Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft
File: q8GRjB9F5uwX2spnp60ZPK8Et7I.mft (raw, json)
Hash identifier: zYHxm0F30jYCeu6YpEKXS2Ogi+twqX9O4OU1UpwtxB0=
Subject key identifier: 26:18:9D:1A:4D:61:A1:1F:DE:CF:87:50:0A:4A:0C:43:FE:00:EA:D2
Authority key identifier: AB:C1:91:8C:1F:45:E6:EC:17:DA:CA:67:A7:AD:19:3C:AF:04:B7:B2
Certificate issuer: /CN=abc1918c1f45e6ec17daca67a7ad193caf04b7b2
Certificate serial: 019A5150C763AB73C7132A8D8E3E1A2D91EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft
Manifest number: 0583
Signing time: Wed 05 Nov 2025 00:00:39 +0000
Manifest this update: Wed 05 Nov 2025 00:00:39 +0000
Manifest next update: Thu 06 Nov 2025 00:00:39 +0000
Files and hashes: 1: L4RKq9blDuun-Ov7h4-EXCJDU7o.roa (hash: rV2ghgo1vc0bF0beR2sZL8zKS4novhD+fyLSyA4fGEk=)
2: TKYCIQIu4F23JxsEDfGIzBctkEc.roa (hash: EAnr/9lW4r6/S4hhnfhRdmsx8JCo45r2zRW9cF9kcLo=)
3: q8GRjB9F5uwX2spnp60ZPK8Et7I.crl (hash: wmjLmuEJdHd+/4OutWENeCqcoK1wzWLsyroH6kAomrc=)
4: qvNjDJ9eS48JlV1R7hV7YEei3s0.roa (hash: 7WHrrqOQZDnykzDETa13+ZYZFeNzxM1H1+r8MstF8cE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:c7:63:ab:73:c7:13:2a:8d:8e:3e:1a:2d:91:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc1918c1f45e6ec17daca67a7ad193caf04b7b2
Validity
Not Before: Nov 5 00:00:39 2025 GMT
Not After : Nov 6 00:00:39 2025 GMT
Subject: CN=26189d1a4d61a11fdecf87500a4a0c43fe00ead2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b0:38:8b:f1:4a:ac:aa:69:0a:13:db:7e:f3:
a8:8c:62:be:94:3d:5a:ed:ee:04:78:33:d3:83:5d:
5e:a4:bd:9b:6d:04:b1:63:17:6f:e8:5b:89:4f:d6:
8d:f5:22:1a:75:6f:85:5e:3b:2e:7d:50:a2:5c:e7:
83:fb:a7:74:5e:1d:2b:d3:2d:86:42:0b:0c:4e:0c:
74:0e:6a:13:74:30:7c:9f:85:f0:7a:3f:3f:0a:8d:
64:1a:80:a6:f0:04:3f:27:20:eb:16:96:be:af:ee:
74:71:09:42:d9:83:52:58:68:d0:29:07:62:37:e8:
36:ae:ae:02:84:67:82:13:a7:fe:f5:f3:b8:32:04:
50:1d:b0:e6:09:88:90:77:2f:78:54:1d:13:0e:58:
89:ed:12:2d:37:5c:2e:38:17:7a:e9:73:a1:f7:ce:
2a:ad:49:be:2c:ba:d7:b0:32:e7:36:eb:03:31:a1:
ae:8b:da:2a:7a:d2:77:bc:1e:e3:d8:d1:41:18:53:
25:37:dd:16:0f:13:a5:f7:7c:b1:0b:25:c1:78:4c:
28:b5:ec:0f:e1:57:d2:1a:34:a1:6e:06:6d:5f:ec:
a1:42:1d:5e:de:c7:7c:84:5d:76:29:74:5d:1e:fb:
ed:32:3e:0a:3c:25:87:64:47:a1:5f:7b:73:5a:f5:
e3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:18:9D:1A:4D:61:A1:1F:DE:CF:87:50:0A:4A:0C:43:FE:00:EA:D2
X509v3 Authority Key Identifier:
keyid:AB:C1:91:8C:1F:45:E6:EC:17:DA:CA:67:A7:AD:19:3C:AF:04:B7:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:58:ea:46:08:6b:04:c9:23:01:2b:b6:97:e0:81:a7:12:19:
4d:3a:c9:ae:6f:bc:a5:a9:13:64:13:b8:ab:f6:01:6f:19:50:
bd:8f:a2:ca:96:c7:aa:c8:9c:b9:09:38:90:39:65:73:42:e8:
d8:2c:af:6f:d8:e7:d1:bf:ef:fb:f4:ad:21:f8:86:cf:21:7e:
59:70:77:a2:03:f7:9f:39:d2:d5:af:e0:bc:4a:28:7e:1f:d0:
b7:07:cf:83:75:06:c2:fc:a8:1e:65:0d:4d:18:cb:ab:22:f6:
30:e9:4e:cc:44:c3:97:55:3c:30:6d:e5:d9:2f:4d:05:a9:de:
e5:a1:26:49:ea:fe:a0:94:46:55:1b:3a:46:86:31:c4:c4:85:
dd:b3:0c:07:d9:ac:a5:8e:78:28:6c:d5:4c:d1:c7:f2:8e:53:
81:9e:63:ad:cb:0d:44:b2:cc:28:4e:d4:52:0a:0a:ae:92:dd:
7c:59:8c:7f:05:1e:23:42:61:fe:8f:d7:00:44:22:05:35:39:
2c:97:26:7f:7d:2a:61:bb:68:21:61:d9:b3:22:82:e5:74:43:
81:8b:45:4b:9a:e9:d2:b7:4b:4e:fa:bb:5f:10:fb:85:b0:95:
4c:ea:d8:dc:56:0a:af:8c:f2:80:77:05:1f:2b:62:a1:9c:24:
61:7f:e0:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRUMdjq3PHEyqNjj4aLZHuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYzE5MThjMWY0NWU2ZWMxN2RhY2E2N2E3YWQxOTNjYWYw
NGI3YjIwHhcNMjUxMTA1MDAwMDM5WhcNMjUxMTA2MDAwMDM5WjAzMTEwLwYDVQQD
EygyNjE4OWQxYTRkNjFhMTFmZGVjZjg3NTAwYTRhMGM0M2ZlMDBlYWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7A4i/FKrKppChPbfvOojGK+lD1a
7e4EeDPTg11epL2bbQSxYxdv6FuJT9aN9SIadW+FXjsufVCiXOeD+6d0Xh0r0y2G
QgsMTgx0DmoTdDB8n4Xwej8/Co1kGoCm8AQ/JyDrFpa+r+50cQlC2YNSWGjQKQdi
N+g2rq4ChGeCE6f+9fO4MgRQHbDmCYiQdy94VB0TDliJ7RItN1wuOBd66XOh984q
rUm+LLrXsDLnNusDMaGui9oqetJ3vB7j2NFBGFMlN90WDxOl93yxCyXBeEwotewP
4VfSGjShbgZtX+yhQh1e3sd8hF12KXRdHvvtMj4KPCWHZEehX3tzWvXjmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCYYnRpNYaEf3s+HUApKDEP+AOrSMB8GA1UdIwQY
MBaAFKvBkYwfRebsF9rKZ6etGTyvBLeyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcThHUmpCOUY1dXdYMnNwbnA2MFpQSzhFdDdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84Zjg4ZGUtZGFlZC00OGQyLWI3MDEt
NmJiNWZlNjY1NzUwLzEvcThHUmpCOUY1dXdYMnNwbnA2MFpQSzhFdDdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi84Zjg4ZGUtZGFlZC00OGQyLWI3MDEtNmJiNWZlNjY1NzUw
LzEvcThHUmpCOUY1dXdYMnNwbnA2MFpQSzhFdDdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABFjqRghr
BMkjASu2l+CBpxIZTTrJrm+8pakTZBO4q/YBbxlQvY+iypbHqsicuQk4kDllc0Lo
2Cyvb9jn0b/v+/StIfiGzyF+WXB3ogP3nznS1a/gvEoofh/QtwfPg3UGwvyoHmUN
TRjLqyL2MOlOzETDl1U8MG3l2S9NBane5aEmSer+oJRGVRs6RoYxxMSF3bMMB9ms
pY54KGzVTNHH8o5TgZ5jrcsNRLLMKE7UUgoKrpLdfFmMfwUeI0Jh/o/XAEQiBTU5
LJcmf30qYbtoIWHZsyKC5XRDgYtFS5rp0rdLTvq7XxD7hbCVTOrY3FYKr4zygHcF
HytioZwkYX/gtw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 06:33:36 2025 by rpki-client