Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
File: Q1QWsigrRTPDUJwY6VfODINryDc.mft (raw, json)
Hash identifier: UTSG76iBjjQoGcdEpHkxWjD5qTFUJTzqb3WpNYFzKBA=
Subject key identifier: 3C:E4:AD:55:5E:ED:05:AE:84:24:70:64:25:7A:B2:80:3B:5E:4C:42
Authority key identifier: 43:54:16:B2:28:2B:45:33:C3:50:9C:18:E9:57:CE:0C:83:6B:C8:37
Certificate issuer: /CN=435416b2282b4533c3509c18e957ce0c836bc837
Certificate serial: 019CAC7DD6A8BF6B96755254EF902D96529A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
Manifest number: 1036
Signing time: Mon 02 Mar 2026 03:00:53 +0000
Manifest this update: Mon 02 Mar 2026 03:00:53 +0000
Manifest next update: Tue 03 Mar 2026 03:00:53 +0000
Files and hashes: 1: MnDYEmNyAQzBpzR98qjs2sOtO_c.roa (hash: 34lKjvmsvDbzxduruRJbqT8KL81GGIwldVfmoVn9Yyw=)
2: Q1QWsigrRTPDUJwY6VfODINryDc.crl (hash: 1vgXeA4OX2CVvl8fOFBMGD9Qp8kvxonhccPH81Oy7Hw=)
3: UG9G_dnWRpZkM8dNOUmzQ9ddYpM.roa (hash: VJHtgY+XTe16MdK4R4BNwcTnWb1T/NjN98Z9wb0GkTk=)
4: vUHrTNIykiSnEmNGusQYaFxAqdw.roa (hash: 1iGnZuZAbpNIqbdvK2c36DPr9j4iU15E9+caM/CdPU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:d6:a8:bf:6b:96:75:52:54:ef:90:2d:96:52:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=435416b2282b4533c3509c18e957ce0c836bc837
Validity
Not Before: Mar 2 03:00:53 2026 GMT
Not After : Mar 3 03:00:53 2026 GMT
Subject: CN=3ce4ad555eed05ae84247064257ab2803b5e4c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ac:5f:d1:e6:4f:f1:30:a9:b8:44:c4:e1:de:
d2:38:ff:02:72:23:c0:39:5d:cd:84:90:a4:16:18:
9d:87:14:34:0d:16:ca:81:7a:aa:c9:a9:e5:86:d9:
9e:ce:42:1b:3e:3b:96:7e:30:6f:4c:fe:96:b1:ba:
4e:57:49:65:13:63:7a:81:2b:14:f7:b0:c8:88:c5:
e6:32:52:43:f9:41:54:08:86:1c:25:4f:41:f5:27:
1f:55:75:3c:99:35:e7:40:e5:e0:7f:63:99:af:26:
85:3a:65:8b:22:ae:73:7a:6d:c5:c8:ec:9f:8a:24:
76:ab:cb:35:fd:7d:3e:3b:2c:34:b7:90:f0:8f:e0:
50:4b:02:77:30:eb:9c:cd:ef:e1:bb:34:54:07:27:
9f:2a:60:63:64:0a:ca:5c:28:44:6f:25:ef:5a:39:
21:56:49:3f:cd:81:b0:1a:33:99:e4:28:d9:9d:8a:
50:67:8a:74:11:7e:37:3f:cb:70:21:28:62:e8:e8:
e4:ef:56:b6:6f:a4:4e:1c:d8:f8:d7:ed:b7:48:a6:
9e:a7:71:1a:09:fd:e7:26:9c:ca:fd:fc:fb:11:f0:
8b:6c:e5:e1:0f:fe:b0:93:16:da:78:c0:80:91:9e:
12:ae:43:ac:98:25:f4:23:36:17:7d:7c:a2:7c:3f:
86:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E4:AD:55:5E:ED:05:AE:84:24:70:64:25:7A:B2:80:3B:5E:4C:42
X509v3 Authority Key Identifier:
keyid:43:54:16:B2:28:2B:45:33:C3:50:9C:18:E9:57:CE:0C:83:6B:C8:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:31:75:d6:20:d8:4e:0f:56:6c:65:64:59:16:8f:8f:a3:45:
53:27:08:d2:74:f2:36:7f:b1:75:59:c8:12:7f:22:a0:8c:ee:
45:a5:6a:e4:8a:e5:a2:ef:ec:80:f0:35:41:d3:81:d4:b0:b1:
b0:ed:10:df:bf:d5:88:fe:ef:91:06:43:fc:31:62:55:1a:24:
74:c7:c0:9e:39:06:7c:19:e5:a7:60:9e:d5:8d:ee:9a:13:0a:
c9:ab:82:ff:05:0f:b3:cf:9e:b3:f6:5e:60:33:4a:ad:54:a6:
6f:39:3a:db:81:68:a4:3e:da:52:b7:9d:6b:e4:86:b1:9b:d6:
ff:70:22:75:76:5e:61:86:94:3a:8a:0c:51:34:cc:c3:fa:91:
53:dd:2a:85:84:f6:43:43:c9:7b:b0:32:2b:b1:c1:7a:86:82:
50:6c:f6:95:aa:5c:d8:0a:73:56:63:28:74:cd:01:e2:bf:3a:
ed:32:0f:cb:75:02:de:f6:95:cf:5a:f3:6a:c6:69:48:79:24:
01:73:81:31:a6:02:a4:0a:b4:2a:74:98:65:34:64:cb:e1:be:
ae:3d:90:4a:6d:ff:8f:20:86:83:30:9e:90:4b:b2:01:36:2d:
0f:f2:e1:5a:9e:a5:66:16:8f:23:0b:fc:6f:14:b4:f5:14:9f:
76:12:c9:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysfdaov2uWdVJU75AtllKaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzNTQxNmIyMjgyYjQ1MzNjMzUwOWMxOGU5NTdjZTBjODM2
YmM4MzcwHhcNMjYwMzAyMDMwMDUzWhcNMjYwMzAzMDMwMDUzWjAzMTEwLwYDVQQD
EygzY2U0YWQ1NTVlZWQwNWFlODQyNDcwNjQyNTdhYjI4MDNiNWU0YzQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0axf0eZP8TCpuETE4d7SOP8CciPA
OV3NhJCkFhidhxQ0DRbKgXqqyanlhtmezkIbPjuWfjBvTP6WsbpOV0llE2N6gSsU
97DIiMXmMlJD+UFUCIYcJU9B9ScfVXU8mTXnQOXgf2OZryaFOmWLIq5zem3FyOyf
iiR2q8s1/X0+Oyw0t5Dwj+BQSwJ3MOucze/huzRUByefKmBjZArKXChEbyXvWjkh
Vkk/zYGwGjOZ5CjZnYpQZ4p0EX43P8twIShi6Ojk71a2b6ROHNj41+23SKaep3Ea
Cf3nJpzK/fz7EfCLbOXhD/6wkxbaeMCAkZ4SrkOsmCX0IzYXfXyifD+GOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDzkrVVe7QWuhCRwZCV6soA7XkxCMB8GA1UdIwQY
MBaAFENUFrIoK0Uzw1CcGOlXzgyDa8g3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTFRV3NpZ3JSVFBEVUp3WTZWZk9ESU5yeURjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy82M2ZmODEtNjQ2MC00YzA1LTg1MmQt
MjYyZWIzOWJiZTc2LzEvUTFRV3NpZ3JSVFBEVUp3WTZWZk9ESU5yeURjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy82M2ZmODEtNjQ2MC00YzA1LTg1MmQtMjYyZWIzOWJiZTc2
LzEvUTFRV3NpZ3JSVFBEVUp3WTZWZk9ESU5yeURjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKzF11iDY
Tg9WbGVkWRaPj6NFUycI0nTyNn+xdVnIEn8ioIzuRaVq5Irlou/sgPA1QdOB1LCx
sO0Q37/ViP7vkQZD/DFiVRokdMfAnjkGfBnlp2Ce1Y3umhMKyauC/wUPs8+es/Ze
YDNKrVSmbzk624FopD7aUreda+SGsZvW/3AidXZeYYaUOooMUTTMw/qRU90qhYT2
Q0PJe7AyK7HBeoaCUGz2lapc2ApzVmModM0B4r867TIPy3UC3vaVz1rzasZpSHkk
AXOBMaYCpAq0KnSYZTRky+G+rj2QSm3/jyCGgzCekEuyATYtD/LhWp6lZhaPIwv8
bxS09RSfdhLJ3Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:58:55 2026 by rpki-client