Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
File: qh3FCktSbfGOiwplZde51Yp10xU.mft (raw, json)
Hash identifier: LOAVU+8TGQE7gJUCIw3S0dmoPU6vWieVzfsrCU4/Wmo=
Subject key identifier: F1:EE:8D:12:61:4E:DF:67:D8:1E:0C:C8:7C:46:A2:4D:B1:63:E8:F1
Authority key identifier: AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
Certificate issuer: /CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Certificate serial: 019CE2FE6C7EE2006191C34A5FBB59FD91DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
Manifest number: 1870
Signing time: Thu 12 Mar 2026 17:00:50 +0000
Manifest this update: Thu 12 Mar 2026 17:00:50 +0000
Manifest next update: Fri 13 Mar 2026 17:00:50 +0000
Files and hashes: 1: 1-AAmQBvbizmeqxFRtgv0PZkdbaw.roa (hash: szjslYw6N3jLu7zRrYsKftErRAg7H6aZn8Z02fpRv1s=)
2: 2SpwrO6K0EQk8qayjEpp_xZ4_wg.roa (hash: /eCsd3Bhg9xFbAs/4U2EOV2JeWdYeKmfkwHyIef/wIk=)
3: BQI7xLWHF9ZNAK5nM3AaG90bJf4.roa (hash: tCWzvd6+gpJWA01AphfhvnpNLp2NN7klr1zWRXxTKKA=)
4: LnMBUYRb2MAMHOeFTnomV7j2CZs.roa (hash: +pH1K3ZbwRmdoZFv5Vag+ZbNrNoIYDgpbvJxI73PilY=)
5: ZP3LCtKrBkzUel77FsVXywGgRk8.roa (hash: i1nVxawv2gpA1GeSUFY59H1040iN9e9Zdxt8Om5Sw0Y=)
6: bBojKVehlumh6Ast16SxahZ3K0s.roa (hash: 1tb0mGMov/yRUa9MAYEK5/9XOpWqU57O4jNArw90xkI=)
7: iycZ2loJdRjirtO_seZ634r8_x0.roa (hash: thC+/QzA8XYVNXPbLOpRmVtVajPX50NvJVqTRlkA1kA=)
8: qWf4zsAaLlxNBWnNkvng4-8Bvtw.roa (hash: 6AjOSzj9VMdiYdzdqisEkWs6TZcl3i5LO4GKBF6A3ik=)
9: qh3FCktSbfGOiwplZde51Yp10xU.crl (hash: nMBnHOLCqP+y+ls/v1fOQ6hfXScDacQXxoMgHhm1u84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:fe:6c:7e:e2:00:61:91:c3:4a:5f:bb:59:fd:91:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Validity
Not Before: Mar 12 17:00:50 2026 GMT
Not After : Mar 13 17:00:50 2026 GMT
Subject: CN=f1ee8d12614edf67d81e0cc87c46a24db163e8f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5a:ca:71:0c:b6:d4:23:ac:e7:7b:4f:5c:4a:
78:ca:e8:51:5f:1a:75:ed:8d:57:53:ec:b2:cb:44:
12:46:26:b6:67:d4:32:43:08:c3:ca:de:5d:f7:f0:
4b:8a:08:fb:ce:ae:a4:a5:0b:be:27:d9:0f:5f:fd:
7c:9c:d6:94:d5:5e:27:e2:c0:5a:9e:36:e9:ec:d0:
47:b9:5a:72:23:bd:11:6e:de:74:41:9e:e6:b1:56:
c3:f2:56:9a:59:e7:d8:a8:27:33:7b:4d:ff:22:17:
aa:66:d0:83:09:20:73:3e:01:7b:58:3e:c8:b3:9a:
ff:26:43:e0:f6:73:6d:97:87:bf:00:0c:bd:c9:2d:
c4:56:43:68:5e:c6:68:d3:e3:e6:39:b7:e8:04:ac:
d3:ab:e7:e3:8f:e9:48:fe:5a:c3:22:4d:17:be:a5:
28:50:a6:f4:f8:cd:34:6f:69:01:f4:ea:bf:a5:f9:
0c:58:c1:d7:6e:0b:cd:20:9e:1c:3a:83:65:7c:55:
aa:04:20:14:ab:3a:a9:e5:0f:3e:a3:b5:6f:1e:4d:
04:63:6c:d9:bd:df:3b:88:0a:94:be:33:2b:6b:ab:
39:d7:ad:e6:ee:6a:62:0f:30:c0:02:f8:24:76:09:
16:7a:86:e0:0d:19:4d:03:22:6d:64:84:32:ed:5d:
87:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:EE:8D:12:61:4E:DF:67:D8:1E:0C:C8:7C:46:A2:4D:B1:63:E8:F1
X509v3 Authority Key Identifier:
keyid:AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:d6:3c:7b:33:de:82:61:88:b6:d3:b2:db:da:24:cc:a5:fd:
d3:4a:65:28:cf:6e:d8:12:50:04:4d:9b:da:1a:56:33:09:ef:
de:c3:07:07:dc:7e:c0:ef:d4:ec:e8:59:e9:bd:5f:0f:ea:4b:
28:c2:d5:39:e1:08:bc:b6:3b:fd:c2:6f:9e:a8:85:24:d5:2f:
88:00:ec:51:52:8b:d5:aa:06:c9:01:19:c0:73:94:62:3e:8b:
2c:b7:ac:fd:ff:df:23:f1:9e:e2:ef:50:70:d3:c0:8e:25:4c:
ec:20:9f:46:09:e9:55:57:ad:05:7b:5d:99:a6:e1:91:59:3c:
49:ef:14:25:e1:0a:91:3a:f5:35:7d:c0:2f:cd:04:f5:c0:22:
27:a6:2c:42:97:86:d5:30:ea:71:04:69:1b:e1:b8:7f:ea:84:
54:5d:80:4f:b5:8a:44:30:46:a3:89:bf:52:ae:a3:db:ac:5c:
80:e7:f9:a2:0e:15:2e:72:76:91:43:d7:6c:42:e8:69:28:20:
a3:18:40:5a:1a:e6:fc:ef:ca:b6:66:1f:2a:08:ab:d7:f5:82:
ff:1a:e1:1b:3a:4c:7b:65:52:2e:78:43:79:b5:ee:76:a1:39:
45:14:e1:9d:96:33:eb:ab:88:27:19:0c:3c:71:be:36:40:a0:
91:6c:83:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 01:33:16 2026 by rpki-client