Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
File: Q1QWsigrRTPDUJwY6VfODINryDc.mft (raw, json)
Hash identifier: p9U2KUzJwxOHGAyidnZ2YRxmJZfha2ooSYSaiLxtl0k=
Subject key identifier: 0F:BB:26:01:37:60:48:96:22:14:EF:1A:4B:59:EC:61:0D:B9:6B:33
Authority key identifier: 43:54:16:B2:28:2B:45:33:C3:50:9C:18:E9:57:CE:0C:83:6B:C8:37
Certificate issuer: /CN=435416b2282b4533c3509c18e957ce0c836bc837
Certificate serial: 01A0D682A9EE02744B39918665ECDF12639F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
Manifest number: 125E
Signing time: Fri 25 Sep 2026 03:01:22 +0000
Manifest this update: Fri 25 Sep 2026 03:01:22 +0000
Manifest next update: Sat 26 Sep 2026 03:01:22 +0000
Files and hashes: 1: MnDYEmNyAQzBpzR98qjs2sOtO_c.roa (hash: 34lKjvmsvDbzxduruRJbqT8KL81GGIwldVfmoVn9Yyw=)
2: Q1QWsigrRTPDUJwY6VfODINryDc.crl (hash: xLLpqu/+5O51T3Ww+xm6I4BMz3HHqnfKTIxhW1A/pq4=)
3: UG9G_dnWRpZkM8dNOUmzQ9ddYpM.roa (hash: VJHtgY+XTe16MdK4R4BNwcTnWb1T/NjN98Z9wb0GkTk=)
4: vUHrTNIykiSnEmNGusQYaFxAqdw.roa (hash: 1iGnZuZAbpNIqbdvK2c36DPr9j4iU15E9+caM/CdPU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 03:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:82:a9:ee:02:74:4b:39:91:86:65:ec:df:12:63:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=435416b2282b4533c3509c18e957ce0c836bc837
Validity
Not Before: Sep 25 03:01:22 2026 GMT
Not After : Sep 26 03:01:22 2026 GMT
Subject: CN=0fbb2601376048962214ef1a4b59ec610db96b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f2:8e:47:95:b6:c4:0a:07:ed:f3:36:6b:79:
4e:56:04:7f:41:89:e2:03:49:17:57:67:7b:ae:cf:
6a:64:8f:6c:bd:a6:36:6d:ff:ae:2c:a1:61:62:d4:
08:b8:02:dd:88:df:e2:1d:73:82:be:72:74:43:d8:
f0:f5:15:80:51:6b:bf:dd:9d:64:5d:14:58:52:2b:
aa:5a:a1:7c:01:72:68:22:0c:1c:5a:ea:2d:63:cd:
45:6a:ab:d2:82:ee:2f:b6:a5:b8:7c:af:2c:ab:a3:
c6:3a:29:bd:b6:70:0d:e0:1e:02:35:77:56:ef:fa:
bc:5a:cc:69:51:06:07:17:e1:cd:05:b5:4c:60:f4:
76:32:8a:7f:b2:47:a4:4b:9b:bb:21:65:c3:71:dd:
e5:54:e0:68:a0:de:2a:e6:fb:5a:3a:be:a7:ec:f7:
fc:fd:a4:52:cf:9b:cc:8c:d2:b2:24:e7:7b:29:61:
39:d9:23:17:fe:e6:f7:23:49:4e:02:34:6a:bd:d2:
ff:49:d2:3a:81:d1:bf:db:53:7a:7d:e9:20:f3:0f:
97:6e:1a:ad:c4:a2:45:c5:71:93:af:92:cb:58:80:
4b:27:01:c1:46:06:3e:36:3d:28:07:f7:ca:8d:b4:
f2:b6:0f:43:3a:84:32:e5:98:91:dc:03:95:e1:f0:
6b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:BB:26:01:37:60:48:96:22:14:EF:1A:4B:59:EC:61:0D:B9:6B:33
X509v3 Authority Key Identifier:
keyid:43:54:16:B2:28:2B:45:33:C3:50:9C:18:E9:57:CE:0C:83:6B:C8:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:c2:33:72:b8:bc:ac:20:3e:54:6e:81:74:c3:8d:0b:23:15:
1d:21:a6:52:94:6c:ce:cc:c9:c6:31:1b:a5:11:08:43:bd:53:
ee:64:31:06:38:bb:10:dc:5c:3e:fb:9b:cd:09:50:46:e6:5f:
24:fe:94:5b:03:17:05:1b:ae:31:d2:bf:20:3c:fc:3b:0c:18:
a5:2c:84:c1:e5:f2:bc:e9:1e:7b:b4:bc:02:44:58:e2:bc:1e:
63:b0:26:fc:16:20:9d:bb:b3:4d:0b:47:13:0c:3d:f8:53:14:
d5:79:29:f7:eb:63:ca:35:fc:f6:8d:77:8c:7f:0a:81:27:c3:
41:78:b3:b5:53:59:8a:6a:42:7a:32:56:08:62:1e:fe:c6:cd:
35:57:f5:29:b4:6d:e9:aa:43:eb:47:06:fe:c7:ef:80:fc:04:
d5:08:33:06:78:c7:0b:61:f9:65:a2:66:b1:b6:17:be:61:01:
3e:8e:fe:46:87:51:8f:e3:f5:8c:72:15:5d:cc:7b:9d:0d:63:
37:30:69:0d:9b:76:4c:bb:d3:3b:45:1d:05:1f:ed:5f:9b:8c:
f3:1e:64:db:d2:cf:31:c8:4e:80:bc:48:46:78:35:10:37:3d:
6c:c5:5e:f8:7e:9f:4b:76:c2:ed:e1:2f:d4:91:02:0c:2d:70:
5d:17:40:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDWgqnuAnRLOZGGZezfEmOfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzNTQxNmIyMjgyYjQ1MzNjMzUwOWMxOGU5NTdjZTBjODM2
YmM4MzcwHhcNMjYwOTI1MDMwMTIyWhcNMjYwOTI2MDMwMTIyWjAzMTEwLwYDVQQD
EygwZmJiMjYwMTM3NjA0ODk2MjIxNGVmMWE0YjU5ZWM2MTBkYjk2YjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/KOR5W2xAoH7fM2a3lOVgR/QYni
A0kXV2d7rs9qZI9svaY2bf+uLKFhYtQIuALdiN/iHXOCvnJ0Q9jw9RWAUWu/3Z1k
XRRYUiuqWqF8AXJoIgwcWuotY81FaqvSgu4vtqW4fK8sq6PGOim9tnAN4B4CNXdW
7/q8WsxpUQYHF+HNBbVMYPR2Mop/skekS5u7IWXDcd3lVOBooN4q5vtaOr6n7Pf8
/aRSz5vMjNKyJOd7KWE52SMX/ub3I0lOAjRqvdL/SdI6gdG/21N6fekg8w+Xbhqt
xKJFxXGTr5LLWIBLJwHBRgY+Nj0oB/fKjbTytg9DOoQy5ZiR3AOV4fBrGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA+7JgE3YEiWIhTvGktZ7GENuWszMB8GA1UdIwQY
MBaAFENUFrIoK0Uzw1CcGOlXzgyDa8g3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTFRV3NpZ3JSVFBEVUp3WTZWZk9ESU5yeURjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy82M2ZmODEtNjQ2MC00YzA1LTg1MmQt
MjYyZWIzOWJiZTc2LzEvUTFRV3NpZ3JSVFBEVUp3WTZWZk9ESU5yeURjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy82M2ZmODEtNjQ2MC00YzA1LTg1MmQtMjYyZWIzOWJiZTc2
LzEvUTFRV3NpZ3JSVFBEVUp3WTZWZk9ESU5yeURjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc8Izcri8
rCA+VG6BdMONCyMVHSGmUpRszszJxjEbpREIQ71T7mQxBji7ENxcPvubzQlQRuZf
JP6UWwMXBRuuMdK/IDz8OwwYpSyEweXyvOkee7S8AkRY4rweY7Am/BYgnbuzTQtH
Eww9+FMU1Xkp9+tjyjX89o13jH8KgSfDQXiztVNZimpCejJWCGIe/sbNNVf1KbRt
6apD60cG/sfvgPwE1QgzBnjHC2H5ZaJmsbYXvmEBPo7+RodRj+P1jHIVXcx7nQ1j
NzBpDZt2TLvTO0UdBR/tX5uM8x5k29LPMchOgLxIRng1EDc9bMVe+H6fS3bC7eEv
1JECDC1wXRdAgA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 13:19:19 2026 by rpki-client