Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
File: QwFWVAgleMSUbNJ74eiaPddWL6Q.mft (raw, json)
Hash identifier: YGYA9lCh1+uNqXLYqiRAg8XdGCRnFmn2AP/DzfpJ1as=
Subject key identifier: C1:78:6B:2B:9A:81:31:D9:85:7F:F6:27:61:1D:2A:91:B2:C7:B0:A7
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 019A72CA50BC748268B39A78BA606F0E69B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
Manifest number: 172D
Signing time: Tue 11 Nov 2025 12:00:52 +0000
Manifest this update: Tue 11 Nov 2025 12:00:52 +0000
Manifest next update: Wed 12 Nov 2025 12:00:52 +0000
Files and hashes: 1: 3eQ1S8uuA5rjKr45UcvylppbYDU.roa (hash: vQeG0u4yjs22R45FJRm/clzO1Z1gNnp6n1vY2dqT/jk=)
2: QwFWVAgleMSUbNJ74eiaPddWL6Q.crl (hash: TzFbBnlXlGiNKfvv1Ocs9R5Fz3qf+RV/rUddIj7jDzY=)
3: v1Pwr5xvdbbmpnihx2cCK9c0-pk.roa (hash: cRnPjj7eiLAD4lbp2VFMgeLmxV7rEoy5VNzAeh72O+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:50:bc:74:82:68:b3:9a:78:ba:60:6f:0e:69:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Nov 11 12:00:52 2025 GMT
Not After : Nov 12 12:00:52 2025 GMT
Subject: CN=c1786b2b9a8131d9857ff627611d2a91b2c7b0a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ec:da:ed:73:0f:fb:01:71:64:2b:c9:dd:0a:
10:60:44:ea:7e:b2:82:4e:43:f9:44:84:b0:4c:10:
08:a1:f5:0b:88:46:b9:a8:9c:e7:15:f5:a9:12:c8:
1f:a4:37:75:a0:f6:67:11:be:f9:75:75:a8:d6:3d:
ff:8d:c7:15:f8:76:24:35:e9:0d:62:4b:90:bc:6f:
ec:c1:46:f7:54:df:51:be:b1:c0:04:77:d2:3e:0c:
bc:c7:68:1d:56:ed:83:34:43:2c:24:fb:d2:f2:0b:
42:8d:c6:38:3a:d5:cd:00:15:51:9d:0b:6f:2c:8c:
35:d3:4a:76:e1:8a:91:d0:36:ce:38:0c:bf:2b:3c:
29:90:be:95:25:fd:41:40:60:dc:dd:e8:b4:1a:66:
f0:99:37:54:6c:f1:f3:f7:5a:87:f7:57:31:84:6f:
43:f2:58:fd:7b:3a:ad:d4:ca:f0:87:e2:05:21:0e:
e6:aa:b5:c2:bd:7b:13:2e:3e:98:44:24:2a:51:ba:
0a:2d:3f:f7:1c:7b:59:a8:fd:8e:80:a5:96:23:9c:
a1:77:99:1a:bc:53:f9:3d:00:18:1a:2d:fe:b4:7c:
32:a0:72:86:09:46:95:1a:7b:d1:4c:58:69:66:bb:
20:58:33:a7:e7:d9:68:00:04:8d:2f:0c:d6:9e:69:
7c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:78:6B:2B:9A:81:31:D9:85:7F:F6:27:61:1D:2A:91:B2:C7:B0:A7
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:27:3f:af:11:00:4f:12:f9:ad:03:e3:dc:8c:a1:1c:fe:93:
48:68:e1:b7:0a:ac:a2:28:e5:cc:e0:67:ff:a2:5e:84:de:c3:
f0:30:c5:d5:0c:a0:05:59:24:dc:ae:bd:aa:58:63:a1:fe:0e:
a0:41:e1:37:34:d9:85:78:fb:12:4e:b8:a8:cd:af:a5:9e:7d:
36:10:af:a1:1d:34:30:eb:9b:25:1f:b6:f3:22:b4:81:45:9d:
63:09:72:d6:7e:23:db:b8:da:96:3c:ba:7b:06:ce:48:b8:b9:
ac:f7:e2:30:d8:d2:c1:b2:ce:4a:fe:4a:50:07:88:d9:f7:73:
76:b4:3a:9c:67:c0:0c:81:86:9a:47:9b:26:7d:72:9c:32:e4:
a9:d0:1a:e0:fc:13:73:00:9a:4a:65:ce:48:72:98:95:55:11:
fd:9e:ab:54:58:eb:78:24:55:6e:84:1a:38:a0:df:c3:36:5c:
52:27:68:f6:7c:c4:38:a2:5f:0e:c5:90:42:a5:22:81:4e:0d:
67:db:13:24:d3:08:65:e2:14:b4:ac:4a:d2:a0:c8:90:68:10:
79:2e:8d:a1:43:5b:47:d6:4b:0e:5a:7b:a2:8b:5b:f7:dc:5d:
41:65:c2:2d:c3:1a:a6:38:e8:cf:85:5f:8a:81:0a:5a:07:bf:
f0:b3:c6:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyylC8dIJos5p4umBvDmmzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDE1NjU0MDgyNTc4YzQ5NDZjZDI3YmUxZTg5YTNkZDc1
NjJmYTQwHhcNMjUxMTExMTIwMDUyWhcNMjUxMTEyMTIwMDUyWjAzMTEwLwYDVQQD
EyhjMTc4NmIyYjlhODEzMWQ5ODU3ZmY2Mjc2MTFkMmE5MWIyYzdiMGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOza7XMP+wFxZCvJ3QoQYETqfrKC
TkP5RISwTBAIofULiEa5qJznFfWpEsgfpDd1oPZnEb75dXWo1j3/jccV+HYkNekN
YkuQvG/swUb3VN9RvrHABHfSPgy8x2gdVu2DNEMsJPvS8gtCjcY4OtXNABVRnQtv
LIw100p24YqR0DbOOAy/KzwpkL6VJf1BQGDc3ei0GmbwmTdUbPHz91qH91cxhG9D
8lj9ezqt1Mrwh+IFIQ7mqrXCvXsTLj6YRCQqUboKLT/3HHtZqP2OgKWWI5yhd5ka
vFP5PQAYGi3+tHwyoHKGCUaVGnvRTFhpZrsgWDOn59loAASNLwzWnml8fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMF4ayuagTHZhX/2J2EdKpGyx7CnMB8GA1UdIwQY
MBaAFEMBVlQIJXjElGzSe+Homj3XVi+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTkt
MTAzMGNkYmU2YmQ0LzEvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTktMTAzMGNkYmU2YmQ0
LzEvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYic/rxEA
TxL5rQPj3IyhHP6TSGjhtwqsoijlzOBn/6JehN7D8DDF1QygBVkk3K69qlhjof4O
oEHhNzTZhXj7Ek64qM2vpZ59NhCvoR00MOubJR+28yK0gUWdYwly1n4j27jaljy6
ewbOSLi5rPfiMNjSwbLOSv5KUAeI2fdzdrQ6nGfADIGGmkebJn1ynDLkqdAa4PwT
cwCaSmXOSHKYlVUR/Z6rVFjreCRVboQaOKDfwzZcUido9nzEOKJfDsWQQqUigU4N
Z9sTJNMIZeIUtKxK0qDIkGgQeS6NoUNbR9ZLDlp7ootb99xdQWXCLcMapjjoz4Vf
ioEKWge/8LPGjg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:14 2025 by rpki-client