Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft
File: Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft (raw, json)
Hash identifier: aVnl4NCRJ1jWeQdgI09YpSAMCwg7gBKudPOxHGqFfbM=
Subject key identifier: A3:96:4F:6B:C9:F6:1E:4F:29:5A:F6:6A:8F:09:A8:D2:6D:A6:2C:8E
Authority key identifier: 42:4F:D1:A3:A0:25:8D:CC:A6:7F:C9:DD:DB:F4:E3:61:57:E6:A7:16
Certificate issuer: /CN=424fd1a3a0258dcca67fc9dddbf4e36157e6a716
Certificate serial: 019A7226192885AB10F583E6A9376871FBE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 09:01:30 +0000
Manifest this update: Tue 11 Nov 2025 09:01:30 +0000
Manifest next update: Wed 12 Nov 2025 09:01:30 +0000
Files and hashes: 1: 83F_Jp7hhNkTyKzmQu0uAqQ-Hug.roa (hash: /GIKVjlq0TkCjqFIvHfnkG7+yghgu5kkQctxwrpV6qw=)
2: Qk_Ro6Aljcymf8nd2_TjYVfmpxY.crl (hash: VkLKhDtjTELgJLytsQk39A2CXW48RBrYnhQECdGPCEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:19:28:85:ab:10:f5:83:e6:a9:37:68:71:fb:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424fd1a3a0258dcca67fc9dddbf4e36157e6a716
Validity
Not Before: Nov 11 09:01:30 2025 GMT
Not After : Nov 12 09:01:30 2025 GMT
Subject: CN=a3964f6bc9f61e4f295af66a8f09a8d26da62c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b8:ae:d8:8c:e4:cf:1b:51:67:49:bb:0b:63:
5b:8f:a6:fd:65:97:ad:04:5a:87:d0:c1:99:ef:9c:
75:7b:60:c2:30:80:08:2e:01:94:9e:ae:0d:db:97:
04:d5:f0:41:29:fc:67:c5:b2:94:8a:b1:59:1b:75:
77:ac:27:a9:5f:4d:bf:58:b6:63:ae:b8:65:52:a4:
77:1c:eb:7f:b5:c6:f6:15:ec:e5:b6:98:3d:5c:f9:
d2:27:dc:62:5b:d5:2d:52:c2:61:eb:c3:a3:38:aa:
14:fe:44:f5:f6:22:d1:ed:17:31:ec:6a:e7:6e:9e:
41:46:2f:7f:e4:5d:b3:98:09:29:df:2b:f3:16:9d:
9f:8a:23:2f:5d:51:0b:d6:90:2e:2c:82:41:c5:fb:
94:32:9b:06:f7:7d:25:53:0a:d0:af:43:dc:22:e4:
24:dd:b2:20:eb:d5:07:9a:e0:11:4a:ef:bd:10:c8:
f5:4d:08:c6:0e:2b:00:35:03:8b:71:67:61:7a:77:
46:45:c3:34:0e:15:14:1b:a6:81:7d:28:bc:4d:e7:
cc:cf:ef:3c:fb:6b:66:63:e0:fe:c6:0c:4c:50:5b:
0e:0a:98:94:32:1b:26:b8:bf:9a:f5:3c:99:95:3e:
c3:3c:17:dc:4a:91:f2:5c:77:d1:34:61:cc:91:f4:
a8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:96:4F:6B:C9:F6:1E:4F:29:5A:F6:6A:8F:09:A8:D2:6D:A6:2C:8E
X509v3 Authority Key Identifier:
keyid:42:4F:D1:A3:A0:25:8D:CC:A6:7F:C9:DD:DB:F4:E3:61:57:E6:A7:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:94:ed:16:07:76:71:90:5a:45:39:8a:82:21:32:d9:9d:f0:
15:38:34:a8:b4:be:5a:93:1f:af:0e:8c:33:7d:8d:8c:a9:ae:
20:dc:d6:78:5d:4a:a9:ce:0f:19:c3:31:7e:87:5e:80:b9:e8:
53:42:61:ce:15:ff:dc:93:fd:b9:b4:bd:70:93:a0:a3:75:a8:
e1:20:e9:27:51:90:41:d6:dc:60:9c:12:0f:e3:d1:cf:f4:7b:
f0:58:58:62:68:d2:8b:87:b7:70:e1:e4:cd:74:b6:9d:17:9b:
50:84:bf:89:ff:1f:46:52:00:7f:60:fd:36:8b:ef:71:4d:2b:
0e:69:75:f5:8e:a1:87:e4:47:37:ad:27:77:4a:b7:ea:c1:bc:
21:75:2e:3a:7a:c9:18:d8:3b:7c:99:b4:f0:89:48:d7:ca:2c:
77:12:e9:f0:ef:7b:39:55:32:ed:fa:b4:74:49:67:93:a8:7f:
21:2f:ff:82:b5:ef:73:0d:82:8c:78:65:04:35:2c:60:01:ac:
3a:14:e9:44:cb:ec:d9:39:45:69:ac:3a:73:6e:61:c2:57:2b:
f4:b5:35:0d:90:8f:e6:a3:04:19:76:fa:da:b7:9e:28:1e:2b:
fd:f4:34:b7:3a:2f:97:f9:87:c6:70:28:72:f0:a2:fe:80:cc:
ed:9f:a7:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJhkohasQ9YPmqTdocfviMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyNGZkMWEzYTAyNThkY2NhNjdmYzlkZGRiZjRlMzYxNTdl
NmE3MTYwHhcNMjUxMTExMDkwMTMwWhcNMjUxMTEyMDkwMTMwWjAzMTEwLwYDVQQD
EyhhMzk2NGY2YmM5ZjYxZTRmMjk1YWY2NmE4ZjA5YThkMjZkYTYyYzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzriu2IzkzxtRZ0m7C2Nbj6b9ZZet
BFqH0MGZ75x1e2DCMIAILgGUnq4N25cE1fBBKfxnxbKUirFZG3V3rCepX02/WLZj
rrhlUqR3HOt/tcb2Fezltpg9XPnSJ9xiW9UtUsJh68OjOKoU/kT19iLR7Rcx7Grn
bp5BRi9/5F2zmAkp3yvzFp2fiiMvXVEL1pAuLIJBxfuUMpsG930lUwrQr0PcIuQk
3bIg69UHmuARSu+9EMj1TQjGDisANQOLcWdhendGRcM0DhUUG6aBfSi8TefMz+88
+2tmY+D+xgxMUFsOCpiUMhsmuL+a9TyZlT7DPBfcSpHyXHfRNGHMkfSoQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKOWT2vJ9h5PKVr2ao8JqNJtpiyOMB8GA1UdIwQY
MBaAFEJP0aOgJY3Mpn/J3dv042FX5qcWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWtfUm82QWxqY3ltZjhuZDJfVGpZVmZtcHhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS85MTM3NTItYjhkYy00ZGZmLTg2Njct
NzQ3YjBlNTdhYjVlLzEvUWtfUm82QWxqY3ltZjhuZDJfVGpZVmZtcHhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS85MTM3NTItYjhkYy00ZGZmLTg2NjctNzQ3YjBlNTdhYjVl
LzEvUWtfUm82QWxqY3ltZjhuZDJfVGpZVmZtcHhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb5TtFgd2
cZBaRTmKgiEy2Z3wFTg0qLS+WpMfrw6MM32NjKmuINzWeF1Kqc4PGcMxfodegLno
U0JhzhX/3JP9ubS9cJOgo3Wo4SDpJ1GQQdbcYJwSD+PRz/R78FhYYmjSi4e3cOHk
zXS2nRebUIS/if8fRlIAf2D9NovvcU0rDml19Y6hh+RHN60nd0q36sG8IXUuOnrJ
GNg7fJm08IlI18osdxLp8O97OVUy7fq0dElnk6h/IS//grXvcw2CjHhlBDUsYAGs
OhTpRMvs2TlFaaw6c25hwlcr9LU1DZCP5qMEGXb62reeKB4r/fQ0tzovl/mHxnAo
cvCi/oDM7Z+n7Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:50 2025 by rpki-client