Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/qCIH_VDEXpbygl7Hcs9rjeo9_LA.mft
File: qCIH_VDEXpbygl7Hcs9rjeo9_LA.mft (raw, json)
Hash identifier: Z4ixGu01rSv+EeipAh6MXFa5xlsSu1XKJKoV9MyWXIY=
Subject key identifier: A3:96:3F:BB:C4:8C:6B:21:DD:D6:D5:79:F3:79:DF:D0:3B:B5:4D:6C
Authority key identifier: A8:22:07:FD:50:C4:5E:96:F2:82:5E:C7:72:CF:6B:8D:EA:3D:FC:B0
Certificate issuer: /CN=a82207fd50c45e96f2825ec772cf6b8dea3dfcb0
Certificate serial: 019D28F2118D23A82A2DED9367320E0B84B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCIH_VDEXpbygl7Hcs9rjeo9_LA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/qCIH_VDEXpbygl7Hcs9rjeo9_LA.mft
Manifest number: 07C3
Signing time: Thu 26 Mar 2026 07:00:46 +0000
Manifest this update: Thu 26 Mar 2026 07:00:46 +0000
Manifest next update: Fri 27 Mar 2026 07:00:46 +0000
Files and hashes: 1: 1-8RpzQOO8MH_8tY_8CiuesNU5kw.roa (hash: NwZ58UxGQif1qZHSYOqbsi4+8X/Tbr0yxp1KYuyKjAA=)
2: qCIH_VDEXpbygl7Hcs9rjeo9_LA.crl (hash: fZYki1VB7EWjubGBbbpc/9SbhCfn9BipFrYikA08Uj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/qCIH_VDEXpbygl7Hcs9rjeo9_LA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/qCIH_VDEXpbygl7Hcs9rjeo9_LA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCIH_VDEXpbygl7Hcs9rjeo9_LA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:11:8d:23:a8:2a:2d:ed:93:67:32:0e:0b:84:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a82207fd50c45e96f2825ec772cf6b8dea3dfcb0
Validity
Not Before: Mar 26 07:00:46 2026 GMT
Not After : Mar 27 07:00:46 2026 GMT
Subject: CN=a3963fbbc48c6b21ddd6d579f379dfd03bb54d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:43:cf:90:83:fc:0d:e2:d0:dc:c9:8b:18:fa:
d2:7c:80:09:c8:3e:11:75:52:99:e1:31:b7:75:05:
9f:c9:8c:b5:ee:01:a7:bd:e9:77:61:b9:18:6c:ea:
09:06:00:30:23:f3:bf:45:e2:63:d9:a2:2e:73:18:
99:ec:ae:93:e5:0c:df:66:94:84:32:3f:c9:0c:8d:
6f:41:66:a4:f1:d2:a6:70:66:b1:94:ab:a2:ab:00:
b6:5d:62:52:29:a1:f7:3c:1d:07:3a:6a:f1:ac:53:
7c:42:d7:ee:e3:9b:f8:56:10:7c:54:39:ef:99:f1:
00:ec:e9:49:0e:ff:b7:e0:0c:69:b6:84:44:00:63:
88:9b:f8:f7:f4:d1:92:79:62:66:df:f7:ce:00:36:
6c:8e:17:34:a8:2c:80:61:2e:f6:2f:a6:99:04:a8:
ad:ba:d5:f9:4c:ca:ed:74:c0:b8:60:51:77:a4:b2:
8c:e3:a2:12:0f:d2:b3:f0:50:58:26:f2:87:89:4b:
79:2c:0e:4e:4f:e4:0e:72:16:71:18:ad:18:d4:31:
1f:15:82:45:4b:b6:28:c9:f2:c4:46:c9:f8:97:60:
b2:2f:73:39:90:8e:47:42:7a:5b:8d:1b:bd:4a:b0:
08:0c:60:41:58:cf:f7:f5:69:57:01:57:fb:3c:a8:
52:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:96:3F:BB:C4:8C:6B:21:DD:D6:D5:79:F3:79:DF:D0:3B:B5:4D:6C
X509v3 Authority Key Identifier:
keyid:A8:22:07:FD:50:C4:5E:96:F2:82:5E:C7:72:CF:6B:8D:EA:3D:FC:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCIH_VDEXpbygl7Hcs9rjeo9_LA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/qCIH_VDEXpbygl7Hcs9rjeo9_LA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/qCIH_VDEXpbygl7Hcs9rjeo9_LA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:9e:3f:98:3b:76:46:19:d9:26:9f:10:00:a3:17:91:fc:e6:
a5:75:a7:52:ee:7d:d9:40:83:d2:5a:85:b6:a7:ce:c5:1c:67:
c8:9c:79:97:8f:1d:69:cd:73:98:1b:55:de:07:53:95:8a:d0:
c4:39:9c:bb:d1:14:8d:9f:82:df:f3:58:a7:2f:07:4c:be:b1:
06:d1:78:49:e1:be:59:d8:d7:ea:95:ed:90:11:2e:91:7d:a9:
c4:b6:ef:bc:5d:8f:8e:0d:e1:0b:cd:c1:aa:3f:42:93:c3:8d:
5a:b1:e0:64:92:a6:4c:a0:a7:05:e2:ee:08:1e:fb:46:85:09:
de:b9:65:46:b3:ae:eb:a5:26:45:07:43:9a:ae:06:e2:f8:ed:
90:13:c7:42:47:ab:86:1e:6f:99:ee:54:c5:b5:41:c1:82:a5:
1d:85:49:6e:57:01:04:3a:ba:6f:3a:64:20:7c:81:e5:99:c9:
24:46:e6:49:58:e0:5e:82:db:a7:20:df:18:0f:33:7b:80:bd:
41:50:a0:03:3a:33:d5:a2:d8:44:45:04:c5:4b:66:5f:fb:b1:
1b:a7:3a:a6:65:f4:b0:b2:72:88:f1:77:d1:91:96:86:a7:21:
8c:46:e5:c6:43:9f:32:ac:05:f3:c3:5c:8b:ed:02:3b:6e:05:
f1:bf:be:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8hGNI6gqLe2TZzIOC4S1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MjIwN2ZkNTBjNDVlOTZmMjgyNWVjNzcyY2Y2YjhkZWEz
ZGZjYjAwHhcNMjYwMzI2MDcwMDQ2WhcNMjYwMzI3MDcwMDQ2WjAzMTEwLwYDVQQD
EyhhMzk2M2ZiYmM0OGM2YjIxZGRkNmQ1NzlmMzc5ZGZkMDNiYjU0ZDZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUPPkIP8DeLQ3MmLGPrSfIAJyD4R
dVKZ4TG3dQWfyYy17gGnvel3YbkYbOoJBgAwI/O/ReJj2aIucxiZ7K6T5QzfZpSE
Mj/JDI1vQWak8dKmcGaxlKuiqwC2XWJSKaH3PB0HOmrxrFN8Qtfu45v4VhB8VDnv
mfEA7OlJDv+34AxptoREAGOIm/j39NGSeWJm3/fOADZsjhc0qCyAYS72L6aZBKit
utX5TMrtdMC4YFF3pLKM46ISD9Kz8FBYJvKHiUt5LA5OT+QOchZxGK0Y1DEfFYJF
S7YoyfLERsn4l2CyL3M5kI5HQnpbjRu9SrAIDGBBWM/39WlXAVf7PKhSxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKOWP7vEjGsh3dbVefN539A7tU1sMB8GA1UdIwQY
MBaAFKgiB/1QxF6W8oJex3LPa43qPfywMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUNJSF9WREVYcGJ5Z2w3SGNzOXJqZW85X0xBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hYThlNDMtNmRmMC00N2VmLWFkYzUt
MzBiZGQyZmUwNWIxLzEvcUNJSF9WREVYcGJ5Z2w3SGNzOXJqZW85X0xBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9hYThlNDMtNmRmMC00N2VmLWFkYzUtMzBiZGQyZmUwNWIx
LzEvcUNJSF9WREVYcGJ5Z2w3SGNzOXJqZW85X0xBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh54/mDt2
RhnZJp8QAKMXkfzmpXWnUu592UCD0lqFtqfOxRxnyJx5l48dac1zmBtV3gdTlYrQ
xDmcu9EUjZ+C3/NYpy8HTL6xBtF4SeG+WdjX6pXtkBEukX2pxLbvvF2Pjg3hC83B
qj9Ck8ONWrHgZJKmTKCnBeLuCB77RoUJ3rllRrOu66UmRQdDmq4G4vjtkBPHQker
hh5vme5UxbVBwYKlHYVJblcBBDq6bzpkIHyB5ZnJJEbmSVjgXoLbpyDfGA8ze4C9
QVCgAzoz1aLYREUExUtmX/uxG6c6pmX0sLJyiPF30ZGWhqchjEblxkOfMqwF88Nc
i+0CO24F8b++rg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:11:34 2026 by rpki-client