Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.mft
File: q3vjT10mnaUCqmg0i_B7ktksDMQ.mft (raw, json)
Hash identifier: oUCSIn+x6T3OiOP5vyVvkJeQc4kL4YLxigqEWoOLUYI=
Subject key identifier: CB:8E:97:00:91:AC:86:3E:2A:CA:EE:D8:28:AA:EF:6C:89:08:B7:2C
Authority key identifier: AB:7B:E3:4F:5D:26:9D:A5:02:AA:68:34:8B:F0:7B:92:D9:2C:0C:C4
Certificate issuer: /CN=ab7be34f5d269da502aa68348bf07b92d92c0cc4
Certificate serial: 019DCF071CE55AC4B8E2414816EA008D546D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3vjT10mnaUCqmg0i_B7ktksDMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.mft
Manifest number: 03E3
Signing time: Mon 27 Apr 2026 13:00:43 +0000
Manifest this update: Mon 27 Apr 2026 13:00:43 +0000
Manifest next update: Tue 28 Apr 2026 13:00:43 +0000
Files and hashes: 1: pz8CoQ1N2M8bH21qMBTISpQnRdk.roa (hash: EBcWBMCcIbmPQ9/rGL1rZqapFT721I6YKN15f9JRiiQ=)
2: q3vjT10mnaUCqmg0i_B7ktksDMQ.crl (hash: uXPM4AL+vQAtMMX0yZyA+THUpEoU0In73wgJKcGeJB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3vjT10mnaUCqmg0i_B7ktksDMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:07:1c:e5:5a:c4:b8:e2:41:48:16:ea:00:8d:54:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7be34f5d269da502aa68348bf07b92d92c0cc4
Validity
Not Before: Apr 27 13:00:43 2026 GMT
Not After : Apr 28 13:00:43 2026 GMT
Subject: CN=cb8e970091ac863e2acaeed828aaef6c8908b72c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:54:15:80:6a:30:4e:e4:67:d3:0a:86:c9:69:
e2:13:d6:b8:0b:9a:d9:4c:09:e5:65:56:68:a8:28:
a3:e8:48:9c:7d:04:28:4a:30:49:a5:52:08:3b:59:
20:c0:5b:cc:0d:da:b7:e5:9f:51:8c:47:0f:d8:50:
66:4c:6f:9a:99:c1:91:93:72:04:ad:fe:af:2f:3b:
27:41:f2:e3:85:42:e7:f4:11:6d:af:c2:91:58:6e:
e5:ce:ae:41:8c:cf:a6:95:33:1f:84:83:16:94:79:
73:7d:56:0d:63:d8:6a:39:99:97:90:d9:e9:46:d7:
64:9a:25:93:f6:bc:c8:bf:d0:8d:c6:5b:fc:d3:07:
29:6b:14:8d:f6:09:d0:16:cf:eb:0c:15:e7:99:e8:
e5:b4:b6:90:b2:17:ae:4b:58:2c:11:3f:ba:a7:c4:
58:b8:5c:06:17:1f:25:f6:58:80:d1:03:95:74:f8:
ad:86:f1:4b:32:f5:a7:e2:59:fc:2b:e3:6d:19:86:
38:57:67:94:d6:02:15:c4:cb:c0:ec:1a:6a:90:06:
18:45:9e:86:36:4b:98:a3:09:cb:6b:c2:31:ae:32:
09:77:34:d5:5c:01:49:b2:f8:8f:16:98:99:40:36:
64:06:59:e4:bd:7d:ba:dc:be:6e:95:da:6d:c1:10:
eb:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:8E:97:00:91:AC:86:3E:2A:CA:EE:D8:28:AA:EF:6C:89:08:B7:2C
X509v3 Authority Key Identifier:
keyid:AB:7B:E3:4F:5D:26:9D:A5:02:AA:68:34:8B:F0:7B:92:D9:2C:0C:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3vjT10mnaUCqmg0i_B7ktksDMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:d0:2c:b6:25:0f:b1:45:cc:80:23:32:64:aa:98:1b:76:d6:
96:29:6d:68:ce:05:36:50:4f:3c:bc:50:c3:dd:07:86:7a:0c:
8f:cf:7d:72:57:6e:5f:80:86:e4:d0:69:62:56:da:e0:93:5b:
31:9b:77:c1:c4:5c:8a:b1:3c:dd:8d:34:47:81:2f:b2:fb:af:
a1:41:3b:f2:87:3b:57:d6:18:da:63:c8:24:3e:fc:4f:32:2d:
08:b8:94:28:e6:3a:90:52:8e:ac:22:4a:b9:65:0f:6b:73:53:
ad:35:92:f0:25:20:1e:4b:34:58:73:b5:8c:4a:93:36:23:1b:
14:1b:8c:78:c5:60:8c:b7:d6:b5:6b:f9:ee:c6:44:ac:d1:08:
da:50:f7:c8:e1:cc:fc:f6:80:b9:06:bf:c9:7b:68:42:31:40:
09:0e:44:62:d9:57:17:45:75:b2:55:13:d7:30:e1:7e:40:56:
23:0c:bf:d5:06:20:c0:31:f6:24:8f:9d:03:dd:bf:35:b3:0e:
80:d6:c0:ca:02:7d:ed:4a:68:9b:a0:54:ad:0e:2f:9a:1f:07:
fc:51:41:e3:df:ab:3f:a5:fb:ec:e5:5a:d3:a6:e8:fd:64:cb:
ae:1b:69:a6:ee:43:2c:76:a3:0a:1d:ca:77:16:93:4e:cc:ab:
ed:09:96:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 17:20:43 2026 by rpki-client