
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.mft
File: Q3DTtpmsWu_y24ily8HJ2NCccjE.mft (raw, json)
Hash identifier: Osl5gC9ZXx4b/D+mOA5QnN0qPdCksZm5kF0FqxS+eug=
Subject key identifier: CC:64:1D:B8:5E:A0:ED:C8:0B:AE:E9:F7:44:E7:9F:68:18:47:46:D6
Authority key identifier: 43:70:D3:B6:99:AC:5A:EF:F2:DB:88:A5:CB:C1:C9:D8:D0:9C:72:31
Certificate issuer: /CN=4370d3b699ac5aeff2db88a5cbc1c9d8d09c7231
Certificate serial: 019FF97F45D3385B81F94B6A779B83E3F4E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3DTtpmsWu_y24ily8HJ2NCccjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.mft
Manifest number: 0373
Signing time: Thu 13 Aug 2026 05:01:35 +0000
Manifest this update: Thu 13 Aug 2026 05:01:35 +0000
Manifest next update: Fri 14 Aug 2026 05:01:35 +0000
Files and hashes: 1: KfqeRMQbo9-WE5c784VU-n3hC_I.asa (hash: l9etNGwbPXfHNmZoYUkg6QSJpv1oeeKxarGjMBX/E4Y=)
2: Q3DTtpmsWu_y24ily8HJ2NCccjE.crl (hash: mRcrwwWtCDFQVR21dKdc28upy2wo7ONmpKmeVJDReg8=)
3: UjLpUOdjwMQzw9SBpAhHgAxfg7U.roa (hash: 7CpWMJq8SzwdLsA8hN+1xJucf/Pqf3jlz9jzHMKTOX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q3DTtpmsWu_y24ily8HJ2NCccjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:7f:45:d3:38:5b:81:f9:4b:6a:77:9b:83:e3:f4:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4370d3b699ac5aeff2db88a5cbc1c9d8d09c7231
Validity
Not Before: Aug 13 05:01:35 2026 GMT
Not After : Aug 14 05:01:35 2026 GMT
Subject: CN=cc641db85ea0edc80baee9f744e79f68184746d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3a:7b:29:4a:09:f6:5d:18:c1:87:2a:47:07:
38:fa:67:fd:a7:04:3d:04:b7:7f:4c:c5:f6:34:2c:
85:d7:d1:73:37:ab:0c:0d:62:5f:65:b2:19:23:29:
06:8f:36:51:ea:66:e3:36:a8:1b:d3:42:c4:47:1b:
be:c4:77:c1:46:18:71:47:06:0c:b8:ad:79:aa:1f:
34:5b:6c:9c:f8:98:77:bf:2c:6c:ec:82:51:f8:ab:
77:58:c6:df:20:0c:96:18:58:32:ef:88:45:7e:dd:
59:48:f5:3f:46:26:ce:69:5d:07:a7:38:9b:ad:d6:
20:ea:f2:b7:90:b1:14:65:2c:aa:f1:6c:b0:53:f3:
15:ee:f6:70:8e:a2:4f:be:c4:71:66:03:c7:b4:f5:
58:50:d9:0c:a8:61:92:12:7a:3b:17:10:31:5d:30:
b5:7d:ac:f5:c6:3d:ac:4f:4f:7f:d2:39:b7:f0:3a:
4d:f6:32:6e:a7:2b:fb:d5:82:e1:e2:a9:19:78:f9:
46:87:c3:51:61:e6:96:b1:f2:51:7a:64:4f:02:7e:
48:39:29:75:e6:24:28:49:93:6f:05:47:50:2f:8e:
3c:6f:40:91:b4:dd:4a:1c:c1:5d:ef:ba:be:49:df:
76:5e:81:7b:0a:9d:fc:be:9a:27:ab:44:01:e3:55:
66:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:64:1D:B8:5E:A0:ED:C8:0B:AE:E9:F7:44:E7:9F:68:18:47:46:D6
X509v3 Authority Key Identifier:
keyid:43:70:D3:B6:99:AC:5A:EF:F2:DB:88:A5:CB:C1:C9:D8:D0:9C:72:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3DTtpmsWu_y24ily8HJ2NCccjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:05:5b:5f:c9:4b:28:1f:be:89:5a:08:96:7f:0b:48:29:30:
c9:69:bb:ec:d1:90:38:29:d5:ed:bf:d1:ab:07:4b:37:d3:d0:
14:0f:cd:80:ca:e6:f5:9d:a7:f1:ad:3c:53:59:7e:06:b8:f0:
b7:88:eb:c6:59:c2:eb:4d:c2:7a:e0:a9:0d:54:e2:16:53:d8:
95:84:60:22:56:33:df:45:f3:8a:05:e1:e4:9e:ed:11:4c:29:
88:6e:d9:16:f9:76:53:3b:ed:a7:08:0b:63:26:ff:a7:43:38:
2a:35:07:39:fb:28:53:85:c7:75:17:98:ba:62:49:42:fd:b0:
64:7f:71:bc:47:a8:55:67:cf:76:b2:38:ff:b8:65:e5:69:a4:
6c:84:e4:66:e4:a3:87:23:7b:fb:a9:fe:5e:2b:6a:f2:14:01:
c9:ac:8e:73:4a:e9:57:b0:53:75:f4:af:c1:88:68:2d:7b:29:
de:67:c2:c7:be:84:ad:b7:3a:1d:5b:13:64:d8:e6:dc:7b:2d:
b2:0b:f2:b5:b8:7e:29:67:46:9d:6d:47:a0:c3:8f:85:fb:69:
8f:f3:b2:5e:35:c1:53:91:65:58:e4:2b:0b:37:ee:a7:01:a1:
ad:4d:e2:21:1f:88:0f:44:e2:86:19:46:a1:2d:1a:9e:ec:2f:
f2:c4:36:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 09:01:08 2026 by rpki-client