
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.mft
File: qipweTi6Yv4Z5kdNrHh98_jP3uQ.mft (raw, json)
Hash identifier: IJDbFRwZ9Xb6bgxyfw/OUX6Cw+38PCw4SirlCK4C74M=
Subject key identifier: 1A:06:A2:2D:06:8B:0C:0D:EE:BE:35:48:A6:9C:7B:4F:9A:C4:EA:F3
Authority key identifier: AA:2A:70:79:38:BA:62:FE:19:E6:47:4D:AC:78:7D:F3:F8:CF:DE:E4
Certificate issuer: /CN=aa2a707938ba62fe19e6474dac787df3f8cfdee4
Certificate serial: 019A51507A7455C13A07ED133A09041AB4A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qipweTi6Yv4Z5kdNrHh98_jP3uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.mft
Manifest number: 0F90
Signing time: Wed 05 Nov 2025 00:00:19 +0000
Manifest this update: Wed 05 Nov 2025 00:00:19 +0000
Manifest next update: Thu 06 Nov 2025 00:00:19 +0000
Files and hashes: 1: qipweTi6Yv4Z5kdNrHh98_jP3uQ.crl (hash: 0CbQrqsYB1MX9emEGi/PD7xKw5CuMjOJEAgQdIqzRhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qipweTi6Yv4Z5kdNrHh98_jP3uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:7a:74:55:c1:3a:07:ed:13:3a:09:04:1a:b4:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa2a707938ba62fe19e6474dac787df3f8cfdee4
Validity
Not Before: Nov 5 00:00:19 2025 GMT
Not After : Nov 6 00:00:19 2025 GMT
Subject: CN=1a06a22d068b0c0deebe3548a69c7b4f9ac4eaf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1e:30:73:53:74:c4:17:e6:34:fc:80:94:f1:
6a:4a:08:69:ba:4c:fb:de:e2:d1:cc:bb:ca:49:ef:
fd:ea:50:85:f1:d9:45:7f:00:95:f4:1d:1a:bf:90:
33:e7:79:1b:db:4f:96:c9:27:10:df:4b:af:68:af:
54:18:6f:c7:1f:5b:20:11:0a:6a:4e:32:54:51:f1:
d7:1b:49:93:83:ed:de:f9:18:8e:c9:44:c5:19:c9:
f8:a1:b2:7a:78:c8:a3:3f:99:05:dd:99:6b:fb:2f:
b8:2a:12:23:87:d7:11:0d:8a:29:21:03:49:4f:24:
86:cc:28:ec:c5:e5:76:22:5f:60:c0:6a:68:a4:e3:
0f:25:ba:92:75:2e:93:18:87:5f:ec:a9:a8:7e:f3:
3c:6f:f9:d3:ba:dd:24:2f:c5:99:65:3b:89:69:36:
4f:0d:f0:cf:cb:74:f0:28:b9:bd:f9:07:fc:2a:0d:
80:40:14:1b:9e:c8:b5:fc:b8:b4:32:a0:73:7c:05:
2c:e7:83:23:82:7e:a6:4d:d0:f3:6a:bd:1a:3b:b9:
42:3d:93:e0:c4:9b:26:70:3f:7d:44:a5:e9:d1:49:
1d:a5:be:8a:b5:07:39:b7:d0:a4:0d:4b:1f:c4:39:
55:d8:00:e3:e5:e5:73:c5:79:d8:f1:81:33:5a:ff:
8c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:06:A2:2D:06:8B:0C:0D:EE:BE:35:48:A6:9C:7B:4F:9A:C4:EA:F3
X509v3 Authority Key Identifier:
keyid:AA:2A:70:79:38:BA:62:FE:19:E6:47:4D:AC:78:7D:F3:F8:CF:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qipweTi6Yv4Z5kdNrHh98_jP3uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:9b:e9:8a:8f:96:50:aa:bd:3e:0e:1f:ab:ce:97:4e:e2:e3:
3a:ff:cf:db:b6:0d:58:94:5d:d8:84:6e:80:ef:36:7f:4d:a2:
8b:58:97:55:d0:d1:a4:16:7e:49:41:9f:30:f0:e2:4b:53:29:
b0:62:1b:a5:f2:cc:f6:f9:6c:bf:38:46:63:2d:7b:07:14:65:
24:a9:ff:7a:b8:36:7f:0e:97:d5:4a:b3:9f:97:c4:8c:eb:af:
4c:8e:6a:d4:8a:fc:4a:65:fb:eb:ab:d4:b3:cd:b0:15:fc:f3:
06:0b:b9:ba:40:3e:8a:6b:5c:a7:09:d8:9a:ec:ef:e0:51:83:
74:60:61:c3:40:6f:b8:c4:f9:ac:bb:53:42:b5:67:f3:aa:43:
9c:ff:b8:a0:e5:78:b4:a1:d2:e4:b8:7a:c7:78:c5:40:49:09:
2a:b7:d3:4f:24:2e:75:7e:14:17:bc:6e:fa:d7:19:30:8d:46:
f3:e5:dc:7d:67:56:b8:cf:b9:31:27:66:a1:55:87:e0:43:5e:
c1:24:27:ae:ca:28:14:36:0e:35:47:84:5b:fc:51:84:84:be:
2d:99:ae:65:0c:b7:db:71:c3:a6:5b:84:7d:a5:33:da:6f:22:
1b:e9:a0:c6:9c:fe:2d:d9:29:7e:c1:ff:e1:3a:c4:63:54:cf:
f7:93:de:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRUHp0VcE6B+0TOgkEGrSoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMmE3MDc5MzhiYTYyZmUxOWU2NDc0ZGFjNzg3ZGYzZjhj
ZmRlZTQwHhcNMjUxMTA1MDAwMDE5WhcNMjUxMTA2MDAwMDE5WjAzMTEwLwYDVQQD
EygxYTA2YTIyZDA2OGIwYzBkZWViZTM1NDhhNjljN2I0ZjlhYzRlYWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzB4wc1N0xBfmNPyAlPFqSghpukz7
3uLRzLvKSe/96lCF8dlFfwCV9B0av5Az53kb20+WyScQ30uvaK9UGG/HH1sgEQpq
TjJUUfHXG0mTg+3e+RiOyUTFGcn4obJ6eMijP5kF3Zlr+y+4KhIjh9cRDYopIQNJ
TySGzCjsxeV2Il9gwGpopOMPJbqSdS6TGIdf7KmofvM8b/nTut0kL8WZZTuJaTZP
DfDPy3TwKLm9+Qf8Kg2AQBQbnsi1/Li0MqBzfAUs54Mjgn6mTdDzar0aO7lCPZPg
xJsmcD99RKXp0Ukdpb6KtQc5t9CkDUsfxDlV2ADj5eVzxXnY8YEzWv+MjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBoGoi0GiwwN7r41SKace0+axOrzMB8GA1UdIwQY
MBaAFKoqcHk4umL+GeZHTax4ffP4z97kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWlwd2VUaTZZdjRaNWtkTnJIaDk4X2pQM3VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85ZDQyZWYtNzRhNS00ZjgyLThhODMt
ZDcxNmY0MDY4MTM5LzEvcWlwd2VUaTZZdjRaNWtkTnJIaDk4X2pQM3VRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy85ZDQyZWYtNzRhNS00ZjgyLThhODMtZDcxNmY0MDY4MTM5
LzEvcWlwd2VUaTZZdjRaNWtkTnJIaDk4X2pQM3VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA05vpio+W
UKq9Pg4fq86XTuLjOv/P27YNWJRd2IRugO82f02ii1iXVdDRpBZ+SUGfMPDiS1Mp
sGIbpfLM9vlsvzhGYy17BxRlJKn/erg2fw6X1Uqzn5fEjOuvTI5q1Ir8SmX766vU
s82wFfzzBgu5ukA+imtcpwnYmuzv4FGDdGBhw0BvuMT5rLtTQrVn86pDnP+4oOV4
tKHS5Lh6x3jFQEkJKrfTTyQudX4UF7xu+tcZMI1G8+XcfWdWuM+5MSdmoVWH4ENe
wSQnrsooFDYONUeEW/xRhIS+LZmuZQy323HDpluEfaUz2m8iG+mgxpz+LdkpfsH/
4TrEY1TP95PerA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:26:20 2025 by rpki-client