Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft
File: QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft (raw, json)
Hash identifier: O7h/USbuiG9XZX24JMctCXIkzq6HYvJhHAUW8SNt74k=
Subject key identifier: 89:66:8A:E3:60:C7:FC:57:98:60:AE:BE:C4:83:4C:D7:49:F8:5A:68
Authority key identifier: 42:56:0F:C1:CF:6B:97:46:67:37:C3:02:71:23:FA:12:0B:19:54:D5
Certificate issuer: /CN=42560fc1cf6b97466737c3027123fa120b1954d5
Certificate serial: 019A725CAB4170160B62E2879AE9623CB1F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft
Manifest number: 14AB
Signing time: Tue 11 Nov 2025 10:01:07 +0000
Manifest this update: Tue 11 Nov 2025 10:01:07 +0000
Manifest next update: Wed 12 Nov 2025 10:01:07 +0000
Files and hashes: 1: QlYPwc9rl0ZnN8MCcSP6EgsZVNU.crl (hash: vV9OlY18Fr9l8R9AN0A7oajJh5rjJx/baMrVy6L0D+w=)
2: s2rqpwumhtmvSEX63lF_jSCCIqI.roa (hash: 8m00LdhJd4srRCMsExEiNSzzG4jj/QWLsZ3SSDUCdOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:ab:41:70:16:0b:62:e2:87:9a:e9:62:3c:b1:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42560fc1cf6b97466737c3027123fa120b1954d5
Validity
Not Before: Nov 11 10:01:07 2025 GMT
Not After : Nov 12 10:01:07 2025 GMT
Subject: CN=89668ae360c7fc579860aebec4834cd749f85a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1f:04:6a:1d:af:5f:57:78:a8:df:40:a0:ba:
a9:e5:b3:50:ec:e8:b1:a9:a5:b7:d8:06:54:2b:b5:
bf:75:5e:34:80:5c:9d:9b:bd:43:72:7b:5d:00:30:
5c:fb:b0:7f:1a:7b:de:0f:bd:1f:4a:19:62:b9:a9:
85:32:ab:cf:17:f9:52:ce:e9:66:3b:a5:71:10:f3:
11:62:1f:17:e3:6f:18:70:30:52:62:fd:06:6f:50:
d4:28:ca:8c:2d:90:98:a6:48:43:aa:8c:9f:a6:0f:
b1:31:03:eb:af:c1:60:a7:da:38:da:27:1d:7d:a9:
b0:5e:ca:12:2f:40:ba:d5:1e:f7:25:31:03:3e:1a:
68:e2:34:ff:52:56:20:cd:7f:e0:2c:e1:e8:2e:8f:
bd:7a:e4:05:f7:df:6a:db:eb:8d:c2:04:ff:10:fd:
e6:0c:fe:20:28:1c:1e:81:fe:02:cb:3a:1e:ca:13:
80:3b:2b:1c:1b:89:3a:98:4d:6b:99:66:9e:8a:f0:
34:7d:eb:1f:53:3e:04:91:c0:62:8e:48:1d:e3:25:
d3:11:c4:fb:4b:d7:31:b5:c3:e3:cf:e0:15:07:6e:
bd:52:f6:31:ff:a8:a7:85:d0:45:4e:f1:cf:f0:78:
df:1e:9a:4b:10:e6:81:48:43:9a:5f:22:7c:c4:d8:
b5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:66:8A:E3:60:C7:FC:57:98:60:AE:BE:C4:83:4C:D7:49:F8:5A:68
X509v3 Authority Key Identifier:
keyid:42:56:0F:C1:CF:6B:97:46:67:37:C3:02:71:23:FA:12:0B:19:54:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:bd:10:6d:d0:4d:7e:8a:79:16:b6:80:8b:38:c3:c8:ac:20:
a4:6a:ef:5b:07:8d:07:4a:77:73:ed:bc:98:06:cd:f9:20:c9:
ff:49:ac:fa:2b:88:37:66:d9:86:67:91:2d:17:63:96:9c:e6:
19:7e:b4:05:f9:2e:6f:6c:04:37:85:8a:f2:2d:6b:fc:b2:99:
bb:5c:d7:83:f2:71:d5:16:d6:5c:5e:3e:b0:73:41:ed:af:9f:
9d:4e:1e:a5:ef:05:11:8a:0c:b6:e0:73:a7:28:ce:b6:53:ba:
33:c5:14:bc:13:07:39:2e:7e:62:f4:2c:81:6b:32:6a:03:d6:
7c:01:e1:34:d5:59:03:d3:0b:ca:1c:3e:c8:c1:36:d4:c5:1a:
34:53:9d:5f:ca:0a:af:7c:2a:93:cf:1a:a5:e7:91:8e:68:9b:
2a:14:72:6c:0d:c5:d4:0d:35:47:7f:25:ed:33:4b:e6:9c:78:
c9:b7:bd:58:78:22:49:b9:bd:b6:3a:14:6d:b3:45:45:d8:02:
6a:e1:09:fd:71:44:e3:9b:1b:99:ba:33:85:eb:88:7f:50:c2:
cc:31:9e:37:b7:21:43:1c:de:a3:be:31:9f:5e:23:1e:96:93:
31:ac:73:ef:a7:1e:d1:c1:e9:c0:a5:a5:f1:e3:05:99:80:22:
d2:07:ec:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXKtBcBYLYuKHmuliPLH0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyNTYwZmMxY2Y2Yjk3NDY2NzM3YzMwMjcxMjNmYTEyMGIx
OTU0ZDUwHhcNMjUxMTExMTAwMTA3WhcNMjUxMTEyMTAwMTA3WjAzMTEwLwYDVQQD
Eyg4OTY2OGFlMzYwYzdmYzU3OTg2MGFlYmVjNDgzNGNkNzQ5Zjg1YTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB8Eah2vX1d4qN9AoLqp5bNQ7Oix
qaW32AZUK7W/dV40gFydm71DcntdADBc+7B/GnveD70fShliuamFMqvPF/lSzulm
O6VxEPMRYh8X428YcDBSYv0Gb1DUKMqMLZCYpkhDqoyfpg+xMQPrr8Fgp9o42icd
famwXsoSL0C61R73JTEDPhpo4jT/UlYgzX/gLOHoLo+9euQF999q2+uNwgT/EP3m
DP4gKBwegf4CyzoeyhOAOyscG4k6mE1rmWaeivA0fesfUz4EkcBijkgd4yXTEcT7
S9cxtcPjz+AVB269UvYx/6inhdBFTvHP8HjfHppLEOaBSEOaXyJ8xNi1JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIlmiuNgx/xXmGCuvsSDTNdJ+FpoMB8GA1UdIwQY
MBaAFEJWD8HPa5dGZzfDAnEj+hILGVTVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWxZUHdjOXJsMFpuTjhNQ2NTUDZFZ3NaVk5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mYjA3M2YtNmIzOC00ZWNiLWI5NmYt
MmMyMDc5ZDkxNmFkLzEvUWxZUHdjOXJsMFpuTjhNQ2NTUDZFZ3NaVk5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9mYjA3M2YtNmIzOC00ZWNiLWI5NmYtMmMyMDc5ZDkxNmFk
LzEvUWxZUHdjOXJsMFpuTjhNQ2NTUDZFZ3NaVk5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGb0QbdBN
fop5FraAizjDyKwgpGrvWweNB0p3c+28mAbN+SDJ/0ms+iuIN2bZhmeRLRdjlpzm
GX60Bfkub2wEN4WK8i1r/LKZu1zXg/Jx1RbWXF4+sHNB7a+fnU4epe8FEYoMtuBz
pyjOtlO6M8UUvBMHOS5+YvQsgWsyagPWfAHhNNVZA9MLyhw+yME21MUaNFOdX8oK
r3wqk88apeeRjmibKhRybA3F1A01R38l7TNL5px4ybe9WHgiSbm9tjoUbbNFRdgC
auEJ/XFE45sbmbozheuIf1DCzDGeN7chQxzeo74xn14jHpaTMaxz76ce0cHpwKWl
8eMFmYAi0gfsWw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:35 2025 by rpki-client