Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
File: Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft (raw, json)
Hash identifier: ez1mNh640Cl3kx0KPgbQykVfIUXSE8Zm0uHiSUE1Qds=
Subject key identifier: DE:E5:53:DD:93:B0:23:D5:9C:72:D9:A1:49:75:C0:E7:10:27:A7:46
Authority key identifier: 42:E7:FC:6B:74:B2:B8:63:28:11:FD:FD:81:6D:03:E9:39:AF:D7:12
Certificate issuer: /CN=42e7fc6b74b2b8632811fdfd816d03e939afd712
Certificate serial: 019D9818D45DDA2685C54EF6D9EC33F99B3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
Manifest number: 0B8D
Signing time: Thu 16 Apr 2026 21:00:57 +0000
Manifest this update: Thu 16 Apr 2026 21:00:57 +0000
Manifest next update: Fri 17 Apr 2026 21:00:57 +0000
Files and hashes: 1: KCr3XPDeTlWKO-bPI6_H_Cx1WhQ.roa (hash: c/VQLHXOcWoXXd7hiKFZggUX28ZnnohkNilU13VWMV0=)
2: Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl (hash: Ltz/Jt+ATNUAGu2jakKXv4At0mXl9WMfuBmKsnOxh5s=)
3: Tr4wiRoRfvJvFB5ZbM0sqvD35vA.asa (hash: OndDrzFgYP1E7JjXKJ2d2BNCF0Kss6Gv5D3BbTzjQxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:d4:5d:da:26:85:c5:4e:f6:d9:ec:33:f9:9b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e7fc6b74b2b8632811fdfd816d03e939afd712
Validity
Not Before: Apr 16 21:00:57 2026 GMT
Not After : Apr 17 21:00:57 2026 GMT
Subject: CN=dee553dd93b023d59c72d9a14975c0e71027a746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ce:42:b8:99:0b:5c:4b:8d:96:97:c6:6c:4a:
09:cb:f7:97:ce:95:e4:83:3d:02:e4:21:75:6c:ce:
c9:aa:8c:88:c6:23:60:ca:1f:ea:82:f6:10:f5:f6:
2d:31:71:50:e4:bc:86:03:2c:f7:45:cf:9e:6a:f7:
65:b5:ef:d6:5c:46:c3:08:35:02:8b:25:06:3a:49:
00:0b:bf:68:0b:83:b6:fa:61:ee:2e:c2:ef:ae:60:
97:8a:44:38:73:dc:e4:7d:b6:cf:91:73:20:5c:2b:
d0:24:2c:71:a5:4a:32:b1:72:dd:be:3b:99:3a:cd:
fc:b2:a7:da:8d:a0:c7:b4:f2:dd:7c:5f:9b:75:ca:
ce:02:f1:cc:f7:f4:6d:07:04:d3:b8:06:b3:ea:33:
45:64:df:22:e3:6c:35:a1:85:a3:08:64:3b:e4:fc:
81:a9:f7:d5:1d:bc:97:6c:32:8b:0a:98:95:12:dc:
30:06:5c:de:e2:4d:84:bf:dc:53:67:c4:96:54:ab:
e7:46:84:51:88:ab:00:d9:88:e2:8f:f8:88:da:5e:
44:18:1d:65:f0:ac:22:81:f3:ac:c7:f7:db:34:31:
c4:6c:ce:62:98:90:b5:ac:69:ec:87:2f:35:74:93:
2c:b2:1d:c9:80:8f:50:4e:21:9d:47:f5:50:13:f6:
49:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E5:53:DD:93:B0:23:D5:9C:72:D9:A1:49:75:C0:E7:10:27:A7:46
X509v3 Authority Key Identifier:
keyid:42:E7:FC:6B:74:B2:B8:63:28:11:FD:FD:81:6D:03:E9:39:AF:D7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:89:57:bd:d9:99:67:db:78:27:0d:dd:d8:ed:5b:17:2f:7d:
d7:d7:74:52:6f:2a:ca:63:82:f3:29:4e:b8:dd:6f:b5:2b:01:
67:8a:a5:a2:6c:62:49:61:53:c6:45:1f:e9:09:9c:7c:1b:02:
b5:19:c9:48:83:ba:b7:9f:87:99:30:ed:4d:d9:e8:46:ee:96:
8f:f6:45:bf:66:5a:78:92:82:d8:2a:d1:9a:53:72:bd:2a:09:
dd:36:a4:dc:c6:f5:3d:49:e4:06:f7:56:07:a3:7f:5a:53:3b:
f2:03:77:f0:1f:8c:46:a5:5a:02:a5:c9:3b:91:ea:68:e9:80:
de:a9:e6:14:f6:92:a4:7a:a7:02:76:8a:72:c7:a6:c7:68:6d:
da:9c:cd:66:ff:30:87:06:08:c0:5e:0a:ed:aa:36:72:ff:cb:
fa:da:30:27:7b:83:53:7f:28:13:b3:df:04:36:35:d9:81:48:
96:93:bb:af:31:5d:2b:99:6f:71:73:56:c0:a5:53:22:f2:97:
f3:40:bf:0d:b6:43:80:19:7f:51:ab:d3:b0:0b:8f:13:8a:a8:
c9:e0:96:f5:af:44:84:5c:ee:d7:b8:de:97:ac:c3:36:04:22:
d2:10:24:8f:00:87:c7:fd:1f:e1:9f:2e:5e:d2:ba:06:8a:34:
59:da:f7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:09:44 2026 by rpki-client