Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft
File: QZHlgmJw9J6umZ1InoXezMhHc4s.mft (raw, json)
Hash identifier: Zc/q22ZCmbco5dSF9ZxR8ya5/2Gkf8FWoQueI2/QOFA=
Subject key identifier: C3:D4:E0:A8:C8:4A:41:3F:CB:DF:64:26:B2:74:C9:E4:12:F9:62:29
Authority key identifier: 41:91:E5:82:62:70:F4:9E:AE:99:9D:48:9E:85:DE:CC:C8:47:73:8B
Certificate issuer: /CN=4191e5826270f49eae999d489e85deccc847738b
Certificate serial: 019A72940DBBBA185C1EC39C22FAD63A24FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZHlgmJw9J6umZ1InoXezMhHc4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft
Manifest number: 123B
Signing time: Tue 11 Nov 2025 11:01:36 +0000
Manifest this update: Tue 11 Nov 2025 11:01:36 +0000
Manifest next update: Wed 12 Nov 2025 11:01:36 +0000
Files and hashes: 1: 5a04uRMLuLPqwpXzKrFBWV5ma_s.roa (hash: pqBMscBUXLlLFYQmwhp2Q/lEjdKvHVjvXqUWPX0LeGM=)
2: QZHlgmJw9J6umZ1InoXezMhHc4s.crl (hash: 12ZYxK6ZgaGoExfqdTmSME3Nu41RV1aipd+kkzGvFzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZHlgmJw9J6umZ1InoXezMhHc4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:94:0d:bb:ba:18:5c:1e:c3:9c:22:fa:d6:3a:24:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4191e5826270f49eae999d489e85deccc847738b
Validity
Not Before: Nov 11 11:01:36 2025 GMT
Not After : Nov 12 11:01:36 2025 GMT
Subject: CN=c3d4e0a8c84a413fcbdf6426b274c9e412f96229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:7f:0b:c6:bc:c5:ae:3e:48:ad:8e:0e:ec:b4:
0a:53:ba:b0:f1:81:a2:e9:63:a6:36:b8:f1:2a:74:
0e:73:22:58:be:49:e3:db:94:97:db:22:01:86:ca:
7a:f1:5a:bd:38:75:cc:34:71:21:05:e6:53:83:a3:
15:85:59:0c:9c:e4:f0:0a:9c:7b:82:7b:eb:46:00:
4e:cb:cb:30:83:10:55:45:4f:73:4c:b3:f6:b8:e4:
97:07:31:8d:c3:d7:7d:36:24:4f:28:98:a2:40:42:
44:3f:0b:f0:66:29:08:72:9a:60:d0:97:14:81:2e:
a1:1c:a5:69:c8:ee:a4:e0:d9:4a:fb:ee:78:8e:a5:
91:d0:30:9c:01:96:1c:c7:4f:3c:be:3c:f9:bd:1c:
37:5d:76:e2:c1:b7:db:b8:26:f1:66:2a:d3:ad:cf:
fe:92:b8:82:d6:55:77:08:8e:83:64:6c:78:ce:73:
37:88:4c:eb:3c:2e:49:ae:7b:39:90:c9:d2:57:d3:
da:5e:70:af:eb:db:b4:f2:17:ad:20:73:54:02:da:
00:84:53:ce:95:f1:ae:37:2c:d1:7e:b3:bb:32:7c:
d6:db:6e:d4:41:8c:83:b5:65:61:7b:4d:aa:aa:14:
1b:b1:4f:b4:d2:0d:b6:75:4c:a0:5d:df:78:87:91:
db:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D4:E0:A8:C8:4A:41:3F:CB:DF:64:26:B2:74:C9:E4:12:F9:62:29
X509v3 Authority Key Identifier:
keyid:41:91:E5:82:62:70:F4:9E:AE:99:9D:48:9E:85:DE:CC:C8:47:73:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZHlgmJw9J6umZ1InoXezMhHc4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:db:3a:6e:95:5a:dc:c6:9f:8f:ab:39:17:24:84:72:5e:d5:
19:41:ea:e9:19:7a:35:f3:b9:20:71:28:f8:a7:6f:1c:7f:16:
49:2f:e4:bc:66:83:2b:5b:68:87:e2:3b:1e:94:50:fd:86:a8:
13:7e:52:02:3f:20:0c:70:c2:8f:68:8b:0a:dc:ed:b9:67:85:
79:b1:ea:6b:58:7f:e7:e4:74:7c:9a:2a:42:b7:81:aa:6f:82:
95:b0:f7:21:2b:63:dd:92:65:cf:0e:c0:e7:c7:85:c3:68:3c:
95:00:ee:a0:a2:61:ca:25:e7:51:51:ed:4a:45:39:07:ee:63:
05:28:01:61:4e:6a:bf:df:e5:01:f3:36:dc:23:3e:90:b1:0d:
6b:95:5e:70:ed:1c:fe:1c:0e:83:b9:4b:c0:88:14:d7:c3:d2:
46:e2:30:bb:28:cc:8a:ae:22:ca:b9:8a:62:89:f7:56:2f:75:
a7:b7:af:af:be:a2:22:09:e4:d4:e9:c3:33:ea:84:29:32:da:
e8:16:3e:f5:d6:42:72:57:45:20:06:3c:a8:f9:cf:67:3b:32:
23:4f:df:14:b5:b6:2d:9c:97:cb:0c:1a:ff:a5:ab:03:5e:72:
0a:ff:c4:75:6a:b3:08:9d:d9:b2:0f:49:cb:9f:1a:f0:12:d2:
14:95:69:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpylA27uhhcHsOcIvrWOiT9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxOTFlNTgyNjI3MGY0OWVhZTk5OWQ0ODllODVkZWNjYzg0
NzczOGIwHhcNMjUxMTExMTEwMTM2WhcNMjUxMTEyMTEwMTM2WjAzMTEwLwYDVQQD
EyhjM2Q0ZTBhOGM4NGE0MTNmY2JkZjY0MjZiMjc0YzllNDEyZjk2MjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7X8LxrzFrj5IrY4O7LQKU7qw8YGi
6WOmNrjxKnQOcyJYvknj25SX2yIBhsp68Vq9OHXMNHEhBeZTg6MVhVkMnOTwCpx7
gnvrRgBOy8swgxBVRU9zTLP2uOSXBzGNw9d9NiRPKJiiQEJEPwvwZikIcppg0JcU
gS6hHKVpyO6k4NlK++54jqWR0DCcAZYcx088vjz5vRw3XXbiwbfbuCbxZirTrc/+
kriC1lV3CI6DZGx4znM3iEzrPC5Jrns5kMnSV9PaXnCv69u08hetIHNUAtoAhFPO
lfGuNyzRfrO7MnzW227UQYyDtWVhe02qqhQbsU+00g22dUygXd94h5HbmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMPU4KjISkE/y99kJrJ0yeQS+WIpMB8GA1UdIwQY
MBaAFEGR5YJicPSerpmdSJ6F3szIR3OLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVpIbGdtSnc5SjZ1bVoxSW5vWGV6TWhIYzRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC81MWJhYzctOTgwNi00MWU1LTk5MzYt
N2RmZGFjZmE2NTExLzEvUVpIbGdtSnc5SjZ1bVoxSW5vWGV6TWhIYzRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC81MWJhYzctOTgwNi00MWU1LTk5MzYtN2RmZGFjZmE2NTEx
LzEvUVpIbGdtSnc5SjZ1bVoxSW5vWGV6TWhIYzRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn9s6bpVa
3Mafj6s5FySEcl7VGUHq6Rl6NfO5IHEo+KdvHH8WSS/kvGaDK1toh+I7HpRQ/Yao
E35SAj8gDHDCj2iLCtztuWeFebHqa1h/5+R0fJoqQreBqm+ClbD3IStj3ZJlzw7A
58eFw2g8lQDuoKJhyiXnUVHtSkU5B+5jBSgBYU5qv9/lAfM23CM+kLENa5VecO0c
/hwOg7lLwIgU18PSRuIwuyjMiq4iyrmKYon3Vi91p7evr76iIgnk1OnDM+qEKTLa
6BY+9dZCcldFIAY8qPnPZzsyI0/fFLW2LZyXywwa/6WrA15yCv/EdWqzCJ3Zsg9J
y58a8BLSFJVpWg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:49 2025 by rpki-client