Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
File: QJvXHM6jftmnmNWgabIWnPTU5ZI.mft (raw, json)
Hash identifier: Yu6BT3nRaMfuac3bGO+MS2VUWfgAktooEINgq8SO3dQ=
Subject key identifier: 41:8F:82:48:8F:93:87:EF:74:EB:56:62:46:D5:74:3C:14:2A:E1:77
Authority key identifier: 40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92
Certificate issuer: /CN=409bd71ccea37ed9a798d5a069b2169cf4d4e592
Certificate serial: 019A5187800B02DB0224CC545B8663F5C748
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
Manifest number: 126A
Signing time: Wed 05 Nov 2025 01:00:25 +0000
Manifest this update: Wed 05 Nov 2025 01:00:25 +0000
Manifest next update: Thu 06 Nov 2025 01:00:25 +0000
Files and hashes: 1: QJvXHM6jftmnmNWgabIWnPTU5ZI.crl (hash: cwZcGM0JUsr7aziinnn9pWAZNjqvrYfHbN9Cr4+GYuA=)
2: lvvS-y_t3pi3cv-oXJNHuuwFX60.roa (hash: fbIaohthqLUB14sBjDthABWLRfajk00zaK8xsJAksno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:80:0b:02:db:02:24:cc:54:5b:86:63:f5:c7:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=409bd71ccea37ed9a798d5a069b2169cf4d4e592
Validity
Not Before: Nov 5 01:00:25 2025 GMT
Not After : Nov 6 01:00:25 2025 GMT
Subject: CN=418f82488f9387ef74eb566246d5743c142ae177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:af:08:a2:1b:7c:39:69:a3:82:64:d1:00:f5:
5a:e5:7e:37:55:fd:87:47:67:ce:2d:18:f1:e4:8b:
ab:a3:1a:c0:ce:7f:e1:9b:e4:22:55:b6:7b:88:33:
3c:2f:d0:9f:ab:5a:03:af:22:59:80:c9:01:3a:f9:
09:1d:38:33:fb:2f:3a:f4:a7:03:78:d0:21:da:6f:
6a:6d:d2:4d:3c:b9:76:52:20:eb:9d:e3:df:b4:a2:
21:c2:fe:e6:46:cb:f9:87:eb:0a:62:55:b5:c9:b8:
29:91:e0:02:b6:0c:0d:4c:df:68:50:b7:4a:3f:a5:
1f:35:e2:a3:9b:19:4f:2e:7c:44:bd:53:d6:01:51:
26:2c:5b:db:10:c8:ce:9c:0c:16:98:fc:05:b4:73:
e2:a4:e0:78:8a:f3:e6:72:09:1d:a6:03:0f:5d:35:
c8:f8:90:cf:62:74:5f:f2:9b:61:eb:9b:f5:6f:13:
cb:3a:8f:62:b0:00:5a:5b:9e:eb:8d:2d:ae:ba:6c:
a9:dd:81:3b:db:6e:fa:e1:dd:a7:05:3e:04:53:34:
6d:2b:68:5b:e9:32:08:b4:41:45:bd:ad:24:b4:a0:
2c:d5:9d:f0:a3:8a:96:13:a5:a8:1a:14:1a:a1:a2:
c9:cf:94:3d:14:fd:c4:11:bf:c9:b2:18:4d:08:82:
58:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:8F:82:48:8F:93:87:EF:74:EB:56:62:46:D5:74:3C:14:2A:E1:77
X509v3 Authority Key Identifier:
keyid:40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:6c:ff:cf:9b:74:62:e1:e6:2d:64:40:bf:ab:7e:e7:c5:5e:
ed:c7:c4:41:10:00:6a:76:18:1b:1b:bf:d0:94:5b:e6:26:13:
3e:a8:95:94:ab:af:eb:80:af:8e:a5:69:d8:a7:cd:d7:52:eb:
17:58:ad:b1:3f:57:aa:f8:c9:a5:7e:08:db:03:30:60:35:ab:
18:c4:70:94:c7:8e:23:16:4d:ef:8d:9b:94:6a:39:ac:b1:35:
f7:56:a1:48:71:03:ac:b1:54:5c:45:06:9b:d1:97:4e:11:fb:
0a:f2:16:fb:7c:ab:b8:e6:11:39:a2:1f:aa:0f:89:52:e2:98:
db:b9:c0:4b:41:fd:33:3b:4d:fb:b5:be:36:d4:c1:6d:7d:70:
59:b4:df:28:ea:15:ce:c1:79:83:6e:23:12:8d:02:25:5f:2a:
0b:f3:a9:ab:27:1a:f3:7b:e0:4e:9c:61:7d:a6:f8:7e:e8:6c:
16:8a:21:0f:a8:79:bc:f6:60:0d:aa:e1:a9:90:00:56:5f:2e:
72:1c:8a:8d:cc:e9:ec:0f:a6:bd:a3:49:f8:51:da:04:6f:c7:
c6:3d:44:58:1b:03:8f:61:1e:dc:bc:3f:7c:37:c1:a1:e7:84:
ff:e8:a7:25:3e:56:f0:2e:95:36:d6:9d:95:cf:06:0e:e6:8d:
72:6f:1a:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRh4ALAtsCJMxUW4Zj9cdIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwOWJkNzFjY2VhMzdlZDlhNzk4ZDVhMDY5YjIxNjljZjRk
NGU1OTIwHhcNMjUxMTA1MDEwMDI1WhcNMjUxMTA2MDEwMDI1WjAzMTEwLwYDVQQD
Eyg0MThmODI0ODhmOTM4N2VmNzRlYjU2NjI0NmQ1NzQzYzE0MmFlMTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAma8Ioht8OWmjgmTRAPVa5X43Vf2H
R2fOLRjx5IuroxrAzn/hm+QiVbZ7iDM8L9Cfq1oDryJZgMkBOvkJHTgz+y869KcD
eNAh2m9qbdJNPLl2UiDrnePftKIhwv7mRsv5h+sKYlW1ybgpkeACtgwNTN9oULdK
P6UfNeKjmxlPLnxEvVPWAVEmLFvbEMjOnAwWmPwFtHPipOB4ivPmcgkdpgMPXTXI
+JDPYnRf8pth65v1bxPLOo9isABaW57rjS2uumyp3YE722764d2nBT4EUzRtK2hb
6TIItEFFva0ktKAs1Z3wo4qWE6WoGhQaoaLJz5Q9FP3EEb/JshhNCIJYLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGPgkiPk4fvdOtWYkbVdDwUKuF3MB8GA1UdIwQY
MBaAFECb1xzOo37Zp5jVoGmyFpz01OWSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUp2WEhNNmpmdG1ubU5XZ2FiSVduUFRVNVpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yMjIzOTktZWNmMC00MzYwLWFkMzQt
MmJmODc0YTY3MWU4LzEvUUp2WEhNNmpmdG1ubU5XZ2FiSVduUFRVNVpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yMjIzOTktZWNmMC00MzYwLWFkMzQtMmJmODc0YTY3MWU4
LzEvUUp2WEhNNmpmdG1ubU5XZ2FiSVduUFRVNVpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm2z/z5t0
YuHmLWRAv6t+58Ve7cfEQRAAanYYGxu/0JRb5iYTPqiVlKuv64CvjqVp2KfN11Lr
F1itsT9XqvjJpX4I2wMwYDWrGMRwlMeOIxZN742blGo5rLE191ahSHEDrLFUXEUG
m9GXThH7CvIW+3yruOYROaIfqg+JUuKY27nAS0H9MztN+7W+NtTBbX1wWbTfKOoV
zsF5g24jEo0CJV8qC/Opqyca83vgTpxhfab4fuhsFoohD6h5vPZgDarhqZAAVl8u
chyKjczp7A+mvaNJ+FHaBG/Hxj1EWBsDj2Ee3Lw/fDfBoeeE/+inJT5W8C6VNtad
lc8GDuaNcm8aQw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:08:13 2025 by rpki-client