Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.mft
File: qAC6Y55l29zGkPWKWnQGQbT_iNQ.mft (raw, json)
Hash identifier: JplEjm0wg9d8rt7TFK6hqRxnDL+XM52xLttsEwLf8c8=
Subject key identifier: 7A:08:D6:58:CF:7C:3C:46:8F:D4:5D:FD:37:7E:89:98:69:AC:F9:84
Authority key identifier: A8:00:BA:63:9E:65:DB:DC:C6:90:F5:8A:5A:74:06:41:B4:FF:88:D4
Certificate issuer: /CN=a800ba639e65dbdcc690f58a5a740641b4ff88d4
Certificate serial: 019A72CA867856543A6B6C8C47EB61E77B54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qAC6Y55l29zGkPWKWnQGQbT_iNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.mft
Manifest number: 16E1
Signing time: Tue 11 Nov 2025 12:01:06 +0000
Manifest this update: Tue 11 Nov 2025 12:01:06 +0000
Manifest next update: Wed 12 Nov 2025 12:01:06 +0000
Files and hashes: 1: nb55NPYG5futkVsWZo-wVL_ldGY.roa (hash: cu4c/kzKRZLMIS781v1I0bcKBcOwOHj6UQu9CoqV18Q=)
2: pNaiOm8VSjwm_Pu9LpbyEzU38Qk.roa (hash: aJUnjDaTqib7CSeeX7ryyzVGByoqlihHOgf+TQ3wW+k=)
3: qAC6Y55l29zGkPWKWnQGQbT_iNQ.crl (hash: Y6MwiXCy9v2BObJgax0JOPn2tDeCP6RVcntOwLfhj1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qAC6Y55l29zGkPWKWnQGQbT_iNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:86:78:56:54:3a:6b:6c:8c:47:eb:61:e7:7b:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a800ba639e65dbdcc690f58a5a740641b4ff88d4
Validity
Not Before: Nov 11 12:01:06 2025 GMT
Not After : Nov 12 12:01:06 2025 GMT
Subject: CN=7a08d658cf7c3c468fd45dfd377e899869acf984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:67:f6:59:8f:3f:91:2e:a4:a7:8d:38:89:77:
bb:59:b8:40:f4:c1:de:65:83:b6:bf:a5:21:6d:75:
f0:a6:e7:fb:cd:cd:ad:60:1b:49:62:7d:6b:ee:7b:
5a:ed:89:d8:aa:c8:88:06:6e:08:0c:70:0e:21:be:
b0:09:9c:51:c4:c2:bd:39:19:7e:9d:95:8f:92:a7:
43:68:b8:a9:48:fe:e8:6a:cc:5e:17:fa:ce:f3:fc:
c5:4b:10:b7:76:d0:28:74:6b:8b:0d:2e:38:30:ef:
7f:e5:70:1b:00:d4:29:c1:2e:63:35:3e:5e:3f:d8:
6b:33:d3:7a:58:d3:50:19:b1:dc:c7:38:9b:a6:f1:
13:0c:07:95:19:61:9c:d5:6d:11:ee:a0:a3:45:09:
e4:0e:1b:83:08:78:4e:85:d0:77:8b:76:66:4a:98:
a2:b0:53:c2:0f:7d:a9:c9:1e:cd:0e:01:62:60:be:
74:70:ef:f7:cf:50:3b:9a:aa:71:b0:be:9a:b8:8c:
28:a3:ed:12:ed:e9:f3:81:9a:dc:41:da:bd:5a:8f:
12:5d:31:2a:7a:27:29:9a:2a:b6:ef:af:f1:82:a5:
c8:94:55:d4:5d:9d:e2:39:61:8d:ef:a9:55:1a:dc:
5f:50:7e:0a:19:47:38:ff:c1:45:22:ce:35:a6:09:
10:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:08:D6:58:CF:7C:3C:46:8F:D4:5D:FD:37:7E:89:98:69:AC:F9:84
X509v3 Authority Key Identifier:
keyid:A8:00:BA:63:9E:65:DB:DC:C6:90:F5:8A:5A:74:06:41:B4:FF:88:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAC6Y55l29zGkPWKWnQGQbT_iNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:8c:d4:bd:2f:13:95:92:6c:e5:df:4b:34:7a:56:71:79:2d:
c1:1a:2b:4c:05:56:eb:6a:d0:7d:2c:e4:5e:e5:de:41:13:38:
18:0f:80:23:c0:9e:09:47:dc:11:98:e0:a3:3c:71:d0:92:0b:
6b:d7:6e:34:ef:88:d3:41:7b:20:44:65:f6:1d:78:e8:10:9b:
46:1d:55:8d:4a:04:69:f7:e3:07:9c:67:c5:98:df:b1:67:7f:
27:c9:83:a6:24:0f:17:c8:12:5d:36:7a:28:b7:7f:75:2e:22:
6a:37:9d:b8:45:0a:44:30:14:30:16:67:8d:f2:8e:ad:52:31:
74:33:2a:33:83:6d:99:7e:52:87:0f:e7:b3:f3:59:b6:03:df:
e3:84:70:fe:62:d5:90:71:ef:c8:a1:58:da:ec:46:19:9e:54:
77:33:d1:9e:85:a0:80:c3:a9:6e:5f:cc:76:84:64:2e:64:f5:
22:ca:9d:dd:9c:61:e7:0d:14:c0:92:50:e8:3b:4f:36:b2:1f:
fe:9d:06:8b:7e:f2:03:28:a9:11:f1:d0:8c:56:8b:2c:36:4d:
1c:4f:8f:cb:99:d8:68:b3:5e:97:d1:f8:68:5e:b5:8d:c2:5e:
c3:03:a4:65:2b:fa:27:af:4a:66:58:56:aa:39:91:9d:e9:76:
7a:30:30:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyyoZ4VlQ6a2yMR+th53tUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MDBiYTYzOWU2NWRiZGNjNjkwZjU4YTVhNzQwNjQxYjRm
Zjg4ZDQwHhcNMjUxMTExMTIwMTA2WhcNMjUxMTEyMTIwMTA2WjAzMTEwLwYDVQQD
Eyg3YTA4ZDY1OGNmN2MzYzQ2OGZkNDVkZmQzNzdlODk5ODY5YWNmOTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2f2WY8/kS6kp404iXe7WbhA9MHe
ZYO2v6UhbXXwpuf7zc2tYBtJYn1r7nta7YnYqsiIBm4IDHAOIb6wCZxRxMK9ORl+
nZWPkqdDaLipSP7oasxeF/rO8/zFSxC3dtAodGuLDS44MO9/5XAbANQpwS5jNT5e
P9hrM9N6WNNQGbHcxzibpvETDAeVGWGc1W0R7qCjRQnkDhuDCHhOhdB3i3ZmSpii
sFPCD32pyR7NDgFiYL50cO/3z1A7mqpxsL6auIwoo+0S7enzgZrcQdq9Wo8SXTEq
eicpmiq276/xgqXIlFXUXZ3iOWGN76lVGtxfUH4KGUc4/8FFIs41pgkQbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHoI1ljPfDxGj9Rd/Td+iZhprPmEMB8GA1UdIwQY
MBaAFKgAumOeZdvcxpD1ilp0BkG0/4jUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUFDNlk1NWwyOXpHa1BXS1duUUdRYlRfaU5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9iNjM1MTctM2YxZS00NTFlLTg4NTAt
OGRiMGVmYjU2MjBhLzEvcUFDNlk1NWwyOXpHa1BXS1duUUdRYlRfaU5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9iNjM1MTctM2YxZS00NTFlLTg4NTAtOGRiMGVmYjU2MjBh
LzEvcUFDNlk1NWwyOXpHa1BXS1duUUdRYlRfaU5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASYzUvS8T
lZJs5d9LNHpWcXktwRorTAVW62rQfSzkXuXeQRM4GA+AI8CeCUfcEZjgozxx0JIL
a9duNO+I00F7IERl9h146BCbRh1VjUoEaffjB5xnxZjfsWd/J8mDpiQPF8gSXTZ6
KLd/dS4iajeduEUKRDAUMBZnjfKOrVIxdDMqM4NtmX5Shw/ns/NZtgPf44Rw/mLV
kHHvyKFY2uxGGZ5UdzPRnoWggMOpbl/MdoRkLmT1Isqd3Zxh5w0UwJJQ6DtPNrIf
/p0Gi37yAyipEfHQjFaLLDZNHE+Py5nYaLNel9H4aF61jcJewwOkZSv6J69KZlhW
qjmRnel2ejAwzw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:36:51 2025 by rpki-client