Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
File: rqAyAc2mqK295P6ARuxl-WrGqWw.mft (raw, json)
Hash identifier: 1qJ5hsnt0gAwOijMQ/opmcJ2SvyGEQPuAtUpml1AhmU=
Subject key identifier: 35:88:DD:EB:DC:C2:37:79:8C:D9:F0:0A:46:D7:2C:1F:DD:FD:90:C6
Authority key identifier: AE:A0:32:01:CD:A6:A8:AD:BD:E4:FE:80:46:EC:65:F9:6A:C6:A9:6C
Certificate issuer: /CN=aea03201cda6a8adbde4fe8046ec65f96ac6a96c
Certificate serial: 019A53E3E3FAAFD117FE1570EA0BEAE7DB00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
Manifest number: 0266
Signing time: Wed 05 Nov 2025 12:00:35 +0000
Manifest this update: Wed 05 Nov 2025 12:00:35 +0000
Manifest next update: Thu 06 Nov 2025 12:00:35 +0000
Files and hashes: 1: OHSgHk7806-Y3EiMMODqh70dnpA.roa (hash: dwELo2G8zKa9A3mOV9vawf+jeFFyKXxpSg3LwUytDM8=)
2: ZfKmgCC5shqdiJ4oG4WQU2IlAJs.roa (hash: xPdeleCRUgq2S3wQBazj5FbP5YRWDoq9gRuAfQMqJJU=)
3: rqAyAc2mqK295P6ARuxl-WrGqWw.crl (hash: 82zzFTXMQW4YzSTvYiTWEp+zcaYbJRlUyMckYlOAviw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e3:e3:fa:af:d1:17:fe:15:70:ea:0b:ea:e7:db:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aea03201cda6a8adbde4fe8046ec65f96ac6a96c
Validity
Not Before: Nov 5 12:00:35 2025 GMT
Not After : Nov 6 12:00:35 2025 GMT
Subject: CN=3588ddebdcc237798cd9f00a46d72c1fddfd90c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:42:86:16:44:01:60:b2:d4:3e:a2:e1:f3:8b:
45:8a:b2:f0:02:88:40:98:c4:10:fe:11:b2:72:45:
08:e5:4f:85:68:46:c3:cc:d0:a9:5f:84:a4:6c:ce:
fc:8e:aa:d5:ab:8f:80:fa:d1:97:ce:6a:63:c8:6c:
d4:7a:d3:f2:dd:3d:2c:ab:d4:17:6b:2e:f4:f2:b9:
a1:38:01:44:46:55:5f:36:97:45:96:92:3f:68:21:
a7:a3:51:d0:47:c7:6d:65:e2:ac:9b:23:4b:15:5e:
95:83:0e:38:46:e3:98:4b:fb:7d:4c:97:db:2a:7e:
8e:12:38:ff:72:1b:e7:18:44:ca:f0:4b:d2:15:5d:
78:7b:67:e5:24:c1:71:1f:bc:5c:e5:76:2e:c6:f9:
10:1a:a7:51:64:f0:5f:db:8c:f8:b8:cc:cb:ae:7a:
7e:b2:d2:1d:de:31:51:c3:e2:c5:59:be:5d:d7:6d:
66:e4:2b:0b:bf:ef:dd:e4:46:58:f2:14:77:05:d2:
2a:9a:be:9f:cb:03:a0:cc:39:7f:06:9e:06:01:ba:
57:3c:4b:da:95:75:a4:3e:cb:bb:d5:8b:8d:85:52:
ff:14:6f:dc:b8:28:84:30:30:07:c4:a0:0b:ab:1b:
2b:64:ad:3d:ec:4d:41:b6:90:42:f9:30:6b:c2:fc:
ad:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:88:DD:EB:DC:C2:37:79:8C:D9:F0:0A:46:D7:2C:1F:DD:FD:90:C6
X509v3 Authority Key Identifier:
keyid:AE:A0:32:01:CD:A6:A8:AD:BD:E4:FE:80:46:EC:65:F9:6A:C6:A9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:6b:f9:85:b3:8f:33:b9:30:44:96:6f:7f:2c:dc:f9:b8:03:
0b:1c:1d:12:d0:09:57:f2:0c:ba:38:46:0f:0b:f7:0b:ee:a9:
fd:15:af:8e:7f:51:fd:5d:19:d5:e3:3f:a2:35:31:3c:e5:95:
f4:70:5c:67:df:48:60:14:e7:00:5c:0d:6a:37:91:7c:d7:86:
d8:fa:b2:76:25:86:f3:18:cc:73:57:55:4e:79:57:f6:57:8b:
5f:09:8c:01:8d:04:92:5e:07:16:c6:1a:5a:cc:ad:4c:f5:cd:
cb:3a:dd:d1:e6:9e:b0:4b:19:fe:16:03:5a:5a:8f:29:87:a6:
0d:b6:fa:f1:09:56:b5:5a:bc:52:29:6a:69:74:6e:ba:e6:cf:
d3:53:8b:e3:85:db:db:a7:d3:3e:c0:e6:98:aa:e5:8b:d8:81:
81:7d:da:7e:0d:34:03:1b:39:68:04:96:98:e5:fc:44:ca:94:
b4:af:b6:6e:3f:c9:11:cf:8d:eb:46:df:4b:1a:60:ed:e7:8d:
92:f7:2c:8d:05:17:8c:4b:66:47:51:18:ec:b0:07:29:96:c1:
86:82:07:f8:fc:e8:6e:e5:d2:4b:5e:41:d3:75:3b:36:d6:fa:
59:b9:28:0e:8b:74:e2:ea:e5:59:59:e2:29:72:5c:2b:65:48:
fb:0d:09:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpT4+P6r9EX/hVw6gvq59sAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlYTAzMjAxY2RhNmE4YWRiZGU0ZmU4MDQ2ZWM2NWY5NmFj
NmE5NmMwHhcNMjUxMTA1MTIwMDM1WhcNMjUxMTA2MTIwMDM1WjAzMTEwLwYDVQQD
EygzNTg4ZGRlYmRjYzIzNzc5OGNkOWYwMGE0NmQ3MmMxZmRkZmQ5MGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0KGFkQBYLLUPqLh84tFirLwAohA
mMQQ/hGyckUI5U+FaEbDzNCpX4SkbM78jqrVq4+A+tGXzmpjyGzUetPy3T0sq9QX
ay708rmhOAFERlVfNpdFlpI/aCGno1HQR8dtZeKsmyNLFV6Vgw44RuOYS/t9TJfb
Kn6OEjj/chvnGETK8EvSFV14e2flJMFxH7xc5XYuxvkQGqdRZPBf24z4uMzLrnp+
stId3jFRw+LFWb5d121m5CsLv+/d5EZY8hR3BdIqmr6fywOgzDl/Bp4GAbpXPEva
lXWkPsu71YuNhVL/FG/cuCiEMDAHxKALqxsrZK097E1BtpBC+TBrwvytOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDWI3evcwjd5jNnwCkbXLB/d/ZDGMB8GA1UdIwQY
MBaAFK6gMgHNpqitveT+gEbsZflqxqlsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnFBeUFjMm1xSzI5NVA2QVJ1eGwtV3JHcVd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9kZDA5ZGMtMjQ3Mi00NTE3LTllMmQt
ZWE0MTJmMjFlMjMwLzEvcnFBeUFjMm1xSzI5NVA2QVJ1eGwtV3JHcVd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9kZDA5ZGMtMjQ3Mi00NTE3LTllMmQtZWE0MTJmMjFlMjMw
LzEvcnFBeUFjMm1xSzI5NVA2QVJ1eGwtV3JHcVd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcmv5hbOP
M7kwRJZvfyzc+bgDCxwdEtAJV/IMujhGDwv3C+6p/RWvjn9R/V0Z1eM/ojUxPOWV
9HBcZ99IYBTnAFwNajeRfNeG2PqydiWG8xjMc1dVTnlX9leLXwmMAY0Ekl4HFsYa
WsytTPXNyzrd0eaesEsZ/hYDWlqPKYemDbb68QlWtVq8UilqaXRuuubP01OL44Xb
26fTPsDmmKrli9iBgX3afg00Axs5aASWmOX8RMqUtK+2bj/JEc+N60bfSxpg7eeN
kvcsjQUXjEtmR1EY7LAHKZbBhoIH+PzobuXSS15B03U7Ntb6WbkoDot04urlWVni
KXJcK2VI+w0J3w==
-----END CERTIFICATE-----
Generated at Wed Nov 5 14:40:41 2025 by rpki-client