Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/dd41f5-bc06-4c97-9ed8-fc460ff98e31/1/q67fL4Eo9I64ETv69NZ9kBBJCTo.mft
File: q67fL4Eo9I64ETv69NZ9kBBJCTo.mft (raw, json)
Hash identifier: QmbRl46SOCapl9neG5RHBM5BPOjUXv+Nq2LbVYUwExA=
Subject key identifier: 00:E8:A8:01:0E:E3:8A:48:49:77:C3:AA:AA:45:F1:8F:A7:E2:6B:45
Authority key identifier: AB:AE:DF:2F:81:28:F4:8E:B8:11:3B:FA:F4:D6:7D:90:10:49:09:3A
Certificate issuer: /CN=abaedf2f8128f48eb8113bfaf4d67d901049093a
Certificate serial: 019A71B797B90E2BDD594588CED78180684E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q67fL4Eo9I64ETv69NZ9kBBJCTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/dd41f5-bc06-4c97-9ed8-fc460ff98e31/1/q67fL4Eo9I64ETv69NZ9kBBJCTo.mft
Manifest number: 086A
Signing time: Tue 11 Nov 2025 07:00:48 +0000
Manifest this update: Tue 11 Nov 2025 07:00:48 +0000
Manifest next update: Wed 12 Nov 2025 07:00:48 +0000
Files and hashes: 1: 0Q9DyYJq4YbBL7IBZhMWf3HhzbA.roa (hash: 4213R6OjAd56bVYP7rVqWPE8P8Ej5z/x2DZxc07Sx3o=)
2: q67fL4Eo9I64ETv69NZ9kBBJCTo.crl (hash: UUJSJVmgR+stJfT1RKBNxmhnttjCHgbNJfu4ZMjq6uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/dd41f5-bc06-4c97-9ed8-fc460ff98e31/1/q67fL4Eo9I64ETv69NZ9kBBJCTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/dd41f5-bc06-4c97-9ed8-fc460ff98e31/1/q67fL4Eo9I64ETv69NZ9kBBJCTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/q67fL4Eo9I64ETv69NZ9kBBJCTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:97:b9:0e:2b:dd:59:45:88:ce:d7:81:80:68:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abaedf2f8128f48eb8113bfaf4d67d901049093a
Validity
Not Before: Nov 11 07:00:48 2025 GMT
Not After : Nov 12 07:00:48 2025 GMT
Subject: CN=00e8a8010ee38a484977c3aaaa45f18fa7e26b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a4:e6:f9:f7:5b:1d:d9:e7:be:ba:c1:80:60:
5c:4e:56:e7:a4:03:46:9f:44:9c:94:68:fd:ec:79:
a2:90:fb:1a:4c:52:e5:a2:96:f1:80:67:ad:eb:6f:
72:f1:69:b8:51:2d:46:ab:90:5f:96:d0:e1:3b:77:
72:63:89:89:b9:dd:78:9d:73:e4:e1:52:c1:13:57:
ef:96:f2:70:fd:2a:d0:2f:33:3a:96:96:28:a0:ba:
99:da:bb:60:48:92:96:02:e5:ad:15:24:16:04:97:
6c:98:0d:c6:ce:7c:ab:93:e0:45:c8:60:85:9d:85:
0a:2b:87:d4:42:e6:70:8d:8f:93:49:43:22:d6:5d:
d7:2d:b9:80:d4:7d:8b:67:a2:0c:c1:c2:ff:e5:20:
b0:8a:a4:56:68:b5:a6:ff:a9:23:40:c5:2a:5a:29:
11:16:2d:18:82:ed:bf:6c:e6:01:b1:28:6f:3f:d0:
32:70:33:d0:5a:3d:3b:9f:d0:c5:ff:9c:18:9f:9b:
a3:1d:83:de:33:81:d8:8c:10:17:eb:2e:22:d5:ef:
a0:c7:d1:f0:7d:a5:fc:20:b8:9a:d9:88:db:6c:10:
68:62:ab:dd:92:b2:98:97:fb:ed:79:ce:63:88:d9:
cd:7f:b9:64:3d:48:f9:fc:62:e8:f7:3b:0e:fe:6b:
80:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E8:A8:01:0E:E3:8A:48:49:77:C3:AA:AA:45:F1:8F:A7:E2:6B:45
X509v3 Authority Key Identifier:
keyid:AB:AE:DF:2F:81:28:F4:8E:B8:11:3B:FA:F4:D6:7D:90:10:49:09:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q67fL4Eo9I64ETv69NZ9kBBJCTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/dd41f5-bc06-4c97-9ed8-fc460ff98e31/1/q67fL4Eo9I64ETv69NZ9kBBJCTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/dd41f5-bc06-4c97-9ed8-fc460ff98e31/1/q67fL4Eo9I64ETv69NZ9kBBJCTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:1a:e2:48:e1:b0:5f:0c:32:a4:c6:87:dc:01:a4:ea:b4:55:
85:95:30:df:53:78:c6:18:13:95:e9:04:e8:c0:ac:85:56:61:
9e:3e:54:ef:17:95:9e:65:88:83:6c:a0:c5:f3:bc:ce:e4:66:
fc:2c:95:34:62:c9:10:57:51:28:24:a9:3d:5e:99:69:f8:58:
23:ed:82:55:d6:18:56:a5:a5:64:fe:db:b1:ab:67:ef:c7:45:
d4:06:2a:77:8d:9b:17:88:23:ea:a4:9c:f6:0b:32:11:32:4b:
4d:4e:da:6b:d1:a3:8c:3f:19:bc:03:e0:7e:6e:2a:5e:01:ae:
c2:25:ce:3b:59:4f:7f:5c:06:9a:64:2e:af:92:05:23:9a:66:
c6:de:a9:83:df:42:83:24:a0:ab:c8:59:93:9d:54:45:39:9e:
3f:06:cb:b4:f1:1c:e2:9e:7d:90:75:a0:96:0c:8a:17:b3:e3:
1c:56:49:1b:3b:e5:f3:34:eb:48:d6:69:75:18:7d:4d:6c:5d:
38:bf:c7:d6:a7:e8:6e:70:55:06:04:64:a5:3c:c3:30:a8:66:
23:fe:b8:82:34:5d:55:d8:2c:8b:b3:1f:54:30:f8:44:a7:37:
8b:00:0e:49:32:ad:1b:e5:87:ec:61:b0:b3:ce:48:4c:2d:60:
9e:01:e1:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt5e5DivdWUWIzteBgGhOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYWVkZjJmODEyOGY0OGViODExM2JmYWY0ZDY3ZDkwMTA0
OTA5M2EwHhcNMjUxMTExMDcwMDQ4WhcNMjUxMTEyMDcwMDQ4WjAzMTEwLwYDVQQD
EygwMGU4YTgwMTBlZTM4YTQ4NDk3N2MzYWFhYTQ1ZjE4ZmE3ZTI2YjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6Tm+fdbHdnnvrrBgGBcTlbnpANG
n0SclGj97HmikPsaTFLlopbxgGet629y8Wm4US1Gq5BfltDhO3dyY4mJud14nXPk
4VLBE1fvlvJw/SrQLzM6lpYooLqZ2rtgSJKWAuWtFSQWBJdsmA3Gznyrk+BFyGCF
nYUKK4fUQuZwjY+TSUMi1l3XLbmA1H2LZ6IMwcL/5SCwiqRWaLWm/6kjQMUqWikR
Fi0Ygu2/bOYBsShvP9AycDPQWj07n9DF/5wYn5ujHYPeM4HYjBAX6y4i1e+gx9Hw
faX8ILia2YjbbBBoYqvdkrKYl/vtec5jiNnNf7lkPUj5/GLo9zsO/muAtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFADoqAEO44pISXfDqqpF8Y+n4mtFMB8GA1UdIwQY
MBaAFKuu3y+BKPSOuBE7+vTWfZAQSQk6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTY3Zkw0RW85STY0RVR2NjlOWjlrQkJKQ1RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9kZDQxZjUtYmMwNi00Yzk3LTllZDgt
ZmM0NjBmZjk4ZTMxLzEvcTY3Zkw0RW85STY0RVR2NjlOWjlrQkJKQ1RvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9kZDQxZjUtYmMwNi00Yzk3LTllZDgtZmM0NjBmZjk4ZTMx
LzEvcTY3Zkw0RW85STY0RVR2NjlOWjlrQkJKQ1RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKhriSOGw
XwwypMaH3AGk6rRVhZUw31N4xhgTlekE6MCshVZhnj5U7xeVnmWIg2ygxfO8zuRm
/CyVNGLJEFdRKCSpPV6ZafhYI+2CVdYYVqWlZP7bsatn78dF1AYqd42bF4gj6qSc
9gsyETJLTU7aa9GjjD8ZvAPgfm4qXgGuwiXOO1lPf1wGmmQur5IFI5pmxt6pg99C
gySgq8hZk51URTmePwbLtPEc4p59kHWglgyKF7PjHFZJGzvl8zTrSNZpdRh9TWxd
OL/H1qfobnBVBgRkpTzDMKhmI/64gjRdVdgsi7MfVDD4RKc3iwAOSTKtG+WH7GGw
s85ITC1gngHh+g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 16:51:41 2025 by rpki-client