Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
File: qh3FCktSbfGOiwplZde51Yp10xU.mft (raw, json)
Hash identifier: XU8x0nWSVkZO8G49w+oJK+SLMeOxn8TfOdioNi4HK0Y=
Subject key identifier: E7:D5:40:87:D9:86:83:C4:CA:72:59:37:5A:22:A0:FE:EE:17:C5:46
Authority key identifier: AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
Certificate issuer: /CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Certificate serial: 019FAA1979B84F1432B9C00C2911BCC1571C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
Manifest number: 19E1
Signing time: Tue 28 Jul 2026 19:00:23 +0000
Manifest this update: Tue 28 Jul 2026 19:00:23 +0000
Manifest next update: Wed 29 Jul 2026 19:00:23 +0000
Files and hashes: 1: 2SpwrO6K0EQk8qayjEpp_xZ4_wg.roa (hash: /eCsd3Bhg9xFbAs/4U2EOV2JeWdYeKmfkwHyIef/wIk=)
2: BQI7xLWHF9ZNAK5nM3AaG90bJf4.roa (hash: tCWzvd6+gpJWA01AphfhvnpNLp2NN7klr1zWRXxTKKA=)
3: LnMBUYRb2MAMHOeFTnomV7j2CZs.roa (hash: +pH1K3ZbwRmdoZFv5Vag+ZbNrNoIYDgpbvJxI73PilY=)
4: P1Zvn3p5mBqcZYnmXTUNqZrZsuM.roa (hash: d6JzVBpRjcr/pOO8lJ/jWITXja7zGMD4ExKCM+u1meA=)
5: ZP3LCtKrBkzUel77FsVXywGgRk8.roa (hash: i1nVxawv2gpA1GeSUFY59H1040iN9e9Zdxt8Om5Sw0Y=)
6: bBojKVehlumh6Ast16SxahZ3K0s.roa (hash: 1tb0mGMov/yRUa9MAYEK5/9XOpWqU57O4jNArw90xkI=)
7: iycZ2loJdRjirtO_seZ634r8_x0.roa (hash: thC+/QzA8XYVNXPbLOpRmVtVajPX50NvJVqTRlkA1kA=)
8: qWf4zsAaLlxNBWnNkvng4-8Bvtw.roa (hash: 6AjOSzj9VMdiYdzdqisEkWs6TZcl3i5LO4GKBF6A3ik=)
9: qh3FCktSbfGOiwplZde51Yp10xU.crl (hash: Qovhs7QkL6DJn4EIoNpRWt/vXbnovDEWAuYZkn/hCQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:79:b8:4f:14:32:b9:c0:0c:29:11:bc:c1:57:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Validity
Not Before: Jul 28 19:00:23 2026 GMT
Not After : Jul 29 19:00:23 2026 GMT
Subject: CN=e7d54087d98683c4ca7259375a22a0feee17c546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e3:0b:1c:91:51:db:49:1f:fc:52:da:0a:0a:
3c:27:40:03:ad:30:a4:73:b1:17:53:3b:0c:4d:c2:
5a:bc:f6:9a:b0:72:bc:cc:97:85:d1:7d:11:98:11:
19:8b:25:5f:2f:98:0e:9c:e8:4d:aa:e6:73:a0:29:
a0:e5:e3:d9:7a:6e:2c:69:6e:79:fe:ce:7e:61:4b:
99:64:0b:6f:9a:43:5c:43:21:54:e2:43:f4:e5:06:
ae:c5:cc:af:c5:6c:7c:c8:ed:d1:22:ef:a7:9d:92:
1d:aa:57:9a:7a:84:8d:16:9c:e3:ab:d8:ce:2f:10:
a1:ec:0d:c8:4b:35:6b:d0:46:28:de:8a:a7:3c:9d:
56:2a:0c:8f:ac:14:db:5d:6b:af:cb:b7:fc:2b:f3:
ff:eb:4d:35:73:48:91:0f:d0:9a:76:a4:16:90:c0:
28:7e:01:11:f6:80:f1:22:37:b9:51:03:3f:2f:bd:
f8:59:88:74:8d:c8:54:da:2d:95:11:14:bf:fc:4e:
73:21:fc:03:2a:d1:6d:0e:fd:2a:e5:7e:6f:3b:56:
59:f9:0c:87:ad:b6:3a:8c:93:14:e6:be:8e:ed:f6:
a8:b9:9c:22:ba:71:77:c3:d9:82:5c:81:52:44:01:
64:5d:80:6f:51:0a:94:49:4b:2b:bd:ba:04:4a:68:
e0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D5:40:87:D9:86:83:C4:CA:72:59:37:5A:22:A0:FE:EE:17:C5:46
X509v3 Authority Key Identifier:
keyid:AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:30:d8:dc:8d:02:31:52:b1:81:ef:ec:eb:0c:4f:8c:a9:9e:
5c:af:36:42:93:42:ac:df:8a:b9:a1:9e:6d:58:ad:c2:0f:a1:
8a:c9:82:f8:d6:75:98:20:c6:48:14:b0:57:79:c1:49:59:7c:
c7:8e:82:44:e0:55:e8:73:e7:2d:f3:c5:0c:2f:3d:8b:07:4a:
58:d8:94:7c:44:ce:4e:eb:d9:de:b7:e8:67:ea:81:41:18:92:
e5:56:ac:f5:45:57:8a:1a:b8:9e:28:09:3b:e6:e9:87:79:17:
ed:e3:61:cc:ff:f6:e4:12:29:1f:46:ca:cc:5a:f7:ab:34:9c:
1d:12:99:70:0d:b3:56:48:1d:02:55:8d:98:f7:1c:00:fd:d6:
e8:a9:9f:6e:3c:0b:8a:9f:1c:55:4e:69:13:af:3e:c1:42:ea:
36:89:52:db:45:3e:7b:d9:36:68:1d:4c:e5:e0:d8:43:2f:4c:
94:42:6d:6c:41:2f:b0:a4:22:ce:d5:2b:ce:58:f6:86:f3:49:
b5:25:37:84:53:c8:08:d5:db:f4:a2:96:40:ad:24:f0:74:2f:
87:24:33:87:a5:bc:c1:53:58:f0:b7:4d:73:6a:c4:54:12:47:
be:dd:a1:78:38:c5:91:70:59:65:5f:56:10:e1:ae:56:83:a0:
65:6c:8c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:54:39 2026 by rpki-client