Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
File: Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft (raw, json)
Hash identifier: Obfw1TGEZjxs+5qQGIYKqgJ+xD1EtK7T0LRGqdUNhKY=
Subject key identifier: 05:FA:4F:70:24:14:5D:60:8E:4D:90:89:42:80:A8:3D:E6:A9:2A:68
Authority key identifier: 42:E7:FC:6B:74:B2:B8:63:28:11:FD:FD:81:6D:03:E9:39:AF:D7:12
Certificate issuer: /CN=42e7fc6b74b2b8632811fdfd816d03e939afd712
Certificate serial: 01A0C3A05ADDF1BF0CBC3EE193A50D5D305F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
Manifest number: 0D32
Signing time: Mon 21 Sep 2026 11:01:01 +0000
Manifest this update: Mon 21 Sep 2026 11:01:01 +0000
Manifest next update: Tue 22 Sep 2026 11:01:01 +0000
Files and hashes: 1: KCr3XPDeTlWKO-bPI6_H_Cx1WhQ.roa (hash: c/VQLHXOcWoXXd7hiKFZggUX28ZnnohkNilU13VWMV0=)
2: Pto6FquyBgXB9mpBfegUiyI0BQI.asa (hash: LwajpKgENBPuuXSnNqC2HHRSrry8yjmbPcDy2aqHuWk=)
3: Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl (hash: dj/uADjRoDaRcPUbQ557MHZUh6VmhWiSZ299Qnd1gW4=)
4: nP5QqrRlk9ayuFdWmJ8gpHg12-8.roa (hash: cmDZ0ANMnR/j0RTklp+THy4q0G8bAX7M0+UsqPCsIKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:a0:5a:dd:f1:bf:0c:bc:3e:e1:93:a5:0d:5d:30:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e7fc6b74b2b8632811fdfd816d03e939afd712
Validity
Not Before: Sep 21 11:01:01 2026 GMT
Not After : Sep 22 11:01:01 2026 GMT
Subject: CN=05fa4f7024145d608e4d90894280a83de6a92a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:07:c1:c2:bf:7d:52:53:df:94:b1:64:8b:56:
d5:9a:14:53:5e:f8:90:eb:62:fb:88:5a:c6:ef:41:
e2:60:75:58:ea:c9:6c:13:14:54:c8:43:b0:e6:26:
5f:d3:dd:4c:eb:71:da:d1:85:0f:f0:90:c6:aa:1d:
79:87:2b:b4:05:64:75:27:90:ff:6d:d9:f1:ec:f1:
59:62:e1:05:10:1a:0f:8c:29:7d:81:3e:8d:a8:c4:
eb:fc:02:e1:7d:4a:64:ef:cc:8f:55:39:96:f8:e8:
ec:01:04:f4:a4:c8:97:91:29:46:d4:5b:c4:a2:82:
34:0d:ea:b2:ad:01:b5:e5:9e:33:7c:00:52:86:ab:
70:ae:c3:75:4c:68:be:06:e2:1c:4b:e2:ee:ca:ef:
4a:80:78:69:c9:13:ba:2e:a7:06:0c:d2:36:60:d6:
45:ff:e7:57:06:d1:50:a4:5f:61:8f:88:14:b7:35:
f2:0b:b3:f1:0c:73:a0:46:ff:b0:65:e9:51:15:80:
bf:3c:25:4c:97:41:b5:34:90:e8:66:46:de:67:35:
1d:50:ea:9b:63:80:1a:19:a8:64:af:93:97:0e:eb:
42:d7:0e:5e:73:39:54:70:1c:db:49:bf:98:d3:81:
34:6d:54:44:21:8f:00:77:73:39:39:9e:0a:a1:02:
02:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:FA:4F:70:24:14:5D:60:8E:4D:90:89:42:80:A8:3D:E6:A9:2A:68
X509v3 Authority Key Identifier:
keyid:42:E7:FC:6B:74:B2:B8:63:28:11:FD:FD:81:6D:03:E9:39:AF:D7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:e1:a7:ec:cd:5f:b7:fb:49:a1:36:49:ec:ff:73:28:b7:37:
05:22:32:04:db:f2:a4:76:24:24:ef:c4:e7:76:8f:8b:82:c7:
29:2f:10:17:67:af:a3:0d:66:ab:56:8e:42:97:b7:a9:85:23:
ce:ee:33:53:7c:04:b6:53:a9:53:24:52:b1:26:4a:1f:f6:26:
e5:a5:9f:55:73:c9:dc:a9:aa:e5:d2:d5:cc:81:69:de:70:17:
28:ca:eb:e6:ca:f5:6b:de:f8:3c:d4:b3:45:57:80:04:6f:d6:
da:a0:6c:1a:1a:aa:8a:d2:6d:5f:b7:7b:ab:73:31:be:57:86:
41:0d:a5:b3:57:86:a0:b5:86:c3:ab:5c:2d:7c:3d:eb:09:c2:
5c:a8:a7:7a:86:6f:5d:2f:9d:af:27:36:f7:84:a7:51:c5:9a:
78:8f:87:f7:09:9d:15:a1:02:53:97:b1:db:dd:c4:22:90:60:
63:d6:24:aa:79:d3:e9:4e:4a:47:9c:07:70:6b:db:94:6d:ca:
e4:40:4c:9a:5d:fd:3f:51:67:1a:32:67:08:48:11:1a:b0:94:
30:ef:d7:ec:f8:59:fb:12:42:02:13:f6:2a:b1:45:0b:a6:2f:
f7:d7:cc:4c:5b:c5:dc:10:ce:f1:66:ba:72:c9:e2:2b:79:93:
42:23:1d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:45:19 2026 by rpki-client