
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/_QsmgyFXCqBCF7NThHwQv3MSVLU.mft
File: _QsmgyFXCqBCF7NThHwQv3MSVLU.mft (raw, json)
Hash identifier: erEE2j9PruPz7uv2+mO9hUYfgqN9GpOBsist+ZAYkcQ=
Subject key identifier: 3E:76:59:99:CE:E2:AD:CE:50:A9:05:56:29:27:E0:EF:A9:A4:F8:A5
Authority key identifier: FD:0B:26:83:21:57:0A:A0:42:17:B3:53:84:7C:10:BF:73:12:54:B5
Certificate issuer: /CN=fd0b268321570aa04217b353847c10bf731254b5
Certificate serial: 019A1F1B07847D485F2C05D608A89BA4F6DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QsmgyFXCqBCF7NThHwQv3MSVLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/_QsmgyFXCqBCF7NThHwQv3MSVLU.mft
Manifest number: 16F5
Signing time: Sun 26 Oct 2025 06:00:56 +0000
Manifest this update: Sun 26 Oct 2025 06:00:56 +0000
Manifest next update: Mon 27 Oct 2025 06:00:56 +0000
Files and hashes: 1: Th8E4wMERzzrtf61mMlHU7T-O1E.roa (hash: fBxF7gzjtDOzJ+1yYpryOgnsRtCjhNj/m+OItkfcoW4=)
2: _QsmgyFXCqBCF7NThHwQv3MSVLU.crl (hash: +Vwu0uWZGstIm4jV/k7Xim2nIIDEzmq5qCiO0bLEG0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/_QsmgyFXCqBCF7NThHwQv3MSVLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/_QsmgyFXCqBCF7NThHwQv3MSVLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_QsmgyFXCqBCF7NThHwQv3MSVLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:1b:07:84:7d:48:5f:2c:05:d6:08:a8:9b:a4:f6:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd0b268321570aa04217b353847c10bf731254b5
Validity
Not Before: Oct 26 06:00:56 2025 GMT
Not After : Oct 27 06:00:56 2025 GMT
Subject: CN=3e765999cee2adce50a905562927e0efa9a4f8a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9f:17:16:fd:dd:07:cd:3c:a0:27:e9:0c:5f:
ef:32:85:d9:ec:1b:ec:ce:6a:e8:39:ee:e5:1a:45:
61:7b:9b:8f:f2:51:89:d7:95:fb:6b:bb:53:a2:4f:
d5:ea:73:d2:ab:1a:09:e8:86:50:97:a6:6e:b9:e5:
32:20:84:1f:d3:c4:0d:78:c8:87:14:6e:62:7a:39:
dd:01:a8:60:16:9f:83:a2:e5:53:c3:a1:1b:82:8a:
1b:68:65:09:78:87:cd:73:ed:1c:3b:4d:f4:44:da:
53:31:b0:c9:32:85:47:6a:c7:eb:14:1b:47:05:af:
30:47:82:c6:5f:35:2f:0f:b2:44:94:02:47:7a:31:
d2:33:f0:9b:60:66:e4:53:f8:88:ac:64:4b:9f:ce:
7f:34:e5:37:42:9e:fa:99:61:2b:14:49:78:5f:cb:
57:3c:78:64:93:3d:5e:7f:52:ad:30:04:01:ed:71:
e7:e7:6b:eb:3c:df:8d:1a:55:5c:c3:4c:d0:52:fb:
90:f6:24:55:70:c1:b1:a7:24:ca:8d:cd:6a:76:68:
ed:9d:1d:a4:b3:b3:d3:c4:23:96:03:a6:8c:d1:92:
31:bf:8f:0e:84:fb:97:04:07:76:45:1c:aa:c8:5f:
65:17:56:4f:5e:18:2e:bf:cd:90:7a:78:0e:e1:d0:
d8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:76:59:99:CE:E2:AD:CE:50:A9:05:56:29:27:E0:EF:A9:A4:F8:A5
X509v3 Authority Key Identifier:
keyid:FD:0B:26:83:21:57:0A:A0:42:17:B3:53:84:7C:10:BF:73:12:54:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QsmgyFXCqBCF7NThHwQv3MSVLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/_QsmgyFXCqBCF7NThHwQv3MSVLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/_QsmgyFXCqBCF7NThHwQv3MSVLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:a7:57:40:d3:a9:fc:51:18:5a:76:ba:12:04:28:53:7d:83:
c5:56:b1:f6:dd:3d:b6:ad:d6:05:04:bd:89:a0:ba:a0:65:ce:
63:89:3d:78:c5:7e:67:16:74:42:f7:d7:06:a7:de:a6:b4:b9:
bd:ff:d1:5f:f8:9e:e3:2c:d3:5d:f3:bd:d1:5a:dc:e5:29:4d:
6f:60:18:1e:57:6c:5f:4a:8d:70:55:58:cc:25:2b:34:33:16:
a1:48:05:04:f3:2e:5b:d9:fb:14:06:c1:b8:68:ef:55:81:14:
b1:f7:d1:64:db:b3:9c:fd:e3:9b:67:89:b8:90:15:ce:14:51:
10:f0:4a:b0:d1:b7:92:73:83:13:1c:f1:12:7d:0b:ad:eb:1d:
5c:24:5a:bb:c9:a8:31:de:8b:31:38:7d:c7:f4:ab:f7:15:a8:
12:4d:b5:39:0e:97:12:67:4d:d4:09:36:5f:0c:88:d7:62:3b:
f5:db:f2:ba:7c:08:df:df:d9:96:ec:91:68:0c:b3:06:de:e3:
5d:ea:6c:d3:bb:26:ad:2b:25:02:4f:0e:65:1f:41:c1:8f:48:
91:d9:ef:a5:3b:fb:13:62:b3:82:bd:5b:41:68:db:86:2a:40:
15:6e:6a:27:d9:8c:97:1e:82:94:8d:1c:e2:98:d8:3c:c7:23:
a6:99:14:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 11:53:19 2025 by rpki-client