Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
File: 1QBRYT08xrPrgdW7QArg1OJBLIA.mft (raw, json)
Hash identifier: lHauZdaHwI7CIYQKLndpGULNSpqRyjPS+ylOTuQPDx8=
Subject key identifier: FE:93:7A:9A:7D:6E:3E:3B:6E:99:FB:AC:D9:AF:D0:F4:86:12:8F:BD
Authority key identifier: D5:00:51:61:3D:3C:C6:B3:EB:81:D5:BB:40:0A:E0:D4:E2:41:2C:80
Certificate issuer: /CN=d50051613d3cc6b3eb81d5bb400ae0d4e2412c80
Certificate serial: 019A4EF5148837A2AF8A851EAEA74DDE4021
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QBRYT08xrPrgdW7QArg1OJBLIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
Manifest number: 0B1A
Signing time: Tue 04 Nov 2025 13:01:15 +0000
Manifest this update: Tue 04 Nov 2025 13:01:15 +0000
Manifest next update: Wed 05 Nov 2025 13:01:15 +0000
Files and hashes: 1: 1QBRYT08xrPrgdW7QArg1OJBLIA.crl (hash: mUZQH8TDj+booBwgxs02752/yj9rPfRGK/+Yb7NydrI=)
2: qBfFLLbMjDiXpHlclpBQm55p-Q8.roa (hash: X7f4s7PxbdY1OwsEitEQVcC4bC8kVzy8m2zO1xjTkLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QBRYT08xrPrgdW7QArg1OJBLIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:14:88:37:a2:af:8a:85:1e:ae:a7:4d:de:40:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50051613d3cc6b3eb81d5bb400ae0d4e2412c80
Validity
Not Before: Nov 4 13:01:15 2025 GMT
Not After : Nov 5 13:01:15 2025 GMT
Subject: CN=fe937a9a7d6e3e3b6e99fbacd9afd0f486128fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:bd:aa:fe:ec:2a:85:4e:8e:30:94:09:17:39:
da:d8:37:31:04:ce:d1:51:ef:ef:a6:92:99:d2:9f:
59:76:35:30:7a:bb:a1:0b:70:47:18:9e:28:ac:ad:
b6:d0:bd:3e:95:db:01:55:27:4d:1c:c9:ff:68:19:
f5:37:52:08:ad:9d:9a:b2:9a:41:02:e6:5f:45:5b:
4b:c3:78:e9:4c:9f:23:ab:aa:96:f9:f1:a9:20:d0:
65:8e:34:6b:10:0c:b0:97:d8:56:cc:51:8f:83:7d:
42:6f:4f:42:dc:8e:c0:5b:a7:67:f1:43:39:f9:f3:
38:ee:94:cd:73:5d:43:af:14:04:63:49:8e:b1:bf:
b0:57:92:ea:75:79:b5:9e:3b:d9:e7:da:50:52:4f:
05:53:62:b5:1a:83:00:2a:ab:00:71:2f:a7:fb:14:
50:ab:40:9a:97:fe:50:25:35:96:39:1d:b7:e0:66:
57:a2:1c:b5:d9:74:e0:33:d7:6e:6b:a7:b2:5b:e0:
64:7c:30:f3:ef:6e:05:27:9d:af:ba:91:34:e5:da:
df:8d:fb:d2:e1:21:26:9e:20:af:86:77:0d:67:d4:
37:d0:f3:81:8e:30:6e:b7:98:a6:2c:47:e5:98:d8:
23:42:a5:7d:aa:3e:dd:c1:b7:f5:e7:dc:85:ed:fa:
87:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:93:7A:9A:7D:6E:3E:3B:6E:99:FB:AC:D9:AF:D0:F4:86:12:8F:BD
X509v3 Authority Key Identifier:
keyid:D5:00:51:61:3D:3C:C6:B3:EB:81:D5:BB:40:0A:E0:D4:E2:41:2C:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QBRYT08xrPrgdW7QArg1OJBLIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:30:2e:50:d3:d2:dd:55:ef:d9:25:a2:5c:6b:f0:dc:04:38:
bc:fc:15:4f:95:f7:96:c7:92:e2:9e:78:99:8a:8d:59:3f:21:
bb:f8:45:61:c6:d6:b1:81:87:84:96:b9:e4:f5:b4:a7:be:89:
60:97:04:e7:5f:9f:f5:29:fd:d1:b0:d5:67:47:7f:f4:8d:17:
5b:df:7e:b9:68:17:bc:81:3b:95:e9:71:f7:9d:d7:d5:4b:21:
3e:59:56:da:5e:c9:f1:58:6e:a6:16:79:eb:1b:69:bf:c2:1a:
8f:28:20:c7:37:fe:a1:5e:a7:cd:9e:e8:09:61:0f:ca:a9:16:
f4:de:4f:4f:5f:ef:00:81:10:70:51:bf:1d:7f:54:57:06:36:
13:41:6d:95:34:76:c1:81:5b:b0:5f:14:d5:cc:01:01:57:9d:
76:6f:9f:67:b2:aa:45:df:89:b5:d9:01:8f:cb:de:0e:5f:cf:
72:32:c2:36:11:85:23:91:dc:e1:98:de:fd:2f:ff:38:29:54:
b7:1a:80:23:7d:64:ad:30:d2:74:9f:1a:3a:50:9d:28:0d:b8:
d5:8d:9b:e6:8b:79:19:65:ef:63:c1:5c:7e:3c:69:9a:34:a4:
01:44:a3:a2:20:27:4d:cc:4e:50:e7:9b:57:d8:8f:53:e8:7d:
16:82:7a:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9RSIN6KvioUerqdN3kAhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MDA1MTYxM2QzY2M2YjNlYjgxZDViYjQwMGFlMGQ0ZTI0
MTJjODAwHhcNMjUxMTA0MTMwMTE1WhcNMjUxMTA1MTMwMTE1WjAzMTEwLwYDVQQD
EyhmZTkzN2E5YTdkNmUzZTNiNmU5OWZiYWNkOWFmZDBmNDg2MTI4ZmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3r2q/uwqhU6OMJQJFzna2DcxBM7R
Ue/vppKZ0p9ZdjUweruhC3BHGJ4orK220L0+ldsBVSdNHMn/aBn1N1IIrZ2asppB
AuZfRVtLw3jpTJ8jq6qW+fGpINBljjRrEAywl9hWzFGPg31Cb09C3I7AW6dn8UM5
+fM47pTNc11DrxQEY0mOsb+wV5LqdXm1njvZ59pQUk8FU2K1GoMAKqsAcS+n+xRQ
q0Cal/5QJTWWOR234GZXohy12XTgM9dua6eyW+BkfDDz724FJ52vupE05drfjfvS
4SEmniCvhncNZ9Q30POBjjBut5imLEflmNgjQqV9qj7dwbf159yF7fqH0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP6Tepp9bj47bpn7rNmv0PSGEo+9MB8GA1UdIwQY
MBaAFNUAUWE9PMaz64HVu0AK4NTiQSyAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVFCUllUMDh4clByZ2RXN1FBcmcxT0pCTElBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC81OWZjMjYtZjhkZC00ZjVlLWJjYTIt
MjI1ZDhhZGZlOGJiLzEvMVFCUllUMDh4clByZ2RXN1FBcmcxT0pCTElBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC81OWZjMjYtZjhkZC00ZjVlLWJjYTItMjI1ZDhhZGZlOGJi
LzEvMVFCUllUMDh4clByZ2RXN1FBcmcxT0pCTElBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkjAuUNPS
3VXv2SWiXGvw3AQ4vPwVT5X3lseS4p54mYqNWT8hu/hFYcbWsYGHhJa55PW0p76J
YJcE51+f9Sn90bDVZ0d/9I0XW99+uWgXvIE7lelx953X1UshPllW2l7J8VhuphZ5
6xtpv8Iajyggxzf+oV6nzZ7oCWEPyqkW9N5PT1/vAIEQcFG/HX9UVwY2E0FtlTR2
wYFbsF8U1cwBAVeddm+fZ7KqRd+JtdkBj8veDl/PcjLCNhGFI5Hc4Zje/S//OClU
txqAI31krTDSdJ8aOlCdKA241Y2b5ot5GWXvY8FcfjxpmjSkAUSjoiAnTcxOUOeb
V9iPU+h9FoJ6ZA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:57:22 2025 by rpki-client