Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
File: q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft (raw, json)
Hash identifier: b2xUnr0ewhGSArFJ3LaS/oA69CDtmnIUQQ11x2JJqFM=
Subject key identifier: AD:32:BF:CA:55:59:DA:C0:23:7D:3E:5F:C6:9D:BC:0B:D0:04:1C:C4
Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
Certificate issuer: /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Certificate serial: 019A4D7396BA0C15FBFFF00B1FAE4A661933
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
Manifest number: 176F
Signing time: Tue 04 Nov 2025 06:00:12 +0000
Manifest this update: Tue 04 Nov 2025 06:00:12 +0000
Manifest next update: Wed 05 Nov 2025 06:00:12 +0000
Files and hashes: 1: axmcs0YwsBBvp13WSQvabhXKgO8.roa (hash: APz6BdxBlveXPEBlyV0DL9bK8BYpnxs2Kict8QvSCMo=)
2: q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl (hash: 0MQhJ4jfqBVg41FA5Z5VLHaiUhc4D0yaIOvcZCAx30M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:96:ba:0c:15:fb:ff:f0:0b:1f:ae:4a:66:19:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Validity
Not Before: Nov 4 06:00:12 2025 GMT
Not After : Nov 5 06:00:12 2025 GMT
Subject: CN=ad32bfca5559dac0237d3e5fc69dbc0bd0041cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:99:3b:d2:3c:72:5f:91:31:7b:77:f9:77:18:
85:07:25:8d:9b:d1:b5:3b:e6:9b:c4:03:10:8a:b8:
67:28:6e:93:22:45:95:31:8e:af:25:5a:fc:20:cb:
d7:d6:64:8f:ec:4e:f2:46:b5:ce:18:a4:1f:7d:6a:
41:46:68:30:c6:17:a8:96:88:6d:86:23:db:11:74:
3c:86:dd:88:e7:d6:44:93:3f:ba:8c:1c:86:ad:89:
cd:12:64:bc:d1:1d:7e:d0:3a:d2:93:bf:f1:21:31:
fe:5a:6c:e9:41:83:43:a0:27:25:a1:f3:f5:53:f1:
f2:15:88:12:31:b4:bb:67:50:11:d4:bd:aa:c2:1b:
8f:aa:05:37:e9:a8:fb:19:aa:e5:6d:f2:80:bb:67:
23:04:5b:23:d1:d9:67:eb:9e:85:07:1d:c4:2b:8d:
6b:4a:04:87:b2:15:de:02:2f:2e:3d:ec:78:4b:e7:
19:ae:b6:97:16:ec:6d:75:2f:84:57:54:00:ff:16:
f1:fa:fa:b4:71:8b:3d:0e:d9:20:46:d2:25:84:64:
2d:57:51:42:92:58:1d:b2:09:aa:7d:07:d0:09:7d:
62:8f:b1:be:ee:dc:84:94:cd:d9:ef:f2:49:cd:3c:
84:17:22:b4:3a:7d:e8:2c:14:9a:2a:99:84:9b:49:
24:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:32:BF:CA:55:59:DA:C0:23:7D:3E:5F:C6:9D:BC:0B:D0:04:1C:C4
X509v3 Authority Key Identifier:
keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:11:c1:03:fd:6d:82:ee:04:2c:d5:6c:db:f9:d5:ea:73:a3:
a1:44:4c:e2:c6:33:ad:f3:c2:40:f6:42:d1:e7:fa:33:7d:fa:
c8:31:2f:c2:ca:8d:71:96:6d:fb:9f:e1:d3:7a:9a:7d:21:5c:
0b:c8:e0:8f:b2:0b:49:7c:f0:93:87:ef:bd:25:c4:9a:49:d6:
04:4a:8f:10:98:f5:b8:5b:7e:cc:8f:19:cb:42:67:d8:67:76:
5f:7d:17:ce:b9:cd:1a:fd:f3:f4:03:45:a2:4a:71:21:27:18:
69:1e:7e:0b:9e:97:33:ab:a2:86:4e:97:32:20:5a:dc:0d:c8:
0b:d2:07:46:0b:32:ce:7f:e9:22:51:11:67:82:27:8b:05:69:
bd:06:a6:c6:fb:f7:62:73:1a:5d:ae:d0:c5:97:44:08:cc:57:
ee:25:fa:30:4f:d7:48:32:c9:37:33:e9:a7:e9:6a:49:f4:ec:
c8:57:a7:ab:74:98:66:0c:1c:56:31:ba:7d:f7:af:d4:c8:d6:
e7:70:e2:51:0f:39:e0:ff:fc:25:04:55:7f:b2:8d:f6:5a:bd:
ed:fe:b9:21:2b:bd:a0:30:42:b4:71:64:b0:bb:97:c8:2b:81:
3d:1d:a5:4b:e5:41:ef:4f:fe:a1:12:93:4a:76:05:26:f8:4b:
3f:a0:44:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNc5a6DBX7//ALH65KZhkzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiNzFlOWIxM2Y1YzMzOWE1ODY5MmVlYWJlNzJlYWE0MDZi
YmJkN2QwHhcNMjUxMTA0MDYwMDEyWhcNMjUxMTA1MDYwMDEyWjAzMTEwLwYDVQQD
EyhhZDMyYmZjYTU1NTlkYWMwMjM3ZDNlNWZjNjlkYmMwYmQwMDQxY2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpk70jxyX5Exe3f5dxiFByWNm9G1
O+abxAMQirhnKG6TIkWVMY6vJVr8IMvX1mSP7E7yRrXOGKQffWpBRmgwxheoloht
hiPbEXQ8ht2I59ZEkz+6jByGrYnNEmS80R1+0DrSk7/xITH+WmzpQYNDoCclofP1
U/HyFYgSMbS7Z1AR1L2qwhuPqgU36aj7GarlbfKAu2cjBFsj0dln656FBx3EK41r
SgSHshXeAi8uPex4S+cZrraXFuxtdS+EV1QA/xbx+vq0cYs9DtkgRtIlhGQtV1FC
klgdsgmqfQfQCX1ij7G+7tyElM3Z7/JJzTyEFyK0On3oLBSaKpmEm0kklQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK0yv8pVWdrAI30+X8advAvQBBzEMB8GA1UdIwQY
MBaAFKtx6bE/XDOaWGku6r5y6qQGu719MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTNIcHNUOWNNNXBZYVM3cXZuTHFwQWE3dlgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82YmEzOWMtZWYxZC00ZDQ4LTk4MmIt
Y2Y0YjkwMDk5N2EwLzEvcTNIcHNUOWNNNXBZYVM3cXZuTHFwQWE3dlgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS82YmEzOWMtZWYxZC00ZDQ4LTk4MmItY2Y0YjkwMDk5N2Ew
LzEvcTNIcHNUOWNNNXBZYVM3cXZuTHFwQWE3dlgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcRHBA/1t
gu4ELNVs2/nV6nOjoURM4sYzrfPCQPZC0ef6M336yDEvwsqNcZZt+5/h03qafSFc
C8jgj7ILSXzwk4fvvSXEmknWBEqPEJj1uFt+zI8Zy0Jn2Gd2X30XzrnNGv3z9ANF
okpxIScYaR5+C56XM6uihk6XMiBa3A3IC9IHRgsyzn/pIlERZ4IniwVpvQamxvv3
YnMaXa7QxZdECMxX7iX6ME/XSDLJNzPpp+lqSfTsyFenq3SYZgwcVjG6ffev1MjW
53DiUQ854P/8JQRVf7KN9lq97f65ISu9oDBCtHFksLuXyCuBPR2lS+VB70/+oRKT
SnYFJvhLP6BEnQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:44 2025 by rpki-client