Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
File: QKJJ6t6yqSj-DC51yRgki1oaKLk.mft (raw, json)
Hash identifier: G90tgnz9643FalxxCntgnp4mhqu8as8mgF03pp2WYoU=
Subject key identifier: 61:CF:82:59:82:8A:C6:84:B6:AC:FA:FA:48:3A:65:77:39:57:F7:2F
Authority key identifier: 40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9
Certificate issuer: /CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9
Certificate serial: 019A4F62C082582D6709D527E45770EAE1D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 15:01:03 +0000
Manifest this update: Tue 04 Nov 2025 15:01:03 +0000
Manifest next update: Wed 05 Nov 2025 15:01:03 +0000
Files and hashes: 1: 944hLyq4lZEVAFInZE509HNE3dY.roa (hash: u1nybjv+YghCeLuvRCrpHUYvYfZKGq/DNrzwKmuq+cA=)
2: QKJJ6t6yqSj-DC51yRgki1oaKLk.crl (hash: VNmYKGjr+Ishe41IQv11IuYnTa1Mw6R5jq36jojLDTI=)
3: sxEbMVXxezgFHIuSSYFInfXpizE.roa (hash: ZwybRY1zu9AemOu7O2YllM3HQ5PSxj94bjs9pLEXpyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:c0:82:58:2d:67:09:d5:27:e4:57:70:ea:e1:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9
Validity
Not Before: Nov 4 15:01:03 2025 GMT
Not After : Nov 5 15:01:03 2025 GMT
Subject: CN=61cf8259828ac684b6acfafa483a65773957f72f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e4:fb:b3:87:8d:90:45:4f:4c:0a:09:15:06:
59:2a:ad:f9:71:09:85:43:3e:48:32:b7:f5:61:d4:
ea:f9:43:ea:11:56:65:e1:ed:95:8e:7b:37:70:98:
71:70:4a:95:9d:a5:ed:06:fb:83:82:64:cc:41:f5:
1b:df:88:97:a7:b9:a5:1e:3e:ea:7f:cc:1d:3d:bf:
50:d9:be:bc:a1:5d:8d:5b:7b:5c:c8:ec:1f:89:3b:
22:18:4b:91:53:56:f6:21:77:ba:3c:ed:4d:ab:af:
3a:3e:c4:2a:b0:45:30:20:f1:d5:50:83:c6:3d:49:
bd:dd:18:4f:64:7f:ca:ee:cb:7c:ba:9b:8d:5c:ea:
a8:d0:62:1f:52:bf:de:7f:76:e2:db:fd:ad:6d:d3:
a6:59:2a:12:6e:14:72:76:99:93:d6:e1:42:e8:e7:
50:77:51:96:c0:ea:2b:7f:b9:6f:e3:41:f2:f3:2f:
80:a1:82:05:0b:37:dd:ea:a1:a7:06:a2:ae:0d:6e:
a7:65:d4:8e:95:c5:33:81:dd:ed:3f:32:dd:2d:dd:
b7:9f:ac:4d:2a:52:92:37:24:02:69:35:29:1d:ab:
d7:27:70:4b:ac:35:4f:2b:a4:63:15:f6:03:cb:22:
ab:dd:20:5f:c9:1f:a6:57:db:3c:63:23:c6:87:73:
1e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:CF:82:59:82:8A:C6:84:B6:AC:FA:FA:48:3A:65:77:39:57:F7:2F
X509v3 Authority Key Identifier:
keyid:40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:38:97:d6:55:a0:e2:92:02:08:c8:e7:d7:4c:86:78:25:c1:
79:8a:25:9d:b5:17:4d:a0:dd:3d:f5:c6:ec:5c:3d:98:fe:39:
5d:b9:33:4e:03:f4:74:22:b5:3d:66:79:c5:93:91:fb:6e:35:
a3:18:6b:21:c8:48:62:c0:b4:c8:f0:19:db:d5:0f:15:d8:0a:
56:68:39:e1:f1:55:2d:2b:89:84:2b:8b:fd:6e:e2:b9:90:37:
31:56:1c:03:f6:c6:64:f0:82:b9:c4:9a:eb:7d:ba:f0:89:1d:
c7:91:a7:3d:7d:06:e7:19:b2:c8:75:ec:b8:98:da:9f:57:9d:
8f:1c:43:a5:fd:e7:d0:09:2b:10:1a:82:1d:0d:35:f0:48:f1:
91:71:d9:0d:57:4f:95:4c:62:bd:f5:66:9f:2a:00:0e:51:8d:
6f:fe:4e:be:67:1f:50:05:43:e2:cb:55:7a:e7:6b:fe:65:93:
f6:79:0f:f3:57:b7:de:c7:2c:d8:c9:7e:46:ee:39:1d:63:75:
3d:6c:a4:1d:c0:dd:92:c7:a9:a3:bc:f5:26:de:14:e9:58:05:
6a:27:5f:a3:9c:80:08:ae:d1:90:f3:37:0a:d1:89:fb:3f:23:
2e:9d:86:79:d5:16:8f:1a:71:00:cf:43:f3:08:0f:72:3c:c7:
7d:f7:4d:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYsCCWC1nCdUn5Fdw6uHYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwYTI0OWVhZGViMmE5MjhmZTBjMmU3NWM5MTgyNDhiNWEx
YTI4YjkwHhcNMjUxMTA0MTUwMTAzWhcNMjUxMTA1MTUwMTAzWjAzMTEwLwYDVQQD
Eyg2MWNmODI1OTgyOGFjNjg0YjZhY2ZhZmE0ODNhNjU3NzM5NTdmNzJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+T7s4eNkEVPTAoJFQZZKq35cQmF
Qz5IMrf1YdTq+UPqEVZl4e2Vjns3cJhxcEqVnaXtBvuDgmTMQfUb34iXp7mlHj7q
f8wdPb9Q2b68oV2NW3tcyOwfiTsiGEuRU1b2IXe6PO1Nq686PsQqsEUwIPHVUIPG
PUm93RhPZH/K7st8upuNXOqo0GIfUr/ef3bi2/2tbdOmWSoSbhRydpmT1uFC6OdQ
d1GWwOorf7lv40Hy8y+AoYIFCzfd6qGnBqKuDW6nZdSOlcUzgd3tPzLdLd23n6xN
KlKSNyQCaTUpHavXJ3BLrDVPK6RjFfYDyyKr3SBfyR+mV9s8YyPGh3MenwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGHPglmCisaEtqz6+kg6ZXc5V/cvMB8GA1UdIwQY
MBaAFECiSeresqko/gwudckYJItaGii5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUtKSjZ0NnlxU2otREM1MXlSZ2tpMW9hS0xrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hZTU0ODgtMTE5ZC00MGFhLWFlNDAt
ODMzMGU3ZTMyZTE5LzEvUUtKSjZ0NnlxU2otREM1MXlSZ2tpMW9hS0xrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9hZTU0ODgtMTE5ZC00MGFhLWFlNDAtODMzMGU3ZTMyZTE5
LzEvUUtKSjZ0NnlxU2otREM1MXlSZ2tpMW9hS0xrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVDiX1lWg
4pICCMjn10yGeCXBeYolnbUXTaDdPfXG7Fw9mP45XbkzTgP0dCK1PWZ5xZOR+241
oxhrIchIYsC0yPAZ29UPFdgKVmg54fFVLSuJhCuL/W7iuZA3MVYcA/bGZPCCucSa
63268Ikdx5GnPX0G5xmyyHXsuJjan1edjxxDpf3n0AkrEBqCHQ018EjxkXHZDVdP
lUxivfVmnyoADlGNb/5OvmcfUAVD4stVeudr/mWT9nkP81e33scs2Ml+Ru45HWN1
PWykHcDdksepo7z1Jt4U6VgFaidfo5yACK7RkPM3CtGJ+z8jLp2GedUWjxpxAM9D
8wgPcjzHffdNMw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:49 2025 by rpki-client