Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
File: Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft (raw, json)
Hash identifier: cXRypU10FYU3kgB7pJdZYbFtoeS7YjPi36bgclzK9Pk=
Subject key identifier: 7B:23:F1:FD:00:B8:64:64:84:3D:80:20:15:18:11:EB:03:90:0B:C1
Authority key identifier: 42:E7:FC:6B:74:B2:B8:63:28:11:FD:FD:81:6D:03:E9:39:AF:D7:12
Certificate issuer: /CN=42e7fc6b74b2b8632811fdfd816d03e939afd712
Certificate serial: 01A00B17678A65C12D05CC29A7F1A42C9A8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
Manifest number: 0CD2
Signing time: Sun 16 Aug 2026 15:01:18 +0000
Manifest this update: Sun 16 Aug 2026 15:01:18 +0000
Manifest next update: Mon 17 Aug 2026 15:01:18 +0000
Files and hashes: 1: KCr3XPDeTlWKO-bPI6_H_Cx1WhQ.roa (hash: c/VQLHXOcWoXXd7hiKFZggUX28ZnnohkNilU13VWMV0=)
2: Pto6FquyBgXB9mpBfegUiyI0BQI.asa (hash: LwajpKgENBPuuXSnNqC2HHRSrry8yjmbPcDy2aqHuWk=)
3: Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl (hash: tyUp8LeRbhsRpq+XOEUKhVkq1mNac8K6vosNaBd0/Wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Aug 2026 13:52:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0b:17:67:8a:65:c1:2d:05:cc:29:a7:f1:a4:2c:9a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e7fc6b74b2b8632811fdfd816d03e939afd712
Validity
Not Before: Aug 16 15:01:18 2026 GMT
Not After : Aug 17 15:01:18 2026 GMT
Subject: CN=7b23f1fd00b86464843d8020151811eb03900bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:35:20:d8:e6:07:e1:67:36:ff:fd:54:71:db:
67:a2:3e:30:72:b9:1e:d6:3a:73:99:4f:10:b8:7f:
a2:36:67:b6:d6:3a:95:8e:21:f9:a4:d4:4c:f7:ee:
41:b8:e6:7e:07:5f:f5:6a:75:69:14:41:4c:cf:45:
de:82:8f:7b:ed:50:20:ef:6e:66:ff:02:1d:b1:8b:
60:60:20:17:f6:5f:90:31:79:60:d4:57:bf:a0:2e:
36:3b:c9:37:eb:9e:b6:4d:5a:86:07:f9:98:8a:af:
3b:22:25:c5:d8:da:12:44:f8:5c:9b:95:e9:39:01:
59:44:4a:68:63:f3:a9:ae:e2:e8:5e:0e:1a:98:12:
f1:60:a4:4a:75:32:90:a2:fd:42:51:22:56:83:1e:
71:1b:79:f1:1a:67:d2:0f:2b:f6:89:87:ae:99:45:
96:6b:ae:39:48:77:75:a1:e5:34:3d:b9:a3:98:95:
28:e3:c3:49:70:ac:68:37:4f:65:c9:a8:be:b4:50:
40:4f:9d:c3:dc:86:80:7b:dc:35:12:b9:03:7b:67:
a5:94:d0:8d:28:79:8b:c4:be:74:7a:4b:0b:57:15:
a0:cd:3f:f4:e0:3d:bb:0a:8a:a5:fe:d3:45:50:b8:
48:c4:59:9e:00:d2:1b:d3:62:2e:a7:6f:bf:97:a1:
c0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:23:F1:FD:00:B8:64:64:84:3D:80:20:15:18:11:EB:03:90:0B:C1
X509v3 Authority Key Identifier:
keyid:42:E7:FC:6B:74:B2:B8:63:28:11:FD:FD:81:6D:03:E9:39:AF:D7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:9d:97:b0:50:b9:90:8a:fb:4a:23:12:4d:e9:43:90:ce:7d:
fc:33:e5:89:70:64:3d:d2:e8:20:f2:c8:55:f9:d5:91:f7:21:
ec:4c:d1:9b:87:f3:15:0e:36:bc:1a:da:e8:0c:99:c9:4e:82:
a8:0c:4d:d1:b9:7c:d3:56:87:d0:af:ab:d6:cf:b3:bc:dc:68:
9b:25:af:55:a6:12:58:27:d2:5c:13:55:ab:5a:c9:8a:ca:8c:
35:4a:78:68:03:66:d2:65:e3:1d:ac:98:48:e5:1a:1b:39:55:
b7:3d:dd:70:86:3c:d8:79:87:f8:e7:e9:40:8c:93:29:d0:a9:
fd:62:ff:a7:f6:72:12:20:45:7e:41:8c:16:72:9c:d0:3e:d6:
fd:d1:d7:ab:ab:ea:02:a5:d1:0e:8d:17:9d:da:c7:32:b2:8a:
26:52:f3:5f:01:05:ba:de:02:37:3f:d9:3f:ae:72:24:ed:a4:
ae:82:07:3c:81:87:a6:12:d4:f4:ad:28:03:3f:9c:a1:77:8d:
9c:aa:e8:db:86:2c:ad:b3:48:08:af:95:00:76:72:44:57:2c:
53:16:f1:84:28:4b:02:5d:98:69:30:0a:0d:c8:d8:65:9d:db:
c2:07:04:a1:f9:90:07:23:3a:27:3e:8d:b0:8e:77:73:39:f3:
d2:65:24:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 17:19:10 2026 by rpki-client