Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
File: QeQtgw7KmKUz9DctoWnJx5LDk7I.mft (raw, json)
Hash identifier: CiWw7zOSeY4XeCnvRxWRIBMrERjXrWehqFNU7EghpTU=
Subject key identifier: DB:D8:9C:F8:6D:B7:CA:6B:CB:7C:F7:73:27:8D:FE:5F:D5:F9:F3:60
Authority key identifier: 41:E4:2D:83:0E:CA:98:A5:33:F4:37:2D:A1:69:C9:C7:92:C3:93:B2
Certificate issuer: /CN=41e42d830eca98a533f4372da169c9c792c393b2
Certificate serial: 019A168513ED8D5AEB58153000EBF321B537
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
Manifest number: 16F0
Signing time: Fri 24 Oct 2025 14:00:11 +0000
Manifest this update: Fri 24 Oct 2025 14:00:11 +0000
Manifest next update: Sat 25 Oct 2025 14:00:11 +0000
Files and hashes: 1: NcqRg7UrtJE68j0DY1PSHwYSu_4.roa (hash: O3F0k70QFpKk+LVxYcWwtpQ0YuG4zUsaxS4NlfXzPQ0=)
2: QeQtgw7KmKUz9DctoWnJx5LDk7I.crl (hash: XIN5TAo36JfEgIt2v+B4C+qvv/Zf1PyD+z1cHeR3+2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 14:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:16:85:13:ed:8d:5a:eb:58:15:30:00:eb:f3:21:b5:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41e42d830eca98a533f4372da169c9c792c393b2
Validity
Not Before: Oct 24 14:00:11 2025 GMT
Not After : Oct 25 14:00:11 2025 GMT
Subject: CN=dbd89cf86db7ca6bcb7cf773278dfe5fd5f9f360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f0:73:1e:01:df:78:aa:12:61:f2:2f:42:db:
c3:66:6c:91:2e:06:af:9b:d4:9b:6e:a2:18:56:7e:
5c:cd:b8:23:0c:f5:bf:cd:f3:7f:be:45:ec:54:3d:
b8:be:bd:94:a6:ae:ea:1e:55:d1:e2:fd:d2:3d:ee:
cd:9e:42:55:e1:a3:c8:d5:77:a8:5c:20:bf:64:20:
f6:3b:13:54:80:20:ee:23:ac:d9:af:00:b8:34:54:
04:16:c6:49:2b:85:ee:4a:45:e5:ef:08:e1:61:70:
7f:24:f0:8c:a1:87:36:2e:b8:b0:34:f6:49:df:06:
28:ba:11:27:39:f1:09:c6:11:04:c6:df:eb:8f:5c:
ff:7d:55:7f:6b:0e:85:ac:d4:88:b3:43:c5:50:a9:
67:ea:86:04:33:41:ad:39:19:b3:bd:ec:3c:3c:37:
15:48:e4:dd:c0:9d:7e:96:41:dc:99:48:16:53:39:
5f:bd:0f:5c:6d:0a:ac:d8:80:a9:02:07:73:08:2b:
d9:29:ae:aa:e9:0c:aa:56:ae:f3:07:1a:c1:84:4b:
9c:b9:eb:41:2c:9c:1d:2f:18:0a:0f:e8:2c:6c:57:
0d:6b:5d:1b:b8:be:fc:e4:4e:ce:c1:f3:e0:07:5c:
2e:92:fb:a3:6d:38:a4:81:02:08:cb:d7:bb:f6:7e:
aa:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D8:9C:F8:6D:B7:CA:6B:CB:7C:F7:73:27:8D:FE:5F:D5:F9:F3:60
X509v3 Authority Key Identifier:
keyid:41:E4:2D:83:0E:CA:98:A5:33:F4:37:2D:A1:69:C9:C7:92:C3:93:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:e2:34:86:6f:73:1e:97:22:93:15:21:42:e5:13:29:8d:27:
3d:e8:8a:7f:51:3b:51:7d:9f:04:02:ab:66:4e:21:34:31:46:
4f:13:70:11:dd:74:bf:d7:62:ce:53:55:a5:18:3e:78:1c:a8:
b2:0d:58:a4:8f:a2:11:22:e8:9e:f0:4d:e0:60:fa:9c:2a:f6:
71:06:e6:76:bb:ee:93:4b:cc:2d:7a:33:99:6a:aa:89:de:e6:
8f:b3:ed:64:62:78:00:62:35:56:2f:6e:16:3e:07:b4:b6:30:
9b:dd:3b:9c:89:99:f1:02:4e:8d:30:0f:49:28:41:d4:d3:30:
67:72:48:ae:3a:8e:3c:3e:aa:e6:c8:9d:50:85:da:82:f2:d9:
25:75:ff:01:fa:6d:16:88:69:bd:ae:c2:9b:e4:40:f9:2a:16:
d4:18:94:60:23:2a:45:18:a9:9f:45:e5:3d:ca:4f:1c:18:00:
f4:dc:4d:1e:ef:df:0d:19:f3:1b:90:af:a2:b5:f2:0c:04:b4:
26:8c:d7:48:77:b6:cb:ce:30:16:73:2d:b9:cd:03:82:90:0c:
52:cd:c4:7d:4b:24:a4:b2:88:28:31:ed:e7:a5:ae:7e:36:69:
c2:01:9f:80:ae:ed:d5:96:a6:4f:0b:c0:ad:87:01:f4:4e:ed:
58:79:45:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoWhRPtjVrrWBUwAOvzIbU3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZTQyZDgzMGVjYTk4YTUzM2Y0MzcyZGExNjljOWM3OTJj
MzkzYjIwHhcNMjUxMDI0MTQwMDExWhcNMjUxMDI1MTQwMDExWjAzMTEwLwYDVQQD
EyhkYmQ4OWNmODZkYjdjYTZiY2I3Y2Y3NzMyNzhkZmU1ZmQ1ZjlmMzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vBzHgHfeKoSYfIvQtvDZmyRLgav
m9SbbqIYVn5czbgjDPW/zfN/vkXsVD24vr2Upq7qHlXR4v3SPe7NnkJV4aPI1Xeo
XCC/ZCD2OxNUgCDuI6zZrwC4NFQEFsZJK4XuSkXl7wjhYXB/JPCMoYc2LriwNPZJ
3wYouhEnOfEJxhEExt/rj1z/fVV/aw6FrNSIs0PFUKln6oYEM0GtORmzvew8PDcV
SOTdwJ1+lkHcmUgWUzlfvQ9cbQqs2ICpAgdzCCvZKa6q6QyqVq7zBxrBhEucuetB
LJwdLxgKD+gsbFcNa10buL785E7OwfPgB1wukvujbTikgQIIy9e79n6qIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNvYnPhtt8pry3z3cyeN/l/V+fNgMB8GA1UdIwQY
MBaAFEHkLYMOypilM/Q3LaFpyceSw5OyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWVRdGd3N0ttS1V6OURjdG9Xbkp4NUxEazdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC80OTU2ZGYtOTFkYy00NDkwLTgzMzMt
MWFkNjFlZGUwYTRhLzEvUWVRdGd3N0ttS1V6OURjdG9Xbkp4NUxEazdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC80OTU2ZGYtOTFkYy00NDkwLTgzMzMtMWFkNjFlZGUwYTRh
LzEvUWVRdGd3N0ttS1V6OURjdG9Xbkp4NUxEazdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb+I0hm9z
HpcikxUhQuUTKY0nPeiKf1E7UX2fBAKrZk4hNDFGTxNwEd10v9dizlNVpRg+eByo
sg1YpI+iESLonvBN4GD6nCr2cQbmdrvuk0vMLXozmWqqid7mj7PtZGJ4AGI1Vi9u
Fj4HtLYwm907nImZ8QJOjTAPSShB1NMwZ3JIrjqOPD6q5sidUIXagvLZJXX/Afpt
Fohpva7Cm+RA+SoW1BiUYCMqRRipn0XlPcpPHBgA9NxNHu/fDRnzG5CvorXyDAS0
JozXSHe2y84wFnMtuc0DgpAMUs3EfUskpLKIKDHt56WufjZpwgGfgK7t1ZamTwvA
rYcB9E7tWHlFuQ==
-----END CERTIFICATE-----
Generated at Fri Oct 24 20:49:52 2025 by rpki-client