Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
File: Q1QWsigrRTPDUJwY6VfODINryDc.mft (raw, json)
Hash identifier: neNHh4plcmIWC99UDVGv7yhQCkGIi8w2ga9Q6WiGEVg=
Subject key identifier: 0B:BE:78:36:96:51:8E:07:A1:8F:E6:8C:04:0B:A0:2C:77:3C:07:18
Authority key identifier: 43:54:16:B2:28:2B:45:33:C3:50:9C:18:E9:57:CE:0C:83:6B:C8:37
Certificate issuer: /CN=435416b2282b4533c3509c18e957ce0c836bc837
Certificate serial: 01A0C70EBAEEFC537FDEBECF1290DA5F8DE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
Manifest number: 1256
Signing time: Tue 22 Sep 2026 03:00:26 +0000
Manifest this update: Tue 22 Sep 2026 03:00:26 +0000
Manifest next update: Wed 23 Sep 2026 03:00:26 +0000
Files and hashes: 1: MnDYEmNyAQzBpzR98qjs2sOtO_c.roa (hash: 34lKjvmsvDbzxduruRJbqT8KL81GGIwldVfmoVn9Yyw=)
2: Q1QWsigrRTPDUJwY6VfODINryDc.crl (hash: brblEOh4W4FCrv/7S/mQNHeKUz2beLTFF+n4cUm/FkM=)
3: UG9G_dnWRpZkM8dNOUmzQ9ddYpM.roa (hash: VJHtgY+XTe16MdK4R4BNwcTnWb1T/NjN98Z9wb0GkTk=)
4: vUHrTNIykiSnEmNGusQYaFxAqdw.roa (hash: 1iGnZuZAbpNIqbdvK2c36DPr9j4iU15E9+caM/CdPU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:0e:ba:ee:fc:53:7f:de:be:cf:12:90:da:5f:8d:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=435416b2282b4533c3509c18e957ce0c836bc837
Validity
Not Before: Sep 22 03:00:26 2026 GMT
Not After : Sep 23 03:00:26 2026 GMT
Subject: CN=0bbe783696518e07a18fe68c040ba02c773c0718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:90:37:05:54:6c:d8:83:70:0b:54:49:bb:90:
82:ab:16:1c:67:55:38:f3:7e:28:c5:f7:a1:53:69:
be:2e:cb:fa:c6:0d:d3:89:eb:c5:37:44:e7:f8:18:
3d:8a:8c:4e:c5:b2:a3:85:8e:27:44:ae:b1:93:bc:
2e:75:eb:57:69:f6:56:2e:53:27:36:88:d7:aa:1f:
55:59:f1:d1:c1:cd:5b:92:2c:df:04:be:a8:7c:37:
e3:d4:ec:17:9f:50:2c:0b:ed:98:2e:b4:ba:53:5f:
45:fa:ff:a2:78:46:db:eb:ed:18:11:91:ac:ef:85:
8a:d2:af:a3:e6:21:98:44:b9:fa:d6:19:de:78:cf:
00:36:53:ff:ce:5e:17:50:9f:18:d9:09:8f:86:ee:
74:be:fd:f5:71:19:a7:c9:f4:aa:3b:41:ec:09:f2:
53:4b:a5:65:18:00:a0:75:cf:bc:78:b6:99:ea:ba:
2b:75:5c:b2:b3:de:95:98:20:3b:51:ee:bb:10:c4:
b0:3c:ae:62:3a:54:35:4e:82:3b:ae:2c:6a:af:d5:
b9:aa:4f:93:5d:17:13:fd:6d:18:80:e6:0e:04:b6:
f8:59:f6:c8:c9:97:69:11:82:94:20:0f:da:de:68:
c4:f4:64:05:5d:25:27:e1:96:ab:26:ce:da:62:25:
54:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:BE:78:36:96:51:8E:07:A1:8F:E6:8C:04:0B:A0:2C:77:3C:07:18
X509v3 Authority Key Identifier:
keyid:43:54:16:B2:28:2B:45:33:C3:50:9C:18:E9:57:CE:0C:83:6B:C8:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:eb:63:40:7d:03:c0:76:80:f8:21:04:c3:7d:3f:83:e7:12:
15:74:64:6f:f1:c7:3e:3d:71:15:f9:57:06:f1:d2:65:b8:24:
28:b5:d8:22:49:a8:7c:8d:3a:eb:d6:4f:6c:72:0f:76:66:3a:
55:38:c7:b7:dd:ae:25:c2:2e:74:a9:33:aa:e3:3c:5a:b1:c2:
4a:3f:c1:7f:06:e2:b8:0d:19:07:db:dd:df:36:6d:b0:e2:60:
e9:9f:de:55:e3:fb:96:95:4e:87:6d:94:63:09:65:1e:ef:84:
b6:81:e0:03:93:00:4c:7b:46:02:b4:87:c3:ec:8b:8c:21:0b:
f6:fd:9d:0b:04:94:e0:52:2e:e8:26:a5:78:e6:2b:61:3b:ba:
c8:85:a2:b9:96:d5:ed:c8:e2:24:45:c2:db:2d:7f:1c:16:02:
7e:17:96:74:4d:9a:91:2a:b0:3c:f8:05:db:59:53:f5:1d:9d:
56:4a:df:c7:9f:15:d4:27:7a:b1:e9:a0:f6:56:1f:b2:a3:3a:
1f:b6:5f:51:0d:83:6a:30:1d:42:cf:f7:0b:e5:f5:d5:b7:6e:
89:ad:2f:f0:2a:30:e6:cb:1a:6e:cf:62:b9:02:98:3e:ee:c4:
4a:5e:47:c0:09:1f:63:dd:e0:23:78:3d:37:b6:d8:3f:68:1e:
74:99:88:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:48:51 2026 by rpki-client