Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft
File: QNVbeINqk_tvnsn6enntm4vqK6E.mft (raw, json)
Hash identifier: zEkuITtGb1DwyARgQM9hvIpOx2oy7lNcFFJc9O6ubMo=
Subject key identifier: 10:B0:3D:12:B7:53:B6:47:DF:F4:6C:E8:F9:BB:FB:3D:17:8C:71:6A
Authority key identifier: 40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1
Certificate issuer: /CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1
Certificate serial: 019A5608D03CF604773A34BDCC0D78BC298F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft
Manifest number: 171A
Signing time: Wed 05 Nov 2025 22:00:09 +0000
Manifest this update: Wed 05 Nov 2025 22:00:09 +0000
Manifest next update: Thu 06 Nov 2025 22:00:09 +0000
Files and hashes: 1: FM1ZToDPfltq70sgYZxUZRvW9lw.roa (hash: gobn7d36Th+HhvhLfnOuWn7jGYlz7+noOsxaYpWSY6w=)
2: QNVbeINqk_tvnsn6enntm4vqK6E.crl (hash: 1t93CAwuZHFGHbtmX/CNGZUTjR2RmA6mEldibWcckdk=)
3: QOyV471MiAdrv1gx1_mQKqZThmQ.roa (hash: AoS7cULghj9S2ceuce/DAbxzcNkBLN2/6i/FkUDAidw=)
4: Ufx_uGX33YMRJk96-Ns3OVYoYkY.roa (hash: R6OFTPlC+5+pTqseUyT+JKWuhsqJ8TflqBO+jG6Oft8=)
5: aouWF1EL5PqaDekCOWFKRFFElco.roa (hash: meYwuUzRknXw4amv6l3WdhCHcJ6/5boQjSOQLig1VyA=)
6: t0LizRcpCedVGV7G-fII8jBvx0A.roa (hash: ZN5BTBda6bGmBj8NTopRMZUMlk+FQ8YAMSGu4VazGr8=)
7: tRjkLyLC--HaV6NcWuFGLxVHLUQ.roa (hash: W6/eiMbwnnO5tx0lNIccNziZp4esvsx84586cppqO84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:56:08:d0:3c:f6:04:77:3a:34:bd:cc:0d:78:bc:29:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1
Validity
Not Before: Nov 5 22:00:09 2025 GMT
Not After : Nov 6 22:00:09 2025 GMT
Subject: CN=10b03d12b753b647dff46ce8f9bbfb3d178c716a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bb:0e:44:3d:bd:12:0b:48:cd:2c:5e:02:8f:
68:28:2f:54:20:61:ff:d0:e3:77:d1:67:ec:f9:26:
cf:e0:5b:40:91:e6:50:c6:9c:11:58:e8:22:e3:79:
d4:71:42:e0:bd:27:1c:7b:19:30:b6:8f:ad:e8:19:
a4:e4:76:b5:84:7e:75:58:de:f8:6c:60:3c:5c:93:
42:06:38:07:95:ee:db:25:d7:33:09:d2:4b:cd:eb:
b8:f4:ae:43:45:63:0d:47:ff:1e:fb:66:78:b8:91:
34:dc:ce:b8:6f:51:b4:72:72:db:03:8e:fc:98:01:
c7:19:51:18:7e:55:d1:1f:e3:48:36:97:2d:f8:b8:
a4:5e:38:36:4d:bf:74:2a:5f:91:c9:13:7d:ec:f7:
7d:4f:35:b3:37:47:64:84:e6:68:f5:29:ff:9d:01:
e8:2c:c8:a1:78:0c:b4:a5:7b:1d:e5:93:aa:af:dd:
3c:3d:a3:3d:fd:8c:5c:87:b7:16:b5:ee:83:e0:8c:
12:97:85:5f:28:b8:d6:90:7d:ec:7b:d7:47:b5:54:
33:c5:39:63:96:70:e8:9f:f5:d3:7d:b8:ea:f5:e5:
73:6d:f0:cb:b8:fd:f6:99:9a:85:a1:67:f4:fe:17:
ee:c3:1c:90:ec:bd:6c:e0:fb:9b:4e:82:c9:ae:f1:
4b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B0:3D:12:B7:53:B6:47:DF:F4:6C:E8:F9:BB:FB:3D:17:8C:71:6A
X509v3 Authority Key Identifier:
keyid:40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:41:48:56:5c:e5:1f:c0:a7:ba:0d:87:93:ab:ae:dc:40:22:
81:74:9d:12:d9:03:21:a1:28:26:49:1f:04:81:eb:6b:bb:cb:
c3:b1:36:07:d3:24:c0:12:fc:5f:4f:44:73:ac:98:5f:8f:0e:
45:dc:f7:74:f9:0b:9c:50:20:9b:0f:12:d8:24:a5:d4:80:5d:
3a:24:a1:54:2e:6e:5c:fa:0d:57:e9:91:18:63:73:0e:65:ed:
99:a5:91:fb:e4:94:d0:2c:1e:0c:77:13:92:b6:60:f5:d1:34:
4c:11:c3:3e:24:f4:26:15:61:7d:fa:7b:05:78:25:5b:d0:9f:
ad:81:f5:07:5f:8a:24:f0:e7:87:cf:2e:29:b3:1c:d3:b0:74:
34:11:25:60:88:37:c2:f3:a7:7f:37:e5:5b:68:54:dd:84:55:
c8:28:98:60:34:c2:10:b9:16:ed:ee:c4:9c:93:cd:5a:d5:44:
db:6e:52:fa:ef:39:77:6f:b3:24:99:9e:4f:4e:f8:d6:5b:06:
db:ca:bd:75:0c:41:8d:ba:47:d5:a2:7b:9a:c2:a7:f0:6a:3d:
b7:81:34:02:0f:2e:94:80:55:93:22:68:84:0e:ae:4b:82:60:
f4:34:45:84:d9:c2:48:5e:79:38:a6:24:0a:a7:96:eb:de:04:
6b:5e:6c:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpWCNA89gR3OjS9zA14vCmPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZDU1Yjc4ODM2YTkzZmI2ZjllYzlmYTdhNzllZDliOGJl
YTJiYTEwHhcNMjUxMTA1MjIwMDA5WhcNMjUxMTA2MjIwMDA5WjAzMTEwLwYDVQQD
EygxMGIwM2QxMmI3NTNiNjQ3ZGZmNDZjZThmOWJiZmIzZDE3OGM3MTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLsORD29EgtIzSxeAo9oKC9UIGH/
0ON30Wfs+SbP4FtAkeZQxpwRWOgi43nUcULgvSccexkwto+t6Bmk5Ha1hH51WN74
bGA8XJNCBjgHle7bJdczCdJLzeu49K5DRWMNR/8e+2Z4uJE03M64b1G0cnLbA478
mAHHGVEYflXRH+NINpct+LikXjg2Tb90Kl+RyRN97Pd9TzWzN0dkhOZo9Sn/nQHo
LMiheAy0pXsd5ZOqr908PaM9/Yxch7cWte6D4IwSl4VfKLjWkH3se9dHtVQzxTlj
lnDon/XTfbjq9eVzbfDLuP32mZqFoWf0/hfuwxyQ7L1s4PubToLJrvFLgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBCwPRK3U7ZH3/Rs6Pm7+z0XjHFqMB8GA1UdIwQY
MBaAFEDVW3iDapP7b57J+np57ZuL6iuhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU5WYmVJTnFrX3R2bnNuNmVubnRtNHZxSzZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNzZkODUtNjg2NC00YjM3LWJkYjMt
OTJlOGJlNjI3OWJiLzEvUU5WYmVJTnFrX3R2bnNuNmVubnRtNHZxSzZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9jNzZkODUtNjg2NC00YjM3LWJkYjMtOTJlOGJlNjI3OWJi
LzEvUU5WYmVJTnFrX3R2bnNuNmVubnRtNHZxSzZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXEFIVlzl
H8Cnug2Hk6uu3EAigXSdEtkDIaEoJkkfBIHra7vLw7E2B9MkwBL8X09Ec6yYX48O
Rdz3dPkLnFAgmw8S2CSl1IBdOiShVC5uXPoNV+mRGGNzDmXtmaWR++SU0CweDHcT
krZg9dE0TBHDPiT0JhVhffp7BXglW9CfrYH1B1+KJPDnh88uKbMc07B0NBElYIg3
wvOnfzflW2hU3YRVyCiYYDTCELkW7e7EnJPNWtVE225S+u85d2+zJJmeT0741lsG
28q9dQxBjbpH1aJ7msKn8Go9t4E0Ag8ulIBVkyJohA6uS4Jg9DRFhNnCSF55OKYk
CqeW694Ea15s8Q==
-----END CERTIFICATE-----
Generated at Wed Nov 5 23:48:16 2025 by rpki-client