Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
File: Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft (raw, json)
Hash identifier: a+vKuONkiTY4hXNcpPhFEKKEpePbHm+XhR8tIMzu6K8=
Subject key identifier: 73:57:3F:91:D7:1C:D1:70:6B:82:08:04:B3:DD:9A:13:92:54:C5:6F
Authority key identifier: 42:E7:FC:6B:74:B2:B8:63:28:11:FD:FD:81:6D:03:E9:39:AF:D7:12
Certificate issuer: /CN=42e7fc6b74b2b8632811fdfd816d03e939afd712
Certificate serial: 019D37890A94AB587AFF0188A8458B8B01CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
Manifest number: 0B5B
Signing time: Sun 29 Mar 2026 03:00:21 +0000
Manifest this update: Sun 29 Mar 2026 03:00:21 +0000
Manifest next update: Mon 30 Mar 2026 03:00:21 +0000
Files and hashes: 1: KCr3XPDeTlWKO-bPI6_H_Cx1WhQ.roa (hash: c/VQLHXOcWoXXd7hiKFZggUX28ZnnohkNilU13VWMV0=)
2: Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl (hash: u46prXZUB6hcEFKaYSpWoH4dgJTkAxybDguDfGSz8zs=)
3: Tr4wiRoRfvJvFB5ZbM0sqvD35vA.asa (hash: OndDrzFgYP1E7JjXKJ2d2BNCF0Kss6Gv5D3BbTzjQxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:0a:94:ab:58:7a:ff:01:88:a8:45:8b:8b:01:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e7fc6b74b2b8632811fdfd816d03e939afd712
Validity
Not Before: Mar 29 03:00:21 2026 GMT
Not After : Mar 30 03:00:21 2026 GMT
Subject: CN=73573f91d71cd1706b820804b3dd9a139254c56f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cc:28:7f:5f:73:50:a0:d2:9f:47:b5:74:9b:
23:17:69:f1:5d:bd:d5:32:0d:29:a5:48:98:2f:88:
d0:96:1e:eb:e5:c1:4f:1c:b9:d3:e9:0a:90:3f:63:
cc:c1:e6:f8:57:bb:52:1d:1d:46:d7:70:5b:c3:49:
bd:79:5f:21:c5:37:bc:5f:84:75:b9:e5:f7:95:65:
3b:fb:14:a0:0f:52:ba:70:ed:a4:b3:58:69:81:c9:
da:da:ff:a6:b4:85:dc:a4:30:e1:b6:30:24:99:61:
5e:1f:a6:c7:0b:bb:a6:f0:74:da:24:4a:a8:81:5d:
66:02:91:10:c1:d6:56:8e:11:c0:d0:0a:91:3f:de:
68:e7:80:08:cc:eb:b8:0e:fa:e1:0a:55:7b:7e:a4:
d2:7e:32:11:a9:cd:1c:b5:3e:9a:d6:cd:be:a1:17:
e4:c9:ac:ac:7b:b0:2a:2b:d4:b3:8c:45:26:8c:6c:
7d:9f:85:30:9b:44:50:e5:df:0c:f9:97:29:73:50:
78:95:c0:5a:65:14:62:2f:55:8b:eb:a8:9f:4c:02:
b4:4c:51:0b:44:61:ee:d8:b4:e0:53:52:89:bb:10:
5f:ea:aa:34:71:10:05:60:8e:f6:79:72:ca:70:30:
8d:b9:61:79:8c:88:d0:b0:75:63:db:4e:be:ab:f3:
62:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:57:3F:91:D7:1C:D1:70:6B:82:08:04:B3:DD:9A:13:92:54:C5:6F
X509v3 Authority Key Identifier:
keyid:42:E7:FC:6B:74:B2:B8:63:28:11:FD:FD:81:6D:03:E9:39:AF:D7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:8e:29:35:75:98:a8:d8:0e:7f:fb:bd:16:2f:ad:c9:83:d7:
2f:1c:b1:b2:73:f8:7d:60:ff:41:1e:2d:42:21:66:cd:6a:25:
ad:26:21:bd:40:71:2a:5a:d5:ff:b2:d5:bd:91:11:24:06:0d:
cf:b9:ba:b2:01:d6:7b:a7:00:b9:5c:20:f1:c3:7f:70:fe:fc:
e6:c9:04:8f:f7:90:17:6f:bb:4b:08:b4:5a:ec:a5:c3:df:6c:
74:60:32:31:04:f8:8f:6b:78:51:df:08:68:67:e1:aa:13:a5:
76:50:db:5a:d0:97:90:34:34:56:9c:98:e3:0e:e3:13:a6:36:
f8:2d:eb:bb:72:db:d9:0c:f0:db:b8:95:85:9f:1b:f2:ab:90:
94:e2:90:6b:11:6a:91:18:21:41:b2:ef:11:82:ba:e6:2e:09:
bc:ca:34:83:40:8c:9a:bc:3f:be:93:8a:a8:a1:c4:cb:13:38:
03:37:fb:46:04:c2:fe:e5:96:b1:e1:b3:64:74:84:5f:0c:36:
30:f4:1d:d2:42:2b:5f:f1:fd:2f:9a:e2:ff:20:d0:c6:38:82:
ac:bf:af:3c:ed:26:d0:d7:6d:4f:2d:0f:c1:cd:11:82:bb:4c:
af:47:20:e2:d0:1d:32:da:67:bf:88:59:0b:43:7e:eb:92:8f:
9c:89:66:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:50 2026 by rpki-client