Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
File: QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft (raw, json)
Hash identifier: HPPnoJLVCIAv5ab/VMIfFpiNN0C5oBrDyiawrmumC/4=
Subject key identifier: AE:8B:56:7E:68:AC:F4:C8:F3:11:ED:B0:9C:D3:75:EE:4E:EF:CF:0B
Authority key identifier: 40:03:35:0B:CC:7B:54:0F:AD:EA:95:1E:04:60:81:D8:DA:06:C1:45
Certificate issuer: /CN=4003350bcc7b540fadea951e046081d8da06c145
Certificate serial: 019D37C092EADE2D4ED9A69CFCB4DC98686A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
Manifest number: 0A69
Signing time: Sun 29 Mar 2026 04:01:00 +0000
Manifest this update: Sun 29 Mar 2026 04:01:00 +0000
Manifest next update: Mon 30 Mar 2026 04:01:00 +0000
Files and hashes: 1: 4rFWGG1hCLjpdzpnntCtvivktok.roa (hash: h+b3VUlMYpjtGHgCeteMfY7E2bpp8Imly4GOvLLhOSc=)
2: QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl (hash: KDyKNCpkJcc0F7v5P04y41BqDW0d/AZDgNnFou4M6os=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:92:ea:de:2d:4e:d9:a6:9c:fc:b4:dc:98:68:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4003350bcc7b540fadea951e046081d8da06c145
Validity
Not Before: Mar 29 04:01:00 2026 GMT
Not After : Mar 30 04:01:00 2026 GMT
Subject: CN=ae8b567e68acf4c8f311edb09cd375ee4eefcf0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f7:b0:08:00:85:d2:2b:ad:85:89:a0:ee:c6:
58:e6:df:ae:9c:a0:59:67:b3:6f:40:d2:5b:d3:1c:
10:81:74:ce:e4:12:75:41:35:c6:b6:7f:1d:7a:8a:
44:63:50:79:07:cb:22:76:dc:84:f3:76:4f:b5:55:
e2:6b:b3:15:41:1b:c4:dd:fa:7d:51:dc:0a:98:a4:
3a:71:b6:42:76:fe:3a:4a:4e:a6:ec:fd:3a:29:33:
66:d6:10:bf:c2:d1:d0:9c:4f:46:82:f4:7c:60:e4:
20:55:d4:34:5d:aa:bd:ee:dd:8e:d5:39:34:2c:aa:
a8:48:1d:b7:02:29:27:65:13:09:86:11:8b:d6:e8:
07:e5:14:88:fc:52:ed:73:dc:c3:8e:38:61:65:d0:
5f:6d:14:26:02:e9:ff:77:28:0c:5d:8d:d3:52:84:
be:ba:0e:e6:70:99:60:1a:40:28:88:39:39:6e:ab:
53:79:b1:27:d2:c5:be:89:19:de:0e:6b:b9:18:df:
50:71:44:42:db:37:99:7e:c5:84:7a:8b:7e:a4:33:
60:07:a6:56:38:7c:b8:4f:34:bf:1c:74:14:6b:98:
0b:af:f2:8d:a5:da:39:c2:5d:ab:56:11:83:87:9e:
4a:83:54:0d:6d:6a:69:92:8f:80:9d:d6:7f:ed:23:
7a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:8B:56:7E:68:AC:F4:C8:F3:11:ED:B0:9C:D3:75:EE:4E:EF:CF:0B
X509v3 Authority Key Identifier:
keyid:40:03:35:0B:CC:7B:54:0F:AD:EA:95:1E:04:60:81:D8:DA:06:C1:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:a4:6f:55:a8:e9:dd:76:fb:39:1b:4b:31:68:53:ac:7a:be:
71:4b:17:ec:b4:08:0c:f4:93:d7:80:ec:b4:ed:ff:3c:b8:7b:
5c:de:ab:ce:00:3d:05:13:0e:3a:99:8a:d0:a2:ee:12:7b:08:
ae:61:29:26:12:47:b2:3e:f6:69:16:82:0a:3c:5f:3e:2b:d6:
a9:11:4f:ab:44:02:eb:d5:f7:8c:99:1a:b4:b9:8e:99:a5:7e:
df:c9:03:e5:c3:b1:a8:01:74:8b:f4:9b:48:90:2c:2d:75:69:
50:c0:a2:4f:99:f7:63:80:81:45:cb:a1:ae:55:fe:84:5c:eb:
98:8b:e0:d8:16:f6:e9:b6:2b:a9:8d:ef:9f:b7:77:03:a9:87:
75:72:6c:53:60:ec:aa:84:7c:ff:d8:8d:10:81:02:3d:2a:0e:
d9:21:d9:14:5b:f0:fd:a5:53:08:55:88:1a:a5:75:be:45:0c:
6a:de:48:f6:6b:6e:68:97:5f:3c:75:4c:ae:6c:7f:68:f9:4e:
49:9d:a5:84:82:0e:56:6d:0b:48:04:cf:e7:14:36:3c:15:ea:
a1:c0:cf:f1:4f:cf:4d:c8:ab:56:bf:6c:42:bc:6b:4b:2e:72:
93:14:78:1a:91:ae:9f:90:85:1c:c9:98:32:b2:f9:16:a9:1b:
e2:01:5a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:32 2026 by rpki-client