Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
File: qh3FCktSbfGOiwplZde51Yp10xU.mft (raw, json)
Hash identifier: VPkHV3W4O8OTDk55It2IjLi7Pn3QTauIgJw4urg9VLU=
Subject key identifier: CA:37:86:4E:44:60:62:C9:04:5F:F8:4C:80:F8:D3:A4:50:05:62:75
Authority key identifier: AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
Certificate issuer: /CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Certificate serial: 019FA0718CAB8415921CF5511D6D613266B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
Manifest number: 19DC
Signing time: Sun 26 Jul 2026 22:00:23 +0000
Manifest this update: Sun 26 Jul 2026 22:00:23 +0000
Manifest next update: Mon 27 Jul 2026 22:00:23 +0000
Files and hashes: 1: 2SpwrO6K0EQk8qayjEpp_xZ4_wg.roa (hash: /eCsd3Bhg9xFbAs/4U2EOV2JeWdYeKmfkwHyIef/wIk=)
2: BQI7xLWHF9ZNAK5nM3AaG90bJf4.roa (hash: tCWzvd6+gpJWA01AphfhvnpNLp2NN7klr1zWRXxTKKA=)
3: LnMBUYRb2MAMHOeFTnomV7j2CZs.roa (hash: +pH1K3ZbwRmdoZFv5Vag+ZbNrNoIYDgpbvJxI73PilY=)
4: P1Zvn3p5mBqcZYnmXTUNqZrZsuM.roa (hash: d6JzVBpRjcr/pOO8lJ/jWITXja7zGMD4ExKCM+u1meA=)
5: ZP3LCtKrBkzUel77FsVXywGgRk8.roa (hash: i1nVxawv2gpA1GeSUFY59H1040iN9e9Zdxt8Om5Sw0Y=)
6: bBojKVehlumh6Ast16SxahZ3K0s.roa (hash: 1tb0mGMov/yRUa9MAYEK5/9XOpWqU57O4jNArw90xkI=)
7: iycZ2loJdRjirtO_seZ634r8_x0.roa (hash: thC+/QzA8XYVNXPbLOpRmVtVajPX50NvJVqTRlkA1kA=)
8: qWf4zsAaLlxNBWnNkvng4-8Bvtw.roa (hash: 6AjOSzj9VMdiYdzdqisEkWs6TZcl3i5LO4GKBF6A3ik=)
9: qh3FCktSbfGOiwplZde51Yp10xU.crl (hash: zfnWjwaGeM1yFOVHHXdKrt39QtpUsRD9xg8MSDAkbw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:71:8c:ab:84:15:92:1c:f5:51:1d:6d:61:32:66:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Validity
Not Before: Jul 26 22:00:23 2026 GMT
Not After : Jul 27 22:00:23 2026 GMT
Subject: CN=ca37864e446062c9045ff84c80f8d3a450056275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3f:c5:29:52:d3:f8:44:8e:2b:31:70:b6:bc:
2f:be:6c:6c:e2:89:79:83:57:81:c6:df:b9:64:b7:
f3:0e:a4:9a:5a:52:65:3a:0d:28:71:7e:83:17:50:
3a:7c:cf:c9:e1:ae:c8:b4:7b:6b:16:33:9b:2b:2c:
0f:fc:71:42:87:31:39:f7:b0:94:75:5c:a1:2d:9a:
e3:ed:e8:11:ce:4b:50:e5:81:a3:57:a7:de:61:8f:
fb:22:70:a3:48:6d:24:a6:9b:15:39:b3:a4:24:f1:
b4:a3:74:81:92:53:c5:7a:44:e3:b8:5b:71:e4:ad:
fc:89:f9:48:9d:d5:ce:84:66:f4:00:40:8f:cc:02:
21:7f:3a:51:2b:09:0c:47:d1:ee:5b:17:b5:3b:eb:
c2:7f:b2:59:9a:49:f1:05:bc:f0:e3:d6:2b:ce:33:
1e:8d:09:3f:d5:ee:0d:b7:b1:ac:47:e0:27:ea:66:
f8:39:50:8f:40:a1:6a:e0:81:ee:16:27:13:8b:f8:
ff:3e:0b:f5:45:b3:65:29:78:96:d5:17:fb:70:1b:
2c:de:9a:cf:11:98:56:34:7c:e8:82:1b:ef:cb:d8:
80:af:c3:30:74:c1:ba:72:4b:6d:75:74:e7:ad:f4:
de:e1:6c:87:bb:f7:44:43:66:67:08:8b:50:2b:9f:
88:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:37:86:4E:44:60:62:C9:04:5F:F8:4C:80:F8:D3:A4:50:05:62:75
X509v3 Authority Key Identifier:
keyid:AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:94:27:0f:72:a1:eb:c7:77:fa:2e:79:7c:a1:b7:75:15:86:
80:bb:25:9c:e3:4d:ff:12:7c:55:f0:ac:1d:63:1f:4a:87:3f:
f7:1a:41:11:60:1d:b4:4e:4c:48:0e:a6:15:a4:14:05:18:95:
06:df:57:37:3d:67:38:9b:ab:92:6f:36:2e:4e:0c:67:b8:f7:
4f:91:c6:c1:01:cd:51:ad:f4:fa:1c:71:21:11:11:44:41:2c:
26:a5:4a:c1:63:3e:42:78:61:e3:68:e4:33:32:ed:3c:77:f1:
b3:7b:74:76:94:b1:d5:77:8f:d1:eb:75:b5:ac:83:6b:24:45:
c9:1e:45:78:95:90:78:29:d5:2e:9d:9a:a5:9e:86:fe:99:31:
5f:29:ec:9a:96:4b:05:c3:9e:99:5b:f6:b4:f7:1f:11:4e:c8:
2a:44:6a:65:6b:ab:57:6a:2c:2d:f8:fe:32:b1:a3:ee:f3:82:
d8:bd:c9:42:14:2a:e6:fb:8a:a0:1c:07:06:2a:28:a9:09:f4:
cc:9b:11:65:80:c9:92:da:49:ab:09:63:a9:92:e5:8f:54:60:
1a:11:cf:23:58:ad:0e:b9:50:c7:af:6b:6f:0a:76:49:77:17:
e7:12:5f:d0:f4:47:25:67:c4:ec:38:b5:cd:d2:ef:cd:a8:25:
ce:d1:34:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 23:37:37 2026 by rpki-client