Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
File: Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft (raw, json)
Hash identifier: DZCgjTSAx813JhPgggjYq4DVQSEXrwzN+oN2JECrp5I=
Subject key identifier: 2A:5A:5F:42:6B:52:10:37:EC:4A:DF:98:72:27:27:3C:92:AA:00:75
Authority key identifier: 42:E7:FC:6B:74:B2:B8:63:28:11:FD:FD:81:6D:03:E9:39:AF:D7:12
Certificate issuer: /CN=42e7fc6b74b2b8632811fdfd816d03e939afd712
Certificate serial: 019CA8A0E533C7740161E16C7887E0579977
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
Manifest number: 0B11
Signing time: Sun 01 Mar 2026 09:00:42 +0000
Manifest this update: Sun 01 Mar 2026 09:00:42 +0000
Manifest next update: Mon 02 Mar 2026 09:00:42 +0000
Files and hashes: 1: KCr3XPDeTlWKO-bPI6_H_Cx1WhQ.roa (hash: c/VQLHXOcWoXXd7hiKFZggUX28ZnnohkNilU13VWMV0=)
2: Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl (hash: 86FK1NzOVi7ZVQNmsHmjCEzBAQInBk0aaQiqDsrikWk=)
3: Tr4wiRoRfvJvFB5ZbM0sqvD35vA.asa (hash: OndDrzFgYP1E7JjXKJ2d2BNCF0Kss6Gv5D3BbTzjQxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:a0:e5:33:c7:74:01:61:e1:6c:78:87:e0:57:99:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e7fc6b74b2b8632811fdfd816d03e939afd712
Validity
Not Before: Mar 1 09:00:42 2026 GMT
Not After : Mar 2 09:00:42 2026 GMT
Subject: CN=2a5a5f426b521037ec4adf987227273c92aa0075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b8:62:9b:f8:94:e5:f4:8c:e6:da:6d:e6:3e:
2b:a3:a2:6a:cb:5d:8a:24:26:04:f5:ba:cf:df:58:
1b:8b:0b:f3:39:76:d9:fe:9f:9f:fb:f2:b6:72:a6:
b5:77:7a:d9:21:2b:67:61:7f:d5:62:eb:bb:f4:f5:
67:b7:c1:b9:9f:c8:12:ee:83:ee:2b:67:30:26:8e:
49:87:c2:8a:33:75:87:c9:b2:6e:95:62:b6:05:0d:
cb:56:4d:dc:ea:b5:d5:ae:64:9e:8e:a0:ea:ce:ef:
4a:51:46:43:f2:ca:d4:ef:d6:1f:2c:8f:d6:fd:32:
87:c4:1c:e8:ff:28:a0:ef:f3:bc:55:fd:01:2c:88:
b3:6a:0c:4b:52:8a:3f:03:3f:34:4e:86:0e:b7:ab:
55:ef:75:3b:fa:da:6d:a8:23:b1:9d:64:df:50:1a:
50:98:8a:8d:07:21:7c:eb:e9:8d:91:b8:9f:09:33:
84:09:1d:60:fe:c7:86:bd:15:55:fa:c1:5f:7e:99:
ae:25:9b:c6:1c:b6:ea:ad:16:4c:05:47:4d:ac:cd:
9d:18:33:e6:ab:d3:b9:26:34:b3:37:e4:2b:65:1d:
e5:aa:47:f8:ac:df:cd:b4:96:a6:2c:ff:05:be:fc:
a7:65:22:ab:cd:ce:64:c5:ec:fc:85:7b:a3:94:8b:
c7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:5A:5F:42:6B:52:10:37:EC:4A:DF:98:72:27:27:3C:92:AA:00:75
X509v3 Authority Key Identifier:
keyid:42:E7:FC:6B:74:B2:B8:63:28:11:FD:FD:81:6D:03:E9:39:AF:D7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:e5:27:4b:b1:b6:42:64:7b:69:4f:cd:84:36:3a:c9:c7:69:
7e:c3:cb:b3:c9:7e:db:0e:ca:a9:31:e8:6f:16:99:ff:7f:a5:
48:a7:11:d7:4f:b8:9a:5d:71:4f:31:7e:ce:a5:23:70:25:5a:
9c:db:c6:89:bf:71:d9:43:4f:08:21:72:11:9b:0c:7e:6e:1d:
66:63:c4:16:26:4e:61:ff:9d:58:89:c6:45:95:68:42:69:97:
db:f1:26:1e:a5:56:32:a4:83:5e:41:1d:6b:da:7f:d3:66:ff:
1e:64:ab:63:89:61:f9:9a:55:8e:46:50:1e:d8:4b:8b:36:9d:
e6:2a:a9:fe:e2:1f:eb:bf:e1:ef:8d:7c:ec:a4:73:20:dc:90:
9e:52:f8:f6:f7:44:54:5c:1d:83:fa:46:9c:1b:f8:90:73:46:
81:8d:2b:90:13:60:a0:ad:11:50:e9:38:fa:e4:f9:e3:3c:72:
b3:16:43:68:f5:88:65:af:ad:3c:e2:78:ce:45:b0:ee:0e:ff:
98:22:dc:60:d0:05:5c:3b:f1:b0:e7:11:54:10:01:a8:eb:d1:
cd:dc:4b:36:cc:a7:49:6a:f5:5e:b5:0e:71:dc:2c:24:f6:e3:
61:20:5f:0b:a2:c3:39:6f:7c:cf:44:75:af:87:a9:eb:7d:a3:
40:a7:ea:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:44:37 2026 by rpki-client