Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
File: Q1QWsigrRTPDUJwY6VfODINryDc.mft (raw, json)
Hash identifier: 6yMrrYmY05laiUrxIQAYV4FDK04DD7BFcNitKhfeRgE=
Subject key identifier: BA:42:0E:CF:B5:40:75:61:E2:81:ED:28:31:5E:52:54:5B:46:C1:00
Authority key identifier: 43:54:16:B2:28:2B:45:33:C3:50:9C:18:E9:57:CE:0C:83:6B:C8:37
Certificate issuer: /CN=435416b2282b4533c3509c18e957ce0c836bc837
Certificate serial: 019EBF9147BA62F77A30EDE2F38A8B32B1DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
Manifest number: 1149
Signing time: Sat 13 Jun 2026 06:00:29 +0000
Manifest this update: Sat 13 Jun 2026 06:00:29 +0000
Manifest next update: Sun 14 Jun 2026 06:00:29 +0000
Files and hashes: 1: MnDYEmNyAQzBpzR98qjs2sOtO_c.roa (hash: 34lKjvmsvDbzxduruRJbqT8KL81GGIwldVfmoVn9Yyw=)
2: Q1QWsigrRTPDUJwY6VfODINryDc.crl (hash: DWg8d0MR9OcqGfGYIwJAhefI8PQ3xr+KuL14e+SLEJM=)
3: UG9G_dnWRpZkM8dNOUmzQ9ddYpM.roa (hash: VJHtgY+XTe16MdK4R4BNwcTnWb1T/NjN98Z9wb0GkTk=)
4: vUHrTNIykiSnEmNGusQYaFxAqdw.roa (hash: 1iGnZuZAbpNIqbdvK2c36DPr9j4iU15E9+caM/CdPU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:47:ba:62:f7:7a:30:ed:e2:f3:8a:8b:32:b1:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=435416b2282b4533c3509c18e957ce0c836bc837
Validity
Not Before: Jun 13 06:00:29 2026 GMT
Not After : Jun 14 06:00:29 2026 GMT
Subject: CN=ba420ecfb5407561e281ed28315e52545b46c100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5c:55:bb:2b:99:af:cf:a0:4d:09:a0:9d:4a:
60:b4:1b:01:97:51:41:c5:ad:92:23:bb:5f:13:72:
84:b4:fd:43:e7:c0:28:66:32:3b:1e:24:9e:71:d7:
a5:da:40:80:38:73:cc:13:e5:e2:b8:7d:d5:07:c3:
5a:24:f0:53:87:48:7f:73:6d:4e:3c:24:f0:15:f9:
8f:ba:06:11:9b:7c:ad:3c:cc:81:02:71:b8:1f:75:
80:5e:74:f3:9e:78:f7:8a:e1:db:90:7c:a9:78:c9:
30:d5:d3:e1:2e:32:60:bc:10:3a:1d:d4:ef:9d:02:
ae:28:9e:7e:8f:4f:5c:89:10:23:a5:7d:08:1b:63:
cc:3f:2a:ff:21:ad:8d:34:76:6a:2b:09:d2:b3:78:
4c:a2:0e:33:45:e7:d3:d9:c7:b1:67:f0:a9:13:19:
4f:6a:de:70:31:96:80:50:3c:24:f8:45:17:4b:1f:
c2:d9:a5:ab:4f:d6:5b:f4:f0:f5:d9:17:09:89:57:
03:35:86:1a:0e:ac:cd:d2:cf:20:e8:f8:9e:cc:0c:
74:cf:75:98:d0:c7:a2:6c:e3:50:08:48:26:4d:47:
9d:a8:d7:71:70:72:7a:2f:19:ed:9b:97:43:3c:b8:
25:da:2a:cf:54:80:91:2f:8c:54:7f:d5:50:58:7d:
7d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:42:0E:CF:B5:40:75:61:E2:81:ED:28:31:5E:52:54:5B:46:C1:00
X509v3 Authority Key Identifier:
keyid:43:54:16:B2:28:2B:45:33:C3:50:9C:18:E9:57:CE:0C:83:6B:C8:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:c7:2d:39:fe:d3:c5:0f:5d:ab:00:35:94:42:33:f8:89:03:
1f:12:55:c0:b0:a0:81:76:67:a9:b6:ec:5f:d2:8c:32:f7:8c:
8b:f1:91:6b:2d:4b:7a:f0:0b:39:bc:cf:da:04:0a:32:84:af:
11:52:1b:4a:1d:a5:ba:26:94:39:21:e4:bf:b6:ef:04:c4:91:
2c:af:2e:8d:96:61:47:64:93:6a:d5:b2:3f:0f:84:4c:bf:7f:
80:c1:b8:94:1f:62:4e:80:55:e7:70:c7:fa:1d:52:91:93:57:
3a:ee:82:43:97:74:16:73:bd:92:25:2d:1b:27:65:f5:11:6f:
41:5f:8c:d6:18:e6:d4:ec:d2:c9:c0:96:e2:df:71:fe:83:8e:
59:c7:26:83:ec:50:7f:10:9b:70:37:0b:bc:fe:2a:e6:cc:b4:
af:99:dd:93:0e:6c:1e:9f:27:6f:9f:71:70:d7:99:c4:c5:91:
9a:ab:5d:58:42:9d:a6:b5:1e:65:60:09:89:15:71:c8:f9:ca:
d0:38:6b:68:1b:db:2d:a7:76:5b:ef:5f:d1:d4:53:19:4b:39:
fc:e3:41:44:7f:a7:c2:08:90:40:01:09:8f:77:49:af:02:78:
54:b3:8e:3d:c6:d0:95:91:c9:b3:a0:b2:c8:45:33:76:f8:1b:
ca:dc:69:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:13:06 2026 by rpki-client