Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
File: nqFCUiVBDJMhHQh1j82vD3qhzKo.mft (raw, json)
Hash identifier: hO7VXCLTlMB49aVYjpUdkkFLvDjM50aKmeC2Z5JZ/8g=
Subject key identifier: C0:DE:1F:7F:01:41:87:D8:AA:15:EF:02:F3:E1:2C:B9:8C:EC:E7:FF
Authority key identifier: 9E:A1:42:52:25:41:0C:93:21:1D:08:75:8F:CD:AF:0F:7A:A1:CC:AA
Certificate issuer: /CN=9ea1425225410c93211d08758fcdaf0f7aa1ccaa
Certificate serial: 019A73A7908E868FA51215EC3FE16095FE2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
Manifest number: 1096
Signing time: Tue 11 Nov 2025 16:02:32 +0000
Manifest this update: Tue 11 Nov 2025 16:02:32 +0000
Manifest next update: Wed 12 Nov 2025 16:02:32 +0000
Files and hashes: 1: Cy35oxIBw3su2liG61xuPEUmvjI.roa (hash: 2IrXlMCQpECjm4Y6ZOTZrh47ViIm4Ji7SwFI+6InbKc=)
2: nqFCUiVBDJMhHQh1j82vD3qhzKo.crl (hash: FcUDJBxUnnWfpdK2qXPKPD1F0Stj4dhDsJVK/EpDCg4=)
3: sUbGHvxaPc1G1E3lSBfIJzcROEU.roa (hash: 5uZ2a8tZ0H9NijCrdgd56gsgVSZf0YOuYCFhbDVjRg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a7:90:8e:86:8f:a5:12:15:ec:3f:e1:60:95:fe:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ea1425225410c93211d08758fcdaf0f7aa1ccaa
Validity
Not Before: Nov 11 16:02:32 2025 GMT
Not After : Nov 12 16:02:32 2025 GMT
Subject: CN=c0de1f7f014187d8aa15ef02f3e12cb98cece7ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9d:34:57:9d:fb:48:76:dc:20:68:fc:52:73:
24:03:56:e6:3b:b8:4c:5d:1f:ef:7b:d6:72:a5:5c:
2b:62:5b:ed:c7:db:8b:9c:25:ee:55:e6:2d:31:97:
a4:93:83:c2:08:99:d6:21:06:eb:b6:e3:6e:30:2b:
c6:f3:1f:f4:77:8a:e0:bf:95:4d:f4:7b:1f:7c:db:
71:80:b9:d5:63:78:88:9a:b9:e6:16:8a:75:49:a4:
8b:87:45:e0:b2:dc:bb:15:af:86:6f:01:20:62:77:
d0:26:b8:37:d3:c0:3c:d5:2b:fb:62:7d:88:c1:35:
8c:fc:06:37:a6:fd:13:0a:8b:19:1f:b3:50:7b:d4:
85:6d:67:b5:39:8f:25:ce:1b:71:75:06:3e:90:1b:
60:8b:41:5d:b6:b1:3e:b0:e2:1c:b4:de:56:f7:3e:
81:34:f1:18:84:cc:46:11:37:ba:1d:02:2e:56:59:
e3:0b:22:da:6b:dc:f8:38:17:a6:66:f7:c7:c3:68:
0f:06:6c:1c:67:ba:2f:ec:8e:81:f3:a7:92:29:e0:
e4:49:7d:87:f9:b4:aa:63:81:8e:ae:5f:19:d3:f3:
73:18:5c:0f:73:f0:ef:01:44:dd:d8:68:4a:64:ca:
73:7b:83:a8:69:26:4a:7f:fe:78:03:06:7e:cf:1e:
43:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:DE:1F:7F:01:41:87:D8:AA:15:EF:02:F3:E1:2C:B9:8C:EC:E7:FF
X509v3 Authority Key Identifier:
keyid:9E:A1:42:52:25:41:0C:93:21:1D:08:75:8F:CD:AF:0F:7A:A1:CC:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:b2:cf:c6:97:3f:bb:43:79:6a:5e:c9:43:18:52:88:54:cb:
d4:15:46:3a:0a:b5:08:3b:a8:3f:14:de:60:f7:42:3a:9f:c3:
ca:28:63:82:c8:89:cd:30:f4:09:46:04:96:7a:63:db:a5:24:
0c:67:a9:53:b8:9d:e4:54:8b:29:b3:70:b7:1e:d5:aa:db:7f:
46:17:8f:c7:99:1c:ea:e2:eb:73:de:9f:d8:fd:85:73:a6:96:
9c:82:87:2c:7c:1b:2b:96:fa:9f:c5:c8:7a:2b:1e:c4:e9:71:
8f:61:22:93:84:8d:4a:77:b0:8a:e3:14:74:22:19:2e:94:be:
cc:67:6c:81:55:36:cd:bc:eb:95:7f:75:eb:c8:f6:3b:e1:e9:
8a:b7:45:83:63:bd:c8:aa:cf:8d:62:58:49:1e:81:5b:ed:34:
39:fc:1d:9f:ec:84:aa:ef:13:9a:8d:aa:d4:42:83:45:2e:6e:
a0:d1:c5:67:58:90:7a:d5:b5:c8:cd:73:f5:b1:4c:91:b1:e6:
9b:53:5e:df:f0:46:d1:17:02:5b:20:d5:2c:32:aa:be:2d:05:
d7:9b:12:00:00:56:41:65:87:77:ed:4f:2c:c3:df:a0:07:e0:
f0:b8:66:a5:56:20:04:09:4e:24:08:ef:6d:27:0b:ea:61:f4:
a5:5d:2e:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzp5COho+lEhXsP+Fglf4vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllYTE0MjUyMjU0MTBjOTMyMTFkMDg3NThmY2RhZjBmN2Fh
MWNjYWEwHhcNMjUxMTExMTYwMjMyWhcNMjUxMTEyMTYwMjMyWjAzMTEwLwYDVQQD
EyhjMGRlMWY3ZjAxNDE4N2Q4YWExNWVmMDJmM2UxMmNiOThjZWNlN2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJ00V537SHbcIGj8UnMkA1bmO7hM
XR/ve9ZypVwrYlvtx9uLnCXuVeYtMZekk4PCCJnWIQbrtuNuMCvG8x/0d4rgv5VN
9HsffNtxgLnVY3iImrnmFop1SaSLh0Xgsty7Fa+GbwEgYnfQJrg308A81Sv7Yn2I
wTWM/AY3pv0TCosZH7NQe9SFbWe1OY8lzhtxdQY+kBtgi0FdtrE+sOIctN5W9z6B
NPEYhMxGETe6HQIuVlnjCyLaa9z4OBemZvfHw2gPBmwcZ7ov7I6B86eSKeDkSX2H
+bSqY4GOrl8Z0/NzGFwPc/DvAUTd2GhKZMpze4OoaSZKf/54AwZ+zx5D5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMDeH38BQYfYqhXvAvPhLLmM7Of/MB8GA1UdIwQY
MBaAFJ6hQlIlQQyTIR0IdY/Nrw96ocyqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnFGQ1VpVkJESk1oSFFoMWo4MnZEM3FoektvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9hM2U0NmYtN2U1YS00NjYzLWJkNjMt
ZGMwOTY2NjY5NjA5LzEvbnFGQ1VpVkJESk1oSFFoMWo4MnZEM3FoektvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9hM2U0NmYtN2U1YS00NjYzLWJkNjMtZGMwOTY2NjY5NjA5
LzEvbnFGQ1VpVkJESk1oSFFoMWo4MnZEM3FoektvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG7LPxpc/
u0N5al7JQxhSiFTL1BVGOgq1CDuoPxTeYPdCOp/DyihjgsiJzTD0CUYElnpj26Uk
DGepU7id5FSLKbNwtx7Vqtt/RhePx5kc6uLrc96f2P2Fc6aWnIKHLHwbK5b6n8XI
eisexOlxj2Eik4SNSnewiuMUdCIZLpS+zGdsgVU2zbzrlX9168j2O+HpirdFg2O9
yKrPjWJYSR6BW+00Ofwdn+yEqu8Tmo2q1EKDRS5uoNHFZ1iQetW1yM1z9bFMkbHm
m1Ne3/BG0RcCWyDVLDKqvi0F15sSAABWQWWHd+1PLMPfoAfg8LhmpVYgBAlOJAjv
bScL6mH0pV0uVw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 17:44:22 2025 by rpki-client