Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft
File: QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft (raw, json)
Hash identifier: 85Zyrl468napdSwL6H20+tN3rjtGhWLihfRjNgbDzqM=
Subject key identifier: 99:3F:62:AC:AA:F4:C5:FB:91:9C:05:8A:F7:99:5E:2A:9F:7B:32:C1
Authority key identifier: 40:51:8E:CB:D6:46:4D:78:AD:45:15:51:64:8F:92:06:F7:FB:5F:42
Certificate issuer: /CN=40518ecbd6464d78ad451551648f9206f7fb5f42
Certificate serial: 019936130AFCBC9F118103BC6D62A3078337
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QFGOy9ZGTXitRRVRZI-SBvf7X0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft
Manifest number: 0394
Signing time: Thu 11 Sep 2025 00:00:41 +0000
Manifest this update: Thu 11 Sep 2025 00:00:41 +0000
Manifest next update: Fri 12 Sep 2025 00:00:41 +0000
Files and hashes: 1: 7fqM8GCj-eNanfhBlPQ1PMMaPkQ.roa (hash: cyPdhHEtqG0jKqnla9COVxpAyirC8qiWW4mGGbTTw34=)
2: QFGOy9ZGTXitRRVRZI-SBvf7X0I.crl (hash: gojRgldjg5h+NNrbnwztwzgE4m4tdrbrUSB9INpyd9o=)
3: WRsKHbHpQ9jZIvciUb2Wz6AHSW4.roa (hash: 8Nnxx5No66UiBNPIjWPMS0jddJkyISjgfdGXoNS0d/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/QFGOy9ZGTXitRRVRZI-SBvf7X0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:13:0a:fc:bc:9f:11:81:03:bc:6d:62:a3:07:83:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40518ecbd6464d78ad451551648f9206f7fb5f42
Validity
Not Before: Sep 11 00:00:41 2025 GMT
Not After : Sep 12 00:00:41 2025 GMT
Subject: CN=993f62acaaf4c5fb919c058af7995e2a9f7b32c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1c:2c:08:e2:97:b7:36:07:1c:50:76:65:40:
21:db:d9:c9:ac:f9:ca:8a:b8:a9:2a:a7:ff:3f:9f:
dd:06:b2:6d:3b:d9:34:1f:ff:06:52:16:4e:83:d0:
31:d3:04:d2:7e:92:93:4b:4e:7e:a4:3c:e4:15:6b:
de:75:d4:9e:04:7e:0f:46:8b:69:0e:c2:85:0e:f5:
35:7b:5e:40:7d:8b:3f:bb:45:eb:fb:55:29:ab:97:
0d:19:77:f0:77:38:a5:9b:fc:fe:72:45:d9:18:b2:
a7:34:fc:54:7a:b5:66:6a:a2:60:b9:60:a0:8a:21:
22:c5:14:a5:6f:90:cf:22:78:e0:31:a1:f4:87:cb:
c4:3a:ba:60:c9:64:b0:c1:10:99:3b:84:30:92:a4:
d4:b1:9f:43:e6:c2:58:13:7c:57:12:26:67:9a:f3:
bf:d3:b1:c4:aa:48:77:03:d0:a3:89:27:7e:4b:7e:
1b:9e:6d:a7:11:78:e5:61:2c:69:67:61:e9:f9:63:
13:69:43:9e:43:86:c7:00:dd:5a:64:bb:b4:4e:94:
80:89:79:8f:74:24:43:1c:82:d3:38:f7:d6:f6:a9:
69:d6:7e:e8:76:4a:e1:ef:b5:b2:e7:37:94:5c:a7:
c4:f8:92:1f:fc:fb:e1:b2:1a:b3:b3:9d:05:ce:cc:
8a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:3F:62:AC:AA:F4:C5:FB:91:9C:05:8A:F7:99:5E:2A:9F:7B:32:C1
X509v3 Authority Key Identifier:
keyid:40:51:8E:CB:D6:46:4D:78:AD:45:15:51:64:8F:92:06:F7:FB:5F:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QFGOy9ZGTXitRRVRZI-SBvf7X0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:23:14:43:85:1a:ba:11:53:87:67:e4:51:a8:da:bf:f4:6c:
4b:57:67:9f:d0:f0:04:b5:f0:43:2d:e7:70:bd:a3:5c:73:f7:
b4:82:79:12:cf:ae:24:81:d4:bc:9a:9d:82:2e:d6:29:b7:bf:
73:64:eb:24:d1:db:1d:79:07:a3:13:87:aa:fc:91:c2:eb:7c:
7e:2a:d7:6d:3d:06:9b:bd:4c:c4:fa:32:aa:5d:8f:f6:55:5b:
65:61:1b:34:c5:79:40:45:bb:4d:db:d5:b8:1c:c3:1e:49:0c:
16:69:74:e2:69:b7:3e:c7:6f:64:0a:f1:bb:b3:01:b5:97:0d:
61:93:71:a4:b4:67:53:16:d3:01:0a:70:3e:51:6a:f8:90:8d:
89:28:8c:b9:cb:35:42:30:53:b1:5e:2e:ff:f9:6b:cd:c4:8e:
a4:91:e3:a4:d6:ac:2e:c3:a4:a6:04:95:84:e7:cc:71:75:ef:
15:6d:d7:c1:2a:30:fa:3a:43:34:ca:65:ee:29:83:97:b6:e7:
d5:52:fa:2a:7b:a0:96:6e:28:35:75:bf:d2:53:af:92:a3:f3:
7d:84:48:05:38:b6:be:2a:bc:53:7b:d0:eb:1d:a4:b0:d1:a9:
4c:b8:9c:3a:7c:60:b0:17:ac:ea:98:65:9b:72:0c:eb:20:80:
e8:4f:e9:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk2Ewr8vJ8RgQO8bWKjB4M3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwNTE4ZWNiZDY0NjRkNzhhZDQ1MTU1MTY0OGY5MjA2Zjdm
YjVmNDIwHhcNMjUwOTExMDAwMDQxWhcNMjUwOTEyMDAwMDQxWjAzMTEwLwYDVQQD
Eyg5OTNmNjJhY2FhZjRjNWZiOTE5YzA1OGFmNzk5NWUyYTlmN2IzMmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBwsCOKXtzYHHFB2ZUAh29nJrPnK
iripKqf/P5/dBrJtO9k0H/8GUhZOg9Ax0wTSfpKTS05+pDzkFWveddSeBH4PRotp
DsKFDvU1e15AfYs/u0Xr+1Upq5cNGXfwdzilm/z+ckXZGLKnNPxUerVmaqJguWCg
iiEixRSlb5DPInjgMaH0h8vEOrpgyWSwwRCZO4QwkqTUsZ9D5sJYE3xXEiZnmvO/
07HEqkh3A9CjiSd+S34bnm2nEXjlYSxpZ2Hp+WMTaUOeQ4bHAN1aZLu0TpSAiXmP
dCRDHILTOPfW9qlp1n7odkrh77Wy5zeUXKfE+JIf/Pvhshqzs50FzsyKWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJk/Yqyq9MX7kZwFiveZXiqfezLBMB8GA1UdIwQY
MBaAFEBRjsvWRk14rUUVUWSPkgb3+19CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUZHT3k5WkdUWGl0UlJWUlpJLVNCdmY3WDBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni80MzcxNTAtNzgzYy00MzFhLWIzZmQt
N2MzZDc5NDAxZWMyLzEvUUZHT3k5WkdUWGl0UlJWUlpJLVNCdmY3WDBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni80MzcxNTAtNzgzYy00MzFhLWIzZmQtN2MzZDc5NDAxZWMy
LzEvUUZHT3k5WkdUWGl0UlJWUlpJLVNCdmY3WDBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgCMUQ4Ua
uhFTh2fkUajav/RsS1dnn9DwBLXwQy3ncL2jXHP3tIJ5Es+uJIHUvJqdgi7WKbe/
c2TrJNHbHXkHoxOHqvyRwut8firXbT0Gm71MxPoyql2P9lVbZWEbNMV5QEW7TdvV
uBzDHkkMFml04mm3PsdvZArxu7MBtZcNYZNxpLRnUxbTAQpwPlFq+JCNiSiMucs1
QjBTsV4u//lrzcSOpJHjpNasLsOkpgSVhOfMcXXvFW3XwSow+jpDNMpl7imDl7bn
1VL6Knuglm4oNXW/0lOvkqPzfYRIBTi2viq8U3vQ6x2ksNGpTLicOnxgsBes6phl
m3IM6yCA6E/pcQ==
-----END CERTIFICATE-----
Generated at Thu Sep 11 01:20:06 2025 by rpki-client