Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
File: Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft (raw, json)
Hash identifier: K/s49Y6lISozEZtAKciBdxSSTWIeBrb2f+5DEliXT3o=
Subject key identifier: E9:6C:3C:82:D8:C6:8D:63:AD:6C:D3:D4:E0:B7:FD:6F:17:AC:28:EF
Authority key identifier: 42:E7:FC:6B:74:B2:B8:63:28:11:FD:FD:81:6D:03:E9:39:AF:D7:12
Certificate issuer: /CN=42e7fc6b74b2b8632811fdfd816d03e939afd712
Certificate serial: 019E1D59B9A4F6B279582157DD77869BFCC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
Manifest number: 0BD2
Signing time: Tue 12 May 2026 18:01:19 +0000
Manifest this update: Tue 12 May 2026 18:01:19 +0000
Manifest next update: Wed 13 May 2026 18:01:19 +0000
Files and hashes: 1: KCr3XPDeTlWKO-bPI6_H_Cx1WhQ.roa (hash: c/VQLHXOcWoXXd7hiKFZggUX28ZnnohkNilU13VWMV0=)
2: Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl (hash: CEhUcFLAgL6Bjyr9Z3SLmIepGcRYB2CXWgRd7i1mVck=)
3: Tr4wiRoRfvJvFB5ZbM0sqvD35vA.asa (hash: OndDrzFgYP1E7JjXKJ2d2BNCF0Kss6Gv5D3BbTzjQxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:b9:a4:f6:b2:79:58:21:57:dd:77:86:9b:fc:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e7fc6b74b2b8632811fdfd816d03e939afd712
Validity
Not Before: May 12 18:01:19 2026 GMT
Not After : May 13 18:01:19 2026 GMT
Subject: CN=e96c3c82d8c68d63ad6cd3d4e0b7fd6f17ac28ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a9:a5:86:0b:a2:4d:0a:15:92:0a:df:d6:61:
a9:7d:ee:71:7f:8c:0e:e0:e6:33:47:0c:84:17:d2:
d7:85:eb:e2:95:70:92:6e:34:85:91:7f:f0:50:1a:
6d:51:16:d5:76:11:b4:65:7d:5b:47:12:ac:42:17:
b5:3d:4b:66:33:04:12:b7:b5:ce:4b:78:80:92:85:
b4:83:86:04:f6:f7:0f:10:5b:29:6e:ee:8b:bd:a9:
44:f3:71:c9:9a:96:2c:11:3c:94:04:50:b6:64:58:
38:8c:b9:9d:c9:ed:ea:77:08:9d:0a:b1:63:d4:58:
39:f6:15:81:4f:25:6f:1c:2d:c7:6b:6d:3b:2e:fa:
e4:3a:c0:5b:11:9d:e8:c2:16:f7:27:69:32:d8:fb:
1b:e6:a5:80:45:7d:7f:2c:22:2b:0b:78:19:dd:d1:
e8:3a:7c:98:85:0b:02:2d:12:f8:e6:59:3d:7f:4e:
72:57:60:ff:db:34:a3:23:36:34:9b:c0:4d:a3:07:
69:87:0a:2f:3f:68:52:be:56:c8:ae:49:f7:3a:e2:
74:e4:72:fc:cb:3e:1f:ec:08:c4:ab:c0:5e:5e:06:
aa:e1:f1:7b:4a:c7:c7:d7:7f:49:e4:7a:07:df:6a:
10:14:35:2e:37:f4:d1:d2:00:df:0f:6a:c8:1e:3a:
2a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:6C:3C:82:D8:C6:8D:63:AD:6C:D3:D4:E0:B7:FD:6F:17:AC:28:EF
X509v3 Authority Key Identifier:
keyid:42:E7:FC:6B:74:B2:B8:63:28:11:FD:FD:81:6D:03:E9:39:AF:D7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:ad:31:12:47:89:43:fa:62:34:21:40:74:75:8b:ac:ba:ea:
10:e3:a1:1c:3b:6e:23:1f:10:e5:39:07:ea:56:3e:0e:ba:14:
e4:c5:71:6f:af:50:b2:cd:e8:e1:92:e7:ed:8e:0f:e1:3d:49:
3f:8d:46:b5:14:57:23:6b:c2:9c:a9:61:47:67:00:ff:8d:46:
35:5b:67:82:d5:a2:59:3f:12:dc:a1:fe:21:e9:ac:b3:80:ec:
bc:0e:a5:91:02:2a:75:4b:3e:39:b6:09:ad:04:fb:11:14:bb:
4b:fd:95:f7:96:34:6f:48:e4:17:cd:82:da:09:e3:dd:b7:c3:
18:e7:9e:8b:7b:7e:f8:af:3b:21:83:bc:f8:45:28:cc:0b:c1:
c9:d0:83:4c:ca:3f:bf:55:79:1c:0e:4f:54:78:88:75:83:c8:
81:72:51:4e:77:5e:83:ca:03:fe:0e:59:8e:0c:26:88:7c:f1:
69:3e:2b:22:55:99:6b:b8:f4:68:90:8d:b0:b9:ba:ae:d2:47:
fe:b8:d6:37:19:6e:43:9e:95:d2:00:51:c2:32:01:b8:b5:15:
68:31:4f:70:cd:6e:c3:33:e4:91:ad:60:bc:ea:1f:58:cd:12:
bd:d2:a3:ba:31:35:59:e1:82:b7:ca:75:74:da:a6:88:59:03:
2c:d0:53:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dWbmk9rJ5WCFX3XeGm/zJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyZTdmYzZiNzRiMmI4NjMyODExZmRmZDgxNmQwM2U5Mzlh
ZmQ3MTIwHhcNMjYwNTEyMTgwMTE5WhcNMjYwNTEzMTgwMTE5WjAzMTEwLwYDVQQD
EyhlOTZjM2M4MmQ4YzY4ZDYzYWQ2Y2QzZDRlMGI3ZmQ2ZjE3YWMyOGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqmlhguiTQoVkgrf1mGpfe5xf4wO
4OYzRwyEF9LXhevilXCSbjSFkX/wUBptURbVdhG0ZX1bRxKsQhe1PUtmMwQSt7XO
S3iAkoW0g4YE9vcPEFspbu6LvalE83HJmpYsETyUBFC2ZFg4jLmdye3qdwidCrFj
1Fg59hWBTyVvHC3Ha207LvrkOsBbEZ3owhb3J2ky2Psb5qWARX1/LCIrC3gZ3dHo
OnyYhQsCLRL45lk9f05yV2D/2zSjIzY0m8BNowdphwovP2hSvlbIrkn3OuJ05HL8
yz4f7AjEq8BeXgaq4fF7SsfH139J5HoH32oQFDUuN/TR0gDfD2rIHjoqgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOlsPILYxo1jrWzT1OC3/W8XrCjvMB8GA1UdIwQY
MBaAFELn/Gt0srhjKBH9/YFtA+k5r9cSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXVmOGEzU3l1R01vRWYzOWdXMEQ2VG12MXhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9hN2NjZWQtZGE1NC00MDM3LWJjOWEt
MmY5MDZkYTJlZjIwLzEvUXVmOGEzU3l1R01vRWYzOWdXMEQ2VG12MXhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9hN2NjZWQtZGE1NC00MDM3LWJjOWEtMmY5MDZkYTJlZjIw
LzEvUXVmOGEzU3l1R01vRWYzOWdXMEQ2VG12MXhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApq0xEkeJ
Q/piNCFAdHWLrLrqEOOhHDtuIx8Q5TkH6lY+DroU5MVxb69Qss3o4ZLn7Y4P4T1J
P41GtRRXI2vCnKlhR2cA/41GNVtngtWiWT8S3KH+Iemss4DsvA6lkQIqdUs+ObYJ
rQT7ERS7S/2V95Y0b0jkF82C2gnj3bfDGOeei3t++K87IYO8+EUozAvBydCDTMo/
v1V5HA5PVHiIdYPIgXJRTndeg8oD/g5ZjgwmiHzxaT4rIlWZa7j0aJCNsLm6rtJH
/rjWNxluQ56V0gBRwjIBuLUVaDFPcM1uwzPkka1gvOofWM0SvdKjujE1WeGCt8p1
dNqmiFkDLNBT9Q==
-----END CERTIFICATE-----
Generated at Wed May 13 02:17:45 2026 by rpki-client