Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
File: qh3FCktSbfGOiwplZde51Yp10xU.mft (raw, json)
Hash identifier: Hgap44vbUSzuvoKjeDS6hhIXvjn8+6rbagnPFLVwXKI=
Subject key identifier: A4:AB:E9:D7:E5:2D:1C:22:ED:7F:67:07:84:12:09:33:C6:49:B7:97
Authority key identifier: AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
Certificate issuer: /CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Certificate serial: 01A0DF17D7FAD086D3B84A14EDB799529A99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
Manifest number: 1A81
Signing time: Sat 26 Sep 2026 19:01:16 +0000
Manifest this update: Sat 26 Sep 2026 19:01:16 +0000
Manifest next update: Sun 27 Sep 2026 19:01:16 +0000
Files and hashes: 1: 2SpwrO6K0EQk8qayjEpp_xZ4_wg.roa (hash: /eCsd3Bhg9xFbAs/4U2EOV2JeWdYeKmfkwHyIef/wIk=)
2: BQI7xLWHF9ZNAK5nM3AaG90bJf4.roa (hash: tCWzvd6+gpJWA01AphfhvnpNLp2NN7klr1zWRXxTKKA=)
3: LnMBUYRb2MAMHOeFTnomV7j2CZs.roa (hash: +pH1K3ZbwRmdoZFv5Vag+ZbNrNoIYDgpbvJxI73PilY=)
4: P1Zvn3p5mBqcZYnmXTUNqZrZsuM.roa (hash: d6JzVBpRjcr/pOO8lJ/jWITXja7zGMD4ExKCM+u1meA=)
5: ZP3LCtKrBkzUel77FsVXywGgRk8.roa (hash: i1nVxawv2gpA1GeSUFY59H1040iN9e9Zdxt8Om5Sw0Y=)
6: bBojKVehlumh6Ast16SxahZ3K0s.roa (hash: 1tb0mGMov/yRUa9MAYEK5/9XOpWqU57O4jNArw90xkI=)
7: iycZ2loJdRjirtO_seZ634r8_x0.roa (hash: thC+/QzA8XYVNXPbLOpRmVtVajPX50NvJVqTRlkA1kA=)
8: qWf4zsAaLlxNBWnNkvng4-8Bvtw.roa (hash: 6AjOSzj9VMdiYdzdqisEkWs6TZcl3i5LO4GKBF6A3ik=)
9: qh3FCktSbfGOiwplZde51Yp10xU.crl (hash: OZP7AWtmelxEjfXCLB6TEPLIe0SopkKj+3g6tq1iG24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:17:d7:fa:d0:86:d3:b8:4a:14:ed:b7:99:52:9a:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Validity
Not Before: Sep 26 19:01:16 2026 GMT
Not After : Sep 27 19:01:16 2026 GMT
Subject: CN=a4abe9d7e52d1c22ed7f670784120933c649b797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f3:7f:9f:45:6c:31:4f:0c:c3:9d:8e:61:f5:
71:ac:f8:a2:5d:36:54:f0:42:60:2c:39:79:9d:7d:
6b:b5:9c:d2:6d:e8:7e:26:b3:b9:b7:09:68:6a:84:
bc:41:ad:65:cc:2b:7c:9d:b8:e7:3f:04:c5:22:cc:
85:a7:f0:c5:79:8d:95:fb:7b:c4:81:fe:68:7b:6d:
d6:08:18:17:88:ee:83:ed:98:ee:32:76:54:5c:b0:
ee:96:4e:e2:33:7c:5a:6d:83:57:6e:60:1c:08:61:
9b:a0:1f:c7:df:c2:c0:ef:cc:ec:81:4b:fe:b0:43:
50:de:df:ff:02:24:3c:b6:04:84:45:85:98:d4:56:
11:45:d4:12:d0:55:1c:ba:66:ed:9b:f7:38:47:e8:
c1:28:66:0f:68:26:0d:22:48:5c:c1:2d:d8:a7:73:
bc:7d:3b:99:c4:bb:49:7a:d8:b3:b4:be:c9:79:7b:
fe:06:77:f7:f0:d0:be:2a:cf:a9:b0:6f:94:fb:6f:
ac:58:9f:82:52:a6:a5:dd:40:59:38:e4:fe:00:f0:
ce:c2:f1:be:6b:d8:41:99:b7:70:c7:00:d7:08:4d:
62:16:63:fb:18:5e:71:12:e0:4e:e7:c7:72:a8:22:
42:63:ff:e6:3a:50:d3:bb:fa:74:26:5e:cd:51:0b:
33:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:AB:E9:D7:E5:2D:1C:22:ED:7F:67:07:84:12:09:33:C6:49:B7:97
X509v3 Authority Key Identifier:
keyid:AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:14:f6:8a:0c:ab:ed:f1:b5:ee:17:fc:65:6b:c5:64:3b:6e:
5a:65:3a:3e:d1:37:4f:3b:22:13:a2:38:6c:22:0b:11:07:09:
8c:30:97:39:7f:d9:8e:fe:39:b8:1d:21:8e:d2:ef:d9:78:34:
ff:f4:63:08:05:5d:0a:32:b2:19:a9:47:95:46:e9:af:95:17:
03:b5:77:a8:74:e4:9e:28:6e:8f:eb:94:68:d0:d2:69:52:de:
7b:e7:1a:1c:0a:24:22:0a:8c:38:6f:3e:96:63:14:b3:fd:6a:
00:a7:0c:f1:e1:e0:d2:ed:ca:81:8a:25:f9:c7:88:dc:75:ac:
2b:d1:50:f5:f0:aa:35:8e:ab:a7:24:63:7e:cc:ba:de:9b:ca:
22:c0:81:38:2d:a8:eb:2c:69:6f:26:2c:50:96:a1:26:dc:73:
e3:b0:0b:cc:3e:a8:a9:e2:aa:e5:9a:c6:2d:5a:a2:2d:88:c5:
f1:32:3b:e1:e2:c0:30:c6:4f:dc:c6:11:bc:d6:22:24:0b:b9:
f3:5d:53:de:06:bd:0a:2b:90:bd:20:ff:03:cd:5f:fe:71:d6:
3f:72:84:25:89:bb:54:e1:04:28:d4:02:19:18:e6:f5:ac:85:
79:e0:17:c4:b5:bf:d5:df:74:bc:c6:6c:22:2b:a9:97:a4:9f:
4c:78:b0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:05:47 2026 by rpki-client