Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
File: qh3FCktSbfGOiwplZde51Yp10xU.mft (raw, json)
Hash identifier: Z8FnZoK85jmaYdpsie+c/4u7v0K+0iJgqH62/SZIaPE=
Subject key identifier: 82:13:B8:98:50:82:68:93:CF:89:53:C3:43:E3:0C:C7:FB:2A:9B:61
Authority key identifier: AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
Certificate issuer: /CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Certificate serial: 01A17C2913A535E38CC49169759DAE7A44BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
Manifest number: 1AD3
Signing time: Tue 27 Oct 2026 07:00:29 +0000
Manifest this update: Tue 27 Oct 2026 07:00:29 +0000
Manifest next update: Wed 28 Oct 2026 07:00:29 +0000
Files and hashes: 1: 1A3M617VwrbmalIgAjoMypqQULs.roa (hash: YIHAhwkDZTgNA7/i+1iNC8t5clQJMXMLVmrl1H4s4ho=)
2: 2SpwrO6K0EQk8qayjEpp_xZ4_wg.roa (hash: /eCsd3Bhg9xFbAs/4U2EOV2JeWdYeKmfkwHyIef/wIk=)
3: BQI7xLWHF9ZNAK5nM3AaG90bJf4.roa (hash: tCWzvd6+gpJWA01AphfhvnpNLp2NN7klr1zWRXxTKKA=)
4: LnMBUYRb2MAMHOeFTnomV7j2CZs.roa (hash: +pH1K3ZbwRmdoZFv5Vag+ZbNrNoIYDgpbvJxI73PilY=)
5: P1Zvn3p5mBqcZYnmXTUNqZrZsuM.roa (hash: d6JzVBpRjcr/pOO8lJ/jWITXja7zGMD4ExKCM+u1meA=)
6: ZP3LCtKrBkzUel77FsVXywGgRk8.roa (hash: i1nVxawv2gpA1GeSUFY59H1040iN9e9Zdxt8Om5Sw0Y=)
7: bBojKVehlumh6Ast16SxahZ3K0s.roa (hash: 1tb0mGMov/yRUa9MAYEK5/9XOpWqU57O4jNArw90xkI=)
8: iycZ2loJdRjirtO_seZ634r8_x0.roa (hash: thC+/QzA8XYVNXPbLOpRmVtVajPX50NvJVqTRlkA1kA=)
9: qh3FCktSbfGOiwplZde51Yp10xU.crl (hash: bT9L0Yu9SabWh3EEeNxkjnwzUngO8lZ7+5bkdVseWik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 07:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:29:13:a5:35:e3:8c:c4:91:69:75:9d:ae:7a:44:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Validity
Not Before: Oct 27 07:00:29 2026 GMT
Not After : Oct 28 07:00:29 2026 GMT
Subject: CN=8213b89850826893cf8953c343e30cc7fb2a9b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:35:f5:fe:f5:f0:ef:4c:ca:27:ee:bc:b9:f2:
98:84:c2:89:48:44:80:9d:19:70:bd:d4:6e:0f:eb:
0b:4e:98:08:20:f1:a4:25:19:f7:81:fb:25:56:03:
56:8e:4d:be:ff:bb:7a:83:68:99:8b:be:68:5d:71:
2b:85:7f:db:14:81:ac:bc:7b:8a:32:9b:3b:7d:72:
00:cf:a6:e5:65:10:53:16:b2:84:1f:04:86:59:02:
b1:6c:4e:4e:35:a2:1f:dc:d6:96:bf:56:e5:3d:45:
b8:02:b7:fc:4b:e8:9b:b1:94:94:e3:19:49:d4:55:
1a:c4:e4:79:a8:d8:04:93:2b:06:63:21:60:c5:8f:
0f:2e:c8:e0:7d:b3:54:ea:f6:55:3a:f9:1d:4d:c2:
dc:d9:4a:f1:5a:13:30:8c:14:93:11:03:0b:57:d7:
ca:74:59:93:26:72:08:8c:17:e4:06:aa:c8:fc:5f:
1e:88:cf:ef:62:59:34:03:bd:c8:c5:ed:ca:ad:1f:
2f:49:dd:49:1f:39:d4:34:12:24:cd:e5:f2:59:e4:
b3:68:18:e1:d2:1c:1b:a9:30:81:d6:1c:c4:ff:2e:
af:cc:36:64:8a:1d:c1:be:33:65:e6:4e:b9:11:47:
f4:80:47:b5:b2:b6:87:a0:77:b2:79:1a:08:ce:14:
45:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:13:B8:98:50:82:68:93:CF:89:53:C3:43:E3:0C:C7:FB:2A:9B:61
X509v3 Authority Key Identifier:
keyid:AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:3e:40:77:29:70:63:21:20:b6:b3:32:ce:d2:76:3b:18:be:
06:09:24:1e:5f:c0:86:35:cf:cc:4e:2c:e5:6f:93:1d:77:a5:
8c:b1:3f:d8:a0:47:b2:12:d2:62:5a:05:39:a4:96:ea:a7:99:
de:01:2c:99:e1:43:9b:68:9e:2c:63:cc:cf:a3:30:b7:8d:83:
88:8c:8f:1b:0c:fa:a6:75:72:5a:a2:96:34:ab:5a:61:8b:dc:
1a:3f:1a:5c:4f:0f:fc:d9:46:ee:c4:e5:66:b0:1b:a3:38:1b:
ac:3c:50:a1:dc:e2:26:c1:d8:0f:76:bc:5e:78:29:06:6c:05:
59:6c:d6:71:1e:a9:5f:eb:0d:2c:b9:6e:e1:82:df:62:d1:2a:
5f:4d:35:19:d2:64:36:d0:c3:3b:47:58:51:1f:49:55:fe:1d:
60:8c:42:fa:77:40:33:3d:b5:b3:8c:e3:6a:b9:5d:73:60:7f:
56:46:06:90:cd:40:5a:d9:ab:14:70:86:e0:6b:82:b1:1b:1c:
45:24:d8:02:3b:1b:51:eb:bd:a0:86:f4:ed:1d:4c:ad:b7:8b:
05:29:db:2f:73:90:af:58:84:ca:41:89:df:66:5e:c1:07:dd:
28:2f:7f:5b:e4:6b:68:db:e2:49:2c:98:05:8a:4a:7f:e9:5c:
28:ab:75:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:45:10 2026 by rpki-client