCeteMfY7E2bpp8Imly4GOvLLhOSc=)
2: QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl (hash: qsQtgYvwFdR5ypJZ7n3vlAQAYumNq6V5tQ6//KhQ4II=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 19:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5f:d6:4c:1b:38:21:15:ab:eb:8d:86:50:34:92:ec:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4003350bcc7b540fadea951e046081d8da06c145
Validity
Not Before: Oct 21 19:00:41 2026 GMT
Not After : Oct 22 19:00:41 2026 GMT
Subject: CN=88ce0636102bdb182d759c172443df1121fd42ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d2:dd:17:ce:e6:50:de:59:8a:98:14:e0:2d:
8a:03:58:43:76:43:4d:25:b9:8f:e8:cd:d5:8f:dc:
f1:a4:c7:a7:b5:ec:f6:62:0c:00:e3:24:ad:56:83:
ee:42:bc:b1:f7:fc:df:be:29:e8:28:b0:fc:f2:f4:
24:50:0f:be:41:7f:1f:3e:a8:4c:91:ff:9e:d6:53:
e8:26:10:30:0e:e5:a5:a8:b6:96:81:22:7b:50:f3:
6f:51:fb:11:c2:90:3b:bd:2d:77:98:fe:b8:15:51:
07:be:08:95:7f:77:bc:fd:b1:7e:31:c0:5b:36:ca:
a8:0c:2e:b3:dd:7c:61:8a:56:a2:6f:85:c9:de:a5:
3d:2b:56:59:b3:18:8e:cf:b5:61:1f:c9:9d:27:37:
8f:6f:ba:cd:e1:80:ba:d9:bf:2f:5c:0d:81:0b:c2:
bb:4e:91:f8:f2:cc:df:4f:c4:e0:d1:27:57:3d:03:
b1:fc:4c:b1:7c:79:7a:d4:12:5d:7d:2c:9e:a5:6d:
24:5d:ae:9e:d5:c0:58:ee:eb:55:7c:b4:56:cc:d4:
71:1b:95:2e:d1:2e:ae:b4:6b:32:34:8f:dc:2f:8a:
59:36:0c:a0:2a:f3:9b:ab:fb:25:ed:a0:54:21:57:
b8:b3:4e:74:4d:49:f5:1e:12:86:95:04:c5:e0:2d:
93:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:CE:06:36:10:2B:DB:18:2D:75:9C:17:24:43:DF:11:21:FD:42:EE
X509v3 Authority Key Identifier:
keyid:40:03:35:0B:CC:7B:54:0F:AD:EA:95:1E:04:60:81:D8:DA:06:C1:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:45:43:b8:dd:51:33:4f:d4:d3:ff:72:50:d8:e0:f3:e3:eb:
5f:e9:fa:54:c7:4d:ad:b1:7a:1e:37:35:a0:7c:52:a0:48:5f:
1e:eb:6b:f6:53:18:47:d8:89:70:76:de:8c:63:9c:c4:d6:0b:
9f:2a:65:f6:5c:b5:14:54:f2:61:2c:e1:d6:16:ab:5c:b9:2b:
38:9d:8c:10:06:60:16:2f:2e:5b:af:fc:f6:b5:3e:d1:82:20:
84:dc:bc:56:aa:b8:d9:b8:40:ee:0c:b6:8e:ae:11:51:93:5f:
87:33:96:3e:bc:0e:2e:30:04:c4:67:7b:17:35:d4:b8:05:64:
0a:4b:71:cf:a7:ee:92:91:a2:72:9b:e9:82:0b:dc:c1:e8:52:
ca:e4:7f:3d:03:34:fa:ba:37:fb:80:7d:a5:43:ee:c7:ce:f4:
40:04:92:03:4a:ce:8d:26:52:e0:71:c0:e2:1f:1b:1c:7b:6e:
ca:08:e9:a8:ef:32:0e:94:91:5e:8f:f1:a0:b8:24:cc:1a:c7:
20:9c:ea:9d:38:66:0c:11:8d:2f:c1:e2:d0:dc:67:cb:9f:8d:
4c:50:64:e7:05:b5:27:35:d8:2e:a3:25:c3:a7:0d:d9:9b:4e:
72:7e:5f:7e:81:e1:45:1d:bd:80:6c:70:3e:c5:fc:5d:2b:38:
da:80:62:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFf1kwbOCEVq+uNhlA0kuytMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwMDMzNTBiY2M3YjU0MGZhZGVhOTUxZTA0NjA4MWQ4ZGEw
NmMxNDUwHhcNMjYxMDIxMTkwMDQxWhcNMjYxMDIyMTkwMDQxWjAzMTEwLwYDVQQD
Eyg4OGNlMDYzNjEwMmJkYjE4MmQ3NTljMTcyNDQzZGYxMTIxZmQ0MmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6tLdF87mUN5ZipgU4C2KA1hDdkNN
JbmP6M3Vj9zxpMentez2YgwA4yStVoPuQryx9/zfvinoKLD88vQkUA++QX8fPqhM
kf+e1lPoJhAwDuWlqLaWgSJ7UPNvUfsRwpA7vS13mP64FVEHvgiVf3e8/bF+McBb
NsqoDC6z3Xxhilaib4XJ3qU9K1ZZsxiOz7VhH8mdJzePb7rN4YC62b8vXA2BC8K7
TpH48szfT8Tg0SdXPQOx/EyxfHl61BJdfSyepW0kXa6e1cBY7utVfLRWzNRxG5Uu
0S6utGsyNI/cL4pZNgygKvObq/sl7aBUIVe4s050TUn1HhKGlQTF4C2TMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIjOBjYQK9sYLXWcFyRD3xEh/ULuMB8GA1UdIwQY
MBaAFEADNQvMe1QPreqVHgRggdjaBsFFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUFNMUM4eDdWQS10NnBVZUJHQ0IyTm9Hd1VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9kZDg4NzctZDA4Mi00MWVhLTlmODUt
Njk2YjYxNWNiZWMzLzEvUUFNMUM4eDdWQS10NnBVZUJHQ0IyTm9Hd1VVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9kZDg4NzctZDA4Mi00MWVhLTlmODUtNjk2YjYxNWNiZWMz
LzEvUUFNMUM4eDdWQS10NnBVZUJHQ0IyTm9Hd1VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPkVDuN1R
M0/U0/9yUNjg8+PrX+n6VMdNrbF6Hjc1oHxSoEhfHutr9lMYR9iJcHbejGOcxNYL
nypl9ly1FFTyYSzh1harXLkrOJ2MEAZgFi8uW6/89rU+0YIghNy8Vqq42bhA7gy2
jq4RUZNfhzOWPrwOLjAExGd7FzXUuAVkCktxz6fukpGicpvpggvcwehSyuR/PQM0
+ro3+4B9pUPux870QASSA0rOjSZS4HHA4h8bHHtuygjpqO8yDpSRXo/xoLgkzBrH
IJzqnThmDBGNL8Hi0Nxny5+NTFBk5wW1JzXYLqMlw6cN2ZtOcn5ffoHhRR29gGxw
PsX8XSs42oBiYQ==
-----END CERTIFICATE-----
Generated at Thu Oct 22 05:50:34 2026 by rpki-client