Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
File: qh3FCktSbfGOiwplZde51Yp10xU.mft (raw, json)
Hash identifier: ccq5GaygRJ/umuhgh7/lbOfXmS3+0QvF8sYo4f811bg=
Subject key identifier: 8D:D1:1B:4D:BE:BC:80:AD:82:BF:D0:88:D6:22:B3:D0:50:3B:C5:E4
Authority key identifier: AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
Certificate issuer: /CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Certificate serial: 019D98F498D6F36C4850AFAAE28CE4DFF598
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
Manifest number: 18CF
Signing time: Fri 17 Apr 2026 01:00:59 +0000
Manifest this update: Fri 17 Apr 2026 01:00:59 +0000
Manifest next update: Sat 18 Apr 2026 01:00:59 +0000
Files and hashes: 1: 2SpwrO6K0EQk8qayjEpp_xZ4_wg.roa (hash: /eCsd3Bhg9xFbAs/4U2EOV2JeWdYeKmfkwHyIef/wIk=)
2: BQI7xLWHF9ZNAK5nM3AaG90bJf4.roa (hash: tCWzvd6+gpJWA01AphfhvnpNLp2NN7klr1zWRXxTKKA=)
3: LnMBUYRb2MAMHOeFTnomV7j2CZs.roa (hash: +pH1K3ZbwRmdoZFv5Vag+ZbNrNoIYDgpbvJxI73PilY=)
4: P1Zvn3p5mBqcZYnmXTUNqZrZsuM.roa (hash: d6JzVBpRjcr/pOO8lJ/jWITXja7zGMD4ExKCM+u1meA=)
5: ZP3LCtKrBkzUel77FsVXywGgRk8.roa (hash: i1nVxawv2gpA1GeSUFY59H1040iN9e9Zdxt8Om5Sw0Y=)
6: bBojKVehlumh6Ast16SxahZ3K0s.roa (hash: 1tb0mGMov/yRUa9MAYEK5/9XOpWqU57O4jNArw90xkI=)
7: iycZ2loJdRjirtO_seZ634r8_x0.roa (hash: thC+/QzA8XYVNXPbLOpRmVtVajPX50NvJVqTRlkA1kA=)
8: qWf4zsAaLlxNBWnNkvng4-8Bvtw.roa (hash: 6AjOSzj9VMdiYdzdqisEkWs6TZcl3i5LO4GKBF6A3ik=)
9: qh3FCktSbfGOiwplZde51Yp10xU.crl (hash: mDxnCD+OkfHhlzUiV91ik++n9wPtqxNpsXF5NilZSPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:98:d6:f3:6c:48:50:af:aa:e2:8c:e4:df:f5:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Validity
Not Before: Apr 17 01:00:59 2026 GMT
Not After : Apr 18 01:00:59 2026 GMT
Subject: CN=8dd11b4dbebc80ad82bfd088d622b3d0503bc5e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ce:1b:f6:c8:81:5f:64:ec:e3:d3:d0:7d:bf:
49:39:76:03:47:63:64:14:41:59:ff:c0:e9:15:aa:
20:96:38:2e:9b:7d:12:b2:91:89:43:5c:c0:b9:d6:
17:34:e0:27:4b:f1:fa:40:0e:b8:67:51:49:1f:39:
6a:46:9b:b2:6e:b8:62:6c:b1:9d:41:f4:48:38:8f:
76:91:02:18:ff:f7:c7:3d:ca:bd:21:59:25:39:26:
66:6c:a1:4c:dc:01:8b:e3:43:69:e6:6a:9d:f1:5d:
e9:4b:46:ca:82:33:c2:a2:e2:d3:d1:76:8c:44:ea:
64:52:18:fb:50:d5:30:29:2f:1a:0f:71:33:76:49:
4c:84:ca:f2:3d:ad:5f:39:cb:70:1d:66:c4:0c:b1:
2a:6f:13:8e:dc:fa:00:13:be:f9:a2:b1:bb:75:c5:
66:a2:9d:08:0b:d5:b5:5a:0b:b4:13:67:ed:36:ed:
f7:c2:9d:91:e4:78:b0:7e:eb:37:5d:47:67:5a:58:
4d:d2:2a:b0:7f:3a:06:25:55:ca:e5:d3:97:5a:bf:
ca:29:1d:d0:8f:e6:68:e6:be:73:14:a2:0d:4f:c5:
ac:49:da:f8:fc:a3:fa:fd:5a:8c:87:94:62:06:ee:
8f:7a:0c:d6:06:78:ab:42:59:4c:2c:5c:e7:39:dc:
cb:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D1:1B:4D:BE:BC:80:AD:82:BF:D0:88:D6:22:B3:D0:50:3B:C5:E4
X509v3 Authority Key Identifier:
keyid:AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:c5:d8:fc:de:ca:d7:1f:36:ef:eb:8e:b2:b6:63:3d:f3:c6:
28:d5:fa:ab:a3:76:a6:d1:d4:6b:64:92:fc:54:3c:76:d9:55:
67:df:16:f3:ad:0c:01:dc:38:ea:59:31:1a:49:6e:ec:f5:35:
cb:f4:6f:70:7a:a2:ec:66:32:c1:4a:93:63:6e:49:80:8d:fb:
60:fe:15:2f:9c:70:13:2c:1a:18:c4:46:6a:6c:b3:38:ae:76:
20:9b:60:2d:49:6b:24:3a:98:a0:29:38:d0:4b:0e:38:32:0b:
52:64:11:2c:80:e6:a0:2a:37:80:37:b9:f5:c5:60:e9:5c:30:
14:f0:11:6f:75:7b:6a:6f:ef:85:9f:ed:62:fb:61:20:99:07:
ed:e3:0e:16:0c:c0:0e:0b:20:6e:06:01:1f:ad:4e:62:8e:1e:
35:ff:1c:38:63:d6:97:31:71:84:d6:5c:08:f0:b2:13:6a:5e:
46:61:0c:ba:3f:45:70:33:e5:df:f6:6b:fa:f7:06:57:b1:c5:
b9:d3:ff:b6:f6:c0:6f:15:14:d9:67:75:ff:4b:60:3c:d4:cf:
24:e6:46:33:1e:a5:03:c6:e6:c4:70:74:b5:34:a5:b3:1e:ef:
6c:89:11:16:f9:2e:d7:68:3b:6d:45:3b:f3:10:7b:39:99:44:
87:3f:5e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:48:03 2026 by rpki-client