Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
File: qh3FCktSbfGOiwplZde51Yp10xU.mft (raw, json)
Hash identifier: y/M4Yu7qgFdqmgc+lU+7q0eTeB7jCSsTQICUnLzPYus=
Subject key identifier: 48:A0:2B:AD:78:97:13:E3:0F:59:7D:D9:ED:06:62:D1:0B:52:C7:ED
Authority key identifier: AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
Certificate issuer: /CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Certificate serial: 019E1E35B1D5724A91BCA52A2F0375905F88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
Manifest number: 1914
Signing time: Tue 12 May 2026 22:01:35 +0000
Manifest this update: Tue 12 May 2026 22:01:35 +0000
Manifest next update: Wed 13 May 2026 22:01:35 +0000
Files and hashes: 1: 2SpwrO6K0EQk8qayjEpp_xZ4_wg.roa (hash: /eCsd3Bhg9xFbAs/4U2EOV2JeWdYeKmfkwHyIef/wIk=)
2: BQI7xLWHF9ZNAK5nM3AaG90bJf4.roa (hash: tCWzvd6+gpJWA01AphfhvnpNLp2NN7klr1zWRXxTKKA=)
3: LnMBUYRb2MAMHOeFTnomV7j2CZs.roa (hash: +pH1K3ZbwRmdoZFv5Vag+ZbNrNoIYDgpbvJxI73PilY=)
4: P1Zvn3p5mBqcZYnmXTUNqZrZsuM.roa (hash: d6JzVBpRjcr/pOO8lJ/jWITXja7zGMD4ExKCM+u1meA=)
5: ZP3LCtKrBkzUel77FsVXywGgRk8.roa (hash: i1nVxawv2gpA1GeSUFY59H1040iN9e9Zdxt8Om5Sw0Y=)
6: bBojKVehlumh6Ast16SxahZ3K0s.roa (hash: 1tb0mGMov/yRUa9MAYEK5/9XOpWqU57O4jNArw90xkI=)
7: iycZ2loJdRjirtO_seZ634r8_x0.roa (hash: thC+/QzA8XYVNXPbLOpRmVtVajPX50NvJVqTRlkA1kA=)
8: qWf4zsAaLlxNBWnNkvng4-8Bvtw.roa (hash: 6AjOSzj9VMdiYdzdqisEkWs6TZcl3i5LO4GKBF6A3ik=)
9: qh3FCktSbfGOiwplZde51Yp10xU.crl (hash: HhAXB4Y4DKrANlSfNgjrcbSgEnzzCcx+og0jSWzLDsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:b1:d5:72:4a:91:bc:a5:2a:2f:03:75:90:5f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Validity
Not Before: May 12 22:01:35 2026 GMT
Not After : May 13 22:01:35 2026 GMT
Subject: CN=48a02bad789713e30f597dd9ed0662d10b52c7ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:be:3a:2f:7a:e4:3c:f3:50:5d:77:9a:18:67:
3a:45:a9:5e:40:dc:3a:ff:ee:49:e9:54:4f:5c:d5:
57:41:9a:f2:84:1b:74:c8:ca:a7:4a:3e:14:f5:05:
a7:c9:b3:99:ec:95:89:52:e8:f1:87:40:9d:38:74:
a4:4a:a9:c7:a9:44:7d:99:6a:08:41:33:b1:dc:19:
45:6a:93:36:14:63:0e:3e:4d:e1:92:d8:04:df:7d:
fa:d2:ed:4f:ac:ff:91:44:4d:f9:0a:52:84:71:25:
f7:c2:54:57:2b:34:6e:ed:98:29:2f:f8:64:fb:84:
18:f2:fb:e4:b5:09:5e:ca:08:19:ff:b2:1c:bb:6c:
bc:ac:34:b0:57:cb:1d:09:e9:90:bc:86:06:8a:74:
30:29:7e:4a:64:7c:61:1c:a1:c7:49:12:8b:b1:a8:
81:16:cb:59:06:25:10:67:e6:e5:dd:73:89:6d:d7:
37:7a:35:ca:ec:6d:60:e4:2b:8c:c1:e9:5b:63:9f:
15:97:58:74:81:33:54:2d:b5:65:ee:d4:ca:c6:95:
bf:00:24:80:31:ea:32:5f:ef:56:b4:2e:29:ef:de:
9d:1f:a7:9d:eb:15:bf:50:3e:31:c9:84:e6:6a:07:
8b:50:4f:e7:dd:09:b2:7e:3a:95:de:b8:76:88:ef:
28:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A0:2B:AD:78:97:13:E3:0F:59:7D:D9:ED:06:62:D1:0B:52:C7:ED
X509v3 Authority Key Identifier:
keyid:AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:3d:73:eb:98:0f:34:a4:33:d1:1d:34:d9:89:11:0e:fa:e2:
fc:05:f1:43:fe:06:0f:da:59:2d:e4:5c:40:6b:1b:98:87:24:
c2:94:ee:08:17:c1:ed:f8:af:ce:ff:4b:53:40:2e:33:2b:fc:
04:e8:76:75:da:f1:73:38:73:f9:3e:48:69:26:b5:fa:75:f3:
45:b9:c8:7b:82:5f:03:78:f0:c2:15:76:95:a3:56:82:eb:1c:
d0:7a:0c:b1:07:0f:77:36:c4:70:7c:7a:82:b0:81:65:63:29:
10:73:cb:a5:53:d1:bf:59:94:d3:22:a4:46:69:1d:af:a2:7f:
9b:ba:61:bd:03:b1:d9:1c:0e:be:16:75:6b:c2:db:c9:6b:30:
ce:e1:6d:1f:71:fb:9a:7d:22:7f:4e:78:b4:31:16:f6:33:61:
61:5d:66:43:b7:89:28:e4:55:df:16:1f:0e:05:57:20:e6:2f:
5b:82:b7:a7:64:5d:ad:f6:5a:88:05:6a:61:50:ae:8a:42:7c:
d9:0d:a5:c4:80:61:17:42:6f:5d:84:cd:97:75:88:43:1f:15:
2c:1d:b9:be:fc:54:b6:a0:84:09:af:3a:dc:ac:b9:57:c4:a2:
31:87:2e:b7:50:8f:82:ff:3d:77:dd:df:d7:05:25:9d:d4:ac:
fc:ea:ee:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:23:16 2026 by rpki-client