Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
File: qh3FCktSbfGOiwplZde51Yp10xU.mft (raw, json)
Hash identifier: NoIzv64ZU8SR2rewl7mEBfKLRSbRCf4Bpn+zrJnxZ9g=
Subject key identifier: C4:E8:32:42:40:61:57:D5:B6:71:A7:9B:EC:19:32:21:E8:EF:CC:82
Authority key identifier: AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
Certificate issuer: /CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Certificate serial: 019DCD196A5BE78CC34D028EB3E2753666C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
Manifest number: 18EA
Signing time: Mon 27 Apr 2026 04:01:27 +0000
Manifest this update: Mon 27 Apr 2026 04:01:27 +0000
Manifest next update: Tue 28 Apr 2026 04:01:27 +0000
Files and hashes: 1: 2SpwrO6K0EQk8qayjEpp_xZ4_wg.roa (hash: /eCsd3Bhg9xFbAs/4U2EOV2JeWdYeKmfkwHyIef/wIk=)
2: BQI7xLWHF9ZNAK5nM3AaG90bJf4.roa (hash: tCWzvd6+gpJWA01AphfhvnpNLp2NN7klr1zWRXxTKKA=)
3: LnMBUYRb2MAMHOeFTnomV7j2CZs.roa (hash: +pH1K3ZbwRmdoZFv5Vag+ZbNrNoIYDgpbvJxI73PilY=)
4: P1Zvn3p5mBqcZYnmXTUNqZrZsuM.roa (hash: d6JzVBpRjcr/pOO8lJ/jWITXja7zGMD4ExKCM+u1meA=)
5: ZP3LCtKrBkzUel77FsVXywGgRk8.roa (hash: i1nVxawv2gpA1GeSUFY59H1040iN9e9Zdxt8Om5Sw0Y=)
6: bBojKVehlumh6Ast16SxahZ3K0s.roa (hash: 1tb0mGMov/yRUa9MAYEK5/9XOpWqU57O4jNArw90xkI=)
7: iycZ2loJdRjirtO_seZ634r8_x0.roa (hash: thC+/QzA8XYVNXPbLOpRmVtVajPX50NvJVqTRlkA1kA=)
8: qWf4zsAaLlxNBWnNkvng4-8Bvtw.roa (hash: 6AjOSzj9VMdiYdzdqisEkWs6TZcl3i5LO4GKBF6A3ik=)
9: qh3FCktSbfGOiwplZde51Yp10xU.crl (hash: SAQxGpFI8uMAEGl6t5OfG6cnPamPJwti6lXHR0c+Otk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 04:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:19:6a:5b:e7:8c:c3:4d:02:8e:b3:e2:75:36:66:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Validity
Not Before: Apr 27 04:01:27 2026 GMT
Not After : Apr 28 04:01:27 2026 GMT
Subject: CN=c4e83242406157d5b671a79bec193221e8efcc82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d7:77:7d:3b:2b:66:05:13:61:98:7f:63:18:
54:47:cb:72:d6:9d:3a:84:50:62:b7:2b:8d:37:cb:
b3:da:20:a1:56:39:1b:bf:11:cd:8a:38:5c:ca:7b:
62:02:40:a6:86:6a:83:5a:4a:15:a3:ce:49:b4:88:
f8:c5:07:7c:5f:a5:8d:1a:6e:35:a8:1c:98:06:7b:
0b:68:9a:5b:cf:0d:6b:05:3d:1f:e9:bf:98:d9:a9:
02:cf:2b:25:a4:44:77:2a:bb:a9:9a:0b:e8:0f:83:
09:4e:6c:d1:e0:2c:eb:1b:f1:08:34:cd:63:2a:3a:
37:74:ba:94:7d:91:2a:f4:41:9d:5f:16:3c:be:99:
83:15:4f:7c:3b:8e:09:c8:5e:91:de:79:cb:e4:8c:
32:d4:3b:e3:af:8c:34:59:9f:7b:19:40:2b:58:65:
92:a7:15:ce:49:cc:fa:bf:24:62:06:99:51:32:51:
f9:40:82:9a:21:53:d7:b8:bd:45:d0:3d:ab:f2:88:
82:43:bb:bd:62:34:70:26:ea:c2:a3:92:c1:f2:66:
7c:1b:56:85:a6:15:2b:59:ed:f4:c0:39:23:21:ee:
80:d7:ea:31:f3:0e:8a:77:b8:42:7a:b2:25:35:41:
a8:88:86:d5:85:0e:c9:ab:8f:cc:07:c6:a6:e0:52:
c4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E8:32:42:40:61:57:D5:B6:71:A7:9B:EC:19:32:21:E8:EF:CC:82
X509v3 Authority Key Identifier:
keyid:AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:95:eb:e7:5c:ef:c1:1a:19:41:77:70:39:cf:7e:c3:f3:d1:
ef:33:a9:89:e5:a4:a2:85:9d:9d:9a:22:d7:3d:1b:33:8d:f3:
e1:75:f9:2f:ac:25:ef:a6:bd:a2:bb:0f:e8:5c:c2:2a:02:8d:
fc:f2:88:72:66:b6:a2:2b:62:1f:2d:f3:63:bf:82:dd:c3:e9:
75:29:ea:63:01:0b:23:e4:a6:20:79:1f:66:04:39:19:e1:29:
19:0f:07:ad:99:d7:6c:fc:04:d9:c9:61:8e:3e:bb:e0:d4:f6:
96:f5:a9:58:78:33:c9:8c:7e:c2:e9:12:3b:68:5c:da:47:a9:
9a:7d:f0:c3:f2:93:30:a1:c2:f4:65:b4:5f:30:09:f1:fc:e3:
13:28:6d:9c:c7:55:e2:a8:cf:ff:54:64:ed:8d:87:aa:02:e0:
c8:24:ea:5a:03:12:e5:e5:34:12:89:90:99:cb:ab:4d:aa:d0:
1a:35:bd:94:07:d8:b2:5a:2c:e3:22:fd:51:8e:f4:ae:6d:25:
3f:23:f2:92:d0:2b:ae:b3:bf:bd:1a:16:19:ea:8c:dc:66:c0:
ac:42:40:32:53:e8:fd:22:42:68:0e:00:bf:96:a7:aa:15:7e:
48:7b:43:f3:87:d7:99:14:72:ea:57:2f:d0:83:1e:93:61:c5:
00:0c:02:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:56:03 2026 by rpki-client