Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
File: Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft (raw, json)
Hash identifier: 55Fl7xvRSiRJt7j6bREj6SZP24moHfz2aKbJTCjci+s=
Subject key identifier: B5:0C:9F:F5:01:DD:FB:DB:40:08:7B:FE:D2:EA:D1:D3:6A:FD:F8:F9
Authority key identifier: 42:E7:FC:6B:74:B2:B8:63:28:11:FD:FD:81:6D:03:E9:39:AF:D7:12
Certificate issuer: /CN=42e7fc6b74b2b8632811fdfd816d03e939afd712
Certificate serial: 019CC975A59A89F0222C591AC136646EBD4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
Manifest number: 0B22
Signing time: Sat 07 Mar 2026 18:00:56 +0000
Manifest this update: Sat 07 Mar 2026 18:00:56 +0000
Manifest next update: Sun 08 Mar 2026 18:00:56 +0000
Files and hashes: 1: KCr3XPDeTlWKO-bPI6_H_Cx1WhQ.roa (hash: c/VQLHXOcWoXXd7hiKFZggUX28ZnnohkNilU13VWMV0=)
2: Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl (hash: UOi1HitxvI97tfjjsg+QmEpMf9VlEK+NcIApHqAF8XY=)
3: Tr4wiRoRfvJvFB5ZbM0sqvD35vA.asa (hash: OndDrzFgYP1E7JjXKJ2d2BNCF0Kss6Gv5D3BbTzjQxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 18:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c9:75:a5:9a:89:f0:22:2c:59:1a:c1:36:64:6e:bd:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e7fc6b74b2b8632811fdfd816d03e939afd712
Validity
Not Before: Mar 7 18:00:56 2026 GMT
Not After : Mar 8 18:00:56 2026 GMT
Subject: CN=b50c9ff501ddfbdb40087bfed2ead1d36afdf8f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:43:9e:7e:ce:7b:6c:97:a8:f1:0d:46:a2:6e:
e0:d3:a4:4f:e6:d5:46:63:d7:14:81:da:99:ba:87:
2b:34:11:5b:2f:47:79:06:76:05:dc:52:24:79:46:
6f:90:b2:75:21:40:db:49:94:04:b3:ef:a3:ff:d8:
a7:8d:b2:d9:a9:77:03:0f:c9:e8:0a:7e:58:75:b1:
1d:ab:13:2f:c6:e0:be:c6:f6:33:e5:d3:16:03:a6:
e5:69:77:a0:82:ec:fd:1f:58:36:da:5d:3c:f6:c4:
f8:49:d6:6a:76:26:80:f6:4c:37:21:6b:a1:12:a9:
f6:42:0b:b2:c9:31:ee:96:eb:98:de:ed:7e:a2:d6:
28:84:c4:3c:8e:5d:62:ec:f0:85:5b:7e:1a:ee:52:
01:6d:47:f6:dc:03:d8:ad:3d:b8:70:4b:30:df:b6:
ad:fd:ed:fd:b9:23:71:d1:d9:54:b5:dd:e0:11:70:
52:8a:cb:b9:8c:d7:af:a3:f7:70:80:80:af:47:70:
dc:6b:57:f1:35:c4:37:94:ef:a3:3b:27:e4:e2:7d:
81:78:60:73:3c:7d:67:17:b6:0f:b6:7f:57:a9:4b:
4e:34:ca:17:68:29:2a:03:70:83:3c:ff:79:12:82:
ff:02:f4:27:61:6e:c8:94:7e:63:6e:98:4b:f0:52:
e2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:0C:9F:F5:01:DD:FB:DB:40:08:7B:FE:D2:EA:D1:D3:6A:FD:F8:F9
X509v3 Authority Key Identifier:
keyid:42:E7:FC:6B:74:B2:B8:63:28:11:FD:FD:81:6D:03:E9:39:AF:D7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:66:9c:a4:87:87:8d:a7:76:7e:f6:ae:8e:fa:86:c6:88:67:
e0:10:14:48:9f:13:e1:db:1d:e1:52:90:b3:8d:58:6f:b0:d4:
d7:9b:8a:b1:b7:ff:f8:50:ea:c6:95:48:dd:56:ea:93:4c:14:
01:d8:dd:e8:c2:2d:59:25:0e:b5:e3:af:d5:84:98:94:e8:ad:
b2:7f:77:86:a5:96:78:b7:43:d4:32:78:3d:47:69:fc:b8:a8:
06:89:a9:92:4f:e3:16:58:66:65:d4:de:f7:91:5a:79:41:06:
4f:3a:4b:e4:34:44:33:88:d2:f6:62:53:34:9b:c6:a6:99:57:
cf:d0:10:d5:84:c1:4e:f9:01:42:9c:ab:22:5f:8b:99:4e:4a:
ee:f0:61:2f:d8:1b:36:d2:af:11:b6:15:c1:66:3b:5a:0d:3e:
8f:55:7a:2c:6d:16:1e:6d:c6:cf:fb:5f:ba:fb:97:e7:aa:57:
83:63:a3:64:1a:a7:c8:15:5d:0e:92:70:df:98:89:c7:f7:a4:
f1:d2:ee:3b:8b:f5:cc:82:ba:fa:34:4a:5b:08:43:0d:f8:74:
83:9a:3f:2a:25:e6:2d:91:ca:d1:86:0a:30:8a:b3:98:e7:af:
4b:7f:6b:53:3b:b0:96:a4:79:3a:db:56:da:ae:cd:4a:ce:d2:
12:1d:2a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 05:02:49 2026 by rpki-client