Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
File: qnNO9a4hwOiX-hhkRxhOya1K4p0.mft (raw, json)
Hash identifier: tIas9zX+EqFxHZGy3DxAGA4I3SfZrqlDHWh8NnPwdBY=
Subject key identifier: 59:1A:B0:D9:9A:85:83:D1:85:38:D1:E9:35:4D:A4:05:E5:A0:29:A0
Authority key identifier: AA:73:4E:F5:AE:21:C0:E8:97:FA:18:64:47:18:4E:C9:AD:4A:E2:9D
Certificate issuer: /CN=aa734ef5ae21c0e897fa186447184ec9ad4ae29d
Certificate serial: 019A209BDF6CEC5281FCAEDEE866188B80C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
Manifest number: 08A7
Signing time: Sun 26 Oct 2025 13:01:17 +0000
Manifest this update: Sun 26 Oct 2025 13:01:17 +0000
Manifest next update: Mon 27 Oct 2025 13:01:17 +0000
Files and hashes: 1: Ot7K37c41MVu-6Ir2VOkUuixgHw.roa (hash: 7Ylv6CILYrMD9u/uD4SkYHlbdsDQ05xlERBBPqPUVnQ=)
2: ga4DK68qwsMkTd-ni1B6iXRQTdQ.roa (hash: H3sXkj62Xj83aypXZVaDV2Gzb10/TmB5L1/CDA3jxj0=)
3: qnNO9a4hwOiX-hhkRxhOya1K4p0.crl (hash: phQyvF+Pb8UGr5hjgO6vUccR9kEM0P6y6c4thapn8DM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:9b:df:6c:ec:52:81:fc:ae:de:e8:66:18:8b:80:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa734ef5ae21c0e897fa186447184ec9ad4ae29d
Validity
Not Before: Oct 26 13:01:17 2025 GMT
Not After : Oct 27 13:01:17 2025 GMT
Subject: CN=591ab0d99a8583d18538d1e9354da405e5a029a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ea:98:d7:76:d5:4f:41:c4:b5:f3:c6:8e:a2:
00:32:a3:68:a4:12:38:21:7e:16:71:9d:17:88:4c:
ea:b6:02:15:4f:c5:37:af:e1:5b:f4:44:fd:8d:5c:
24:11:45:70:2c:51:b1:35:fa:09:a6:c8:c2:84:73:
d7:37:5a:e8:97:b9:05:ca:d9:25:7e:a3:53:07:ad:
c4:62:28:21:2a:15:f0:88:6f:82:8b:dc:b2:cb:4c:
87:0e:fb:26:c7:66:90:3b:98:bd:5c:63:97:f9:fa:
7b:a1:b5:70:ed:19:27:22:8c:59:ec:56:d7:c0:87:
03:6d:df:3e:e5:81:19:94:97:ec:79:46:8a:38:e3:
5c:b3:e8:bd:8f:04:f7:b0:a0:3b:8f:94:64:91:38:
4f:9e:b5:aa:78:98:9a:36:c0:7a:08:05:45:3e:13:
7a:e3:17:c3:0c:17:8d:df:b2:88:0a:38:49:df:35:
c3:89:98:03:94:7e:b3:22:20:ed:3a:ae:5e:b8:b9:
4c:91:e8:b1:99:8b:ce:ff:7a:f7:5f:29:9c:2e:e5:
49:c7:95:99:3a:58:c3:8d:1e:b9:73:50:9f:66:12:
e7:35:82:e8:eb:7d:46:78:6a:73:1e:7a:fe:7c:b3:
a5:c5:1d:3a:46:c1:7d:d7:02:f0:ec:4a:44:56:66:
b6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:1A:B0:D9:9A:85:83:D1:85:38:D1:E9:35:4D:A4:05:E5:A0:29:A0
X509v3 Authority Key Identifier:
keyid:AA:73:4E:F5:AE:21:C0:E8:97:FA:18:64:47:18:4E:C9:AD:4A:E2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:b7:59:99:1a:2f:e7:23:37:e6:a6:32:5e:b2:2a:4f:44:45:
cd:8b:40:68:ad:4b:4c:60:ef:d9:77:ec:1a:ff:ca:f7:27:b9:
9a:75:86:ff:37:e2:e4:d0:e7:51:ec:d0:d4:2e:32:42:f9:c7:
68:ce:16:ca:93:03:fe:0d:2c:07:59:83:5c:40:e6:2d:40:42:
0b:8f:5c:d0:c0:f3:bb:b2:88:ca:66:66:8d:73:04:1d:e9:34:
e6:0a:8f:56:8b:38:80:fc:b5:19:1e:c3:61:38:53:bc:52:18:
55:02:5a:90:5e:af:3c:20:da:dc:6d:65:e9:15:a7:10:ee:4d:
39:d4:1e:5e:6a:ab:f8:8c:84:f1:7b:c9:00:da:7c:c2:02:ab:
17:15:55:e4:99:30:87:32:c1:92:a8:36:23:cc:19:d1:13:8a:
c5:d4:ce:9c:c3:21:fd:c3:2d:d6:77:d2:b0:f5:15:01:43:e1:
3d:01:12:6f:f7:dd:2d:74:94:1c:80:25:2c:94:2a:73:e3:3f:
0f:3a:57:26:97:c9:4e:5e:77:e6:19:97:a0:33:4f:54:a7:d2:
76:1d:5d:0a:b8:1d:09:fc:81:91:cf:94:f9:be:3f:2e:b4:f6:
9e:0b:a2:94:83:ee:17:79:17:94:91:e8:15:19:14:7b:de:99:
9b:7d:0d:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZogm99s7FKB/K7e6GYYi4DGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNzM0ZWY1YWUyMWMwZTg5N2ZhMTg2NDQ3MTg0ZWM5YWQ0
YWUyOWQwHhcNMjUxMDI2MTMwMTE3WhcNMjUxMDI3MTMwMTE3WjAzMTEwLwYDVQQD
Eyg1OTFhYjBkOTlhODU4M2QxODUzOGQxZTkzNTRkYTQwNWU1YTAyOWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeqY13bVT0HEtfPGjqIAMqNopBI4
IX4WcZ0XiEzqtgIVT8U3r+Fb9ET9jVwkEUVwLFGxNfoJpsjChHPXN1rol7kFytkl
fqNTB63EYighKhXwiG+Ci9yyy0yHDvsmx2aQO5i9XGOX+fp7obVw7RknIoxZ7FbX
wIcDbd8+5YEZlJfseUaKOONcs+i9jwT3sKA7j5RkkThPnrWqeJiaNsB6CAVFPhN6
4xfDDBeN37KICjhJ3zXDiZgDlH6zIiDtOq5euLlMkeixmYvO/3r3XymcLuVJx5WZ
OljDjR65c1CfZhLnNYLo631GeGpzHnr+fLOlxR06RsF91wLw7EpEVma2owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFkasNmahYPRhTjR6TVNpAXloCmgMB8GA1UdIwQY
MBaAFKpzTvWuIcDol/oYZEcYTsmtSuKdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW5OTzlhNGh3T2lYLWhoa1J4aE95YTFLNHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS83NDgxMTEtMGUxMC00NzkyLTliMWIt
ZGE3ODBjZmI5OWE0LzEvcW5OTzlhNGh3T2lYLWhoa1J4aE95YTFLNHAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS83NDgxMTEtMGUxMC00NzkyLTliMWItZGE3ODBjZmI5OWE0
LzEvcW5OTzlhNGh3T2lYLWhoa1J4aE95YTFLNHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASLdZmRov
5yM35qYyXrIqT0RFzYtAaK1LTGDv2XfsGv/K9ye5mnWG/zfi5NDnUezQ1C4yQvnH
aM4WypMD/g0sB1mDXEDmLUBCC49c0MDzu7KIymZmjXMEHek05gqPVos4gPy1GR7D
YThTvFIYVQJakF6vPCDa3G1l6RWnEO5NOdQeXmqr+IyE8XvJANp8wgKrFxVV5Jkw
hzLBkqg2I8wZ0ROKxdTOnMMh/cMt1nfSsPUVAUPhPQESb/fdLXSUHIAlLJQqc+M/
DzpXJpfJTl535hmXoDNPVKfSdh1dCrgdCfyBkc+U+b4/LrT2nguilIPuF3kXlJHo
FRkUe96Zm30NeA==
-----END CERTIFICATE-----
Generated at Sun Oct 26 20:05:44 2025 by rpki-client