Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
File: qh3FCktSbfGOiwplZde51Yp10xU.mft (raw, json)
Hash identifier: fIeK6olSZy0x7j3pv4fJrTA3tHRoHeA0xg5QXnQWniY=
Subject key identifier: DE:31:77:48:69:44:35:4B:A3:99:20:80:AA:41:A3:03:9F:3D:BD:DF
Authority key identifier: AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
Certificate issuer: /CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Certificate serial: 019F92EDE8CCF2BD6AD1B893388414A188D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
Manifest number: 19D5
Signing time: Fri 24 Jul 2026 07:01:32 +0000
Manifest this update: Fri 24 Jul 2026 07:01:32 +0000
Manifest next update: Sat 25 Jul 2026 07:01:32 +0000
Files and hashes: 1: 2SpwrO6K0EQk8qayjEpp_xZ4_wg.roa (hash: /eCsd3Bhg9xFbAs/4U2EOV2JeWdYeKmfkwHyIef/wIk=)
2: BQI7xLWHF9ZNAK5nM3AaG90bJf4.roa (hash: tCWzvd6+gpJWA01AphfhvnpNLp2NN7klr1zWRXxTKKA=)
3: LnMBUYRb2MAMHOeFTnomV7j2CZs.roa (hash: +pH1K3ZbwRmdoZFv5Vag+ZbNrNoIYDgpbvJxI73PilY=)
4: P1Zvn3p5mBqcZYnmXTUNqZrZsuM.roa (hash: d6JzVBpRjcr/pOO8lJ/jWITXja7zGMD4ExKCM+u1meA=)
5: ZP3LCtKrBkzUel77FsVXywGgRk8.roa (hash: i1nVxawv2gpA1GeSUFY59H1040iN9e9Zdxt8Om5Sw0Y=)
6: bBojKVehlumh6Ast16SxahZ3K0s.roa (hash: 1tb0mGMov/yRUa9MAYEK5/9XOpWqU57O4jNArw90xkI=)
7: iycZ2loJdRjirtO_seZ634r8_x0.roa (hash: thC+/QzA8XYVNXPbLOpRmVtVajPX50NvJVqTRlkA1kA=)
8: qWf4zsAaLlxNBWnNkvng4-8Bvtw.roa (hash: 6AjOSzj9VMdiYdzdqisEkWs6TZcl3i5LO4GKBF6A3ik=)
9: qh3FCktSbfGOiwplZde51Yp10xU.crl (hash: qRDIoiyxUdBgzvGp+RBUWmfYEADJhfKBO8qOlOWETuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:e8:cc:f2:bd:6a:d1:b8:93:38:84:14:a1:88:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Validity
Not Before: Jul 24 07:01:32 2026 GMT
Not After : Jul 25 07:01:32 2026 GMT
Subject: CN=de3177486944354ba3992080aa41a3039f3dbddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d2:92:6f:5f:74:98:1a:89:0d:a4:12:4e:ee:
bb:81:ff:34:60:23:94:06:40:5c:d2:30:de:09:4c:
bd:ed:af:2d:d6:40:69:25:79:92:08:ec:db:f0:22:
98:27:40:9f:7c:b5:14:57:4a:a5:88:45:ca:91:11:
79:a3:78:94:a2:3c:fb:e3:e7:34:b8:db:cf:8c:59:
1f:e5:0a:84:35:0b:a0:d2:e6:1c:f1:85:63:e5:4f:
b4:dc:e8:a3:1a:54:a6:19:04:84:48:2a:99:1e:56:
a3:54:5b:74:b3:dc:dc:2a:78:0b:b6:0b:3c:14:34:
70:75:8e:d1:5a:3b:d6:a5:81:b1:2f:9f:32:76:c7:
49:f0:fa:35:7d:fd:7c:f3:4c:7c:e1:b7:7c:46:f2:
ce:a1:bb:b2:5b:f6:23:8f:36:61:e2:47:74:01:da:
fc:ea:8c:80:46:bc:dd:4e:22:19:b4:4a:5f:58:92:
c3:6c:0e:32:f9:77:15:7a:33:2d:f3:3d:04:c8:0a:
90:46:72:19:43:1c:c1:fd:1a:88:99:cc:9e:a3:39:
e9:03:a9:bb:15:36:61:07:f4:a5:19:b0:4e:6c:9a:
95:dd:64:43:38:00:9d:86:06:19:6b:95:68:54:f7:
f4:76:e7:72:70:e6:74:a1:18:86:2e:db:8d:da:ac:
95:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:31:77:48:69:44:35:4B:A3:99:20:80:AA:41:A3:03:9F:3D:BD:DF
X509v3 Authority Key Identifier:
keyid:AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:29:5f:a8:05:10:86:16:90:b4:a9:a5:c4:5d:b3:a0:eb:5e:
9f:56:ee:c0:6a:60:a3:6c:91:30:53:6c:43:a8:c4:ab:3a:06:
40:e4:e5:f8:af:53:72:4d:a5:d4:75:84:75:b7:9f:74:30:9e:
96:46:72:bc:23:d6:3a:5a:81:98:92:f7:ce:a2:94:7a:c8:13:
ad:3a:84:ce:e4:77:24:7f:54:47:97:b5:cb:29:76:19:87:47:
b4:b5:f5:6f:e3:7a:5f:7c:df:59:85:a9:ac:74:91:5e:ce:5d:
ae:7a:59:f5:26:04:f6:47:44:ed:75:f7:73:3d:8a:26:4a:72:
a8:c6:76:3e:63:78:a7:40:68:f8:ca:c7:35:ed:42:65:43:7d:
f8:dc:54:58:80:89:cd:de:28:07:25:fd:82:55:11:b2:a9:ff:
ef:19:3c:b2:77:3a:68:80:4a:c7:94:ca:a9:c7:6b:1b:a1:88:
7c:21:f1:53:fd:c4:82:ef:94:0f:39:29:a9:1e:e2:13:13:1d:
f4:09:ac:a7:d8:f6:a1:0c:00:6e:83:45:0f:42:ff:3a:d4:b2:
66:b2:a7:ae:e7:27:17:e6:cf:79:45:57:25:a4:87:45:02:5f:
79:85:fa:7a:b2:6a:77:3f:ad:88:41:9b:cd:1c:65:23:f1:01:
23:9b:22:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:07:44 2026 by rpki-client