Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
File: qKumPoBqIdRgNcpunTRbA9vI5VM.mft (raw, json)
Hash identifier: iLpgsPa4lejiVoq9tyL6C0d7UGE6iOEMd8dWRsiklVc=
Subject key identifier: E2:64:65:3B:A8:D9:45:69:A7:5D:9D:43:47:CC:FC:11:A2:50:4A:98
Authority key identifier: A8:AB:A6:3E:80:6A:21:D4:60:35:CA:6E:9D:34:5B:03:DB:C8:E5:53
Certificate issuer: /CN=a8aba63e806a21d46035ca6e9d345b03dbc8e553
Certificate serial: 019A7226459986B4DB7BD189E9AC2BB5476F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
Manifest number: 07AB
Signing time: Tue 11 Nov 2025 09:01:42 +0000
Manifest this update: Tue 11 Nov 2025 09:01:42 +0000
Manifest next update: Wed 12 Nov 2025 09:01:42 +0000
Files and hashes: 1: hLWYDKGkI0R5I2b6JbMOAvEbobg.roa (hash: aHTGbClBDx12Nmfza+jRQVDlfN2BuzhbxoY4KmHz1F0=)
2: qKumPoBqIdRgNcpunTRbA9vI5VM.crl (hash: 1iYuqO5pM06zafzMegnr+OkTXuPdRr0mK6nBqB8YSPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:45:99:86:b4:db:7b:d1:89:e9:ac:2b:b5:47:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8aba63e806a21d46035ca6e9d345b03dbc8e553
Validity
Not Before: Nov 11 09:01:42 2025 GMT
Not After : Nov 12 09:01:42 2025 GMT
Subject: CN=e264653ba8d94569a75d9d4347ccfc11a2504a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:44:91:51:94:e0:ab:c8:e4:21:17:7a:04:d5:
8d:8c:8f:b3:d3:b3:25:a2:51:17:7c:44:06:d1:bd:
e9:6a:95:35:0e:a6:81:4c:27:bd:e1:1d:5b:3b:12:
89:c8:91:3a:d2:84:36:b5:7b:8a:8d:68:09:b1:fe:
3e:b9:ac:f1:14:f8:ad:f1:9a:bb:e7:c1:3f:5a:3d:
a4:ab:3d:fd:e5:c2:18:e4:5a:f6:1d:b7:45:3b:a8:
74:d5:39:ed:ea:50:a3:00:8f:87:ea:7a:57:47:5e:
06:84:85:56:7c:ef:71:48:7c:e9:b4:18:ff:34:9e:
63:b1:ee:88:d9:10:6a:58:7d:e4:47:f9:d1:b5:42:
9e:3c:27:3e:51:f4:81:a9:7b:dd:48:b3:eb:e3:1f:
8b:cd:90:44:d5:4f:5c:94:eb:a8:24:2e:0c:f0:ec:
43:b3:84:d7:ce:b4:a9:c7:00:0e:df:30:40:7f:b9:
d9:e9:fb:43:fe:f5:ef:4d:42:f6:65:61:f1:e5:ea:
09:8d:5d:b4:1f:44:17:87:9f:41:c3:e0:c4:ec:aa:
c1:aa:ba:c7:b9:d5:bb:ef:3b:d1:53:33:07:75:50:
ca:ef:0e:5f:c1:e5:2f:30:d9:21:61:41:b8:78:6d:
ef:17:70:ce:6b:b3:a1:1e:ef:ef:e3:71:c2:03:ad:
ec:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:64:65:3B:A8:D9:45:69:A7:5D:9D:43:47:CC:FC:11:A2:50:4A:98
X509v3 Authority Key Identifier:
keyid:A8:AB:A6:3E:80:6A:21:D4:60:35:CA:6E:9D:34:5B:03:DB:C8:E5:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:a0:cf:7a:b5:19:6f:4d:09:e8:b7:c7:10:5f:62:0d:f3:ec:
98:d6:66:69:d5:99:a4:48:22:9c:85:96:bb:f5:ad:76:8b:7f:
0b:08:b2:09:01:c2:5c:77:d9:f1:28:4f:6e:a5:ad:21:be:79:
16:50:f7:f0:55:db:4f:98:da:64:70:d4:ca:69:3d:e7:3a:ca:
d6:3f:5f:7b:9e:fd:7f:4a:8b:20:7b:cd:4e:3c:e4:b0:ce:cc:
77:9c:80:12:39:fa:38:2b:8f:31:6b:dc:55:09:d2:97:32:54:
65:ed:4b:f8:11:55:5f:d4:32:b2:e3:4b:83:d9:fd:eb:33:90:
e7:8f:b7:a7:d8:d7:63:66:dd:61:e8:83:77:bd:cb:9c:30:b8:
81:b6:80:0c:85:56:0d:d1:b1:eb:d9:93:b4:39:03:5c:4e:db:
2f:0d:62:ed:59:76:71:ee:71:7b:38:95:57:b6:d1:1f:d8:89:
1c:38:ce:6d:55:3d:a3:4e:58:a3:33:ba:f5:53:52:94:44:38:
ce:f6:cc:a9:51:4f:bc:ff:19:21:d8:cb:91:c9:2a:48:34:b1:
b1:51:9b:54:7a:75:be:a7:de:3c:8e:2c:cc:bd:f1:a9:b3:4f:
3d:66:72:37:a2:81:d3:45:20:91:01:97:71:84:c8:f2:5d:19:
ca:79:59:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:40:42 2025 by rpki-client