Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
File: Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft (raw, json)
Hash identifier: YZxNGHOeWuzIHND+nNXVJUX7yvIp/DxIpfXzPOt2yQk=
Subject key identifier: CA:88:F0:C0:76:06:C9:EE:34:F1:34:3F:8F:73:0F:A4:76:DE:DF:98
Authority key identifier: 42:E7:FC:6B:74:B2:B8:63:28:11:FD:FD:81:6D:03:E9:39:AF:D7:12
Certificate issuer: /CN=42e7fc6b74b2b8632811fdfd816d03e939afd712
Certificate serial: 01A1280C29EA980FEEE8EA92A5C9817071D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
Manifest number: 0D66
Signing time: Sat 10 Oct 2026 23:00:48 +0000
Manifest this update: Sat 10 Oct 2026 23:00:48 +0000
Manifest next update: Sun 11 Oct 2026 23:00:48 +0000
Files and hashes: 1: KCr3XPDeTlWKO-bPI6_H_Cx1WhQ.roa (hash: c/VQLHXOcWoXXd7hiKFZggUX28ZnnohkNilU13VWMV0=)
2: Pto6FquyBgXB9mpBfegUiyI0BQI.asa (hash: LwajpKgENBPuuXSnNqC2HHRSrry8yjmbPcDy2aqHuWk=)
3: Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl (hash: EBX5GxuZ5OOKTtbLq6/KB3p/1hP7ZU6t0HRRXz8L+v0=)
4: nP5QqrRlk9ayuFdWmJ8gpHg12-8.roa (hash: cmDZ0ANMnR/j0RTklp+THy4q0G8bAX7M0+UsqPCsIKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:0c:29:ea:98:0f:ee:e8:ea:92:a5:c9:81:70:71:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e7fc6b74b2b8632811fdfd816d03e939afd712
Validity
Not Before: Oct 10 23:00:48 2026 GMT
Not After : Oct 11 23:00:48 2026 GMT
Subject: CN=ca88f0c07606c9ee34f1343f8f730fa476dedf98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a3:4a:fc:3f:80:89:ca:45:89:ad:9f:d8:18:
21:38:ab:f8:35:e5:2e:a7:8b:1d:2e:18:11:c9:5f:
e1:33:31:f4:06:cf:b0:43:7d:bd:47:5b:5c:91:b8:
bf:fb:21:21:90:a5:c6:3b:b2:f4:a7:5f:5e:76:96:
72:0d:f4:21:86:d6:98:be:1e:32:89:01:8d:36:5d:
de:ac:67:db:cc:23:e0:9e:e5:bb:98:eb:c9:7f:d5:
a2:41:f5:c9:64:8a:84:17:c9:3d:e9:9b:e4:0f:79:
cb:bd:14:03:bb:11:15:07:bf:11:be:6a:25:3c:fa:
95:52:b5:78:49:80:72:c3:77:fe:c1:b3:4e:f0:31:
e3:fb:71:ff:d2:a3:9f:91:0d:49:4c:0e:46:83:2b:
b5:ff:c9:f4:5f:93:da:e1:6b:49:cf:a2:93:a6:4c:
0e:f3:c7:fd:0a:93:40:13:09:c3:70:a0:9b:e9:60:
df:43:d5:0d:76:80:64:99:a6:9b:be:cf:c8:62:38:
4d:58:59:98:37:ec:47:d7:fe:34:12:87:0d:4d:fd:
f4:83:6f:1e:30:c3:d6:60:9b:13:19:68:13:94:58:
7d:57:35:20:e7:9d:61:2d:19:13:85:08:8f:22:b0:
d8:e1:d1:38:0e:b7:b9:e3:80:d8:77:38:4e:36:cf:
6e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:88:F0:C0:76:06:C9:EE:34:F1:34:3F:8F:73:0F:A4:76:DE:DF:98
X509v3 Authority Key Identifier:
keyid:42:E7:FC:6B:74:B2:B8:63:28:11:FD:FD:81:6D:03:E9:39:AF:D7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:fb:ba:8a:1b:56:b5:6c:55:59:fd:8a:ff:b2:b8:90:11:92:
8d:19:a9:6a:ab:6a:9c:20:75:ad:c2:da:1e:92:df:93:01:80:
d7:77:14:aa:cc:8c:e2:d6:81:cd:19:72:2a:a7:21:90:c8:dd:
ed:24:9d:a2:ad:72:71:29:2f:8b:ad:6f:8e:56:eb:d4:89:01:
c5:75:a7:ca:75:28:e1:ea:f1:cf:37:b5:f5:b5:af:7b:7c:7c:
34:18:b7:7d:65:bd:db:b7:1a:c1:2b:72:25:82:74:4d:7b:78:
04:08:c1:94:3e:8c:5a:55:f6:39:00:1d:7e:8a:55:8c:18:2e:
22:da:ca:38:91:a0:52:6d:16:cd:a0:37:38:63:51:b3:1e:be:
c5:f9:4d:ff:05:95:1c:4d:0e:8a:65:bd:a3:40:64:20:36:12:
4e:c3:32:d5:50:69:aa:89:7c:19:e8:2d:1b:9b:4d:79:5c:9e:
34:d8:93:42:2a:29:fd:87:41:27:a3:a9:87:cd:b1:1b:04:1a:
29:79:e5:cf:b2:b1:89:58:0c:b0:69:77:40:13:2a:87:a8:76:
04:8d:9f:78:00:a2:58:6f:33:89:ee:81:3a:2a:3a:35:0c:bd:
f8:cc:96:7e:be:ee:f1:0f:66:dd:76:ce:4a:de:c6:26:e3:63:
8e:4f:6e:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEoDCnqmA/u6OqSpcmBcHHXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyZTdmYzZiNzRiMmI4NjMyODExZmRmZDgxNmQwM2U5Mzlh
ZmQ3MTIwHhcNMjYxMDEwMjMwMDQ4WhcNMjYxMDExMjMwMDQ4WjAzMTEwLwYDVQQD
EyhjYTg4ZjBjMDc2MDZjOWVlMzRmMTM0M2Y4ZjczMGZhNDc2ZGVkZjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6NK/D+AicpFia2f2BghOKv4NeUu
p4sdLhgRyV/hMzH0Bs+wQ329R1tckbi/+yEhkKXGO7L0p19edpZyDfQhhtaYvh4y
iQGNNl3erGfbzCPgnuW7mOvJf9WiQfXJZIqEF8k96ZvkD3nLvRQDuxEVB78Rvmol
PPqVUrV4SYByw3f+wbNO8DHj+3H/0qOfkQ1JTA5Ggyu1/8n0X5Pa4WtJz6KTpkwO
88f9CpNAEwnDcKCb6WDfQ9UNdoBkmaabvs/IYjhNWFmYN+xH1/40EocNTf30g28e
MMPWYJsTGWgTlFh9VzUg551hLRkThQiPIrDY4dE4Dre544DYdzhONs9uKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMqI8MB2BsnuNPE0P49zD6R23t+YMB8GA1UdIwQY
MBaAFELn/Gt0srhjKBH9/YFtA+k5r9cSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXVmOGEzU3l1R01vRWYzOWdXMEQ2VG12MXhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9hN2NjZWQtZGE1NC00MDM3LWJjOWEt
MmY5MDZkYTJlZjIwLzEvUXVmOGEzU3l1R01vRWYzOWdXMEQ2VG12MXhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9hN2NjZWQtZGE1NC00MDM3LWJjOWEtMmY5MDZkYTJlZjIw
LzEvUXVmOGEzU3l1R01vRWYzOWdXMEQ2VG12MXhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM/u6ihtW
tWxVWf2K/7K4kBGSjRmpaqtqnCB1rcLaHpLfkwGA13cUqsyM4taBzRlyKqchkMjd
7SSdoq1ycSkvi61vjlbr1IkBxXWnynUo4erxzze19bWve3x8NBi3fWW927cawSty
JYJ0TXt4BAjBlD6MWlX2OQAdfopVjBguItrKOJGgUm0WzaA3OGNRsx6+xflN/wWV
HE0OimW9o0BkIDYSTsMy1VBpqol8GegtG5tNeVyeNNiTQiop/YdBJ6Oph82xGwQa
KXnlz7KxiVgMsGl3QBMqh6h2BI2feACiWG8zie6BOio6NQy9+MyWfr7u8Q9m3XbO
St7GJuNjjk9uJQ==
-----END CERTIFICATE-----
Generated at Sun Oct 11 06:31:46 2026 by rpki-client