Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
File: Q9CWU4TcREh6gxcabV0FqUpq1nw.mft (raw, json)
Hash identifier: uZjl6sQzh1IjsWv+kvo2VJgykdo3wspyElFkdN0hubw=
Subject key identifier: E8:95:6D:19:6A:0D:82:40:C8:CF:5E:7E:32:8E:E5:D5:C2:8D:4B:41
Authority key identifier: 43:D0:96:53:84:DC:44:48:7A:83:17:1A:6D:5D:05:A9:4A:6A:D6:7C
Certificate issuer: /CN=43d0965384dc44487a83171a6d5d05a94a6ad67c
Certificate serial: 019A50E38C57E5AC470DB90E9DF788CFD76E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
Manifest number: 01AE
Signing time: Tue 04 Nov 2025 22:01:21 +0000
Manifest this update: Tue 04 Nov 2025 22:01:21 +0000
Manifest next update: Wed 05 Nov 2025 22:01:21 +0000
Files and hashes: 1: Q9CWU4TcREh6gxcabV0FqUpq1nw.crl (hash: MfYoW02O8byo/pnAPczqCEfnNKC5AGp09gkD0HzeU4s=)
2: is8rJFkIshJvtMPQsNBVoFxTKBY.roa (hash: eXPJhyZn1FuLC+ECVYIsChabU+UtFgCuyBkgvqoFbIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:8c:57:e5:ac:47:0d:b9:0e:9d:f7:88:cf:d7:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d0965384dc44487a83171a6d5d05a94a6ad67c
Validity
Not Before: Nov 4 22:01:21 2025 GMT
Not After : Nov 5 22:01:21 2025 GMT
Subject: CN=e8956d196a0d8240c8cf5e7e328ee5d5c28d4b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:38:b1:50:8b:f9:b7:cb:86:70:c7:69:a3:b7:
1d:6f:7d:f2:48:66:14:e9:d5:3d:b9:5b:8b:85:59:
56:33:36:47:6f:86:49:3d:f4:87:be:d3:7b:cb:4d:
0e:d7:1f:e4:ea:0c:42:cb:7e:30:a2:a3:5e:78:8d:
e3:39:16:c0:b9:df:a2:ed:4c:ed:5a:37:f2:f7:b9:
d2:3a:d8:37:aa:7e:da:98:03:a1:cc:9f:c0:3d:ac:
6d:38:d2:9b:95:19:5a:94:cd:f5:c5:ad:a5:4d:51:
60:d8:1c:ce:b9:b1:6f:14:cd:9b:9d:d3:58:8b:62:
94:88:be:cf:4a:c8:2f:65:8a:6f:11:12:6f:57:e9:
a9:25:fb:88:43:e1:a3:53:62:70:ec:16:00:af:ce:
1f:de:5b:b5:65:ca:69:8a:99:51:d3:ea:73:6f:e3:
79:10:f5:3a:03:b4:e9:22:74:53:e4:8f:5d:09:29:
d6:10:11:48:80:33:b3:2f:de:c7:e4:35:03:4e:f4:
98:f2:03:b3:52:3c:7d:9a:5b:66:ad:d9:78:b7:64:
6f:3f:c8:68:31:ef:7f:04:38:01:36:0c:4b:59:66:
ef:d8:02:78:d3:d1:3a:8b:a4:d9:5d:0e:2e:f7:f9:
41:0c:59:f2:f6:ad:c9:53:83:14:7f:ee:db:82:84:
cb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:95:6D:19:6A:0D:82:40:C8:CF:5E:7E:32:8E:E5:D5:C2:8D:4B:41
X509v3 Authority Key Identifier:
keyid:43:D0:96:53:84:DC:44:48:7A:83:17:1A:6D:5D:05:A9:4A:6A:D6:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:20:b6:57:05:e9:c4:23:81:78:d8:14:58:2c:40:09:5f:42:
11:3f:3f:32:84:24:14:92:1d:0b:7c:08:ad:b7:11:b9:f5:f8:
22:d3:25:cc:9f:8d:4b:be:ab:9d:c6:c6:18:60:96:07:ce:ff:
0c:58:74:b7:18:a8:dd:b2:9e:9e:16:3e:44:c5:a1:ef:e0:53:
d5:71:00:d8:f8:0d:48:59:a4:6a:b0:b1:42:19:d8:84:fd:93:
5e:ec:b4:b3:8b:bb:66:6a:a3:7e:b4:3a:2f:dd:d4:ed:97:c7:
a5:c5:93:f8:0a:ca:76:fe:f5:64:ee:24:dc:17:c3:24:04:16:
16:ec:a1:17:20:d7:bf:70:f9:1d:bd:db:41:be:fe:3f:9d:b5:
7b:87:54:12:57:38:5c:d4:98:f1:ea:d4:aa:21:93:5f:6d:4c:
38:df:d3:a4:09:d5:19:4c:a8:be:2a:97:07:12:c0:cd:5e:f7:
3b:8f:8f:50:65:61:05:0f:4b:1d:db:46:1e:82:d6:d5:4d:39:
3d:08:65:a3:db:f0:a3:a8:b4:e1:95:b7:e5:35:a8:be:1e:86:
d6:74:1a:9b:ae:80:04:b9:b0:25:a2:8e:71:8a:c7:f7:af:bf:
f9:1a:0e:90:10:34:b8:7e:7f:c2:2a:c6:b1:fa:c9:56:54:a4:
17:18:99:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:37:17 2025 by rpki-client