Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/QWkOI5DpC72N5AIYrSIeCTvM7L8.mft
File: QWkOI5DpC72N5AIYrSIeCTvM7L8.mft (raw, json)
Hash identifier: fUohvLU2IInmltduedivdVKDLLC6z8icav/WJMB2734=
Subject key identifier: E8:96:BC:EF:10:76:BC:DD:76:71:9A:28:75:AA:37:53:C1:57:67:C4
Authority key identifier: 41:69:0E:23:90:E9:0B:BD:8D:E4:02:18:AD:22:1E:09:3B:CC:EC:BF
Certificate issuer: /CN=41690e2390e90bbd8de40218ad221e093bccecbf
Certificate serial: 019A71EEA7D898CE663D8614A87FABC01D23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWkOI5DpC72N5AIYrSIeCTvM7L8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/QWkOI5DpC72N5AIYrSIeCTvM7L8.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 08:00:57 +0000
Manifest this update: Tue 11 Nov 2025 08:00:57 +0000
Manifest next update: Wed 12 Nov 2025 08:00:57 +0000
Files and hashes: 1: QWkOI5DpC72N5AIYrSIeCTvM7L8.crl (hash: /+MU0hMHZrETAw0JYale4nUYes9hzeaGKl9xjxQexQY=)
2: nsNEVxRNRAqK4M0HqDeGc01kd4k.roa (hash: u9cSwFwr5XiNLEjBeMMlXHN1pLGlDX3Y3bL8f/eEp3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/QWkOI5DpC72N5AIYrSIeCTvM7L8.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/QWkOI5DpC72N5AIYrSIeCTvM7L8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QWkOI5DpC72N5AIYrSIeCTvM7L8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:a7:d8:98:ce:66:3d:86:14:a8:7f:ab:c0:1d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41690e2390e90bbd8de40218ad221e093bccecbf
Validity
Not Before: Nov 11 08:00:57 2025 GMT
Not After : Nov 12 08:00:57 2025 GMT
Subject: CN=e896bcef1076bcdd76719a2875aa3753c15767c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c4:60:b0:c0:ef:9f:00:62:50:35:b4:5a:bf:
0e:8f:8d:b3:f6:59:48:40:b4:2b:4c:21:bb:08:3e:
6f:d7:43:3d:3a:03:b0:aa:40:e2:2e:b7:37:a3:ec:
c8:da:9c:5d:f4:9b:d2:21:5d:82:6b:fa:0a:49:61:
11:97:22:e1:69:02:99:5d:81:23:ad:f4:00:84:21:
2c:f2:65:fc:37:7d:17:42:6f:a0:a8:2f:a1:29:6e:
17:2e:c4:02:f6:43:46:a5:4b:72:43:97:28:ac:f7:
cd:60:a6:1e:90:c1:ba:ed:de:e6:98:10:8f:7b:5a:
32:4a:22:80:32:ba:9d:33:28:82:5e:4c:03:78:6d:
7a:45:35:2f:e7:74:97:48:ff:03:4f:48:66:f6:8a:
4a:10:55:39:96:3b:dd:8b:28:79:c1:95:6f:f3:02:
9e:a8:ae:f7:5b:c8:6d:54:9d:9d:99:54:5f:56:50:
55:87:bd:e2:dd:18:76:bd:b2:20:32:ab:67:37:45:
7c:4a:85:77:19:f0:be:da:e2:6c:2d:93:6a:04:d4:
75:c0:3a:d6:2e:6e:64:eb:df:e9:13:8b:e7:7f:45:
49:22:53:d3:25:06:27:4a:69:42:23:b2:24:8b:d8:
e2:7c:00:6c:59:ce:36:45:9f:cc:7b:95:90:82:77:
f1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:96:BC:EF:10:76:BC:DD:76:71:9A:28:75:AA:37:53:C1:57:67:C4
X509v3 Authority Key Identifier:
keyid:41:69:0E:23:90:E9:0B:BD:8D:E4:02:18:AD:22:1E:09:3B:CC:EC:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWkOI5DpC72N5AIYrSIeCTvM7L8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/QWkOI5DpC72N5AIYrSIeCTvM7L8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/QWkOI5DpC72N5AIYrSIeCTvM7L8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:dc:18:ec:72:66:7c:05:4b:81:11:9c:60:7a:fc:ad:3c:09:
6b:71:ae:0c:7c:8f:8e:48:90:0b:35:63:1e:8d:b8:b4:5f:02:
ac:1b:7d:56:55:c7:d8:73:6a:6a:3c:fe:c9:83:ac:a9:0a:cf:
7b:b5:7c:21:19:e4:81:d8:56:04:71:a2:3b:bf:87:9a:b0:19:
b1:08:cc:b1:db:69:8e:2a:20:1f:a7:e5:fa:60:9a:ae:68:dd:
f8:e2:06:26:9a:08:2d:25:32:85:c1:19:07:33:68:a0:8e:95:
e1:5b:a0:0a:e1:54:a5:ba:e2:b6:43:55:df:33:e9:e8:4c:cf:
0e:e8:50:69:28:b0:28:f4:36:95:2e:2f:f0:59:a1:1b:53:07:
ce:11:a4:36:59:e8:0b:74:d1:79:7f:7f:3c:95:c5:1c:f5:72:
65:9f:b0:f2:39:f5:b2:fe:63:8b:87:f9:9f:5e:45:04:69:1e:
4f:42:4c:de:d3:b5:91:f1:f9:bc:1e:51:66:94:75:06:81:5c:
16:1f:37:f2:34:19:33:ad:16:64:dc:62:de:09:43:de:7a:3c:
79:f9:74:a6:9c:bc:c8:8e:e9:36:67:7b:bb:62:d1:6a:ed:5b:
ef:96:fa:ae:b2:f6:96:4b:e2:3f:23:7b:0a:ff:ff:78:19:16:
a8:f4:a2:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7qfYmM5mPYYUqH+rwB0jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxNjkwZTIzOTBlOTBiYmQ4ZGU0MDIxOGFkMjIxZTA5M2Jj
Y2VjYmYwHhcNMjUxMTExMDgwMDU3WhcNMjUxMTEyMDgwMDU3WjAzMTEwLwYDVQQD
EyhlODk2YmNlZjEwNzZiY2RkNzY3MTlhMjg3NWFhMzc1M2MxNTc2N2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMRgsMDvnwBiUDW0Wr8Oj42z9llI
QLQrTCG7CD5v10M9OgOwqkDiLrc3o+zI2pxd9JvSIV2Ca/oKSWERlyLhaQKZXYEj
rfQAhCEs8mX8N30XQm+gqC+hKW4XLsQC9kNGpUtyQ5corPfNYKYekMG67d7mmBCP
e1oySiKAMrqdMyiCXkwDeG16RTUv53SXSP8DT0hm9opKEFU5ljvdiyh5wZVv8wKe
qK73W8htVJ2dmVRfVlBVh73i3Rh2vbIgMqtnN0V8SoV3GfC+2uJsLZNqBNR1wDrW
Lm5k69/pE4vnf0VJIlPTJQYnSmlCI7Iki9jifABsWc42RZ/Me5WQgnfx6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOiWvO8QdrzddnGaKHWqN1PBV2fEMB8GA1UdIwQY
MBaAFEFpDiOQ6Qu9jeQCGK0iHgk7zOy/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVdrT0k1RHBDNzJONUFJWXJTSWVDVHZNN0w4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8yODg0YWEtMGNjYi00OWYyLTkwYzUt
MzM4NWQ5YmYxZDgwLzEvUVdrT0k1RHBDNzJONUFJWXJTSWVDVHZNN0w4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8yODg0YWEtMGNjYi00OWYyLTkwYzUtMzM4NWQ5YmYxZDgw
LzEvUVdrT0k1RHBDNzJONUFJWXJTSWVDVHZNN0w4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAONwY7HJm
fAVLgRGcYHr8rTwJa3GuDHyPjkiQCzVjHo24tF8CrBt9VlXH2HNqajz+yYOsqQrP
e7V8IRnkgdhWBHGiO7+HmrAZsQjMsdtpjiogH6fl+mCarmjd+OIGJpoILSUyhcEZ
BzNooI6V4VugCuFUpbritkNV3zPp6EzPDuhQaSiwKPQ2lS4v8FmhG1MHzhGkNlno
C3TReX9/PJXFHPVyZZ+w8jn1sv5ji4f5n15FBGkeT0JM3tO1kfH5vB5RZpR1BoFc
Fh838jQZM60WZNxi3glD3no8efl0ppy8yI7pNmd7u2LRau1b75b6rrL2lkviPyN7
Cv//eBkWqPSitA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:56 2025 by rpki-client