Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
File: Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft (raw, json)
Hash identifier: 7nZN3tfeE8N84Rb7l30r4PXvM4b8kFsx1tghbaoL3I0=
Subject key identifier: 7B:33:9B:28:89:28:8A:94:E5:EA:D6:06:FC:4B:B7:03:02:BA:EC:4F
Authority key identifier: 42:E7:FC:6B:74:B2:B8:63:28:11:FD:FD:81:6D:03:E9:39:AF:D7:12
Certificate issuer: /CN=42e7fc6b74b2b8632811fdfd816d03e939afd712
Certificate serial: 019FA93E5347504631A6227F12E371C5346D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
Manifest number: 0C9F
Signing time: Tue 28 Jul 2026 15:01:01 +0000
Manifest this update: Tue 28 Jul 2026 15:01:01 +0000
Manifest next update: Wed 29 Jul 2026 15:01:01 +0000
Files and hashes: 1: KCr3XPDeTlWKO-bPI6_H_Cx1WhQ.roa (hash: c/VQLHXOcWoXXd7hiKFZggUX28ZnnohkNilU13VWMV0=)
2: Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl (hash: 7NT848+57GqpQumBZSPvYQE+B0tMGUrc8LilJFV0L00=)
3: Tr4wiRoRfvJvFB5ZbM0sqvD35vA.asa (hash: OndDrzFgYP1E7JjXKJ2d2BNCF0Kss6Gv5D3BbTzjQxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:53:47:50:46:31:a6:22:7f:12:e3:71:c5:34:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e7fc6b74b2b8632811fdfd816d03e939afd712
Validity
Not Before: Jul 28 15:01:01 2026 GMT
Not After : Jul 29 15:01:01 2026 GMT
Subject: CN=7b339b2889288a94e5ead606fc4bb70302baec4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ef:68:d5:7b:c0:df:44:61:d6:46:3e:55:9e:
e1:57:16:88:fe:84:4f:1f:01:3b:1e:6f:42:ea:18:
53:4e:0b:68:b1:4b:92:08:9c:14:03:e2:3d:65:80:
de:01:6a:47:f0:9a:25:10:c7:79:72:8d:c6:e1:1c:
ea:d8:44:44:b1:87:d6:36:ac:2f:c0:7f:90:41:55:
95:b4:53:20:60:b2:9a:9f:7f:1a:80:40:b8:41:53:
39:ae:22:ef:c8:cc:85:bf:ef:70:76:4c:fd:cf:16:
77:06:b3:9e:20:44:c6:c1:24:94:60:3a:01:b6:db:
e9:45:85:14:be:13:69:35:cc:15:d7:c3:85:bd:bd:
f1:72:ae:f6:26:82:72:7c:05:b0:0d:53:bf:4d:5c:
a8:4e:77:7a:de:b3:84:72:f2:e4:3b:c6:f6:b2:52:
11:61:de:5c:9b:1d:31:0e:b1:a1:9f:24:84:07:bf:
52:ae:2a:89:45:e8:32:17:22:9f:e0:f1:24:7e:2d:
13:a3:b5:f7:9a:c2:0b:70:98:1e:fd:05:bb:4a:b2:
29:a1:6c:2a:36:a0:d5:22:cc:29:22:27:9c:88:cf:
dd:e4:b2:ff:0f:1f:c3:68:4b:3d:fe:d8:75:b1:be:
a3:68:94:a2:28:39:a7:fd:2e:e5:c8:80:bf:61:03:
d6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:33:9B:28:89:28:8A:94:E5:EA:D6:06:FC:4B:B7:03:02:BA:EC:4F
X509v3 Authority Key Identifier:
keyid:42:E7:FC:6B:74:B2:B8:63:28:11:FD:FD:81:6D:03:E9:39:AF:D7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:6c:2f:b2:aa:33:9b:6b:7a:7f:45:15:00:81:46:fa:09:f9:
4c:c4:83:56:3d:58:51:56:c9:4e:87:2f:79:95:0a:82:8d:a2:
2d:2f:1a:18:bd:11:dc:79:f2:eb:69:29:74:53:1a:11:c9:ee:
f9:52:73:4e:d4:de:1b:94:54:86:5a:fe:0b:38:73:bd:53:ec:
86:bc:91:18:a5:8a:3c:c2:2a:66:54:34:3a:ff:52:1c:ef:5e:
b4:c3:45:8e:15:95:be:65:c3:c2:3b:e8:e6:95:20:d4:06:cd:
48:36:6f:db:ea:ab:86:6a:3b:05:ab:19:ce:6f:02:00:dc:be:
7c:bc:54:dc:e1:26:dc:ab:bb:fb:75:84:4f:89:60:42:91:0c:
79:1e:fd:cd:18:a5:7a:d6:57:c4:62:5e:fd:a9:df:2b:6f:29:
3e:eb:24:fe:00:56:07:3d:a1:46:31:e3:26:9d:e4:b3:d9:46:
79:e4:fa:62:9a:60:f1:ab:d2:a0:89:87:1d:25:65:1d:31:82:
0d:79:23:ce:82:cf:2b:06:7c:6f:9b:51:45:6a:df:3d:84:d6:
02:bb:c9:cf:3e:c5:4c:a7:c3:90:7b:c8:2e:6f:ad:d9:cb:7b:
8f:45:33:b5:e6:b9:45:16:b3:f2:35:0e:9a:22:d4:98:e5:c9:
ae:54:87:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pPlNHUEYxpiJ/EuNxxTRtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyZTdmYzZiNzRiMmI4NjMyODExZmRmZDgxNmQwM2U5Mzlh
ZmQ3MTIwHhcNMjYwNzI4MTUwMTAxWhcNMjYwNzI5MTUwMTAxWjAzMTEwLwYDVQQD
Eyg3YjMzOWIyODg5Mjg4YTk0ZTVlYWQ2MDZmYzRiYjcwMzAyYmFlYzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsO9o1XvA30Rh1kY+VZ7hVxaI/oRP
HwE7Hm9C6hhTTgtosUuSCJwUA+I9ZYDeAWpH8JolEMd5co3G4Rzq2EREsYfWNqwv
wH+QQVWVtFMgYLKan38agEC4QVM5riLvyMyFv+9wdkz9zxZ3BrOeIETGwSSUYDoB
ttvpRYUUvhNpNcwV18OFvb3xcq72JoJyfAWwDVO/TVyoTnd63rOEcvLkO8b2slIR
Yd5cmx0xDrGhnySEB79SriqJRegyFyKf4PEkfi0To7X3msILcJge/QW7SrIpoWwq
NqDVIswpIieciM/d5LL/Dx/DaEs9/th1sb6jaJSiKDmn/S7lyIC/YQPWVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHszmyiJKIqU5erWBvxLtwMCuuxPMB8GA1UdIwQY
MBaAFELn/Gt0srhjKBH9/YFtA+k5r9cSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXVmOGEzU3l1R01vRWYzOWdXMEQ2VG12MXhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9hN2NjZWQtZGE1NC00MDM3LWJjOWEt
MmY5MDZkYTJlZjIwLzEvUXVmOGEzU3l1R01vRWYzOWdXMEQ2VG12MXhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9hN2NjZWQtZGE1NC00MDM3LWJjOWEtMmY5MDZkYTJlZjIw
LzEvUXVmOGEzU3l1R01vRWYzOWdXMEQ2VG12MXhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEGwvsqoz
m2t6f0UVAIFG+gn5TMSDVj1YUVbJTocveZUKgo2iLS8aGL0R3Hny62kpdFMaEcnu
+VJzTtTeG5RUhlr+CzhzvVPshryRGKWKPMIqZlQ0Ov9SHO9etMNFjhWVvmXDwjvo
5pUg1AbNSDZv2+qrhmo7BasZzm8CANy+fLxU3OEm3Ku7+3WET4lgQpEMeR79zRil
etZXxGJe/anfK28pPusk/gBWBz2hRjHjJp3ks9lGeeT6Yppg8avSoImHHSVlHTGC
DXkjzoLPKwZ8b5tRRWrfPYTWArvJzz7FTKfDkHvILm+t2ct7j0Uztea5RRaz8jUO
miLUmOXJrlSHSw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:53:05 2026 by rpki-client