Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
File: QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft (raw, json)
Hash identifier: JzOd5tXLQIzjKTEfwMhS7gTFsAlgaNgNqPjqC/92D3U=
Subject key identifier: 8B:9C:75:F0:BF:BD:B5:30:DA:68:7F:D5:E8:19:88:F7:EF:A9:B2:C6
Authority key identifier: 40:03:35:0B:CC:7B:54:0F:AD:EA:95:1E:04:60:81:D8:DA:06:C1:45
Certificate issuer: /CN=4003350bcc7b540fadea951e046081d8da06c145
Certificate serial: 01A06C827174A0CFAE073D80B92C6D707396
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
Manifest number: 0C12
Signing time: Fri 04 Sep 2026 13:01:22 +0000
Manifest this update: Fri 04 Sep 2026 13:01:22 +0000
Manifest next update: Sat 05 Sep 2026 13:01:22 +0000
Files and hashes: 1: 4rFWGG1hCLjpdzpnntCtvivktok.roa (hash: h+b3VUlMYpjtGHgCeteMfY7E2bpp8Imly4GOvLLhOSc=)
2: QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl (hash: w1QsS7ArRNua7sjXbnjWfimA1nHTxDV1lzuyvaHCRao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:82:71:74:a0:cf:ae:07:3d:80:b9:2c:6d:70:73:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4003350bcc7b540fadea951e046081d8da06c145
Validity
Not Before: Sep 4 13:01:22 2026 GMT
Not After : Sep 5 13:01:22 2026 GMT
Subject: CN=8b9c75f0bfbdb530da687fd5e81988f7efa9b2c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:31:02:a7:e8:1a:fd:53:39:c5:c3:a2:5b:66:
69:ce:cf:31:68:12:d3:fb:bb:e8:05:99:04:a8:ba:
a6:1c:ee:ea:f3:dc:30:39:e4:cf:56:1e:08:c4:11:
cf:d3:a3:01:9f:8a:ec:23:44:89:25:3b:f1:89:f9:
2b:02:3b:46:a2:fe:29:cb:eb:c3:e3:76:38:e1:a5:
09:23:63:a9:40:c5:fa:a1:5e:d7:c2:23:8f:d7:22:
1d:7a:6e:d2:36:27:8b:af:fd:39:56:3e:55:87:f5:
61:b2:2f:fd:1a:93:a7:39:f1:1c:83:eb:44:ce:4b:
3f:99:a8:3c:a4:b1:04:ca:11:4c:c2:23:84:29:f2:
15:0d:68:4f:a7:f9:20:e9:0f:91:90:38:de:7a:7e:
16:45:b9:c1:08:b1:5b:fc:67:5e:19:bd:ce:a3:e3:
44:29:b6:d1:23:27:d6:c3:ba:71:01:be:8c:b3:da:
72:98:85:f0:b0:68:df:dd:08:2b:67:0f:95:a8:d8:
f1:ae:c1:bd:37:99:79:56:58:12:bc:b4:6c:95:ca:
f3:92:2b:df:d9:64:53:4c:de:06:0a:cd:c6:f9:9e:
f5:09:24:fa:b0:2d:52:3e:c0:3e:d5:9b:71:d8:e0:
af:aa:88:f6:65:74:b3:94:59:2b:d2:eb:bf:a7:f4:
c9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:9C:75:F0:BF:BD:B5:30:DA:68:7F:D5:E8:19:88:F7:EF:A9:B2:C6
X509v3 Authority Key Identifier:
keyid:40:03:35:0B:CC:7B:54:0F:AD:EA:95:1E:04:60:81:D8:DA:06:C1:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:05:b5:28:d8:53:d7:b8:18:83:80:1f:e5:e9:d0:7b:8a:fb:
17:4b:40:41:d3:d6:36:9a:ce:3c:2f:70:77:7d:ea:2e:57:9f:
fc:ad:25:37:5f:b0:75:59:0d:01:f9:93:d5:00:34:ee:4a:39:
83:13:ed:c8:8c:b8:9a:15:6c:f0:a8:82:fa:ef:b2:ff:1f:79:
95:88:c4:52:aa:cb:e0:f9:f8:9e:64:0f:d5:1c:b9:55:a8:5f:
f8:fb:9c:ed:c2:6b:1e:9c:78:e9:0c:b1:3f:d9:91:fb:63:3a:
d9:17:54:9e:e4:ea:21:ae:7f:9e:f4:6b:06:52:14:4e:dd:52:
98:64:24:47:d1:54:5a:db:a5:27:20:36:1c:5f:7c:dd:8a:ba:
55:0d:e6:d6:de:73:0e:4d:a4:f4:dc:4e:e1:e1:02:53:7b:6c:
32:a0:14:c3:20:b6:2a:c4:c6:87:c3:fe:87:1d:ca:44:cf:26:
f9:8d:6e:a4:9a:04:b8:ed:35:cd:0a:2c:72:3a:b1:89:b5:8b:
88:57:7a:15:54:d2:c9:2a:36:f4:c6:80:75:0d:8a:9e:0e:69:
31:f9:34:02:eb:f4:9d:c5:e5:c0:d7:f2:9d:07:34:6c:fe:06:
ee:7d:c3:3a:1d:54:ac:20:88:1d:7a:84:44:78:3f:a4:0b:cb:
4b:cf:c1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:46:12 2026 by rpki-client