Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
File: qh3FCktSbfGOiwplZde51Yp10xU.mft (raw, json)
Hash identifier: VjydFUORjwQeZ6xXqzlEhcPBx7TK01AZ3XnVkd3A2a8=
Subject key identifier: 24:92:FA:26:E5:46:54:9F:AF:6D:9C:55:B1:C8:27:09:1C:D1:C9:F0
Authority key identifier: AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
Certificate issuer: /CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Certificate serial: 019D288434D12F624CBB760C5F74BEC63F13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
Manifest number: 1894
Signing time: Thu 26 Mar 2026 05:00:45 +0000
Manifest this update: Thu 26 Mar 2026 05:00:45 +0000
Manifest next update: Fri 27 Mar 2026 05:00:45 +0000
Files and hashes: 1: 1-AAmQBvbizmeqxFRtgv0PZkdbaw.roa (hash: szjslYw6N3jLu7zRrYsKftErRAg7H6aZn8Z02fpRv1s=)
2: 2SpwrO6K0EQk8qayjEpp_xZ4_wg.roa (hash: /eCsd3Bhg9xFbAs/4U2EOV2JeWdYeKmfkwHyIef/wIk=)
3: BQI7xLWHF9ZNAK5nM3AaG90bJf4.roa (hash: tCWzvd6+gpJWA01AphfhvnpNLp2NN7klr1zWRXxTKKA=)
4: LnMBUYRb2MAMHOeFTnomV7j2CZs.roa (hash: +pH1K3ZbwRmdoZFv5Vag+ZbNrNoIYDgpbvJxI73PilY=)
5: ZP3LCtKrBkzUel77FsVXywGgRk8.roa (hash: i1nVxawv2gpA1GeSUFY59H1040iN9e9Zdxt8Om5Sw0Y=)
6: bBojKVehlumh6Ast16SxahZ3K0s.roa (hash: 1tb0mGMov/yRUa9MAYEK5/9XOpWqU57O4jNArw90xkI=)
7: iycZ2loJdRjirtO_seZ634r8_x0.roa (hash: thC+/QzA8XYVNXPbLOpRmVtVajPX50NvJVqTRlkA1kA=)
8: qWf4zsAaLlxNBWnNkvng4-8Bvtw.roa (hash: 6AjOSzj9VMdiYdzdqisEkWs6TZcl3i5LO4GKBF6A3ik=)
9: qh3FCktSbfGOiwplZde51Yp10xU.crl (hash: q7b6x1A1gc60tT4c+s2qhf3TB7D60E4dbfMT10MMl60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:34:d1:2f:62:4c:bb:76:0c:5f:74:be:c6:3f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Validity
Not Before: Mar 26 05:00:45 2026 GMT
Not After : Mar 27 05:00:45 2026 GMT
Subject: CN=2492fa26e546549faf6d9c55b1c827091cd1c9f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:52:2a:7b:8d:bd:4f:b5:86:8f:7a:bb:4f:f0:
bd:b0:cf:89:89:47:11:26:c8:e0:19:34:5c:6a:12:
5a:a0:3f:1a:72:b1:c0:50:0b:01:56:c2:09:ba:32:
8d:2d:30:ff:c7:61:8e:30:fd:3d:9a:43:ec:76:c9:
e1:a3:5c:b9:22:18:34:71:77:bd:3e:08:08:2f:70:
78:36:5b:69:fb:a1:97:91:2d:da:5c:00:2d:0a:54:
d0:18:d9:0c:00:d4:1d:01:b6:f7:fd:cd:a1:23:f1:
47:03:b5:03:96:ff:fa:e5:0b:dc:eb:b3:77:62:ec:
a2:db:96:f1:80:79:7a:33:11:7c:44:e9:78:d3:26:
d1:a9:ae:5b:51:bc:0e:53:fd:97:98:6d:fa:7f:4d:
62:57:1f:2b:35:af:50:2b:7a:46:7f:4a:04:92:7c:
a0:67:25:e3:35:6f:7e:10:08:c2:9f:16:e2:0a:a6:
7b:88:73:62:e0:ea:28:47:27:7b:02:79:fb:92:82:
36:77:db:3b:27:d0:94:2b:ce:b1:37:c9:00:ac:e9:
7b:b1:2d:59:b1:d0:46:cd:49:58:54:ef:4e:bd:69:
74:96:a8:36:4a:11:ec:1d:8f:c5:09:93:57:39:5b:
16:6e:67:a2:34:9f:76:e7:d7:50:45:97:c5:81:ac:
e3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:92:FA:26:E5:46:54:9F:AF:6D:9C:55:B1:C8:27:09:1C:D1:C9:F0
X509v3 Authority Key Identifier:
keyid:AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:c9:0e:02:e8:f6:71:18:7a:d9:43:e0:96:bb:23:fa:c6:b0:
2c:42:26:61:c2:d6:87:16:56:0e:39:87:cf:53:8a:35:fc:8f:
3f:a4:bc:1a:c7:97:19:89:63:95:ef:78:12:37:7e:2b:a1:6d:
fa:e5:98:87:fa:32:97:f6:92:f3:b4:1f:62:47:aa:18:ba:51:
14:de:48:16:cb:17:29:20:e8:cf:92:a0:5d:77:38:40:57:f7:
07:e9:9c:7e:26:78:d1:18:39:2e:25:46:75:34:b8:73:84:e2:
bf:9c:b3:c4:70:9a:88:b2:2e:87:d3:0d:87:ff:b7:6c:60:e2:
0a:69:27:63:24:36:41:81:08:7d:49:00:04:d3:8e:c6:2d:d4:
30:92:52:91:c4:64:7b:36:5a:c4:5d:8c:0c:23:6c:c4:eb:4d:
04:46:63:c7:7b:67:82:f1:98:fd:94:ea:3a:46:52:9d:92:88:
85:92:e7:55:52:a4:6e:24:05:0e:fb:84:76:92:36:7e:92:fe:
89:47:0e:b9:40:1b:aa:ed:0b:c9:56:e8:8f:20:56:49:45:0e:
ff:a5:42:f8:a7:f0:b2:59:3a:1f:8d:91:48:33:bc:57:5b:61:
4d:d9:8b:7a:a6:f9:7f:59:5d:22:da:db:c0:1c:67:a5:b5:83:
81:94:3f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:51:11 2026 by rpki-client