Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
File: qh3FCktSbfGOiwplZde51Yp10xU.mft (raw, json)
Hash identifier: isVEWsYwplC2g8yPBAq/tmVzd18IIgiumq1JYAo95D4=
Subject key identifier: DA:C9:CE:EB:70:3A:F2:73:6B:D2:F8:27:BA:72:09:C1:64:50:F4:4C
Authority key identifier: AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
Certificate issuer: /CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Certificate serial: 01A0DB3B350BAA2166B062F5AA7E57E22F04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
Manifest number: 1A7F
Signing time: Sat 26 Sep 2026 01:01:25 +0000
Manifest this update: Sat 26 Sep 2026 01:01:25 +0000
Manifest next update: Sun 27 Sep 2026 01:01:25 +0000
Files and hashes: 1: 2SpwrO6K0EQk8qayjEpp_xZ4_wg.roa (hash: /eCsd3Bhg9xFbAs/4U2EOV2JeWdYeKmfkwHyIef/wIk=)
2: BQI7xLWHF9ZNAK5nM3AaG90bJf4.roa (hash: tCWzvd6+gpJWA01AphfhvnpNLp2NN7klr1zWRXxTKKA=)
3: LnMBUYRb2MAMHOeFTnomV7j2CZs.roa (hash: +pH1K3ZbwRmdoZFv5Vag+ZbNrNoIYDgpbvJxI73PilY=)
4: P1Zvn3p5mBqcZYnmXTUNqZrZsuM.roa (hash: d6JzVBpRjcr/pOO8lJ/jWITXja7zGMD4ExKCM+u1meA=)
5: ZP3LCtKrBkzUel77FsVXywGgRk8.roa (hash: i1nVxawv2gpA1GeSUFY59H1040iN9e9Zdxt8Om5Sw0Y=)
6: bBojKVehlumh6Ast16SxahZ3K0s.roa (hash: 1tb0mGMov/yRUa9MAYEK5/9XOpWqU57O4jNArw90xkI=)
7: iycZ2loJdRjirtO_seZ634r8_x0.roa (hash: thC+/QzA8XYVNXPbLOpRmVtVajPX50NvJVqTRlkA1kA=)
8: qWf4zsAaLlxNBWnNkvng4-8Bvtw.roa (hash: 6AjOSzj9VMdiYdzdqisEkWs6TZcl3i5LO4GKBF6A3ik=)
9: qh3FCktSbfGOiwplZde51Yp10xU.crl (hash: zALP3flnLpiD0dqsfetLKZN3LntXFX4H+T2Wj/M15vE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:06:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:3b:35:0b:aa:21:66:b0:62:f5:aa:7e:57:e2:2f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Validity
Not Before: Sep 26 01:01:25 2026 GMT
Not After : Sep 27 01:01:25 2026 GMT
Subject: CN=dac9ceeb703af2736bd2f827ba7209c16450f44c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fa:40:c5:f8:2a:39:1f:5a:2f:ad:b5:ce:f3:
e8:4f:88:ad:f6:27:d4:00:11:6e:68:67:9e:b7:68:
1c:5e:4c:9c:77:5a:45:6d:79:83:21:a9:fd:ee:e2:
7d:2f:ce:28:28:ed:8e:52:1f:34:e2:19:ff:e4:74:
2e:a9:4d:49:9d:34:09:54:47:39:00:f4:3a:4b:a7:
59:f0:ad:b7:00:cb:38:6a:9a:31:3f:af:1f:8f:c6:
34:e5:8a:c8:c5:85:95:f1:9a:84:47:45:59:78:5d:
3e:65:ba:5c:37:78:fb:dd:95:87:41:cc:78:4b:80:
a1:c0:dd:b1:20:22:09:36:d2:da:78:9c:96:48:2f:
51:7d:ca:ca:40:0e:15:8f:0c:dc:fd:4d:38:81:8c:
75:47:b5:e9:02:0d:29:18:7e:04:ba:6f:92:6d:b2:
12:39:62:7b:dd:e6:92:a7:91:b8:18:5d:ca:9e:a2:
39:80:80:34:55:ad:ba:f3:2e:d8:6e:d5:03:f9:20:
bf:ed:e4:16:b2:97:ec:87:34:c9:f7:28:43:76:3f:
1b:10:96:3b:86:22:85:0e:a9:43:f6:be:58:3d:5d:
63:ee:2b:64:4f:fc:4e:db:3e:05:d9:cc:c4:79:bc:
e2:c8:20:31:72:37:d0:ca:62:db:45:af:c9:ca:c8:
56:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C9:CE:EB:70:3A:F2:73:6B:D2:F8:27:BA:72:09:C1:64:50:F4:4C
X509v3 Authority Key Identifier:
keyid:AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:a7:d8:2a:b6:e8:2b:2b:af:61:09:94:ee:81:fb:79:6b:14:
85:db:ea:98:fc:04:05:24:48:94:f9:61:38:7f:fe:92:2b:45:
d5:c3:77:9f:3c:dd:47:4c:c9:69:58:4f:bf:a0:e0:67:a2:2e:
42:02:38:0d:b0:b5:48:ca:8c:89:1e:e0:e1:d1:95:b4:d1:7d:
19:1c:31:3e:7c:c1:3e:7b:61:e1:45:e2:63:37:36:41:92:41:
e7:6b:b5:6c:9b:6f:2f:19:36:19:d1:f3:ff:99:0e:08:0a:5b:
c4:d6:89:e4:28:59:42:50:41:07:a0:92:b9:94:a1:27:8d:1e:
60:85:66:fe:89:3f:1e:86:a5:1f:fa:ea:c1:50:7f:66:95:ad:
c2:b9:a3:9b:b6:5e:d2:d1:c4:04:24:04:5e:3c:5e:67:6c:f6:
1b:47:50:9c:48:87:8b:a6:3a:0e:70:e3:41:42:bb:8e:c8:bc:
46:0e:d4:36:b7:0d:4d:d0:33:b1:04:07:1a:92:7b:8a:8d:ce:
e2:e5:4b:6e:14:57:1f:66:52:3a:e9:df:22:49:1e:76:1c:91:
14:1b:f1:6d:d0:11:29:7d:72:24:56:f0:f6:f6:26:5a:1d:7e:
b8:3a:be:6c:a5:5f:44:b3:a3:07:48:09:9c:bd:6b:7d:fe:0c:
2e:90:27:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:43:49 2026 by rpki-client