Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.mft
File: 1qcbToaUQX67vPYmi5yPljFwsfE.mft (raw, json)
Hash identifier: Z3Ki9hiFyZRp7ll9e6Yp50uF0kdvAnCsTDZxgV06jgA=
Subject key identifier: 50:C9:B9:3A:37:BE:2E:5F:4C:69:B6:EA:60:DB:0B:2D:FD:F7:18:E1
Authority key identifier: D6:A7:1B:4E:86:94:41:7E:BB:BC:F6:26:8B:9C:8F:96:31:70:B1:F1
Certificate issuer: /CN=d6a71b4e8694417ebbbcf6268b9c8f963170b1f1
Certificate serial: 019A4F61FE3823B5FF9FE95B629ED5BE2623
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qcbToaUQX67vPYmi5yPljFwsfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.mft
Manifest number: 06E1
Signing time: Tue 04 Nov 2025 15:00:13 +0000
Manifest this update: Tue 04 Nov 2025 15:00:13 +0000
Manifest next update: Wed 05 Nov 2025 15:00:13 +0000
Files and hashes: 1: 1qcbToaUQX67vPYmi5yPljFwsfE.crl (hash: /sjpBuuZsdTxYypkcf12ifm1ZDlJ/zCRwMSssVN8dnM=)
2: cPWanhkOF5JFf7ndWQEsgDaOym4.roa (hash: hNMT1d2ZHlvJJQiGYjNYvL4LotmJH6VgqTxIxCqCmaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1qcbToaUQX67vPYmi5yPljFwsfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:61:fe:38:23:b5:ff:9f:e9:5b:62:9e:d5:be:26:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6a71b4e8694417ebbbcf6268b9c8f963170b1f1
Validity
Not Before: Nov 4 15:00:13 2025 GMT
Not After : Nov 5 15:00:13 2025 GMT
Subject: CN=50c9b93a37be2e5f4c69b6ea60db0b2dfdf718e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:91:0d:36:bb:3b:3b:70:24:1c:ad:59:9b:80:
7d:3d:45:ea:c0:ef:9c:0b:9a:6a:b9:63:c2:a0:22:
36:fd:25:0a:aa:7d:b6:58:3c:2c:2f:74:97:30:8b:
6d:b8:e0:0d:f4:a6:df:91:0c:2a:9c:34:8d:91:bc:
79:57:ea:cd:3e:df:eb:ae:2e:6e:fa:46:5b:25:6d:
6a:43:ad:37:56:8d:2d:d7:e8:73:58:cd:40:da:8a:
73:25:5c:c2:89:b4:de:89:f3:1c:69:63:eb:0f:d3:
9c:bd:75:81:37:c1:a9:a8:bd:3b:22:9e:64:7d:80:
e1:db:e1:5a:b8:4f:10:e8:81:a3:75:11:2b:e3:b4:
ea:08:1d:1d:3b:21:ed:fb:02:8f:ca:9f:5c:34:e5:
90:24:12:c6:87:3c:8d:f3:5d:74:07:3f:a1:b9:5f:
23:18:ed:9f:96:2b:b8:c0:df:e7:a5:64:17:f3:41:
54:d7:ec:04:5e:23:f7:0a:94:e3:38:36:e3:09:43:
92:1d:31:de:7c:d9:ab:79:4c:fd:96:fb:9a:a6:b8:
d8:56:f5:06:14:d6:b4:8e:6f:89:dd:ee:15:0b:06:
22:64:b6:49:b6:1e:d4:62:55:74:01:0c:70:9c:39:
be:92:1d:8e:88:43:26:be:f3:01:8b:ea:79:d0:fe:
53:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C9:B9:3A:37:BE:2E:5F:4C:69:B6:EA:60:DB:0B:2D:FD:F7:18:E1
X509v3 Authority Key Identifier:
keyid:D6:A7:1B:4E:86:94:41:7E:BB:BC:F6:26:8B:9C:8F:96:31:70:B1:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qcbToaUQX67vPYmi5yPljFwsfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:1a:eb:67:c2:7a:e5:1d:11:45:c6:cc:4e:e2:a6:74:2d:6b:
26:74:dc:d0:f3:ec:01:44:c4:a1:50:cf:f5:a1:61:68:dd:88:
54:63:60:7a:c6:ef:d8:7b:fc:ad:f7:09:07:b7:e3:c0:d7:44:
e7:b3:ec:7c:23:53:2f:a3:5d:29:a5:74:36:aa:10:a3:ba:3f:
62:9a:40:40:2a:e1:86:f1:6f:cb:da:97:e5:6d:92:7b:e5:52:
62:51:1f:b4:2e:48:42:b8:6a:0b:20:ce:2f:32:0f:c0:af:83:
43:ac:1c:8c:e7:c8:77:5c:a3:98:82:01:6a:09:9f:7a:30:7b:
c5:79:f1:5d:e0:22:c1:7b:d0:52:49:9b:7f:a3:fd:44:6a:f8:
79:55:a2:34:d9:4e:41:43:c1:de:e5:e4:8b:cd:ca:91:d5:c6:
06:a1:79:33:14:ae:4a:67:74:aa:c5:41:2a:fe:df:ac:44:05:
a5:da:bc:62:53:d9:34:b0:32:9f:e9:d4:32:e9:55:ab:29:07:
ae:bb:b0:9d:22:be:8d:f9:96:49:b2:82:d8:ca:f6:c7:53:11:
0d:1f:71:a8:d7:30:c8:5b:91:5e:2c:63:e9:df:51:f3:fa:54:
e0:7f:a4:54:e9:89:b1:6f:00:c6:90:83:77:07:b1:db:0b:76:
06:e1:e4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:22:10 2025 by rpki-client