Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
File: QvGiTID9yjKWRFc65tYcny43Ttg.mft (raw, json)
Hash identifier: 5iD/qzvifRr6NPz0PTA0jePPlt/zbZWqJ/ZY4M3m9VA=
Subject key identifier: 9F:DA:7E:48:E7:2F:4A:31:EE:F5:DE:E1:6E:B4:3F:04:C0:B2:8E:A7
Authority key identifier: 42:F1:A2:4C:80:FD:CA:32:96:44:57:3A:E6:D6:1C:9F:2E:37:4E:D8
Certificate issuer: /CN=42f1a24c80fdca329644573ae6d61c9f2e374ed8
Certificate serial: 019A522CB553E27176E40014038D858E3A1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
Manifest number: 1715
Signing time: Wed 05 Nov 2025 04:00:52 +0000
Manifest this update: Wed 05 Nov 2025 04:00:52 +0000
Manifest next update: Thu 06 Nov 2025 04:00:52 +0000
Files and hashes: 1: I4AtuDZrbSqrgt1jAfNEMLFaaig.roa (hash: 7wTj3H6so/8/7mTO73IV6vt8mViKC1vPmg3wdN+1rZ0=)
2: IAPxu4HRLcUJCMnInPlbG2uB4Mo.roa (hash: UkwEFu/9WcHNWqkhhJVrUVhhQx3PtWZnB4zT5tjJmec=)
3: QvGiTID9yjKWRFc65tYcny43Ttg.crl (hash: E2CPZ6yNakrwBsGS9APte/zm74Qya8LFUxhbpSVu/aA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:b5:53:e2:71:76:e4:00:14:03:8d:85:8e:3a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f1a24c80fdca329644573ae6d61c9f2e374ed8
Validity
Not Before: Nov 5 04:00:52 2025 GMT
Not After : Nov 6 04:00:52 2025 GMT
Subject: CN=9fda7e48e72f4a31eef5dee16eb43f04c0b28ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:24:dd:ef:02:4d:a0:9e:3b:57:11:f1:c5:f0:
3c:d1:92:94:94:3d:16:32:18:6f:02:c9:4f:2b:b2:
79:08:e2:b2:38:60:22:2d:8a:59:a4:ae:51:a2:46:
e5:c9:70:c2:d7:10:cb:f1:93:31:c6:13:be:b0:5d:
1c:0b:7d:2e:c5:12:cf:e2:9d:02:f7:b5:95:6f:96:
54:9e:66:d7:bd:4b:14:21:fe:03:92:a3:1f:df:22:
3b:fc:76:02:e6:bb:14:8f:94:a4:a0:68:3f:4c:11:
41:6f:5d:e7:ce:c3:0a:25:e8:01:dd:0f:e0:58:4d:
f6:3d:2b:51:3d:5f:5a:8e:99:d8:20:92:f6:e9:32:
ff:46:80:45:7f:14:d1:6a:72:dd:04:38:ee:9b:30:
7e:0c:eb:e7:12:30:d0:76:47:c4:26:43:ca:06:87:
c5:ec:61:a9:e4:c4:6a:ce:db:02:1e:34:28:ac:1e:
1d:22:53:e2:f2:e0:dc:1f:c4:04:59:a9:eb:8f:34:
ea:bb:da:19:bb:ec:e2:c9:8e:0d:06:a7:0b:29:53:
9b:3a:48:3e:dc:d5:24:de:0d:d6:53:93:01:f4:54:
98:7e:6d:74:95:92:16:61:df:e1:a5:82:fa:b5:3f:
95:3c:95:fd:c5:26:3d:7e:5e:79:ff:50:28:bf:ce:
bc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:DA:7E:48:E7:2F:4A:31:EE:F5:DE:E1:6E:B4:3F:04:C0:B2:8E:A7
X509v3 Authority Key Identifier:
keyid:42:F1:A2:4C:80:FD:CA:32:96:44:57:3A:E6:D6:1C:9F:2E:37:4E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:f6:98:62:4a:45:0b:a7:1c:49:14:5a:13:0d:79:e1:e6:52:
87:b9:fe:0c:91:b0:d4:f4:3d:75:66:5a:04:25:30:a1:49:a5:
59:35:fd:31:bc:5f:e7:21:00:a8:e0:74:9d:7a:62:60:05:46:
14:32:60:75:13:b0:bb:1c:b5:ab:c7:1a:81:56:4e:08:29:65:
1a:73:34:45:ee:8e:a5:a9:48:41:08:8e:fe:43:3f:e3:a3:1e:
8b:93:bb:f8:89:b7:56:ff:d3:dc:a3:b4:b5:86:33:a8:9d:2f:
72:8d:e1:1e:a9:b7:76:68:1d:bc:83:ae:de:78:f5:14:56:3e:
af:6c:4c:c3:bf:ec:21:98:58:bf:b2:17:9b:99:fa:65:5f:e2:
68:cf:94:c1:fd:dd:ae:d7:0d:8e:d5:3e:df:97:66:dd:01:dd:
db:0a:7b:48:1e:11:08:95:68:84:c5:30:05:e0:9c:9d:0a:a1:
e6:68:21:0c:dc:27:4e:9e:2d:cc:85:71:0c:03:07:72:b2:31:
f1:30:23:7d:01:b7:44:9d:33:01:2d:e4:f9:03:c2:c9:7e:af:
a2:30:59:5a:59:d1:ca:d8:b3:a2:a6:dd:dc:75:d0:be:12:b0:
39:9f:18:89:ee:38:bc:67:d7:fa:d7:cb:b4:31:a9:16:ca:0a:
ee:76:1b:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSLLVT4nF25AAUA42FjjocMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyZjFhMjRjODBmZGNhMzI5NjQ0NTczYWU2ZDYxYzlmMmUz
NzRlZDgwHhcNMjUxMTA1MDQwMDUyWhcNMjUxMTA2MDQwMDUyWjAzMTEwLwYDVQQD
Eyg5ZmRhN2U0OGU3MmY0YTMxZWVmNWRlZTE2ZWI0M2YwNGMwYjI4ZWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCTd7wJNoJ47VxHxxfA80ZKUlD0W
MhhvAslPK7J5COKyOGAiLYpZpK5RokblyXDC1xDL8ZMxxhO+sF0cC30uxRLP4p0C
97WVb5ZUnmbXvUsUIf4DkqMf3yI7/HYC5rsUj5SkoGg/TBFBb13nzsMKJegB3Q/g
WE32PStRPV9ajpnYIJL26TL/RoBFfxTRanLdBDjumzB+DOvnEjDQdkfEJkPKBofF
7GGp5MRqztsCHjQorB4dIlPi8uDcH8QEWanrjzTqu9oZu+ziyY4NBqcLKVObOkg+
3NUk3g3WU5MB9FSYfm10lZIWYd/hpYL6tT+VPJX9xSY9fl55/1Aov868xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ/afkjnL0ox7vXe4W60PwTAso6nMB8GA1UdIwQY
MBaAFELxokyA/coylkRXOubWHJ8uN07YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXZHaVRJRDl5aktXUkZjNjV0WWNueTQzVHRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9mZWQ5MmEtMjEyMC00MzI2LWEwYzkt
NzE2OGFlMGI4Mjc4LzEvUXZHaVRJRDl5aktXUkZjNjV0WWNueTQzVHRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9mZWQ5MmEtMjEyMC00MzI2LWEwYzktNzE2OGFlMGI4Mjc4
LzEvUXZHaVRJRDl5aktXUkZjNjV0WWNueTQzVHRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzvaYYkpF
C6ccSRRaEw154eZSh7n+DJGw1PQ9dWZaBCUwoUmlWTX9Mbxf5yEAqOB0nXpiYAVG
FDJgdROwuxy1q8cagVZOCCllGnM0Re6OpalIQQiO/kM/46Mei5O7+Im3Vv/T3KO0
tYYzqJ0vco3hHqm3dmgdvIOu3nj1FFY+r2xMw7/sIZhYv7IXm5n6ZV/iaM+Uwf3d
rtcNjtU+35dm3QHd2wp7SB4RCJVohMUwBeCcnQqh5mghDNwnTp4tzIVxDAMHcrIx
8TAjfQG3RJ0zAS3k+QPCyX6vojBZWlnRytizoqbd3HXQvhKwOZ8Yie44vGfX+tfL
tDGpFsoK7nYbJg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:44:37 2025 by rpki-client