Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
File: Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft (raw, json)
Hash identifier: EFGLBjGna/+lDuTOh0nf1nIslBvqk8alJLB6Ek7baUk=
Subject key identifier: F4:59:01:9E:88:11:F0:A3:92:16:F1:D0:0B:ED:AA:B5:D4:5A:83:D0
Authority key identifier: 42:E7:FC:6B:74:B2:B8:63:28:11:FD:FD:81:6D:03:E9:39:AF:D7:12
Certificate issuer: /CN=42e7fc6b74b2b8632811fdfd816d03e939afd712
Certificate serial: 019D262852A67AFB1D7E1D65FA9BA2CB73B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
Manifest number: 0B52
Signing time: Wed 25 Mar 2026 18:01:09 +0000
Manifest this update: Wed 25 Mar 2026 18:01:09 +0000
Manifest next update: Thu 26 Mar 2026 18:01:09 +0000
Files and hashes: 1: KCr3XPDeTlWKO-bPI6_H_Cx1WhQ.roa (hash: c/VQLHXOcWoXXd7hiKFZggUX28ZnnohkNilU13VWMV0=)
2: Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl (hash: ogLdA8quFofDiUmTZTMUMBb7JjH3WsSRwWsqBo0gcqg=)
3: Tr4wiRoRfvJvFB5ZbM0sqvD35vA.asa (hash: OndDrzFgYP1E7JjXKJ2d2BNCF0Kss6Gv5D3BbTzjQxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:52:a6:7a:fb:1d:7e:1d:65:fa:9b:a2:cb:73:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e7fc6b74b2b8632811fdfd816d03e939afd712
Validity
Not Before: Mar 25 18:01:09 2026 GMT
Not After : Mar 26 18:01:09 2026 GMT
Subject: CN=f459019e8811f0a39216f1d00bedaab5d45a83d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:76:01:47:f9:50:96:bc:13:09:90:2f:b5:32:
17:26:f9:bb:90:45:6c:fd:2d:3b:1f:6e:d4:4c:53:
13:89:f8:bc:da:1a:66:d4:b7:98:9c:06:c6:01:28:
86:75:a5:0f:c2:1e:3b:58:90:7f:10:1f:b7:5e:63:
96:a7:b6:5b:b4:d7:c5:a5:a3:e5:23:36:cf:e8:f2:
7f:e8:9c:5e:33:5e:08:cf:ed:ff:db:7d:5c:c0:71:
a8:4a:70:dd:d5:f2:05:1e:49:59:fd:46:bd:9d:79:
e3:a8:c4:9c:73:38:38:8f:f8:8f:cc:82:bf:0c:ed:
f2:df:81:05:3f:53:62:96:77:2a:5a:cc:b4:6f:e3:
a1:21:4f:db:ce:aa:b2:93:bd:26:6c:3d:68:48:bf:
08:eb:0f:78:cc:65:8e:d9:72:c9:1a:cb:e2:2e:e6:
99:ce:c7:76:d9:69:3e:fc:2e:08:56:c6:01:b0:d8:
68:2a:ef:82:5f:4a:47:e5:5e:e3:0b:e9:97:42:9a:
d1:c0:95:25:c0:f7:aa:7f:81:7e:b4:eb:c3:f9:0f:
62:ab:f3:12:a6:28:52:13:62:5e:4e:31:48:49:9d:
ca:ab:89:c0:b7:85:42:b8:84:f6:0f:a7:1a:03:7d:
9b:26:51:58:c0:5a:a1:51:7e:83:2f:4c:6a:38:ae:
5d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:59:01:9E:88:11:F0:A3:92:16:F1:D0:0B:ED:AA:B5:D4:5A:83:D0
X509v3 Authority Key Identifier:
keyid:42:E7:FC:6B:74:B2:B8:63:28:11:FD:FD:81:6D:03:E9:39:AF:D7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:c4:c8:30:53:fd:26:bd:2c:9c:f8:00:4a:72:53:1a:c9:31:
4e:86:90:a3:2c:71:e0:5d:a6:75:48:e0:0e:ce:8b:ff:16:af:
4a:6e:c8:d6:5f:ec:35:34:23:54:6f:ed:ab:43:c6:86:b8:b7:
2b:8a:0e:83:5d:7a:8d:c2:cb:ed:52:bf:e8:e6:67:ee:f0:87:
17:62:c0:eb:81:e3:af:d0:8f:5e:6a:78:0a:5c:59:25:77:6e:
7f:16:67:44:14:cb:c2:f7:c0:a5:f4:47:91:a5:77:a1:49:da:
cf:93:c8:78:8e:e8:1b:dd:f2:22:7c:6c:a4:c8:c2:92:eb:b6:
b8:65:98:cd:a4:06:43:56:98:67:ae:7f:89:15:f3:ad:a6:92:
b5:d1:29:aa:05:46:f9:01:1e:ff:8b:0c:e3:b1:7f:04:b7:66:
40:c3:5f:03:74:21:70:1a:92:97:3c:ed:a0:6f:8d:70:4b:b3:
b7:13:a4:28:33:81:b0:16:10:ae:0f:fc:23:6d:a4:de:09:e0:
d7:56:bc:26:af:14:c0:6c:3d:ff:5f:55:4f:93:72:13:52:25:
ef:51:e1:0f:8d:ba:55:08:53:81:f4:af:09:4e:0a:d6:b0:6d:
b6:51:56:20:20:f6:92:66:91:cb:e6:cd:76:18:ab:bd:c3:15:
48:78:bc:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:42:23 2026 by rpki-client