Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.mft
File: Q3DTtpmsWu_y24ily8HJ2NCccjE.mft (raw, json)
Hash identifier: JKfMOV8T7qaJ4WKbHurdcp6oS7+B2+MfC2wg+zKICxg=
Subject key identifier: E9:3C:D3:68:A8:63:FD:40:84:D8:98:D3:91:CF:37:DF:56:8B:D9:ED
Authority key identifier: 43:70:D3:B6:99:AC:5A:EF:F2:DB:88:A5:CB:C1:C9:D8:D0:9C:72:31
Certificate issuer: /CN=4370d3b699ac5aeff2db88a5cbc1c9d8d09c7231
Certificate serial: 019A7112BCF125736B4B64CE460341CA902E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3DTtpmsWu_y24ily8HJ2NCccjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.mft
Manifest number: 93
Signing time: Tue 11 Nov 2025 04:00:44 +0000
Manifest this update: Tue 11 Nov 2025 04:00:44 +0000
Manifest next update: Wed 12 Nov 2025 04:00:44 +0000
Files and hashes: 1: 3d70znP7o5cQ_Sr6eRmA6Vl0IBU.roa (hash: j+rZf2bmlj9QYrtrhsiFdNMWtcMmhTeJyg7GtA/z7dg=)
2: Q3DTtpmsWu_y24ily8HJ2NCccjE.crl (hash: FIzI1nqlPucwE7hJ8HHPRKaT3FWosDB5+S/HRJMSfDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q3DTtpmsWu_y24ily8HJ2NCccjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:bc:f1:25:73:6b:4b:64:ce:46:03:41:ca:90:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4370d3b699ac5aeff2db88a5cbc1c9d8d09c7231
Validity
Not Before: Nov 11 04:00:44 2025 GMT
Not After : Nov 12 04:00:44 2025 GMT
Subject: CN=e93cd368a863fd4084d898d391cf37df568bd9ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9a:12:78:07:da:ab:e3:84:5e:4b:39:50:1b:
97:63:94:17:4f:5b:7c:b4:c4:ca:93:a5:b0:4e:e8:
64:fa:38:d6:bf:c2:33:8e:9b:4a:f9:56:c0:05:88:
64:36:30:16:35:2e:6f:a7:02:38:53:01:7c:c9:35:
d9:40:72:8a:37:f2:3b:72:13:cf:fb:46:66:73:de:
cf:4c:59:4d:cf:fd:fb:52:a6:ec:bf:5b:0b:36:e0:
3b:70:1c:24:5e:d3:aa:91:96:75:53:f1:bd:6e:48:
86:b8:bd:e1:3d:a2:6f:71:2a:cc:76:2c:f1:9c:ea:
1e:dd:c8:01:bd:34:36:27:54:fe:84:19:e3:48:1e:
58:01:94:f1:7b:d8:fd:d5:08:3c:c6:5d:df:cb:54:
74:70:98:82:92:86:b2:24:92:1c:7e:bb:2a:28:8c:
b9:c6:e9:28:64:2f:cd:1c:12:33:f0:3c:c3:15:65:
fa:97:e2:6a:ba:d4:04:0d:85:e8:f5:cb:64:98:d9:
ee:45:5c:0e:3c:19:1e:f7:e3:af:98:27:c2:ef:2e:
ed:6a:cf:76:8e:10:ce:ea:06:78:d8:8c:39:da:be:
55:90:26:32:5b:07:f4:fa:98:f5:6f:ca:fc:53:24:
63:ab:1c:aa:a1:19:4c:b1:65:68:bd:cb:7a:6e:1b:
c8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:3C:D3:68:A8:63:FD:40:84:D8:98:D3:91:CF:37:DF:56:8B:D9:ED
X509v3 Authority Key Identifier:
keyid:43:70:D3:B6:99:AC:5A:EF:F2:DB:88:A5:CB:C1:C9:D8:D0:9C:72:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3DTtpmsWu_y24ily8HJ2NCccjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:84:26:33:9e:3d:c7:9f:0c:24:5e:9a:8d:d0:1b:36:e0:6d:
79:4b:b1:9e:46:81:08:d5:ee:6f:e2:f5:ca:8c:83:8c:ea:06:
63:08:5f:bc:44:7f:fe:07:36:fb:83:ba:56:63:f9:fe:19:68:
5f:09:80:2f:63:b2:33:45:d2:eb:db:fc:cb:0f:fd:09:f3:35:
2e:04:31:89:62:24:72:26:a8:0a:79:5b:b0:6f:b1:f2:6f:d9:
1e:3a:ec:43:e6:ea:1a:36:ec:ec:18:ef:e6:0e:9f:c9:bd:3a:
52:14:c4:9d:26:57:27:00:88:38:50:1e:0c:0f:f0:c5:81:91:
52:d7:8c:f1:72:55:fb:c8:e9:69:9b:e9:9b:87:86:37:33:dc:
62:8f:94:d7:3c:98:44:b9:26:fd:cb:d8:9c:42:81:1f:ec:eb:
30:07:50:0d:18:81:1f:09:40:b7:0d:8d:da:8f:22:f9:b3:53:
f5:ce:f3:ce:33:f0:9c:b1:72:b3:87:65:2e:6c:94:b0:e3:fc:
b3:50:d1:f9:11:06:8b:4f:b0:a1:df:d2:34:76:f2:99:27:ff:
90:21:a6:a9:1e:98:02:f4:03:33:29:77:b0:8c:af:81:b3:3a:
c7:06:45:83:75:36:bb:ed:00:94:62:61:0e:82:4f:73:44:75:
5b:ff:8d:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxErzxJXNrS2TORgNBypAuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzNzBkM2I2OTlhYzVhZWZmMmRiODhhNWNiYzFjOWQ4ZDA5
YzcyMzEwHhcNMjUxMTExMDQwMDQ0WhcNMjUxMTEyMDQwMDQ0WjAzMTEwLwYDVQQD
EyhlOTNjZDM2OGE4NjNmZDQwODRkODk4ZDM5MWNmMzdkZjU2OGJkOWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZoSeAfaq+OEXks5UBuXY5QXT1t8
tMTKk6WwTuhk+jjWv8IzjptK+VbABYhkNjAWNS5vpwI4UwF8yTXZQHKKN/I7chPP
+0Zmc97PTFlNz/37Uqbsv1sLNuA7cBwkXtOqkZZ1U/G9bkiGuL3hPaJvcSrMdizx
nOoe3cgBvTQ2J1T+hBnjSB5YAZTxe9j91Qg8xl3fy1R0cJiCkoayJJIcfrsqKIy5
xukoZC/NHBIz8DzDFWX6l+JqutQEDYXo9ctkmNnuRVwOPBke9+OvmCfC7y7tas92
jhDO6gZ42Iw52r5VkCYyWwf0+pj1b8r8UyRjqxyqoRlMsWVovct6bhvI4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOk802ioY/1AhNiY05HPN99Wi9ntMB8GA1UdIwQY
MBaAFENw07aZrFrv8tuIpcvBydjQnHIxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTNEVHRwbXNXdV95MjRpbHk4SEoyTkNjY2pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS84ZWZlZDEtOGY2NS00ZmI5LTgzMzEt
MTQ1YTAxMjc4OTQ4LzEvUTNEVHRwbXNXdV95MjRpbHk4SEoyTkNjY2pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS84ZWZlZDEtOGY2NS00ZmI5LTgzMzEtMTQ1YTAxMjc4OTQ4
LzEvUTNEVHRwbXNXdV95MjRpbHk4SEoyTkNjY2pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABIQmM549
x58MJF6ajdAbNuBteUuxnkaBCNXub+L1yoyDjOoGYwhfvER//gc2+4O6VmP5/hlo
XwmAL2OyM0XS69v8yw/9CfM1LgQxiWIkciaoCnlbsG+x8m/ZHjrsQ+bqGjbs7Bjv
5g6fyb06UhTEnSZXJwCIOFAeDA/wxYGRUteM8XJV+8jpaZvpm4eGNzPcYo+U1zyY
RLkm/cvYnEKBH+zrMAdQDRiBHwlAtw2N2o8i+bNT9c7zzjPwnLFys4dlLmyUsOP8
s1DR+REGi0+wod/SNHbymSf/kCGmqR6YAvQDMyl3sIyvgbM6xwZFg3U2u+0AlGJh
DoJPc0R1W/+NIg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:24:56 2025 by rpki-client