Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
File: Q1QWsigrRTPDUJwY6VfODINryDc.mft (raw, json)
Hash identifier: U3DCYEypLOD09cGQKg7xhDkoDnaPiy+dGW1o2M9kIuI=
Subject key identifier: 3E:F1:E2:7B:EA:50:3F:46:1A:73:75:36:F7:BA:75:2D:A3:07:D5:89
Authority key identifier: 43:54:16:B2:28:2B:45:33:C3:50:9C:18:E9:57:CE:0C:83:6B:C8:37
Certificate issuer: /CN=435416b2282b4533c3509c18e957ce0c836bc837
Certificate serial: 019D9819102AEFEACD33325FBE8F325A116C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
Manifest number: 10B0
Signing time: Thu 16 Apr 2026 21:01:12 +0000
Manifest this update: Thu 16 Apr 2026 21:01:12 +0000
Manifest next update: Fri 17 Apr 2026 21:01:12 +0000
Files and hashes: 1: MnDYEmNyAQzBpzR98qjs2sOtO_c.roa (hash: 34lKjvmsvDbzxduruRJbqT8KL81GGIwldVfmoVn9Yyw=)
2: Q1QWsigrRTPDUJwY6VfODINryDc.crl (hash: JsMnVzU88gH5LmwS7gnHT4uZ9l+fLZKWGXwt6hsnUY0=)
3: UG9G_dnWRpZkM8dNOUmzQ9ddYpM.roa (hash: VJHtgY+XTe16MdK4R4BNwcTnWb1T/NjN98Z9wb0GkTk=)
4: vUHrTNIykiSnEmNGusQYaFxAqdw.roa (hash: 1iGnZuZAbpNIqbdvK2c36DPr9j4iU15E9+caM/CdPU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:19:10:2a:ef:ea:cd:33:32:5f:be:8f:32:5a:11:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=435416b2282b4533c3509c18e957ce0c836bc837
Validity
Not Before: Apr 16 21:01:12 2026 GMT
Not After : Apr 17 21:01:12 2026 GMT
Subject: CN=3ef1e27bea503f461a737536f7ba752da307d589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bb:f3:f6:0c:3d:d8:38:eb:ed:45:18:7e:4a:
af:3a:86:e9:a9:19:11:f3:df:79:d1:c9:51:47:b1:
da:f9:84:09:17:af:08:ef:1e:1d:89:7c:a3:de:6e:
a4:40:36:26:02:3f:29:25:86:0e:56:04:ab:9c:12:
9f:ec:29:48:36:78:62:e7:33:40:7d:64:ff:22:47:
74:ee:ee:26:cb:12:b6:b8:0c:e6:f4:5d:0c:3d:90:
ba:99:59:28:16:bf:1b:46:ca:2f:c0:bc:6a:a4:ca:
17:79:ac:d6:50:ad:d3:ca:82:d0:1d:e5:0b:09:cc:
92:8c:38:3f:41:5c:0d:e7:59:90:45:9e:ca:b3:b3:
9d:66:1d:c3:26:6b:af:41:95:98:1d:d1:c2:ed:6c:
bd:23:45:09:60:4d:21:e0:e9:ce:20:de:35:55:ba:
e5:c9:51:5e:92:d2:dc:26:39:e5:1f:d5:7e:58:c4:
05:0b:3c:92:87:38:6c:ef:63:df:f2:7f:17:f7:01:
ac:e7:eb:20:8a:32:e9:e4:5a:74:26:7d:1b:cc:98:
9c:ec:b2:5a:29:38:29:ff:8c:d8:d5:89:4b:4b:6b:
69:67:2c:ea:23:b8:55:27:d6:13:c2:ee:9b:64:63:
ca:9f:f0:55:7a:86:9b:80:cb:b6:fa:c8:ba:18:79:
47:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F1:E2:7B:EA:50:3F:46:1A:73:75:36:F7:BA:75:2D:A3:07:D5:89
X509v3 Authority Key Identifier:
keyid:43:54:16:B2:28:2B:45:33:C3:50:9C:18:E9:57:CE:0C:83:6B:C8:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:3f:f2:e1:95:8a:f1:be:d9:b0:4b:0c:15:e9:a2:d4:d2:3a:
61:d4:da:7a:19:ab:fd:0e:2e:c8:77:1c:77:ff:45:9b:da:e3:
2a:5f:8a:9c:14:0a:06:55:c6:16:ee:eb:00:de:cb:10:94:42:
f2:92:d1:da:1d:47:19:fa:fc:31:0d:fb:8b:19:d6:d5:78:fd:
27:5b:1d:17:93:db:02:75:8c:55:64:61:5b:4f:cc:a2:bc:36:
22:10:74:c9:30:1b:b0:5b:5b:8d:09:61:90:c4:71:6d:e7:93:
89:91:1e:4b:ee:2c:ce:3d:90:92:f1:5e:58:22:35:a6:3b:e2:
d9:ab:75:d8:39:3a:97:75:21:9a:80:4e:48:57:29:6a:78:d8:
5f:59:ba:fc:2e:3c:70:06:51:fb:bd:b0:d9:00:97:87:20:76:
b4:f3:71:ab:39:ca:87:57:45:af:7e:7e:7f:f4:3e:c0:57:88:
44:9c:75:52:cb:99:d8:ad:1f:c9:35:86:b5:b5:0d:94:1e:1f:
c0:8d:f2:aa:cc:07:ce:2c:7d:35:1a:1a:85:1f:4e:40:cc:bd:
dd:c3:e2:99:4b:7b:8f:85:ba:4a:8d:9c:75:4d:b4:05:0e:d1:
49:e3:fb:2f:67:1f:70:4f:47:7b:11:0f:a8:64:c4:99:bd:d5:
2c:9c:76:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:51 2026 by rpki-client