Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
File: qh3FCktSbfGOiwplZde51Yp10xU.mft (raw, json)
Hash identifier: 3McwHkubbMhAVYsirdVnbX82FlvxxEytOtKGG01e6AI=
Subject key identifier: DF:D2:3D:42:07:2E:F6:C9:BA:08:6B:1D:85:FC:B9:6F:60:02:30:27
Authority key identifier: AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
Certificate issuer: /CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Certificate serial: 019EB6C5E64B1011729E0393AD9EFEB6F61C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
Manifest number: 1963
Signing time: Thu 11 Jun 2026 13:01:23 +0000
Manifest this update: Thu 11 Jun 2026 13:01:23 +0000
Manifest next update: Fri 12 Jun 2026 13:01:23 +0000
Files and hashes: 1: 2SpwrO6K0EQk8qayjEpp_xZ4_wg.roa (hash: /eCsd3Bhg9xFbAs/4U2EOV2JeWdYeKmfkwHyIef/wIk=)
2: BQI7xLWHF9ZNAK5nM3AaG90bJf4.roa (hash: tCWzvd6+gpJWA01AphfhvnpNLp2NN7klr1zWRXxTKKA=)
3: LnMBUYRb2MAMHOeFTnomV7j2CZs.roa (hash: +pH1K3ZbwRmdoZFv5Vag+ZbNrNoIYDgpbvJxI73PilY=)
4: P1Zvn3p5mBqcZYnmXTUNqZrZsuM.roa (hash: d6JzVBpRjcr/pOO8lJ/jWITXja7zGMD4ExKCM+u1meA=)
5: ZP3LCtKrBkzUel77FsVXywGgRk8.roa (hash: i1nVxawv2gpA1GeSUFY59H1040iN9e9Zdxt8Om5Sw0Y=)
6: bBojKVehlumh6Ast16SxahZ3K0s.roa (hash: 1tb0mGMov/yRUa9MAYEK5/9XOpWqU57O4jNArw90xkI=)
7: iycZ2loJdRjirtO_seZ634r8_x0.roa (hash: thC+/QzA8XYVNXPbLOpRmVtVajPX50NvJVqTRlkA1kA=)
8: qWf4zsAaLlxNBWnNkvng4-8Bvtw.roa (hash: 6AjOSzj9VMdiYdzdqisEkWs6TZcl3i5LO4GKBF6A3ik=)
9: qh3FCktSbfGOiwplZde51Yp10xU.crl (hash: O+YbnI3qDQCVNazJnuAz7zfOi5UZv57tScuMHumD28s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:c5:e6:4b:10:11:72:9e:03:93:ad:9e:fe:b6:f6:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Validity
Not Before: Jun 11 13:01:23 2026 GMT
Not After : Jun 12 13:01:23 2026 GMT
Subject: CN=dfd23d42072ef6c9ba086b1d85fcb96f60023027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0b:75:36:a8:ea:97:0e:80:cf:e5:60:c4:03:
aa:fe:dc:f2:95:e7:b0:15:30:62:17:d7:da:2d:19:
3d:71:bb:4f:2a:7f:aa:68:7e:db:91:80:0f:23:90:
a4:14:b9:18:d6:2e:d1:13:38:5a:95:c0:00:7c:c6:
16:d6:f9:ae:dd:dd:11:6b:62:f5:ce:6b:dc:89:3c:
6d:b8:e7:11:a8:1b:9d:3f:28:a1:6d:04:29:ba:6a:
ab:e7:8b:9f:59:20:61:13:e9:b3:71:53:f7:2f:0d:
5e:4c:5f:bf:df:c6:fc:26:60:2c:4f:db:47:21:fe:
0e:9d:92:b9:a8:7f:ba:42:fe:ea:02:36:a7:e8:a2:
3a:a2:73:dc:96:8a:1c:f4:04:3d:5d:24:e2:02:56:
44:32:94:18:2a:2d:95:22:5f:fb:01:3e:89:e1:72:
78:6a:99:cf:3f:fe:f6:06:54:e8:07:9e:83:5f:71:
d5:bc:77:2e:8c:36:5a:7c:22:bf:cb:91:26:c0:3f:
7a:48:0c:b8:54:c0:00:a2:19:6a:58:b7:64:8e:b4:
71:76:1e:7f:ba:66:68:d7:97:3e:0e:7d:32:a2:e6:
c8:89:fb:1e:71:6d:92:c5:7b:fa:33:b5:13:28:91:
ad:4f:30:0f:85:a0:de:39:1e:9e:3a:ae:ec:fb:1c:
07:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D2:3D:42:07:2E:F6:C9:BA:08:6B:1D:85:FC:B9:6F:60:02:30:27
X509v3 Authority Key Identifier:
keyid:AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:3d:d0:cf:69:66:0d:20:9e:d5:f7:71:00:93:84:d8:ee:96:
0b:70:9c:6f:1b:fc:2a:ff:5c:a1:85:e0:41:13:6e:13:79:81:
24:06:54:79:90:20:6a:f2:ae:9a:ac:80:a8:50:89:f0:87:bf:
70:c6:9b:36:8f:bc:1f:b8:df:30:ee:0f:34:8b:a9:25:15:9c:
1c:77:b9:65:64:97:07:62:21:02:a9:b7:f8:d0:94:7c:ef:81:
bf:b4:46:f4:b0:2f:75:95:e3:6f:a3:10:76:bc:37:f9:3a:ef:
af:99:39:d4:4e:55:35:14:73:93:b8:c9:0f:91:21:30:50:ef:
d3:82:b9:81:48:bc:bd:b0:f7:0c:c7:c8:e7:d3:e5:1d:6f:e3:
27:10:7a:b1:34:60:b7:e9:7a:60:71:e6:8b:a9:56:fd:8e:fe:
e4:38:57:86:bd:5a:21:ae:a6:40:a0:1d:54:02:52:e7:91:8e:
bc:ed:df:bb:ad:4d:10:29:5f:48:48:cc:da:04:c2:be:c4:2a:
ad:42:1c:b8:f3:7f:2d:a4:dd:69:9d:ba:ee:8b:ce:f3:a0:2d:
7c:c9:3f:55:41:55:e0:ae:5f:6e:f1:9b:97:6f:f7:28:89:85:
8d:ac:99:e6:79:27:ca:67:e7:85:ee:53:a3:ba:24:29:0d:cc:
b8:0b:56:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 19:03:09 2026 by rpki-client