Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
File: Q1QWsigrRTPDUJwY6VfODINryDc.mft (raw, json)
Hash identifier: YfQShB43iFpf3p8fJiMTtaRZ+xXFOxW/aSKCyF17O/w=
Subject key identifier: 66:EF:05:D6:7D:E8:D1:16:E4:A3:93:06:E1:B2:54:6D:C8:0B:4B:76
Authority key identifier: 43:54:16:B2:28:2B:45:33:C3:50:9C:18:E9:57:CE:0C:83:6B:C8:37
Certificate issuer: /CN=435416b2282b4533c3509c18e957ce0c836bc837
Certificate serial: 01A0D49445A8C649746C9C82119585DF1EC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
Manifest number: 125D
Signing time: Thu 24 Sep 2026 18:01:21 +0000
Manifest this update: Thu 24 Sep 2026 18:01:21 +0000
Manifest next update: Fri 25 Sep 2026 18:01:21 +0000
Files and hashes: 1: MnDYEmNyAQzBpzR98qjs2sOtO_c.roa (hash: 34lKjvmsvDbzxduruRJbqT8KL81GGIwldVfmoVn9Yyw=)
2: Q1QWsigrRTPDUJwY6VfODINryDc.crl (hash: jz1gj6O+HfrQriqmUfTFjNiWnqA20N9kuLIZTU0xL9s=)
3: UG9G_dnWRpZkM8dNOUmzQ9ddYpM.roa (hash: VJHtgY+XTe16MdK4R4BNwcTnWb1T/NjN98Z9wb0GkTk=)
4: vUHrTNIykiSnEmNGusQYaFxAqdw.roa (hash: 1iGnZuZAbpNIqbdvK2c36DPr9j4iU15E9+caM/CdPU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:94:45:a8:c6:49:74:6c:9c:82:11:95:85:df:1e:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=435416b2282b4533c3509c18e957ce0c836bc837
Validity
Not Before: Sep 24 18:01:21 2026 GMT
Not After : Sep 25 18:01:21 2026 GMT
Subject: CN=66ef05d67de8d116e4a39306e1b2546dc80b4b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6a:8d:b3:67:31:51:75:ac:41:2d:76:02:3b:
4f:16:6b:3e:90:0c:dd:89:78:de:ef:00:af:f0:d8:
73:c3:7d:54:cd:b5:b7:fa:92:70:96:46:98:53:f8:
52:ac:5d:62:3a:a9:64:81:b3:18:7e:09:cd:e8:15:
62:ac:d7:30:1b:c6:1a:92:55:05:a0:dd:d0:de:ca:
44:b8:4f:36:1c:cb:97:35:ce:72:99:28:e2:ba:58:
d0:7f:c5:38:78:d9:39:b1:28:e4:d3:ea:f5:e9:ab:
50:67:08:46:dc:0d:93:43:ba:cc:ea:1d:a4:e6:0f:
83:9b:e7:7e:1a:7a:b9:66:50:42:9b:bd:95:b1:ce:
09:31:81:4c:f3:d1:26:04:d7:8d:c4:b4:5c:83:c1:
75:a3:d0:74:d2:2d:9c:f8:33:8a:d3:71:1f:32:d0:
df:40:20:57:d6:72:bb:d2:4a:9c:ed:b8:8f:03:e2:
f4:94:fa:1e:77:a2:86:23:8e:95:77:b8:b8:f0:46:
8e:a4:b0:99:29:4d:a0:3e:8c:31:b8:55:e5:55:bb:
4e:de:1b:5a:ea:66:2d:6a:94:d9:20:91:02:39:81:
fb:dc:4d:cc:56:ae:09:cc:f7:f1:af:9e:d9:09:5d:
c3:55:44:5c:ad:4b:b5:96:44:5e:29:3a:e0:7c:d0:
10:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:EF:05:D6:7D:E8:D1:16:E4:A3:93:06:E1:B2:54:6D:C8:0B:4B:76
X509v3 Authority Key Identifier:
keyid:43:54:16:B2:28:2B:45:33:C3:50:9C:18:E9:57:CE:0C:83:6B:C8:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:36:59:23:f7:8b:6a:02:4e:bc:bf:de:41:43:62:16:b8:59:
39:e1:40:30:82:da:4e:2e:0a:3f:18:8c:fd:33:da:46:20:04:
c6:82:69:4e:5d:ab:60:d0:0e:66:9c:e3:38:f6:56:11:37:de:
ff:9b:dc:71:2a:92:9f:e4:14:3e:fc:96:44:d1:4b:60:61:fe:
96:22:50:9c:84:5c:87:30:a6:a6:35:9b:b3:54:f1:57:70:31:
26:7b:83:86:d0:f7:3e:22:b3:80:97:b5:5f:7b:e5:1b:fc:3c:
07:6c:28:82:d9:a6:92:ad:a6:ae:3f:4c:da:1a:68:8f:07:45:
70:e4:df:9f:67:a2:39:e3:47:92:8a:ae:59:41:ac:15:a1:a3:
a4:63:b4:eb:9e:61:29:08:76:09:b1:51:4d:e1:f1:fe:b4:98:
47:ea:81:a2:ea:40:01:63:9c:d7:62:6f:c5:58:30:d4:a4:d3:
7b:fc:59:aa:67:72:8f:94:1f:f7:d6:b5:79:d8:e7:01:eb:ca:
1d:94:52:7e:18:e4:c9:78:91:2b:71:21:07:39:3b:67:4c:a6:
87:92:b7:ea:06:00:2d:7e:ba:a4:76:b1:7f:88:0a:00:9f:04:
e0:55:77:92:6c:29:f6:0c:39:4e:02:39:4d:b3:54:30:06:e6:
40:bf:72:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:17:16 2026 by rpki-client