Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
File: Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft (raw, json)
Hash identifier: Baxzvlm1oVGQqfPkkSj2jQYbWK4D3qheCkkynR+nJCE=
Subject key identifier: 3B:3F:AE:04:F8:65:17:44:58:4B:79:6B:FF:5F:74:9C:80:4A:9C:EF
Authority key identifier: 42:E7:FC:6B:74:B2:B8:63:28:11:FD:FD:81:6D:03:E9:39:AF:D7:12
Certificate issuer: /CN=42e7fc6b74b2b8632811fdfd816d03e939afd712
Certificate serial: 019F8E34BD58D14D455CDBCCB53846BF89B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
Manifest number: 0C91
Signing time: Thu 23 Jul 2026 09:00:48 +0000
Manifest this update: Thu 23 Jul 2026 09:00:48 +0000
Manifest next update: Fri 24 Jul 2026 09:00:48 +0000
Files and hashes: 1: KCr3XPDeTlWKO-bPI6_H_Cx1WhQ.roa (hash: c/VQLHXOcWoXXd7hiKFZggUX28ZnnohkNilU13VWMV0=)
2: Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl (hash: 681NDpKBgqjcvW1htFwtEy2PuG7w+4dSsJi+0xrP890=)
3: Tr4wiRoRfvJvFB5ZbM0sqvD35vA.asa (hash: OndDrzFgYP1E7JjXKJ2d2BNCF0Kss6Gv5D3BbTzjQxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 09:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:34:bd:58:d1:4d:45:5c:db:cc:b5:38:46:bf:89:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e7fc6b74b2b8632811fdfd816d03e939afd712
Validity
Not Before: Jul 23 09:00:48 2026 GMT
Not After : Jul 24 09:00:48 2026 GMT
Subject: CN=3b3fae04f8651744584b796bff5f749c804a9cef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:43:16:c7:6d:1c:7f:c7:7a:93:cb:80:06:06:
c7:5a:e3:38:c5:f4:74:f8:91:4b:9e:63:e3:37:cd:
c5:b9:f4:15:c2:14:62:95:6a:54:c0:f8:39:bb:c8:
af:3a:04:27:82:9d:8a:02:41:1d:b6:f9:d8:a3:b6:
93:22:38:11:90:2a:9d:4a:00:fc:43:50:d3:c1:cc:
25:02:c3:be:c3:7f:17:2e:2a:17:0a:42:c5:a4:9a:
c6:c6:f4:77:14:f4:0b:57:c9:2a:f9:6b:ef:54:01:
c5:e7:9b:7a:9c:13:a5:ac:8f:f0:e0:eb:df:e8:d5:
07:6d:82:83:ea:4a:da:af:ac:ba:a3:4f:f2:51:8a:
7a:e3:b0:b0:50:45:40:43:89:34:96:b9:2e:53:78:
4a:a5:a2:51:67:3f:d7:5d:62:2c:9f:f6:3e:79:fe:
fe:92:95:91:99:64:97:85:3b:58:6e:0f:ee:db:c3:
7f:87:eb:32:c2:78:b9:1c:87:86:a8:74:8b:5a:cd:
d1:16:fd:13:20:da:a1:fa:4a:e8:c8:9c:5d:93:ad:
db:9b:17:66:f9:e3:1e:d4:82:2b:2a:94:5e:b6:e7:
30:48:45:4a:8f:a6:43:c1:85:7c:38:de:71:e5:c5:
8c:72:8e:5c:6b:64:64:ca:e4:7e:c3:7f:0e:d1:3a:
4c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:3F:AE:04:F8:65:17:44:58:4B:79:6B:FF:5F:74:9C:80:4A:9C:EF
X509v3 Authority Key Identifier:
keyid:42:E7:FC:6B:74:B2:B8:63:28:11:FD:FD:81:6D:03:E9:39:AF:D7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:80:73:c1:88:07:3e:5c:0f:2b:ba:f7:bb:e8:df:e3:6b:64:
90:66:d6:13:fe:3b:94:17:14:b0:66:fb:0c:03:27:6a:23:bf:
98:86:0a:4c:f4:ac:aa:f0:87:eb:d8:0b:8a:a3:e4:f9:43:4a:
a8:fe:fc:27:e7:13:45:01:6d:a5:ac:ce:9d:ec:07:cd:d4:22:
a7:1f:31:ee:de:a8:0b:18:8f:0b:ed:d2:af:f6:28:04:10:89:
07:9b:8b:66:52:4a:74:16:52:49:6d:98:b7:33:71:cb:dd:1b:
7b:11:67:e1:17:26:4e:81:2d:1d:06:86:21:b3:eb:8d:38:22:
ae:d4:cf:84:6a:a5:7e:9f:78:cc:7e:ef:06:73:26:cb:74:a5:
3d:92:c6:37:3b:82:f4:93:2b:e9:02:f7:a8:eb:55:f9:ae:bf:
e2:cd:c8:3c:cb:56:e4:ba:6a:c4:30:52:54:36:5c:4d:57:91:
93:0b:0b:df:9a:4a:fa:18:5c:5e:bf:83:ad:ba:22:99:2d:fb:
00:33:8e:ef:d3:b2:3a:2a:78:83:6c:f5:29:bd:d7:fd:04:e2:
9a:06:44:f3:29:38:b8:40:0a:82:1e:58:ed:08:68:8c:c1:28:
12:f1:2e:77:aa:93:36:31:6b:f4:4b:2f:5f:38:ef:f5:b9:89:
4c:c8:3e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:07:45 2026 by rpki-client