Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
File: qh3FCktSbfGOiwplZde51Yp10xU.mft (raw, json)
Hash identifier: v8gG0383FlVKK3L5b4jq0HPl7Qi/1BR4Pm8xgnFquWA=
Subject key identifier: 58:FC:C9:16:36:06:E0:3E:09:CE:F7:27:38:F3:1A:D3:E1:F4:B2:D5
Authority key identifier: AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
Certificate issuer: /CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Certificate serial: 01A17A3AA1EE4312CD858C2D2F6DE4F996FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
Manifest number: 1AD2
Signing time: Mon 26 Oct 2026 22:00:25 +0000
Manifest this update: Mon 26 Oct 2026 22:00:25 +0000
Manifest next update: Tue 27 Oct 2026 22:00:25 +0000
Files and hashes: 1: 1A3M617VwrbmalIgAjoMypqQULs.roa (hash: YIHAhwkDZTgNA7/i+1iNC8t5clQJMXMLVmrl1H4s4ho=)
2: 2SpwrO6K0EQk8qayjEpp_xZ4_wg.roa (hash: /eCsd3Bhg9xFbAs/4U2EOV2JeWdYeKmfkwHyIef/wIk=)
3: BQI7xLWHF9ZNAK5nM3AaG90bJf4.roa (hash: tCWzvd6+gpJWA01AphfhvnpNLp2NN7klr1zWRXxTKKA=)
4: LnMBUYRb2MAMHOeFTnomV7j2CZs.roa (hash: +pH1K3ZbwRmdoZFv5Vag+ZbNrNoIYDgpbvJxI73PilY=)
5: P1Zvn3p5mBqcZYnmXTUNqZrZsuM.roa (hash: d6JzVBpRjcr/pOO8lJ/jWITXja7zGMD4ExKCM+u1meA=)
6: ZP3LCtKrBkzUel77FsVXywGgRk8.roa (hash: i1nVxawv2gpA1GeSUFY59H1040iN9e9Zdxt8Om5Sw0Y=)
7: bBojKVehlumh6Ast16SxahZ3K0s.roa (hash: 1tb0mGMov/yRUa9MAYEK5/9XOpWqU57O4jNArw90xkI=)
8: iycZ2loJdRjirtO_seZ634r8_x0.roa (hash: thC+/QzA8XYVNXPbLOpRmVtVajPX50NvJVqTRlkA1kA=)
9: qh3FCktSbfGOiwplZde51Yp10xU.crl (hash: bZxOSt4KJRARTbTtaA45sAPRNMXY1WCejg184EjJqNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:3a:a1:ee:43:12:cd:85:8c:2d:2f:6d:e4:f9:96:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Validity
Not Before: Oct 26 22:00:25 2026 GMT
Not After : Oct 27 22:00:25 2026 GMT
Subject: CN=58fcc9163606e03e09cef72738f31ad3e1f4b2d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:80:8e:e2:10:71:96:b6:e2:29:c8:65:0e:48:
97:a3:3c:08:d7:9b:e9:61:d0:8a:87:9c:5b:c3:cd:
3d:a0:d5:d7:9b:5b:ae:aa:30:eb:03:29:c3:ac:4e:
d0:68:81:b2:6b:8d:59:59:51:c4:f3:b9:2c:f3:3d:
75:82:83:4d:c5:55:14:02:51:1b:34:a6:9b:37:7a:
8a:17:34:a2:30:bc:83:6f:f7:df:22:9e:8b:70:c2:
a2:a3:ad:f6:3f:38:15:b5:64:77:fa:c6:bc:88:01:
bd:e8:33:e8:82:a0:be:c9:0d:aa:85:27:b4:65:05:
0c:56:75:72:7a:53:c3:d8:15:79:bc:e6:8c:78:36:
b9:83:85:8e:a0:e7:d2:8e:65:35:01:a5:75:53:2f:
d4:a3:a9:da:c5:ad:b0:cb:47:e1:e2:b4:69:fc:46:
7b:66:e5:81:ed:32:c9:fe:19:86:e6:e3:bd:78:a7:
f8:ed:e6:08:3c:7f:48:5a:08:98:e2:c0:ba:dd:6a:
ce:a4:72:35:4f:3f:ef:d9:f1:06:66:f6:3d:cd:71:
1d:20:f9:d3:4e:78:2d:42:f5:12:d2:c2:1e:72:2c:
98:bb:20:a7:2c:86:f0:6c:50:d0:a1:1e:1e:2f:90:
87:c4:a6:45:fd:96:eb:18:38:99:8d:98:27:d3:04:
4c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:FC:C9:16:36:06:E0:3E:09:CE:F7:27:38:F3:1A:D3:E1:F4:B2:D5
X509v3 Authority Key Identifier:
keyid:AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:33:63:7f:b6:16:a0:c9:d4:5c:bc:e7:99:23:df:18:09:b9:
e1:99:3f:6a:35:d5:a3:2c:00:76:1f:ce:a0:99:59:d7:08:0c:
35:3d:18:ad:5c:b3:44:b3:31:70:1f:8f:12:31:ee:75:e2:a4:
9d:6b:45:d6:2f:b2:a2:91:d4:7d:2b:15:a2:ca:25:e2:5b:ce:
08:ce:e8:51:a5:a4:af:2d:eb:db:ec:fa:2c:ca:58:aa:fc:9a:
3d:4e:ee:61:4e:37:49:81:f7:f3:9e:61:5a:9a:a0:87:e5:47:
96:f0:6a:89:9d:7a:6c:d7:ae:af:0a:6f:0f:84:d7:8e:10:80:
78:0d:8e:24:fc:58:c5:04:56:11:3f:49:46:ea:f1:b6:5c:aa:
c1:87:f2:f9:47:b4:3e:70:6e:e0:17:e2:79:1b:11:3b:46:18:
03:9a:cf:ba:91:19:02:7a:4d:a0:ef:59:87:04:8e:8e:eb:2a:
53:ab:c9:18:1f:d9:15:70:a9:87:79:8c:f7:d5:48:21:10:0c:
d0:3a:c5:0a:18:8f:1e:72:6a:6f:ec:93:42:ef:4b:72:3e:4e:
a3:fb:8c:29:41:3f:cb:b7:0c:9e:ea:05:d8:f3:45:0e:0b:2e:
b6:3c:fe:cc:19:2e:db:e7:87:67:fa:99:ce:ea:8d:22:7a:7a:
6c:69:fd:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 01:50:47 2026 by rpki-client