Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
File: QdELiOsk9iYtkxU2il0B4eCGDE4.mft (raw, json)
Hash identifier: oKVArTMxZqY7vdSuShsyU1sfWmu9yFwB5LYbSQa9ot0=
Subject key identifier: 87:15:FD:CF:31:A1:E9:48:96:D4:9E:6B:CF:7D:14:EF:88:9F:C8:D1
Authority key identifier: 41:D1:0B:88:EB:24:F6:26:2D:93:15:36:8A:5D:01:E1:E0:86:0C:4E
Certificate issuer: /CN=41d10b88eb24f6262d9315368a5d01e1e0860c4e
Certificate serial: 019A4E86973AA25B49DA94700FB311D8BFBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
Manifest number: 0CE3
Signing time: Tue 04 Nov 2025 11:00:34 +0000
Manifest this update: Tue 04 Nov 2025 11:00:34 +0000
Manifest next update: Wed 05 Nov 2025 11:00:34 +0000
Files and hashes: 1: MxIW_z7Ebidq95zbkkCpozAg-qo.roa (hash: Ne9BRTxSbvyD3v1mKUKjrJIdCst7ww6cgLtpKgmPXO4=)
2: QdELiOsk9iYtkxU2il0B4eCGDE4.crl (hash: jiygEzPQy7wbnvR8JOj9aA4JBMEugExAU0uoJCX0W2U=)
3: iF0hWqV8nyrtwGMxvXkpeZV-Ad0.roa (hash: NsX4Tk5b/sJjbOHt4Xm/gMH0eUzDRvHxvl47C618GF4=)
4: pK_RWKvtbpfARxQqcIN51CNOVR4.roa (hash: gYB8+JoJ6UyQv4AugtpSBUDhjHrwgsXQ9hiZfsU43O0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:97:3a:a2:5b:49:da:94:70:0f:b3:11:d8:bf:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d10b88eb24f6262d9315368a5d01e1e0860c4e
Validity
Not Before: Nov 4 11:00:34 2025 GMT
Not After : Nov 5 11:00:34 2025 GMT
Subject: CN=8715fdcf31a1e94896d49e6bcf7d14ef889fc8d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4b:2f:b3:71:13:31:e7:47:d1:69:aa:58:b6:
79:cf:21:ab:d2:e7:f7:84:ad:14:52:04:e8:68:94:
2a:78:32:e8:e3:10:d4:52:68:e7:56:e2:47:d2:70:
09:b7:16:3f:1b:d4:b3:84:12:01:c1:bb:59:00:56:
54:11:a9:f7:9a:5c:96:a8:06:13:04:10:69:de:95:
8d:38:f2:cb:3e:fb:5d:9d:8d:11:b1:dc:47:30:03:
89:34:c7:c5:d6:00:a5:d1:0f:7f:b2:e3:b7:10:7a:
8d:c8:ec:d0:3d:fc:13:47:fd:72:e8:18:97:7d:af:
21:2b:44:e0:b7:e6:4b:d1:dc:03:a1:5b:a7:de:91:
21:84:6d:5b:57:52:fe:85:a0:b3:8f:7f:b0:c5:77:
79:0a:74:8f:76:dc:9e:44:1b:97:7a:a3:7b:b9:b3:
04:e8:5f:4f:f2:e4:8c:05:af:e0:72:47:55:59:7b:
64:73:66:cd:59:86:9c:96:bb:ab:ae:3b:15:1b:d7:
07:b5:50:7c:c3:2b:47:15:a4:37:f3:80:e4:5a:29:
95:2c:8b:24:9d:24:95:c1:8b:25:94:23:64:87:eb:
a5:78:7c:b6:e2:2d:41:94:a6:60:e0:ab:ca:7a:b5:
ee:4e:37:d8:1a:9d:4d:93:e6:38:00:bf:3f:b5:6c:
08:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:15:FD:CF:31:A1:E9:48:96:D4:9E:6B:CF:7D:14:EF:88:9F:C8:D1
X509v3 Authority Key Identifier:
keyid:41:D1:0B:88:EB:24:F6:26:2D:93:15:36:8A:5D:01:E1:E0:86:0C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:da:98:1f:7e:d2:2a:ac:aa:53:10:8f:c9:f9:c4:24:b9:4d:
90:96:dc:db:fa:1a:96:f2:b8:fb:df:75:0d:0c:01:fc:b7:56:
20:89:8b:b9:dd:56:73:4b:09:8c:54:3b:3e:06:76:57:6f:36:
26:41:ef:4d:14:d9:84:38:94:0c:33:d1:c4:56:45:a8:56:cb:
89:fc:92:32:84:a9:fa:d9:6c:71:f7:ac:31:9e:a7:b9:0f:be:
58:4d:a3:5f:f6:90:66:ea:b2:41:fb:04:72:3f:6d:e9:61:cb:
dd:0e:8b:05:bd:b3:2d:14:cb:ca:00:b2:ba:fe:f9:bb:5a:a5:
52:0c:42:a7:a3:55:9c:ec:1f:61:e0:9a:05:c8:28:0b:33:3a:
8e:ca:03:f3:79:ea:bf:f3:98:8b:dd:b5:38:19:04:61:aa:81:
0c:61:aa:b3:d7:7a:2c:a5:53:6b:67:a7:10:ed:b3:53:ff:62:
b7:aa:3a:42:cd:37:43:ff:04:2c:86:8b:63:63:bd:8e:eb:00:
10:80:65:d7:f3:af:bd:f7:d1:09:da:a1:89:11:43:f2:5f:f2:
3f:a2:8c:d0:2a:66:c6:a6:9b:62:8a:44:0b:6f:be:9a:df:98:
f7:69:32:da:a6:80:ef:d3:c0:0b:7d:e3:54:c5:2e:4b:f1:19:
5e:a7:5f:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOhpc6oltJ2pRwD7MR2L+/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZDEwYjg4ZWIyNGY2MjYyZDkzMTUzNjhhNWQwMWUxZTA4
NjBjNGUwHhcNMjUxMTA0MTEwMDM0WhcNMjUxMTA1MTEwMDM0WjAzMTEwLwYDVQQD
Eyg4NzE1ZmRjZjMxYTFlOTQ4OTZkNDllNmJjZjdkMTRlZjg4OWZjOGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0svs3ETMedH0WmqWLZ5zyGr0uf3
hK0UUgToaJQqeDLo4xDUUmjnVuJH0nAJtxY/G9SzhBIBwbtZAFZUEan3mlyWqAYT
BBBp3pWNOPLLPvtdnY0RsdxHMAOJNMfF1gCl0Q9/suO3EHqNyOzQPfwTR/1y6BiX
fa8hK0Tgt+ZL0dwDoVun3pEhhG1bV1L+haCzj3+wxXd5CnSPdtyeRBuXeqN7ubME
6F9P8uSMBa/gckdVWXtkc2bNWYaclrurrjsVG9cHtVB8wytHFaQ384DkWimVLIsk
nSSVwYsllCNkh+uleHy24i1BlKZg4KvKerXuTjfYGp1Nk+Y4AL8/tWwIUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIcV/c8xoelIltSea899FO+In8jRMB8GA1UdIwQY
MBaAFEHRC4jrJPYmLZMVNopdAeHghgxOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWRFTGlPc2s5aVl0a3hVMmlsMEI0ZUNHREU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS85OTg3ODYtODcxOS00ZDhlLTk1MDAt
ZWY5NzAwNmM0NTBiLzEvUWRFTGlPc2s5aVl0a3hVMmlsMEI0ZUNHREU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS85OTg3ODYtODcxOS00ZDhlLTk1MDAtZWY5NzAwNmM0NTBi
LzEvUWRFTGlPc2s5aVl0a3hVMmlsMEI0ZUNHREU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFNqYH37S
KqyqUxCPyfnEJLlNkJbc2/oalvK4+991DQwB/LdWIImLud1Wc0sJjFQ7PgZ2V282
JkHvTRTZhDiUDDPRxFZFqFbLifySMoSp+tlscfesMZ6nuQ++WE2jX/aQZuqyQfsE
cj9t6WHL3Q6LBb2zLRTLygCyuv75u1qlUgxCp6NVnOwfYeCaBcgoCzM6jsoD83nq
v/OYi921OBkEYaqBDGGqs9d6LKVTa2enEO2zU/9it6o6Qs03Q/8ELIaLY2O9jusA
EIBl1/OvvffRCdqhiRFD8l/yP6KM0CpmxqabYopEC2++mt+Y92ky2qaA79PAC33j
VMUuS/EZXqdflQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:26:20 2025 by rpki-client