Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
File: Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft (raw, json)
Hash identifier: IOA6VVAjp6dSwSfXxTP63LyLDEcMcpR/+bSOIoOeo2k=
Subject key identifier: E0:A8:EB:B8:18:AD:1F:D1:8E:AC:C0:A2:02:D3:EE:D7:4C:2A:94:18
Authority key identifier: 42:E7:FC:6B:74:B2:B8:63:28:11:FD:FD:81:6D:03:E9:39:AF:D7:12
Certificate issuer: /CN=42e7fc6b74b2b8632811fdfd816d03e939afd712
Certificate serial: 01A0C1B177C54565E9C11A7C04EB99890E47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
Manifest number: 0D31
Signing time: Mon 21 Sep 2026 02:00:28 +0000
Manifest this update: Mon 21 Sep 2026 02:00:28 +0000
Manifest next update: Tue 22 Sep 2026 02:00:28 +0000
Files and hashes: 1: KCr3XPDeTlWKO-bPI6_H_Cx1WhQ.roa (hash: c/VQLHXOcWoXXd7hiKFZggUX28ZnnohkNilU13VWMV0=)
2: Pto6FquyBgXB9mpBfegUiyI0BQI.asa (hash: LwajpKgENBPuuXSnNqC2HHRSrry8yjmbPcDy2aqHuWk=)
3: Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl (hash: 2WQ4fdi0QN2xY8QRZnhHPNduPg1f4MdqUIaORolrqlQ=)
4: nP5QqrRlk9ayuFdWmJ8gpHg12-8.roa (hash: cmDZ0ANMnR/j0RTklp+THy4q0G8bAX7M0+UsqPCsIKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:b1:77:c5:45:65:e9:c1:1a:7c:04:eb:99:89:0e:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e7fc6b74b2b8632811fdfd816d03e939afd712
Validity
Not Before: Sep 21 02:00:28 2026 GMT
Not After : Sep 22 02:00:28 2026 GMT
Subject: CN=e0a8ebb818ad1fd18eacc0a202d3eed74c2a9418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:17:ed:d8:ac:20:a4:8d:3b:86:dd:41:20:30:
80:30:49:84:d6:0d:a8:69:e1:cc:61:6e:06:4b:7d:
26:ae:1b:5d:84:fb:29:65:79:66:20:c5:d9:f0:ae:
4e:53:bb:59:cc:65:0b:9d:a7:24:39:df:c3:e7:c6:
cc:71:47:08:da:48:40:5d:86:40:a8:d6:90:9e:8b:
81:db:87:d9:9c:27:18:33:fa:1c:24:90:a5:b6:e0:
59:57:7f:43:7b:26:24:ee:65:d2:6f:1a:03:a3:d6:
c4:3e:b9:ad:ee:a3:b0:34:c8:f4:92:77:81:d0:8f:
f3:c4:83:56:d1:95:dd:37:ba:c2:24:99:f7:67:e4:
14:f7:55:73:d7:08:51:7e:ed:22:db:4b:93:3b:50:
2c:4a:b8:03:cf:90:23:58:01:dc:4f:40:ee:94:92:
32:96:c5:06:93:0c:d3:a6:7b:a3:ae:da:95:89:43:
c8:c5:b3:b2:ce:28:16:16:d4:70:8b:23:21:ad:32:
4f:ca:aa:84:d4:aa:90:eb:a2:40:4f:f2:ae:a3:74:
ba:18:82:f9:42:4f:90:91:fa:c6:30:cf:0f:90:37:
7c:94:45:df:8d:55:88:9d:8f:14:c6:30:2d:12:9f:
99:52:54:f6:bd:75:29:ec:07:c6:5b:d6:10:54:65:
b8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A8:EB:B8:18:AD:1F:D1:8E:AC:C0:A2:02:D3:EE:D7:4C:2A:94:18
X509v3 Authority Key Identifier:
keyid:42:E7:FC:6B:74:B2:B8:63:28:11:FD:FD:81:6D:03:E9:39:AF:D7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:93:3c:20:17:cc:80:9c:7b:f2:7c:3a:1b:e7:56:d5:7a:07:
2d:58:3b:85:a5:ab:8f:e2:0a:13:7c:c4:56:83:64:2b:04:72:
bf:df:66:22:f5:32:f1:d1:14:0b:1b:0b:43:19:37:de:03:05:
ef:2c:0c:f8:2c:c7:f9:3a:5e:c0:cf:92:1f:53:1e:45:e2:9f:
8d:f9:47:72:e2:5d:38:91:c2:70:a5:06:26:c6:60:2a:40:85:
53:ab:6c:99:0f:2d:7e:2e:23:8e:3e:73:9a:5e:20:37:ac:81:
1a:49:aa:f4:f9:da:d8:58:1b:e6:27:b3:07:b2:9a:04:dc:44:
4c:8e:24:d7:7d:76:80:84:94:f8:20:fc:82:0d:b0:e7:9b:84:
c9:f6:cf:94:8a:27:a6:3f:57:fd:5c:94:fb:9d:a4:a1:d9:f7:
a6:0d:e3:ae:b4:42:b4:9f:6c:36:d5:a3:c9:3c:51:ce:8e:09:
75:52:70:9a:3b:33:09:d8:9d:3e:3c:77:35:a5:39:fc:15:8e:
42:45:bd:95:90:df:9f:8b:42:76:b8:b8:2e:be:a9:37:4e:bb:
51:2a:6f:58:0c:fe:44:d3:97:13:14:ff:bb:71:0d:9b:2b:60:
76:57:cd:1c:95:96:08:a8:5c:5f:2b:be:98:06:9a:45:94:9a:
67:89:94:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:45:21 2026 by rpki-client