Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
File: qh3FCktSbfGOiwplZde51Yp10xU.mft (raw, json)
Hash identifier: rprHf9N4JZQN22Hlq/lJSfUaV38mO7bE378COqzHu04=
Subject key identifier: D5:93:69:A9:4A:7E:78:12:33:D1:AE:60:49:F1:08:0F:42:22:7A:89
Authority key identifier: AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
Certificate issuer: /CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Certificate serial: 019F90FEC9FEBDA46608C44B46DE286951EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
Manifest number: 19D4
Signing time: Thu 23 Jul 2026 22:00:44 +0000
Manifest this update: Thu 23 Jul 2026 22:00:44 +0000
Manifest next update: Fri 24 Jul 2026 22:00:44 +0000
Files and hashes: 1: 2SpwrO6K0EQk8qayjEpp_xZ4_wg.roa (hash: /eCsd3Bhg9xFbAs/4U2EOV2JeWdYeKmfkwHyIef/wIk=)
2: BQI7xLWHF9ZNAK5nM3AaG90bJf4.roa (hash: tCWzvd6+gpJWA01AphfhvnpNLp2NN7klr1zWRXxTKKA=)
3: LnMBUYRb2MAMHOeFTnomV7j2CZs.roa (hash: +pH1K3ZbwRmdoZFv5Vag+ZbNrNoIYDgpbvJxI73PilY=)
4: P1Zvn3p5mBqcZYnmXTUNqZrZsuM.roa (hash: d6JzVBpRjcr/pOO8lJ/jWITXja7zGMD4ExKCM+u1meA=)
5: ZP3LCtKrBkzUel77FsVXywGgRk8.roa (hash: i1nVxawv2gpA1GeSUFY59H1040iN9e9Zdxt8Om5Sw0Y=)
6: bBojKVehlumh6Ast16SxahZ3K0s.roa (hash: 1tb0mGMov/yRUa9MAYEK5/9XOpWqU57O4jNArw90xkI=)
7: iycZ2loJdRjirtO_seZ634r8_x0.roa (hash: thC+/QzA8XYVNXPbLOpRmVtVajPX50NvJVqTRlkA1kA=)
8: qWf4zsAaLlxNBWnNkvng4-8Bvtw.roa (hash: 6AjOSzj9VMdiYdzdqisEkWs6TZcl3i5LO4GKBF6A3ik=)
9: qh3FCktSbfGOiwplZde51Yp10xU.crl (hash: aydDwMiY07rxIa0mPdOAltCHIXU/JT9+TI+kYqDa9c4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:c9:fe:bd:a4:66:08:c4:4b:46:de:28:69:51:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Validity
Not Before: Jul 23 22:00:44 2026 GMT
Not After : Jul 24 22:00:44 2026 GMT
Subject: CN=d59369a94a7e781233d1ae6049f1080f42227a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:23:08:ea:f3:b0:77:c2:de:ea:71:bd:7e:e8:
62:19:07:63:d8:2e:2b:ab:99:89:90:4a:72:b7:7e:
63:a0:24:c4:8e:f1:a5:93:9d:45:bf:bd:a2:f9:97:
df:30:8a:50:3d:d9:62:34:d4:a6:06:ed:b3:56:b4:
56:ab:d9:21:3a:23:ca:9d:5f:8f:d3:40:7b:7e:3b:
2e:89:71:61:7b:88:26:fe:1c:22:be:0d:df:09:b2:
56:51:31:af:b5:e7:ee:89:7d:68:ba:13:18:9a:17:
7f:c2:57:97:10:2c:f9:06:46:5d:dd:5f:ce:09:b6:
82:d1:7b:6a:4a:73:b4:98:ee:25:af:11:5a:e9:45:
1e:7d:11:08:4e:db:65:99:c9:3a:73:4b:af:ce:ec:
1d:af:4e:e3:04:03:87:f9:49:e9:00:44:fd:45:8c:
72:16:39:1b:38:6e:31:ad:84:95:67:cc:6d:18:27:
50:c3:79:ce:48:dc:20:96:6e:8a:87:38:f1:75:2e:
11:91:42:b6:78:e7:30:f8:8e:19:7f:f4:36:a8:c9:
1f:28:ab:a4:6a:4b:fc:f6:cc:9b:c6:c6:bb:66:56:
3f:aa:24:89:37:26:5a:d7:ac:c5:e9:c2:4f:da:fb:
00:42:6a:67:8a:e5:3c:96:10:a7:ec:b9:d7:41:4b:
1c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:93:69:A9:4A:7E:78:12:33:D1:AE:60:49:F1:08:0F:42:22:7A:89
X509v3 Authority Key Identifier:
keyid:AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:c2:f3:d4:69:71:1f:f1:dd:ed:d7:b1:9c:c0:90:b4:22:ac:
15:16:60:4e:b5:71:19:2b:e6:2f:02:dc:3b:b7:2e:cd:64:7b:
5d:9e:b0:7b:99:59:0d:77:44:21:e0:a3:ca:d4:3c:3a:f5:97:
ae:f6:c4:0f:b8:4c:fe:ab:04:b9:1b:ac:32:f9:7d:07:15:a9:
a0:a2:94:61:af:cb:cf:54:84:b5:b5:fa:e8:1c:7c:76:20:52:
51:39:7a:f8:b0:b7:58:f3:66:ac:d1:f2:bf:15:7f:b1:fb:61:
89:89:c2:73:42:6f:d0:2a:c6:c8:2b:71:cc:52:78:58:fb:d1:
c7:ed:bf:71:89:67:44:32:de:87:e5:54:e9:b5:53:23:ca:d2:
1c:a1:81:33:80:da:ea:33:54:81:ce:f7:b8:44:df:62:94:08:
90:7b:84:1f:0f:8b:8f:8c:af:fd:f4:96:c2:5f:8c:9e:04:f0:
56:0d:55:c3:0b:6d:17:4d:d5:03:dd:5c:cc:e8:84:e9:33:79:
65:82:d0:b6:7b:93:92:63:74:e0:5f:1f:9f:ad:2d:c0:25:67:
15:54:c1:c8:a1:7a:f0:2f:49:3f:01:cb:53:64:8e:67:4a:e6:
46:98:84:09:70:f9:f7:37:c5:b4:f2:04:47:77:00:42:4d:1b:
be:b7:72:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:49:52 2026 by rpki-client