
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/3e802e-fab8-44fc-991b-2b50693dbf95/1/quarBHvHMpbJcVvLrq4ukYMWt4o.mft
File: quarBHvHMpbJcVvLrq4ukYMWt4o.mft (raw, json)
Hash identifier: JY+O0F7A0BwJUth5uBHp8oW+MeBuZTxCU8AeB0ritt8=
Subject key identifier: 1C:27:2B:6B:32:A6:78:92:73:E6:6B:12:46:E2:40:E9:23:3F:E6:D3
Authority key identifier: AA:E6:AB:04:7B:C7:32:96:C9:71:5B:CB:AE:AE:2E:91:83:16:B7:8A
Certificate issuer: /CN=aae6ab047bc73296c9715bcbaeae2e918316b78a
Certificate serial: 01A16CB64DF5B6941517DB4CBFDA582DBC3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/quarBHvHMpbJcVvLrq4ukYMWt4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/3e802e-fab8-44fc-991b-2b50693dbf95/1/quarBHvHMpbJcVvLrq4ukYMWt4o.mft
Manifest number: 0A8B
Signing time: Sat 24 Oct 2026 07:00:49 +0000
Manifest this update: Sat 24 Oct 2026 07:00:49 +0000
Manifest next update: Sun 25 Oct 2026 07:00:49 +0000
Files and hashes: 1: WICYHswQgB3ANXpj2XMC_BWEC_s.roa (hash: ikH6R5G0JiDUZ3ms+Esb5y69pjV5ZuQpnPGnpa+MynM=)
2: quarBHvHMpbJcVvLrq4ukYMWt4o.crl (hash: xv0Sjfvl0QPSA/Fqn9aMy+w9r4LlmS96U0Kg1rtBKJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/3e802e-fab8-44fc-991b-2b50693dbf95/1/quarBHvHMpbJcVvLrq4ukYMWt4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/3e802e-fab8-44fc-991b-2b50693dbf95/1/quarBHvHMpbJcVvLrq4ukYMWt4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/quarBHvHMpbJcVvLrq4ukYMWt4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 04:42:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6c:b6:4d:f5:b6:94:15:17:db:4c:bf:da:58:2d:bc:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae6ab047bc73296c9715bcbaeae2e918316b78a
Validity
Not Before: Oct 24 07:00:49 2026 GMT
Not After : Oct 25 07:00:49 2026 GMT
Subject: CN=1c272b6b32a6789273e66b1246e240e9233fe6d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2a:b6:3f:f7:3e:34:bd:8f:c5:b4:3e:9f:5f:
2a:81:d5:fb:d6:d1:db:0b:7e:f5:f5:59:62:56:69:
b6:97:90:39:80:05:ef:61:22:bf:3d:6e:ad:a9:10:
38:62:a1:14:25:3e:e1:9d:11:45:e7:19:15:5c:8c:
d4:f3:bd:4e:40:d7:6b:49:36:b9:79:f5:48:07:df:
82:eb:fc:38:cc:15:b4:4a:e4:57:57:01:5f:79:57:
96:c0:a6:57:6d:38:ce:11:b1:b9:e8:28:4d:24:44:
01:14:ed:d6:37:eb:d6:c6:a4:39:e5:f7:f7:a5:61:
63:81:b1:fb:19:60:03:0e:c8:87:19:b9:23:99:11:
2e:0e:b4:4e:7c:3a:80:ac:b1:f5:c0:4a:97:48:b3:
46:f4:02:17:40:c8:bd:d4:2c:b0:11:47:41:aa:58:
dc:f1:80:a8:28:90:ae:56:b0:e7:8b:2b:12:ce:d0:
0e:01:46:35:66:b0:92:22:37:72:78:63:5c:25:c6:
d2:bc:91:cc:df:e5:03:44:c5:48:44:92:14:4e:21:
d4:bb:8b:6d:91:eb:0f:d6:ef:12:46:c8:fa:d2:5d:
58:59:55:c3:e4:84:52:ee:d3:c1:06:26:95:0d:7b:
aa:94:d8:22:5d:e7:4f:f3:b7:a1:39:47:26:24:79:
69:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:27:2B:6B:32:A6:78:92:73:E6:6B:12:46:E2:40:E9:23:3F:E6:D3
X509v3 Authority Key Identifier:
keyid:AA:E6:AB:04:7B:C7:32:96:C9:71:5B:CB:AE:AE:2E:91:83:16:B7:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quarBHvHMpbJcVvLrq4ukYMWt4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3e802e-fab8-44fc-991b-2b50693dbf95/1/quarBHvHMpbJcVvLrq4ukYMWt4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3e802e-fab8-44fc-991b-2b50693dbf95/1/quarBHvHMpbJcVvLrq4ukYMWt4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:aa:58:dc:75:53:02:33:8c:00:7f:9f:42:1e:1e:17:db:4c:
f2:07:16:69:60:0b:2e:9f:64:34:b9:0f:ed:58:55:93:22:ba:
bd:46:ea:9e:82:cb:79:32:da:72:63:8f:c8:02:37:41:f4:82:
68:bb:0c:ac:29:0f:ca:3b:ea:ee:c3:d3:c5:fe:81:1d:b1:c7:
64:99:c9:c0:ef:02:5b:04:ab:23:4d:6e:b7:4c:ab:f9:6a:ac:
98:9b:73:41:e4:1b:b4:cd:95:f1:98:14:fc:7f:78:8a:85:b4:
eb:f1:dd:08:67:3d:d3:d9:a7:ea:d3:25:f7:19:2c:ff:7f:1d:
7e:69:e5:44:83:f4:06:27:01:c1:08:a1:d4:1b:41:09:a8:19:
3d:d1:0e:12:07:83:48:4b:2b:94:15:7b:97:f9:c7:cc:99:12:
0a:28:ee:8e:ea:5d:bb:0d:c6:eb:82:9b:d0:a9:45:e9:e4:2b:
f4:27:2d:84:bf:8a:e1:f7:89:16:f0:ed:5b:3f:cb:31:62:a6:
34:b7:5d:e9:67:d3:38:73:99:c7:03:07:87:03:a7:41:36:05:
a7:3a:c2:58:6e:aa:53:59:bc:01:d7:bf:f3:dc:67:27:6f:28:
93:73:6a:75:b6:66:b0:23:c4:ec:bf:77:56:f6:38:c3:0f:20:
68:bc:ba:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:14:49 2026 by rpki-client