Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
File: qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft (raw, json)
Hash identifier: XH/9mzUyfCL9dbSc4OMGyMd7tJ2EM3qSfc4rogbz6w4=
Subject key identifier: FD:BF:F8:8A:7B:86:1E:6D:17:43:71:53:99:F2:4E:CE:39:B4:32:A2
Authority key identifier: A9:8E:59:43:C3:55:D4:8C:00:4E:6B:F4:A3:B6:CD:B8:C3:0A:DC:4C
Certificate issuer: /CN=a98e5943c355d48c004e6bf4a3b6cdb8c30adc4c
Certificate serial: 019A21AE043455BC693CC8847BBC6F0D0317
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
Manifest number: 16F6
Signing time: Sun 26 Oct 2025 18:00:43 +0000
Manifest this update: Sun 26 Oct 2025 18:00:43 +0000
Manifest next update: Mon 27 Oct 2025 18:00:43 +0000
Files and hashes: 1: KE4XnKQhqPguqlRYcxIoqo981UE.roa (hash: az71zExo8C/1i/65qlceZGsCGShh0tDnt7kF10fzzW0=)
2: qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.crl (hash: Q5FuWk6qG97KzRQlemvimxgAP1tS1zCK7HbTYTcQnTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 18:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:ae:04:34:55:bc:69:3c:c8:84:7b:bc:6f:0d:03:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a98e5943c355d48c004e6bf4a3b6cdb8c30adc4c
Validity
Not Before: Oct 26 18:00:43 2025 GMT
Not After : Oct 27 18:00:43 2025 GMT
Subject: CN=fdbff88a7b861e6d1743715399f24ece39b432a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e2:49:1b:78:d0:16:79:8e:b3:ae:ec:cd:aa:
4f:8d:04:9c:7d:3f:29:30:8a:b6:eb:65:9a:68:94:
20:02:c7:79:59:f2:b7:11:21:af:0b:b3:6f:e2:2f:
3b:54:b0:13:f2:78:4b:3c:4c:82:3a:b0:d1:ba:3e:
13:35:e7:73:b6:af:26:29:e0:95:a7:b8:af:8a:bc:
0b:6d:3b:48:24:d6:40:6c:45:3e:31:77:1c:f7:44:
d8:54:4a:d1:14:5c:62:e3:bf:59:66:14:34:26:db:
14:7e:cf:76:d7:ff:3f:1e:7b:be:01:2e:d9:6f:45:
f3:fa:69:04:03:3e:8c:f3:e5:09:d4:70:1e:86:a9:
9a:2f:52:01:34:7b:1f:f6:f6:ba:a3:3d:cb:1a:e1:
25:6a:3e:4f:1a:84:33:14:c5:56:81:95:b1:48:7d:
75:16:5c:5f:b1:e2:cd:a9:e1:80:d8:1c:dc:e1:7b:
76:df:6b:6b:10:42:64:a4:d8:1d:d1:ae:1b:fe:fd:
13:0b:49:43:00:b8:7b:c3:56:d3:02:f3:0d:54:23:
6f:dc:28:8b:37:3f:8e:5d:33:67:65:60:8c:28:4a:
24:de:f1:71:f4:55:c4:8a:6c:eb:2c:09:a1:ac:b3:
4e:f7:26:5b:34:ff:31:22:70:7b:71:10:e7:4f:2b:
bf:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:BF:F8:8A:7B:86:1E:6D:17:43:71:53:99:F2:4E:CE:39:B4:32:A2
X509v3 Authority Key Identifier:
keyid:A9:8E:59:43:C3:55:D4:8C:00:4E:6B:F4:A3:B6:CD:B8:C3:0A:DC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:49:32:e0:41:64:2e:0f:4a:a3:15:60:d3:0a:99:2f:fa:eb:
a2:bf:37:b7:be:7c:73:0b:a6:3a:21:2c:52:4b:ea:11:67:52:
35:fd:a7:f6:58:e0:3f:17:a8:29:b9:2a:50:ff:9c:c4:5b:fe:
fd:b3:c9:11:d2:7d:61:f0:d6:67:4b:fa:c1:14:8a:c1:52:31:
44:7e:3b:87:17:1c:28:d4:3e:a2:5d:29:21:bc:10:dc:2f:89:
5a:15:33:7d:cf:33:46:3e:e2:3b:48:cd:eb:65:af:99:2f:7b:
95:17:a7:1e:20:98:f9:0e:a6:ef:72:fe:f6:3c:db:e8:c1:6e:
a9:3b:b7:93:53:cb:51:77:b8:cc:de:a7:ec:05:39:2c:08:4b:
f6:00:b2:d9:f9:5a:2e:b1:18:22:ae:0a:c1:bf:af:e8:c8:c7:
a9:94:40:ff:00:4b:a8:3f:5c:25:31:bb:62:ba:39:91:02:c2:
51:0c:17:bf:88:cf:13:dc:1b:d4:24:d5:c7:41:e8:f2:c3:fb:
ab:5f:3d:e9:ae:40:ca:e0:8a:40:ba:a2:33:f3:16:a3:6a:f0:
d5:59:3b:55:b8:88:3d:bd:74:da:aa:8f:8c:32:67:cf:05:9f:
d8:54:59:72:1e:dd:0a:24:66:99:5a:4d:ef:19:49:21:ee:82:
c6:ec:ce:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZohrgQ0VbxpPMiEe7xvDQMXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5OGU1OTQzYzM1NWQ0OGMwMDRlNmJmNGEzYjZjZGI4YzMw
YWRjNGMwHhcNMjUxMDI2MTgwMDQzWhcNMjUxMDI3MTgwMDQzWjAzMTEwLwYDVQQD
EyhmZGJmZjg4YTdiODYxZTZkMTc0MzcxNTM5OWYyNGVjZTM5YjQzMmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOJJG3jQFnmOs67szapPjQScfT8p
MIq262WaaJQgAsd5WfK3ESGvC7Nv4i87VLAT8nhLPEyCOrDRuj4TNedztq8mKeCV
p7ivirwLbTtIJNZAbEU+MXcc90TYVErRFFxi479ZZhQ0JtsUfs921/8/Hnu+AS7Z
b0Xz+mkEAz6M8+UJ1HAehqmaL1IBNHsf9va6oz3LGuElaj5PGoQzFMVWgZWxSH11
FlxfseLNqeGA2Bzc4Xt232trEEJkpNgd0a4b/v0TC0lDALh7w1bTAvMNVCNv3CiL
Nz+OXTNnZWCMKEok3vFx9FXEimzrLAmhrLNO9yZbNP8xInB7cRDnTyu/WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP2/+Ip7hh5tF0NxU5nyTs45tDKiMB8GA1UdIwQY
MBaAFKmOWUPDVdSMAE5r9KO2zbjDCtxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVk1WlE4TlYxSXdBVG12MG83Yk51TU1LM0V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9jZDkyY2QtN2ZlMy00MjIzLTgzNTAt
M2M3NzNhNmM0MmY5LzEvcVk1WlE4TlYxSXdBVG12MG83Yk51TU1LM0V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9jZDkyY2QtN2ZlMy00MjIzLTgzNTAtM2M3NzNhNmM0MmY5
LzEvcVk1WlE4TlYxSXdBVG12MG83Yk51TU1LM0V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJkky4EFk
Lg9KoxVg0wqZL/rror83t758cwumOiEsUkvqEWdSNf2n9ljgPxeoKbkqUP+cxFv+
/bPJEdJ9YfDWZ0v6wRSKwVIxRH47hxccKNQ+ol0pIbwQ3C+JWhUzfc8zRj7iO0jN
62WvmS97lRenHiCY+Q6m73L+9jzb6MFuqTu3k1PLUXe4zN6n7AU5LAhL9gCy2fla
LrEYIq4Kwb+v6MjHqZRA/wBLqD9cJTG7Yro5kQLCUQwXv4jPE9wb1CTVx0Ho8sP7
q1896a5AyuCKQLqiM/MWo2rw1Vk7VbiIPb102qqPjDJnzwWf2FRZch7dCiRmmVpN
7xlJIe6CxuzO4g==
-----END CERTIFICATE-----
Generated at Mon Oct 27 01:06:58 2025 by rpki-client