Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
File: Q1QWsigrRTPDUJwY6VfODINryDc.mft (raw, json)
Hash identifier: SlPi2Ke2GUAnMru0bY1CQLrg6mQCv4BIxhSYQFo9AGE=
Subject key identifier: DD:09:5F:9D:FA:44:07:39:C6:E3:54:DD:71:AA:5B:B3:39:26:10:B5
Authority key identifier: 43:54:16:B2:28:2B:45:33:C3:50:9C:18:E9:57:CE:0C:83:6B:C8:37
Certificate issuer: /CN=435416b2282b4533c3509c18e957ce0c836bc837
Certificate serial: 01A0CAEB86AEB61DC5647CE9BA1D58EF8A07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
Manifest number: 1258
Signing time: Tue 22 Sep 2026 21:00:28 +0000
Manifest this update: Tue 22 Sep 2026 21:00:28 +0000
Manifest next update: Wed 23 Sep 2026 21:00:28 +0000
Files and hashes: 1: MnDYEmNyAQzBpzR98qjs2sOtO_c.roa (hash: 34lKjvmsvDbzxduruRJbqT8KL81GGIwldVfmoVn9Yyw=)
2: Q1QWsigrRTPDUJwY6VfODINryDc.crl (hash: UzrFoun7ANAiE//azZrrCPFoX3TagnSJ10xebMTfnzs=)
3: UG9G_dnWRpZkM8dNOUmzQ9ddYpM.roa (hash: VJHtgY+XTe16MdK4R4BNwcTnWb1T/NjN98Z9wb0GkTk=)
4: vUHrTNIykiSnEmNGusQYaFxAqdw.roa (hash: 1iGnZuZAbpNIqbdvK2c36DPr9j4iU15E9+caM/CdPU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:eb:86:ae:b6:1d:c5:64:7c:e9:ba:1d:58:ef:8a:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=435416b2282b4533c3509c18e957ce0c836bc837
Validity
Not Before: Sep 22 21:00:28 2026 GMT
Not After : Sep 23 21:00:28 2026 GMT
Subject: CN=dd095f9dfa440739c6e354dd71aa5bb3392610b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bd:8f:91:90:db:44:8f:13:dd:85:98:ef:ac:
be:d3:05:2d:4e:eb:8a:ae:c5:28:b2:20:f3:d5:c9:
91:61:95:b5:59:5b:47:d1:eb:b8:70:9e:c0:87:00:
ce:29:a1:f7:0f:2e:ed:01:49:0b:88:36:46:b8:98:
59:73:61:3a:25:0c:27:25:a2:d1:ab:f8:8b:e9:e6:
d4:58:0f:41:8e:29:10:64:5d:38:5e:65:41:41:ff:
8a:8c:5f:6c:72:37:c0:b7:4c:d1:47:51:65:fa:10:
60:5b:4d:b4:ea:60:ca:76:40:3f:3c:3c:81:91:ef:
a6:a2:16:00:2e:23:e5:46:c5:71:54:e3:6a:b6:8f:
b0:96:51:b4:cd:90:ef:6a:bc:4f:8f:2e:20:ae:61:
73:20:d2:26:5b:cb:b7:5c:96:4c:d9:27:e0:20:df:
3e:02:11:f7:ec:33:4d:a1:c3:be:18:05:00:58:78:
36:af:c1:c5:4b:be:d0:e7:6f:cb:f6:d8:75:a6:5a:
89:4d:b0:be:86:fa:79:84:20:6c:f5:1a:fd:37:08:
a5:f3:2c:4f:37:6b:f2:36:d8:e6:18:3c:42:74:c4:
50:92:bf:e6:62:bf:32:37:18:60:4b:0a:bc:37:8b:
80:2b:d8:4b:39:d4:32:2e:9f:2f:90:1c:6e:fe:06:
65:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:09:5F:9D:FA:44:07:39:C6:E3:54:DD:71:AA:5B:B3:39:26:10:B5
X509v3 Authority Key Identifier:
keyid:43:54:16:B2:28:2B:45:33:C3:50:9C:18:E9:57:CE:0C:83:6B:C8:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:52:c7:b6:19:98:f2:44:53:64:15:8e:c4:c4:73:7e:e8:8a:
c5:8c:cc:40:bf:99:51:3c:60:ba:35:95:40:93:9c:d5:43:59:
5b:60:b3:51:3f:24:ed:4b:2b:c4:0e:ea:3b:1e:d0:d1:27:e9:
b7:ae:fc:ff:9e:d9:ae:86:7c:64:bf:76:c3:c9:53:c3:19:36:
4f:f4:c4:a8:91:a6:a1:03:ad:ae:20:a4:b2:65:81:46:94:08:
53:9c:8a:37:a4:e6:d4:39:b7:e2:1e:c7:15:94:c6:7e:3f:61:
2d:2e:e6:f5:49:98:95:74:f1:3d:8d:63:f3:59:79:75:05:56:
41:0e:27:dc:e5:32:cb:92:27:22:a5:9f:5f:f0:e0:b9:e5:fd:
ad:97:25:62:07:77:95:fc:d7:b7:b6:f4:76:8b:5d:d8:56:bd:
54:72:a0:3a:43:03:d3:af:24:a2:1e:f5:22:d6:44:bb:d4:67:
52:99:c7:9b:f2:5b:d2:c3:db:fa:9d:da:15:f0:71:60:4d:8a:
c9:cf:b6:af:c0:c6:d1:e7:1e:d3:7a:4d:5b:4b:45:a6:19:96:
d2:6d:79:1a:a3:b0:10:73:fb:53:33:40:c6:f9:48:74:74:a5:
67:60:a2:9c:66:1f:d6:84:01:15:d6:9a:e0:33:68:df:08:c3:
9f:4d:cb:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:16:17 2026 by rpki-client