Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
File: Q1QWsigrRTPDUJwY6VfODINryDc.mft (raw, json)
Hash identifier: rRy0e8763IoOYVfAiL4xRMswI1d0M/7/Y+Iu3sRam7M=
Subject key identifier: 8F:C4:CC:E2:7F:C6:98:D0:0D:AD:AE:3A:89:38:5E:B6:9E:B3:37:9E
Authority key identifier: 43:54:16:B2:28:2B:45:33:C3:50:9C:18:E9:57:CE:0C:83:6B:C8:37
Certificate issuer: /CN=435416b2282b4533c3509c18e957ce0c836bc837
Certificate serial: 01A17AA8D7F8C225D40BC86544687370EE7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
Manifest number: 12B3
Signing time: Tue 27 Oct 2026 00:00:47 +0000
Manifest this update: Tue 27 Oct 2026 00:00:47 +0000
Manifest next update: Wed 28 Oct 2026 00:00:47 +0000
Files and hashes: 1: MnDYEmNyAQzBpzR98qjs2sOtO_c.roa (hash: 34lKjvmsvDbzxduruRJbqT8KL81GGIwldVfmoVn9Yyw=)
2: Q1QWsigrRTPDUJwY6VfODINryDc.crl (hash: XyOBtIeH0cOCM+ajlxZEXRM6iuM179j+aiTLzUh0Ww4=)
3: UG9G_dnWRpZkM8dNOUmzQ9ddYpM.roa (hash: VJHtgY+XTe16MdK4R4BNwcTnWb1T/NjN98Z9wb0GkTk=)
4: vUHrTNIykiSnEmNGusQYaFxAqdw.roa (hash: 1iGnZuZAbpNIqbdvK2c36DPr9j4iU15E9+caM/CdPU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:a8:d7:f8:c2:25:d4:0b:c8:65:44:68:73:70:ee:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=435416b2282b4533c3509c18e957ce0c836bc837
Validity
Not Before: Oct 27 00:00:47 2026 GMT
Not After : Oct 28 00:00:47 2026 GMT
Subject: CN=8fc4cce27fc698d00dadae3a89385eb69eb3379e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1d:10:4d:6b:22:82:bb:c2:1d:d8:82:54:83:
bd:a0:ab:23:76:77:7c:f9:ec:19:52:d0:a1:02:60:
87:68:5f:85:54:0b:83:51:31:1e:1d:3b:0b:61:bd:
7d:27:38:aa:1c:33:9e:d8:a6:b6:86:a9:e8:b5:c1:
61:6c:09:95:07:4a:ab:fa:a8:ec:03:a2:66:04:e4:
66:12:8c:6b:7b:26:69:ca:f8:eb:a9:a4:3a:c6:c3:
b9:eb:ae:89:86:e8:76:36:d4:e0:ee:9c:e4:2a:d6:
ed:3c:22:d2:72:84:b3:ba:c1:fe:b4:a7:a8:fa:39:
7e:ae:6a:7a:51:98:5b:63:d3:70:d4:95:bf:f8:2e:
59:15:84:60:d1:8d:6d:ca:df:b0:5e:32:57:08:23:
96:e8:48:c6:69:92:db:2c:32:5e:52:55:17:95:5c:
b7:91:75:1b:8e:99:c1:cb:9b:8f:05:18:3a:e0:c1:
03:3f:45:29:ad:07:e4:31:fa:0d:28:6b:1d:e5:4a:
02:fe:55:59:4b:b9:81:03:23:d9:bd:39:1d:3d:dd:
b3:39:09:15:90:a3:9c:36:a4:0d:62:39:d8:11:d0:
4e:89:c0:38:12:2e:90:50:ca:aa:95:bd:61:5b:f6:
58:a5:5b:20:f9:a6:58:c9:d1:e6:37:61:15:0d:c6:
29:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C4:CC:E2:7F:C6:98:D0:0D:AD:AE:3A:89:38:5E:B6:9E:B3:37:9E
X509v3 Authority Key Identifier:
keyid:43:54:16:B2:28:2B:45:33:C3:50:9C:18:E9:57:CE:0C:83:6B:C8:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:34:c0:51:06:20:3e:ef:85:33:2a:ae:e5:17:d4:5c:e6:e9:
cb:47:33:91:64:77:1e:f3:1f:23:9f:66:ed:c1:7b:a2:c5:6a:
b9:0f:55:16:22:a9:15:a3:6d:ae:24:1e:7d:8f:c9:38:5a:15:
2c:b3:9e:87:48:88:b8:41:16:dc:63:30:60:d1:91:5f:83:6b:
d8:f6:aa:b6:4d:b6:b9:f7:7d:1d:24:c6:5d:3c:00:58:88:8c:
0a:50:9e:4f:08:b3:58:cf:f8:e0:73:28:a4:14:5a:99:12:4d:
b7:b6:f0:8b:2b:27:66:60:aa:0e:c5:4c:d3:05:8c:80:e1:6e:
64:52:e3:54:5b:d3:ee:d3:09:4d:3a:48:30:fa:e9:c6:05:99:
a1:83:98:e6:9f:90:cd:e5:b9:10:6e:c7:c6:57:70:fb:41:09:
01:84:e8:4f:78:9c:7b:29:1e:d3:2b:a5:16:d2:2f:f2:dd:db:
62:29:95:00:b0:9a:d3:c5:89:34:6b:c4:a5:0b:37:a8:eb:64:
e1:61:cc:7e:c4:14:ed:be:c1:a9:ce:50:46:6c:5f:4c:92:48:
c5:90:8a:aa:6a:02:88:cf:46:4a:00:a4:8b:37:b4:76:a4:a3:
cf:97:95:82:86:a6:d4:ce:c3:ea:d4:88:7b:b9:b4:8c:a5:cb:
d7:69:d2:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF6qNf4wiXUC8hlRGhzcO58MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzNTQxNmIyMjgyYjQ1MzNjMzUwOWMxOGU5NTdjZTBjODM2
YmM4MzcwHhcNMjYxMDI3MDAwMDQ3WhcNMjYxMDI4MDAwMDQ3WjAzMTEwLwYDVQQD
Eyg4ZmM0Y2NlMjdmYzY5OGQwMGRhZGFlM2E4OTM4NWViNjllYjMzNzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuh0QTWsigrvCHdiCVIO9oKsjdnd8
+ewZUtChAmCHaF+FVAuDUTEeHTsLYb19JziqHDOe2Ka2hqnotcFhbAmVB0qr+qjs
A6JmBORmEoxreyZpyvjrqaQ6xsO5666Jhuh2NtTg7pzkKtbtPCLScoSzusH+tKeo
+jl+rmp6UZhbY9Nw1JW/+C5ZFYRg0Y1tyt+wXjJXCCOW6EjGaZLbLDJeUlUXlVy3
kXUbjpnBy5uPBRg64MEDP0UprQfkMfoNKGsd5UoC/lVZS7mBAyPZvTkdPd2zOQkV
kKOcNqQNYjnYEdBOicA4Ei6QUMqqlb1hW/ZYpVsg+aZYydHmN2EVDcYpaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI/EzOJ/xpjQDa2uOok4XraeszeeMB8GA1UdIwQY
MBaAFENUFrIoK0Uzw1CcGOlXzgyDa8g3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTFRV3NpZ3JSVFBEVUp3WTZWZk9ESU5yeURjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy82M2ZmODEtNjQ2MC00YzA1LTg1MmQt
MjYyZWIzOWJiZTc2LzEvUTFRV3NpZ3JSVFBEVUp3WTZWZk9ESU5yeURjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy82M2ZmODEtNjQ2MC00YzA1LTg1MmQtMjYyZWIzOWJiZTc2
LzEvUTFRV3NpZ3JSVFBEVUp3WTZWZk9ESU5yeURjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAczTAUQYg
Pu+FMyqu5RfUXObpy0czkWR3HvMfI59m7cF7osVquQ9VFiKpFaNtriQefY/JOFoV
LLOeh0iIuEEW3GMwYNGRX4Nr2Paqtk22ufd9HSTGXTwAWIiMClCeTwizWM/44HMo
pBRamRJNt7bwiysnZmCqDsVM0wWMgOFuZFLjVFvT7tMJTTpIMPrpxgWZoYOY5p+Q
zeW5EG7Hxldw+0EJAYToT3iceyke0yulFtIv8t3bYimVALCa08WJNGvEpQs3qOtk
4WHMfsQU7b7Bqc5QRmxfTJJIxZCKqmoCiM9GSgCkize0dqSjz5eVgoam1M7D6tSI
e7m0jKXL12nS5A==
-----END CERTIFICATE-----
Generated at Tue Oct 27 05:59:14 2026 by rpki-client