Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
File: Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft (raw, json)
Hash identifier: HPVii0uk6sVD9H617xQ9zWWPYDa7sCo9p56fLWaT3tk=
Subject key identifier: 28:04:ED:A7:80:56:FF:EF:D4:5B:3B:CF:62:17:FB:DD:94:8A:5F:34
Authority key identifier: 42:E7:FC:6B:74:B2:B8:63:28:11:FD:FD:81:6D:03:E9:39:AF:D7:12
Certificate issuer: /CN=42e7fc6b74b2b8632811fdfd816d03e939afd712
Certificate serial: 019F129C9B2B90CB401D30CB0B5A86CB0E6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
Manifest number: 0C51
Signing time: Mon 29 Jun 2026 09:01:20 +0000
Manifest this update: Mon 29 Jun 2026 09:01:20 +0000
Manifest next update: Tue 30 Jun 2026 09:01:20 +0000
Files and hashes: 1: KCr3XPDeTlWKO-bPI6_H_Cx1WhQ.roa (hash: c/VQLHXOcWoXXd7hiKFZggUX28ZnnohkNilU13VWMV0=)
2: Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl (hash: 3n4gKKCdv/+JiMuC7VvoEd5Xn1G3wrACyvcqkcxIcrQ=)
3: Tr4wiRoRfvJvFB5ZbM0sqvD35vA.asa (hash: OndDrzFgYP1E7JjXKJ2d2BNCF0Kss6Gv5D3BbTzjQxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:9c:9b:2b:90:cb:40:1d:30:cb:0b:5a:86:cb:0e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e7fc6b74b2b8632811fdfd816d03e939afd712
Validity
Not Before: Jun 29 09:01:20 2026 GMT
Not After : Jun 30 09:01:20 2026 GMT
Subject: CN=2804eda78056ffefd45b3bcf6217fbdd948a5f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:33:8c:ef:98:26:e3:e0:49:de:7b:fe:05:d3:
1f:5e:54:c2:a5:19:9f:7a:ee:7b:28:f6:cb:b6:f7:
9f:b0:78:2e:13:78:65:8c:2a:c0:43:60:02:33:a8:
d3:da:35:d5:ce:ae:b1:31:d1:10:b0:8f:ee:28:41:
8d:3c:d9:fe:65:2e:11:f0:64:f5:b6:fc:1e:44:56:
91:44:45:6e:7d:88:2e:2f:7b:bf:29:b5:f7:13:96:
d4:96:d5:37:f5:84:a7:df:ff:4e:92:a4:c2:6a:45:
99:f3:a2:c7:d9:1a:93:43:d8:39:cb:08:d7:ac:e7:
2e:80:6a:49:de:27:b0:c1:d0:e0:d1:3e:ef:be:90:
2e:17:69:78:ba:4d:53:ca:c0:0d:1d:28:e8:72:e6:
f0:4a:64:35:7a:3c:0d:cb:c8:e2:63:7c:70:2b:20:
aa:e4:53:58:36:7b:ce:0d:d8:81:c0:be:19:28:0b:
67:b9:c4:64:96:71:ba:52:b8:91:c9:63:5d:0b:d4:
73:2a:7d:52:71:32:8a:c8:48:df:0d:d0:16:2a:d6:
44:d6:14:9c:fa:1b:07:90:ae:1d:22:81:40:f6:e6:
69:96:44:2c:cb:ad:c1:29:f8:57:d0:3e:5f:5d:e1:
7b:41:46:24:23:be:74:f4:a9:b5:02:cc:48:23:ef:
86:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:04:ED:A7:80:56:FF:EF:D4:5B:3B:CF:62:17:FB:DD:94:8A:5F:34
X509v3 Authority Key Identifier:
keyid:42:E7:FC:6B:74:B2:B8:63:28:11:FD:FD:81:6D:03:E9:39:AF:D7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:51:e1:f1:08:db:de:ef:c1:30:d6:72:8e:a4:8f:aa:07:fd:
94:71:a9:e3:5d:98:d5:df:ea:29:b1:a6:0b:20:fa:94:c5:c5:
c2:08:7c:6a:ab:cf:ba:8e:e3:51:18:d6:5f:d8:0c:d6:72:fe:
20:66:f6:41:eb:f4:78:11:00:00:e2:aa:bf:dc:3b:15:0f:d9:
98:aa:c2:51:77:b1:f6:9a:22:a6:a3:ed:98:ad:88:b8:c0:8f:
d8:cf:b3:20:75:99:fb:40:45:f8:66:73:f4:8c:85:de:b7:c9:
20:b9:82:88:cb:d9:5e:56:ea:25:a2:c2:8b:17:a4:9b:32:e8:
75:7a:0b:8d:76:3c:ad:d6:8a:f0:b3:15:a6:83:fd:59:bc:e5:
e0:ac:32:9c:e6:f4:54:4f:13:8d:68:52:5b:80:04:ae:04:de:
b8:92:70:e8:2a:43:a1:bf:0e:ff:71:e0:ae:a1:a0:a8:d2:6d:
0e:50:14:85:21:5a:8e:76:d7:61:30:a5:3b:54:41:64:a4:a1:
db:49:ee:e0:12:29:14:b1:4f:22:5e:be:84:18:ef:96:ec:2d:
30:d3:5a:70:f5:bd:27:26:8b:30:ed:19:f6:bb:81:c0:eb:25:
0a:a0:a2:10:1e:4c:b4:dc:0b:b1:68:ed:6b:db:7d:8e:50:da:
86:ec:e2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:38:15 2026 by rpki-client