Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
File: qh3FCktSbfGOiwplZde51Yp10xU.mft (raw, json)
Hash identifier: VRgaOuqiPRGpcBIvU7Fe1Ej0SoBHZsYQoQGaD3K9rkY=
Subject key identifier: 55:47:74:E4:B0:88:65:1C:C8:AF:11:EA:AC:71:32:52:E2:17:B9:B4
Authority key identifier: AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
Certificate issuer: /CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Certificate serial: 019CAAFD728DA823926F2C334926F07AB14D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
Manifest number: 1853
Signing time: Sun 01 Mar 2026 20:01:02 +0000
Manifest this update: Sun 01 Mar 2026 20:01:02 +0000
Manifest next update: Mon 02 Mar 2026 20:01:02 +0000
Files and hashes: 1: 1-AAmQBvbizmeqxFRtgv0PZkdbaw.roa (hash: szjslYw6N3jLu7zRrYsKftErRAg7H6aZn8Z02fpRv1s=)
2: 2SpwrO6K0EQk8qayjEpp_xZ4_wg.roa (hash: /eCsd3Bhg9xFbAs/4U2EOV2JeWdYeKmfkwHyIef/wIk=)
3: BQI7xLWHF9ZNAK5nM3AaG90bJf4.roa (hash: tCWzvd6+gpJWA01AphfhvnpNLp2NN7klr1zWRXxTKKA=)
4: LnMBUYRb2MAMHOeFTnomV7j2CZs.roa (hash: +pH1K3ZbwRmdoZFv5Vag+ZbNrNoIYDgpbvJxI73PilY=)
5: ZP3LCtKrBkzUel77FsVXywGgRk8.roa (hash: i1nVxawv2gpA1GeSUFY59H1040iN9e9Zdxt8Om5Sw0Y=)
6: bBojKVehlumh6Ast16SxahZ3K0s.roa (hash: 1tb0mGMov/yRUa9MAYEK5/9XOpWqU57O4jNArw90xkI=)
7: iycZ2loJdRjirtO_seZ634r8_x0.roa (hash: thC+/QzA8XYVNXPbLOpRmVtVajPX50NvJVqTRlkA1kA=)
8: qWf4zsAaLlxNBWnNkvng4-8Bvtw.roa (hash: 6AjOSzj9VMdiYdzdqisEkWs6TZcl3i5LO4GKBF6A3ik=)
9: qh3FCktSbfGOiwplZde51Yp10xU.crl (hash: KcesLfxjuJuLkOJ1MEXBEeUGrZzXzRrnGWRGOHn8dAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:72:8d:a8:23:92:6f:2c:33:49:26:f0:7a:b1:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Validity
Not Before: Mar 1 20:01:02 2026 GMT
Not After : Mar 2 20:01:02 2026 GMT
Subject: CN=554774e4b088651cc8af11eaac713252e217b9b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d7:b1:9f:ee:ce:1d:73:ff:14:1e:75:c3:3f:
8a:76:c2:6c:71:dc:57:be:cc:e4:d5:a0:a0:26:00:
2a:b0:38:7a:4b:a1:40:14:1e:9c:ed:0a:d2:73:8f:
9d:ef:73:e1:2b:ec:ba:4f:b9:87:16:aa:d0:5b:c4:
a4:4c:e3:87:86:21:0e:de:cf:fb:c8:6b:24:a1:68:
b4:cc:cc:26:81:28:c5:0b:e9:35:88:94:b2:a7:67:
ae:07:63:d7:b6:bc:b9:1f:07:d6:d0:9f:b2:a3:53:
2d:85:37:91:c8:57:3c:cf:7c:fe:2f:12:de:80:d8:
b8:c4:b1:72:67:d2:c7:0f:d9:cb:c4:8a:40:dc:d9:
21:29:ac:3c:8b:dd:c2:19:c1:03:b3:d0:4a:e3:78:
18:32:12:bf:2c:73:6e:a9:21:03:65:d6:c3:e4:a3:
1f:db:f9:3a:ab:b1:10:44:23:17:94:24:fc:c1:eb:
8a:86:ce:9b:e3:00:19:71:ea:b9:25:eb:0c:ef:bd:
5a:f0:a4:4c:8d:7f:70:ac:aa:ca:04:ae:f0:58:23:
76:33:ad:c7:65:5c:bd:af:6b:cd:d7:9c:42:de:e8:
67:e3:9a:da:ac:35:16:91:85:26:7d:73:14:b4:79:
3d:2d:cd:d2:8b:33:e1:db:78:7d:5a:67:c6:43:31:
22:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:47:74:E4:B0:88:65:1C:C8:AF:11:EA:AC:71:32:52:E2:17:B9:B4
X509v3 Authority Key Identifier:
keyid:AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:07:1c:38:aa:27:73:6d:23:6f:7d:e7:7b:6d:07:7e:2d:58:
28:45:40:61:61:0a:9d:8a:e9:0e:09:5e:2a:14:89:87:c0:5e:
20:42:d4:d6:45:b8:25:bc:7d:0f:59:0a:a4:1b:c5:49:5e:e7:
23:b3:40:c5:b0:f5:c9:ce:39:dc:52:11:1b:3d:c3:e9:9a:f1:
29:db:1e:90:f1:02:49:c0:32:cf:ef:9d:cf:4a:5d:d7:7f:b3:
76:9d:03:73:20:10:6b:d4:a3:7b:c7:2b:c0:be:cc:67:d6:5c:
ed:4d:12:4c:4a:ec:65:02:40:d8:6e:e2:ff:26:70:54:8b:88:
6a:b4:88:b8:aa:dd:07:51:f0:62:d5:c5:94:8c:33:5d:51:02:
6e:73:e7:b6:e3:dc:27:f0:1f:6c:86:ab:38:cb:9f:0c:04:41:
11:82:f9:41:96:23:32:1e:62:38:6b:ae:60:0c:47:d0:7e:5c:
c8:c3:08:b4:59:88:89:87:de:d9:d7:a3:30:7a:51:1a:db:13:
9f:34:99:37:5d:51:91:7c:9e:6c:35:b7:67:34:a1:d4:0f:80:
9f:87:51:65:99:44:1e:d4:f5:86:4c:8a:55:ee:9d:c9:5d:99:
6e:62:8f:57:19:77:8a:bf:ca:df:ae:91:2a:2d:4c:46:f3:94:
25:4c:66:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/XKNqCOSbywzSSbwerFNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWRjNTBhNGI1MjZkZjE4ZThiMGE2NTY1ZDdiOWQ1OGE3
NWQzMTUwHhcNMjYwMzAxMjAwMTAyWhcNMjYwMzAyMjAwMTAyWjAzMTEwLwYDVQQD
Eyg1NTQ3NzRlNGIwODg2NTFjYzhhZjExZWFhYzcxMzI1MmUyMTdiOWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNexn+7OHXP/FB51wz+KdsJscdxX
vszk1aCgJgAqsDh6S6FAFB6c7QrSc4+d73PhK+y6T7mHFqrQW8SkTOOHhiEO3s/7
yGskoWi0zMwmgSjFC+k1iJSyp2euB2PXtry5HwfW0J+yo1MthTeRyFc8z3z+LxLe
gNi4xLFyZ9LHD9nLxIpA3NkhKaw8i93CGcEDs9BK43gYMhK/LHNuqSEDZdbD5KMf
2/k6q7EQRCMXlCT8weuKhs6b4wAZceq5JesM771a8KRMjX9wrKrKBK7wWCN2M63H
ZVy9r2vN15xC3uhn45rarDUWkYUmfXMUtHk9Lc3SizPh23h9WmfGQzEiFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFVHdOSwiGUcyK8R6qxxMlLiF7m0MB8GA1UdIwQY
MBaAFKodxQpLUm3xjosKZWXXudWKddMVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWgzRkNrdFNiZkdPaXdwbFpkZTUxWXAxMHhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9mMjM5MjktNzM3NS00MWM4LTk5NzMt
MzNkNzI4NDMzYzExLzEvcWgzRkNrdFNiZkdPaXdwbFpkZTUxWXAxMHhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9mMjM5MjktNzM3NS00MWM4LTk5NzMtMzNkNzI4NDMzYzEx
LzEvcWgzRkNrdFNiZkdPaXdwbFpkZTUxWXAxMHhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADQccOKon
c20jb33ne20Hfi1YKEVAYWEKnYrpDgleKhSJh8BeIELU1kW4Jbx9D1kKpBvFSV7n
I7NAxbD1yc453FIRGz3D6ZrxKdsekPECScAyz++dz0pd13+zdp0DcyAQa9Sje8cr
wL7MZ9Zc7U0STErsZQJA2G7i/yZwVIuIarSIuKrdB1HwYtXFlIwzXVECbnPntuPc
J/AfbIarOMufDARBEYL5QZYjMh5iOGuuYAxH0H5cyMMItFmIiYfe2dejMHpRGtsT
nzSZN11RkXyebDW3ZzSh1A+An4dRZZlEHtT1hkyKVe6dyV2ZbmKPVxl3ir/K366R
Ki1MRvOUJUxmuQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:40:14 2026 by rpki-client