Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
File: qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft (raw, json)
Hash identifier: ARe7JaEQ6JTBRL3IxlEXrtc9IDrMsDWWN+r70upW5JI=
Subject key identifier: 91:BB:FC:42:A5:EC:79:41:27:F9:BD:45:94:D0:59:9F:5C:00:53:7C
Authority key identifier: A9:8E:EB:ED:97:53:F5:80:BE:A7:5B:35:2E:70:63:25:A1:8D:14:47
Certificate issuer: /CN=a98eebed9753f580bea75b352e706325a18d1447
Certificate serial: 019A2A433173FFA806E6E3C75C9D08110F32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
Manifest number: 16FA
Signing time: Tue 28 Oct 2025 10:00:37 +0000
Manifest this update: Tue 28 Oct 2025 10:00:37 +0000
Manifest next update: Wed 29 Oct 2025 10:00:37 +0000
Files and hashes: 1: 1-W8soB7j9APk25v0dLdeJYYGd64.roa (hash: XIj90J/o3h0TEBJj2DW5RTPwW3YKa0Pa3O9Mz8MU5Ho=)
2: qY7r7ZdT9YC-p1s1LnBjJaGNFEc.crl (hash: y/p6dkQf441DEaJNZ3SKHslUtedjGFny8w+Py4M2Naw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:43:31:73:ff:a8:06:e6:e3:c7:5c:9d:08:11:0f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a98eebed9753f580bea75b352e706325a18d1447
Validity
Not Before: Oct 28 10:00:37 2025 GMT
Not After : Oct 29 10:00:37 2025 GMT
Subject: CN=91bbfc42a5ec794127f9bd4594d0599f5c00537c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:85:36:d2:59:f2:9f:66:3e:a7:3d:0f:5a:e0:
4f:40:eb:b2:78:7c:25:45:98:45:f7:8d:a0:26:3c:
98:18:05:2d:a2:f6:d8:67:c0:7e:c9:22:17:4d:55:
ab:57:3c:2f:d5:83:eb:5d:7b:f8:f6:da:76:8b:1a:
1c:3f:eb:c9:89:3f:b1:87:dd:36:ce:9f:b8:3a:36:
f5:35:e0:fa:0b:a9:76:8a:bb:39:60:7f:2c:54:0d:
93:17:20:cf:34:35:17:db:4d:48:09:c0:4c:35:26:
0f:43:1a:a6:4e:f9:96:ac:51:32:c5:00:22:a4:e0:
1f:5c:db:e5:98:7f:32:f4:4d:01:d7:e6:bb:2b:f0:
7c:4d:f4:b4:b2:71:47:6a:e3:48:ad:db:f4:dc:8b:
a1:7b:22:ab:52:58:8a:e6:41:ba:08:a7:eb:c0:e1:
c1:5d:8b:ba:40:49:f3:28:fa:70:4c:1d:45:20:0f:
c0:f0:46:0c:ca:46:b6:65:34:73:2d:fd:9e:f2:da:
80:7b:0d:a0:d3:39:da:ec:c4:a1:47:ab:f8:ed:ba:
65:c1:36:09:20:b8:b3:ef:f7:09:aa:40:bd:11:24:
20:ca:a0:97:86:34:1d:9a:c5:32:c7:68:90:91:6d:
bc:59:e3:6b:0a:e2:40:23:c2:64:23:41:26:37:46:
d6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:BB:FC:42:A5:EC:79:41:27:F9:BD:45:94:D0:59:9F:5C:00:53:7C
X509v3 Authority Key Identifier:
keyid:A9:8E:EB:ED:97:53:F5:80:BE:A7:5B:35:2E:70:63:25:A1:8D:14:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ba:68:2f:81:d7:87:da:a9:cf:40:7b:8b:d9:fb:f4:77:6e:
e1:58:b7:4d:84:25:a0:07:33:47:e4:d9:b1:d5:51:93:0b:e0:
af:42:47:b7:fa:2c:5b:71:6f:8f:ad:df:72:37:40:f3:88:55:
46:84:d4:f7:b6:1c:03:9e:e2:b8:49:17:f9:4d:d1:2c:b2:09:
e6:18:8d:4a:d2:0b:16:92:4a:88:fb:07:33:7a:30:79:fa:7b:
61:97:5d:a9:37:f3:07:59:dc:1d:ac:3b:50:ae:48:e2:b1:1c:
19:36:8f:be:c2:0c:83:b2:37:4e:91:e2:84:ec:e2:1d:32:3e:
a6:22:24:44:de:0c:35:23:9a:51:b1:51:25:c4:39:4f:2b:98:
76:f7:0c:7d:59:32:00:ed:8e:45:69:b4:b2:69:2e:56:6a:a9:
89:5a:7b:cb:52:be:58:c4:10:bd:14:92:4d:a1:a9:be:4b:6e:
da:e3:5a:12:55:26:c0:e0:99:05:98:99:1e:2e:26:8a:0a:b6:
1e:c9:bc:fd:4b:36:50:f7:13:73:c1:85:91:2e:86:0b:95:57:
00:5d:ab:3b:67:7b:85:be:d4:47:b7:46:20:ff:e6:c5:75:ef:
88:49:ca:a8:8c:c1:65:ac:42:de:fa:10:5a:6d:d5:83:af:a5:
b8:d5:4b:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoqQzFz/6gG5uPHXJ0IEQ8yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5OGVlYmVkOTc1M2Y1ODBiZWE3NWIzNTJlNzA2MzI1YTE4
ZDE0NDcwHhcNMjUxMDI4MTAwMDM3WhcNMjUxMDI5MTAwMDM3WjAzMTEwLwYDVQQD
Eyg5MWJiZmM0MmE1ZWM3OTQxMjdmOWJkNDU5NGQwNTk5ZjVjMDA1MzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4U20lnyn2Y+pz0PWuBPQOuyeHwl
RZhF942gJjyYGAUtovbYZ8B+ySIXTVWrVzwv1YPrXXv49tp2ixocP+vJiT+xh902
zp+4Ojb1NeD6C6l2irs5YH8sVA2TFyDPNDUX201ICcBMNSYPQxqmTvmWrFEyxQAi
pOAfXNvlmH8y9E0B1+a7K/B8TfS0snFHauNIrdv03IuheyKrUliK5kG6CKfrwOHB
XYu6QEnzKPpwTB1FIA/A8EYMyka2ZTRzLf2e8tqAew2g0zna7MShR6v47bplwTYJ
ILiz7/cJqkC9ESQgyqCXhjQdmsUyx2iQkW28WeNrCuJAI8JkI0EmN0bWWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJG7/EKl7HlBJ/m9RZTQWZ9cAFN8MB8GA1UdIwQY
MBaAFKmO6+2XU/WAvqdbNS5wYyWhjRRHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVk3cjdaZFQ5WUMtcDFzMUxuQmpKYUdORkVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9hNzQ3NDQtZWQ0OC00NzA3LWE2M2Ut
NTJmNjkxOTEzOWM0LzEvcVk3cjdaZFQ5WUMtcDFzMUxuQmpKYUdORkVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9hNzQ3NDQtZWQ0OC00NzA3LWE2M2UtNTJmNjkxOTEzOWM0
LzEvcVk3cjdaZFQ5WUMtcDFzMUxuQmpKYUdORkVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXLpoL4HX
h9qpz0B7i9n79Hdu4Vi3TYQloAczR+TZsdVRkwvgr0JHt/osW3Fvj63fcjdA84hV
RoTU97YcA57iuEkX+U3RLLIJ5hiNStILFpJKiPsHM3owefp7YZddqTfzB1ncHaw7
UK5I4rEcGTaPvsIMg7I3TpHihOziHTI+piIkRN4MNSOaUbFRJcQ5TyuYdvcMfVky
AO2ORWm0smkuVmqpiVp7y1K+WMQQvRSSTaGpvktu2uNaElUmwOCZBZiZHi4migq2
Hsm8/Us2UPcTc8GFkS6GC5VXAF2rO2d7hb7UR7dGIP/mxXXviEnKqIzBZaxC3voQ
Wm3Vg6+luNVLUQ==
-----END CERTIFICATE-----
Generated at Tue Oct 28 12:32:00 2025 by rpki-client