Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft
File: Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft (raw, json)
Hash identifier: 76jnxPncAhtQDgNF001UjsP7VtaH0tmAC5WplmHc6aw=
Subject key identifier: 8E:40:DA:9D:94:89:DB:38:89:9F:4A:DC:36:4C:08:49:6C:AF:77:AC
Authority key identifier: 42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4
Certificate issuer: /CN=4268a4cfb6b1b6447da93833321dd315061193d4
Certificate serial: 019A503DD4870BB7A2BD2281BDE493C00671
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft
Manifest number: 0AF8
Signing time: Tue 04 Nov 2025 19:00:20 +0000
Manifest this update: Tue 04 Nov 2025 19:00:20 +0000
Manifest next update: Wed 05 Nov 2025 19:00:20 +0000
Files and hashes: 1: 3qRTh1P9OF6YOqHXqOqHDoBD8eg.roa (hash: nQAh302ZIgG0KfyPwfrx+gnhB19jlHvyVNBKKuKcDas=)
2: Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl (hash: 9A7ELVX+scDtt2boANjZzOfOFqC4792m8Ifp+pi3ApY=)
3: ar9bFy5EONuIJfpM6gpX8Ujo7Ug.roa (hash: qSqkt91qWr7MYsAwEDebuK5+OcIZWP3ilBjbrzxA5ck=)
4: qpS5E6zN7Za0_vE5y0g_cgWncv8.roa (hash: pquZUL+QWeP5wqagKXvKjrrNKaLrKYUyFpeUGLpB5cY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:d4:87:0b:b7:a2:bd:22:81:bd:e4:93:c0:06:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4268a4cfb6b1b6447da93833321dd315061193d4
Validity
Not Before: Nov 4 19:00:20 2025 GMT
Not After : Nov 5 19:00:20 2025 GMT
Subject: CN=8e40da9d9489db38899f4adc364c08496caf77ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:76:54:b6:5e:0d:ac:12:b1:54:28:25:4a:4b:
d0:a7:67:42:9c:2f:fc:5b:cd:12:58:49:96:c0:dc:
46:3d:54:a2:80:98:24:d1:b5:b3:a7:49:5d:fe:b8:
a6:9b:e0:30:3f:82:a6:98:ae:8b:8c:79:04:d3:87:
e8:9b:3e:46:50:1c:11:67:37:0c:90:2a:0c:bc:25:
38:a5:6f:81:77:6a:78:9a:5f:bd:04:5a:bc:04:e0:
80:57:2e:3c:63:ce:b7:9d:91:d4:60:1d:86:c9:a8:
c8:4c:20:f6:a5:df:4c:85:ea:ca:0a:96:f8:ba:81:
58:50:d7:ce:56:51:3b:c3:66:65:c1:4d:22:73:92:
56:b4:20:83:f9:93:18:e5:1a:3c:53:f5:47:3c:33:
1d:20:31:13:8d:f1:b3:ee:83:e3:c5:88:ac:e2:a1:
96:37:b2:d8:e9:2d:1c:33:3f:ce:f0:a9:26:b5:bc:
77:c6:5b:7c:aa:c2:82:d0:e2:72:f5:a1:4d:8c:64:
91:54:4e:e3:e8:15:7c:2b:2f:82:6a:96:2c:e5:7b:
54:6f:1e:a9:39:cc:6b:a1:d5:f8:f3:c6:84:07:5a:
1c:d3:cd:07:49:15:89:2e:b5:62:1f:bd:09:a2:71:
10:dc:26:96:d0:36:e0:5d:e7:0d:94:6e:66:c8:23:
49:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:40:DA:9D:94:89:DB:38:89:9F:4A:DC:36:4C:08:49:6C:AF:77:AC
X509v3 Authority Key Identifier:
keyid:42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:cc:04:c6:08:5f:4a:de:ad:c9:ce:41:fb:0d:c4:46:98:85:
5e:ef:41:2f:12:4c:de:da:8f:cb:ed:4e:e6:db:4a:7f:fb:78:
60:43:82:a6:d5:7a:2b:9c:67:22:aa:ac:86:59:8f:0f:87:27:
c8:37:14:92:51:4c:b4:02:2a:6f:75:fa:1e:98:59:2e:af:5b:
31:84:15:8e:60:4a:4a:82:b2:29:98:1b:07:62:fc:d2:3e:2b:
4c:f4:63:75:a6:e5:20:f7:10:68:c4:58:38:d4:dc:a6:c5:a9:
0d:2a:61:fc:b2:d4:26:4e:41:80:b2:3c:70:8b:f3:a9:8d:a4:
0d:32:35:42:72:b1:8b:39:62:4e:c2:fb:86:7a:69:c5:f5:19:
ce:d7:38:0b:f0:07:4a:10:2b:11:31:aa:22:1e:c6:31:36:1f:
04:ee:5b:d3:9f:c8:83:87:fc:7a:c9:ac:f2:87:f0:1a:44:d3:
28:74:55:fa:cd:5d:a8:8c:cf:c0:a2:ca:0c:fc:93:0f:97:99:
88:f3:5c:75:8b:86:97:1d:0a:2e:52:43:1f:67:bb:2f:76:99:
8c:de:f5:38:89:5d:21:8e:73:12:b2:8a:d8:5e:2f:b3:dd:9a:
25:12:24:17:8a:68:30:1f:f3:a5:90:38:18:c7:6e:fd:9b:53:
63:c9:d5:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:22:15 2025 by rpki-client