Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
File: Q1QWsigrRTPDUJwY6VfODINryDc.mft (raw, json)
Hash identifier: MN+Y6gYz7yJmlidXa7joHTBkQEuVg4PKSECxvqvsq+0=
Subject key identifier: 85:F8:9E:C9:B3:A9:4E:72:F7:B7:CC:BF:98:92:75:9F:AD:3B:05:2D
Authority key identifier: 43:54:16:B2:28:2B:45:33:C3:50:9C:18:E9:57:CE:0C:83:6B:C8:37
Certificate issuer: /CN=435416b2282b4533c3509c18e957ce0c836bc837
Certificate serial: 019F9022DD2B507AE53F24A01B9F1985437A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
Manifest number: 11B5
Signing time: Thu 23 Jul 2026 18:00:31 +0000
Manifest this update: Thu 23 Jul 2026 18:00:31 +0000
Manifest next update: Fri 24 Jul 2026 18:00:31 +0000
Files and hashes: 1: MnDYEmNyAQzBpzR98qjs2sOtO_c.roa (hash: 34lKjvmsvDbzxduruRJbqT8KL81GGIwldVfmoVn9Yyw=)
2: Q1QWsigrRTPDUJwY6VfODINryDc.crl (hash: x7lz9b35oUwphFDVAe8YHd56Ke0RE3CFIrIOIWt9L0A=)
3: UG9G_dnWRpZkM8dNOUmzQ9ddYpM.roa (hash: VJHtgY+XTe16MdK4R4BNwcTnWb1T/NjN98Z9wb0GkTk=)
4: vUHrTNIykiSnEmNGusQYaFxAqdw.roa (hash: 1iGnZuZAbpNIqbdvK2c36DPr9j4iU15E9+caM/CdPU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:dd:2b:50:7a:e5:3f:24:a0:1b:9f:19:85:43:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=435416b2282b4533c3509c18e957ce0c836bc837
Validity
Not Before: Jul 23 18:00:31 2026 GMT
Not After : Jul 24 18:00:31 2026 GMT
Subject: CN=85f89ec9b3a94e72f7b7ccbf9892759fad3b052d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3e:6f:00:4a:c0:29:bd:4c:61:fb:97:7a:02:
7b:67:75:96:41:0a:f1:8c:bb:dc:7e:74:03:3e:5e:
21:ac:8d:d9:37:be:c7:04:ea:d0:22:0f:58:c4:76:
ae:d4:83:61:59:e3:69:8f:b1:39:4a:05:db:25:1a:
c9:e1:96:63:13:3c:25:82:4e:18:72:03:c8:39:6e:
dd:9b:75:59:13:6a:16:ff:ff:0c:6b:d1:ac:4d:fd:
80:bf:d1:a6:e8:9a:d8:04:ae:b9:65:2c:14:3b:68:
9a:59:d6:70:ca:a2:d4:95:82:2a:2d:4b:10:64:0c:
04:7b:60:40:28:23:ca:69:60:d9:9e:38:6c:f0:c6:
2b:ec:b1:74:89:36:a1:d9:05:b7:cc:32:55:be:b4:
72:cd:e9:90:8a:19:f4:10:f9:49:90:77:84:e0:ad:
11:2d:e1:ee:b1:aa:78:15:f1:90:91:ff:95:3e:d1:
f8:3a:5d:c1:c3:e5:ba:74:41:c5:88:21:c0:65:f2:
4e:9a:28:c0:32:7d:a2:0c:8c:6a:6b:db:de:9c:51:
24:5d:03:21:d0:b5:74:4d:5c:29:12:72:d1:0e:35:
ce:51:a9:5c:d1:d0:a9:d5:e5:fc:5f:de:ee:2c:90:
d0:4c:e4:19:a0:15:cb:fe:01:87:dd:94:4d:13:1d:
1b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F8:9E:C9:B3:A9:4E:72:F7:B7:CC:BF:98:92:75:9F:AD:3B:05:2D
X509v3 Authority Key Identifier:
keyid:43:54:16:B2:28:2B:45:33:C3:50:9C:18:E9:57:CE:0C:83:6B:C8:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:37:c0:a3:0e:cb:03:31:28:ad:65:9c:44:61:ea:02:5f:b3:
25:0e:93:ef:7a:4d:1b:27:9f:d7:60:84:58:39:4d:29:34:9f:
45:5b:ae:ef:47:3e:be:05:fa:db:e4:e1:71:31:2f:40:d8:cf:
81:d8:26:ed:d4:f9:70:c8:b8:ca:b8:c3:32:4d:81:e6:04:c3:
00:5d:4f:2b:22:53:63:96:fb:76:b4:33:4d:7c:f0:a1:86:61:
f6:ab:9e:83:c0:9b:4a:e3:30:d0:bd:50:c7:e7:bb:83:94:fe:
ff:08:a1:5c:e4:81:e9:58:a2:9e:b3:7b:1d:c8:91:2f:34:9f:
30:9e:17:5b:65:73:f8:7e:56:7f:53:bf:99:3c:44:e3:b1:bb:
6d:f3:7f:cb:b9:ed:ab:cc:5d:38:2a:20:d9:4d:c0:20:39:a9:
8b:a7:cb:d3:b0:a9:94:55:63:2b:2f:6e:9c:2e:53:35:86:d8:
ca:0d:f9:31:56:61:df:dd:65:20:94:a1:80:c2:72:4f:ee:d0:
3d:a9:56:7d:32:c3:f5:82:e6:d9:40:6e:28:ca:d7:a7:f2:ed:
8e:df:a5:43:06:e3:76:48:19:ac:38:54:ba:ec:68:a5:d5:9c:
68:87:ad:b3:fc:40:33:35:d9:63:dc:38:ab:d1:c6:5e:26:e8:
e0:9c:38:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:21:22 2026 by rpki-client