Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
File: QdELiOsk9iYtkxU2il0B4eCGDE4.mft (raw, json)
Hash identifier: K0aMQN3dd1ohLcHpqV1SFKE8DfW+6rvW9eoBLn3ocz8=
Subject key identifier: 19:9D:66:3A:D3:63:49:04:5D:DF:9A:40:25:00:6C:03:82:01:3A:C1
Authority key identifier: 41:D1:0B:88:EB:24:F6:26:2D:93:15:36:8A:5D:01:E1:E0:86:0C:4E
Certificate issuer: /CN=41d10b88eb24f6262d9315368a5d01e1e0860c4e
Certificate serial: 019A202D43BDD2FFF48F46BF3B52B77D4896
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
Manifest number: 0CCB
Signing time: Sun 26 Oct 2025 11:00:28 +0000
Manifest this update: Sun 26 Oct 2025 11:00:28 +0000
Manifest next update: Mon 27 Oct 2025 11:00:28 +0000
Files and hashes: 1: MxIW_z7Ebidq95zbkkCpozAg-qo.roa (hash: Ne9BRTxSbvyD3v1mKUKjrJIdCst7ww6cgLtpKgmPXO4=)
2: QdELiOsk9iYtkxU2il0B4eCGDE4.crl (hash: 8/pClPXC3uSk/6MilIToopc/dl6jzc35KHE7B0M47VI=)
3: iF0hWqV8nyrtwGMxvXkpeZV-Ad0.roa (hash: NsX4Tk5b/sJjbOHt4Xm/gMH0eUzDRvHxvl47C618GF4=)
4: pK_RWKvtbpfARxQqcIN51CNOVR4.roa (hash: gYB8+JoJ6UyQv4AugtpSBUDhjHrwgsXQ9hiZfsU43O0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 05:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:2d:43:bd:d2:ff:f4:8f:46:bf:3b:52:b7:7d:48:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d10b88eb24f6262d9315368a5d01e1e0860c4e
Validity
Not Before: Oct 26 11:00:28 2025 GMT
Not After : Oct 27 11:00:28 2025 GMT
Subject: CN=199d663ad36349045ddf9a4025006c0382013ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a5:c3:22:ec:60:8b:73:0e:39:30:53:f3:ae:
01:43:a9:e4:d1:ec:cc:bb:d6:a5:eb:93:b3:a4:69:
4b:1c:51:3b:36:c8:21:6a:fa:5c:6a:ce:db:ad:33:
8b:eb:a5:30:24:aa:a5:75:e2:16:36:da:d1:f0:42:
71:b9:5d:84:e0:ca:f6:33:29:ab:03:6e:6c:8a:68:
4b:8b:b8:08:22:a1:b6:1b:22:71:cd:97:75:c7:c7:
3a:76:8f:c9:e4:da:ad:df:58:28:d2:e0:60:dc:2a:
49:40:28:e8:ef:af:d7:d5:36:a5:17:f0:ac:67:b0:
92:62:93:be:23:33:33:a8:67:ad:1b:c7:45:49:c4:
17:f9:11:2e:e2:f5:72:77:aa:04:8e:f7:bc:70:cb:
25:a1:b2:51:2c:ce:89:f2:19:e6:fa:96:28:3c:33:
fb:a4:fe:f3:70:a8:0a:c9:83:6d:4a:38:26:8a:a3:
5e:3a:4a:f2:d7:da:6f:05:28:5e:f9:7a:a4:5d:e2:
44:b5:ce:40:39:d6:28:01:f7:95:67:c9:d2:6f:57:
d0:dd:8e:24:bb:8d:00:fc:21:17:9f:35:62:66:a3:
ba:04:9e:8b:a6:d3:1e:fe:c5:75:f2:0d:bd:c9:84:
82:3e:e2:90:56:21:06:fb:00:6f:a5:36:07:08:6d:
7f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:9D:66:3A:D3:63:49:04:5D:DF:9A:40:25:00:6C:03:82:01:3A:C1
X509v3 Authority Key Identifier:
keyid:41:D1:0B:88:EB:24:F6:26:2D:93:15:36:8A:5D:01:E1:E0:86:0C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:a1:28:8a:de:6a:e6:99:9d:e0:4f:30:1d:aa:3d:23:51:22:
c4:ab:53:f2:ac:51:4f:e5:c0:85:83:71:c2:8b:93:d5:39:71:
b9:10:1b:56:3a:f9:f0:db:cd:4e:bc:c9:eb:42:fe:c9:bf:82:
6d:72:8e:32:94:19:15:bc:02:ef:e5:e2:48:3a:5c:2f:00:26:
68:55:c4:e7:97:ad:5c:ed:0d:9a:d6:cd:95:ed:e6:f7:0b:95:
d0:66:7c:f1:5d:2c:d4:35:95:84:3e:d9:d9:5b:f3:af:a4:49:
75:56:fb:70:72:4d:71:dd:50:76:95:77:1c:5d:0b:8e:67:01:
9d:1b:00:23:d4:b5:71:5a:d6:07:55:02:b7:0b:fe:bc:4c:bb:
e6:48:37:70:3a:25:70:aa:41:24:18:c3:e4:ba:a4:8e:74:05:
db:90:b0:55:18:fd:10:56:8b:39:a2:3d:80:dc:5b:38:6c:2c:
f3:f0:78:f8:6f:ae:dd:b4:ec:60:5e:99:0c:ae:e3:7e:ff:2b:
47:dc:14:81:4f:6f:e9:22:fb:63:fa:a4:be:4e:6e:ee:fb:28:
6a:b8:cc:d8:e3:94:68:55:ff:8f:78:f0:46:dc:6f:14:74:ac:
c2:34:ea:22:5f:b5:aa:43:9a:56:ee:6f:16:22:c8:fb:9d:66:
66:72:f0:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZogLUO90v/0j0a/O1K3fUiWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZDEwYjg4ZWIyNGY2MjYyZDkzMTUzNjhhNWQwMWUxZTA4
NjBjNGUwHhcNMjUxMDI2MTEwMDI4WhcNMjUxMDI3MTEwMDI4WjAzMTEwLwYDVQQD
EygxOTlkNjYzYWQzNjM0OTA0NWRkZjlhNDAyNTAwNmMwMzgyMDEzYWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqXDIuxgi3MOOTBT864BQ6nk0ezM
u9al65OzpGlLHFE7Nsghavpcas7brTOL66UwJKqldeIWNtrR8EJxuV2E4Mr2Mymr
A25simhLi7gIIqG2GyJxzZd1x8c6do/J5Nqt31go0uBg3CpJQCjo76/X1TalF/Cs
Z7CSYpO+IzMzqGetG8dFScQX+REu4vVyd6oEjve8cMslobJRLM6J8hnm+pYoPDP7
pP7zcKgKyYNtSjgmiqNeOkry19pvBShe+XqkXeJEtc5AOdYoAfeVZ8nSb1fQ3Y4k
u40A/CEXnzViZqO6BJ6LptMe/sV18g29yYSCPuKQViEG+wBvpTYHCG1/lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBmdZjrTY0kEXd+aQCUAbAOCATrBMB8GA1UdIwQY
MBaAFEHRC4jrJPYmLZMVNopdAeHghgxOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWRFTGlPc2s5aVl0a3hVMmlsMEI0ZUNHREU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS85OTg3ODYtODcxOS00ZDhlLTk1MDAt
ZWY5NzAwNmM0NTBiLzEvUWRFTGlPc2s5aVl0a3hVMmlsMEI0ZUNHREU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS85OTg3ODYtODcxOS00ZDhlLTk1MDAtZWY5NzAwNmM0NTBi
LzEvUWRFTGlPc2s5aVl0a3hVMmlsMEI0ZUNHREU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAaEoit5q
5pmd4E8wHao9I1EixKtT8qxRT+XAhYNxwouT1TlxuRAbVjr58NvNTrzJ60L+yb+C
bXKOMpQZFbwC7+XiSDpcLwAmaFXE55etXO0NmtbNle3m9wuV0GZ88V0s1DWVhD7Z
2Vvzr6RJdVb7cHJNcd1QdpV3HF0LjmcBnRsAI9S1cVrWB1UCtwv+vEy75kg3cDol
cKpBJBjD5LqkjnQF25CwVRj9EFaLOaI9gNxbOGws8/B4+G+u3bTsYF6ZDK7jfv8r
R9wUgU9v6SL7Y/qkvk5u7vsoarjM2OOUaFX/j3jwRtxvFHSswjTqIl+1qkOaVu5v
FiLI+51mZnLw1w==
-----END CERTIFICATE-----
Generated at Sun Oct 26 14:07:06 2025 by rpki-client