Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft
File: qsU0mf8g8DXLixwKqbd8PX0ol2w.mft (raw, json)
Hash identifier: CV7LOn1Bkk6fIjPEVt98ABi6zOs75Zrahe3eIq1fMW0=
Subject key identifier: E9:51:A8:81:86:A4:3F:18:01:B8:D2:08:21:B7:87:87:A9:70:13:C1
Authority key identifier: AA:C5:34:99:FF:20:F0:35:CB:8B:1C:0A:A9:B7:7C:3D:7D:28:97:6C
Certificate issuer: /CN=aac53499ff20f035cb8b1c0aa9b77c3d7d28976c
Certificate serial: 019A53E3E87B0F2F6CF1FA227710C3B0559A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsU0mf8g8DXLixwKqbd8PX0ol2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 12:00:36 +0000
Manifest this update: Wed 05 Nov 2025 12:00:36 +0000
Manifest next update: Thu 06 Nov 2025 12:00:36 +0000
Files and hashes: 1: 3RChXaGg2mHXT_oEdTM0SpY6jhc.roa (hash: PV09Dkm12mpf6AJ4aFGi0VOS8JddqTI6zuA00aTTnSY=)
2: qsU0mf8g8DXLixwKqbd8PX0ol2w.crl (hash: 9fVZ0w7Q+tCr8g2YB4rlqrWS09ORZGWXKjIuIcypDLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/qsU0mf8g8DXLixwKqbd8PX0ol2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e3:e8:7b:0f:2f:6c:f1:fa:22:77:10:c3:b0:55:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac53499ff20f035cb8b1c0aa9b77c3d7d28976c
Validity
Not Before: Nov 5 12:00:36 2025 GMT
Not After : Nov 6 12:00:36 2025 GMT
Subject: CN=e951a88186a43f1801b8d20821b78787a97013c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ad:c1:95:92:6a:04:56:3f:57:b4:85:c0:e4:
d1:8c:f0:61:53:2e:91:ec:d6:71:2e:44:7c:da:e6:
04:b1:c0:79:8f:84:3a:4f:ec:d1:f8:2b:56:b6:e1:
3c:4b:47:8f:03:ce:3a:b0:3e:ae:64:9f:db:25:e2:
a9:33:5f:4f:f1:a3:a8:ca:09:c1:ad:93:27:ac:cd:
0b:bd:6e:1d:f5:4f:d2:06:3b:b5:09:50:de:f3:43:
d3:9b:e0:44:30:5f:05:ed:e1:52:bc:20:f9:b0:e8:
a1:da:51:cd:4d:8e:fd:ca:f4:ef:6d:aa:87:bb:a1:
be:3d:14:51:1e:27:e3:4f:b7:3d:03:67:4a:c1:29:
91:c2:bb:58:51:77:bb:c3:70:b2:34:56:05:fa:7a:
12:1a:bc:f7:18:2b:56:4e:0c:98:0b:59:38:23:0d:
24:db:a8:41:aa:5f:1c:00:7e:43:61:b5:c3:3b:fd:
f2:77:48:fc:6c:e2:e6:f0:f7:70:a5:26:57:67:8c:
2b:37:b3:e7:08:29:31:fa:96:a5:92:bb:ec:cb:7b:
75:3c:20:44:cd:f0:7d:bd:5c:28:eb:b6:5c:34:03:
59:a7:34:e8:4e:17:36:88:9d:17:98:a2:84:94:26:
4a:57:f6:32:21:e5:49:34:ae:a3:60:f3:03:0c:90:
e9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:51:A8:81:86:A4:3F:18:01:B8:D2:08:21:B7:87:87:A9:70:13:C1
X509v3 Authority Key Identifier:
keyid:AA:C5:34:99:FF:20:F0:35:CB:8B:1C:0A:A9:B7:7C:3D:7D:28:97:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsU0mf8g8DXLixwKqbd8PX0ol2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:6b:43:3e:e2:b5:b8:41:2c:ed:12:70:d7:47:0b:cd:56:db:
6f:14:57:1f:38:b8:8b:17:55:bc:91:7d:93:92:c4:c5:81:e3:
6f:3c:f5:ad:ee:80:b9:04:55:f2:47:aa:0e:39:bb:8d:13:a3:
04:5d:43:83:58:68:ca:3d:27:4c:9e:0a:24:64:2a:d9:9e:6f:
9c:9f:e2:45:29:b0:f8:9d:0d:f2:10:ce:ab:a7:3b:50:6c:a0:
6f:4c:f1:27:fb:1f:9e:66:2e:e1:32:28:0f:25:1b:c6:9e:b2:
2c:82:c8:5c:ee:18:9f:ae:a6:da:ae:97:ac:92:0e:1f:bb:bf:
b8:3b:c6:f5:06:3d:ac:a9:08:59:6b:7f:33:aa:ee:15:2d:bd:
0a:d0:df:f3:7a:b5:fe:36:09:b2:4e:8e:6c:05:07:b2:ea:32:
b9:e9:36:5b:d6:4c:37:11:a0:4d:6b:9c:63:8f:09:fd:c8:33:
89:cc:e9:e0:b8:9e:25:18:13:9b:60:db:c8:54:57:27:6e:46:
0c:b3:cf:35:45:79:8e:cb:6b:cb:4b:10:00:f8:13:17:e5:31:
74:dd:c0:f1:32:16:22:98:7b:52:8e:db:37:eb:47:77:90:d7:
f0:42:72:9f:77:66:e8:37:73:7e:f0:ef:49:70:5f:c2:6e:92:
0e:86:20:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpT4+h7Dy9s8foidxDDsFWaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhYzUzNDk5ZmYyMGYwMzVjYjhiMWMwYWE5Yjc3YzNkN2Qy
ODk3NmMwHhcNMjUxMTA1MTIwMDM2WhcNMjUxMTA2MTIwMDM2WjAzMTEwLwYDVQQD
EyhlOTUxYTg4MTg2YTQzZjE4MDFiOGQyMDgyMWI3ODc4N2E5NzAxM2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApq3BlZJqBFY/V7SFwOTRjPBhUy6R
7NZxLkR82uYEscB5j4Q6T+zR+CtWtuE8S0ePA846sD6uZJ/bJeKpM19P8aOoygnB
rZMnrM0LvW4d9U/SBju1CVDe80PTm+BEMF8F7eFSvCD5sOih2lHNTY79yvTvbaqH
u6G+PRRRHifjT7c9A2dKwSmRwrtYUXe7w3CyNFYF+noSGrz3GCtWTgyYC1k4Iw0k
26hBql8cAH5DYbXDO/3yd0j8bOLm8PdwpSZXZ4wrN7PnCCkx+palkrvsy3t1PCBE
zfB9vVwo67ZcNANZpzToThc2iJ0XmKKElCZKV/YyIeVJNK6jYPMDDJDpmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOlRqIGGpD8YAbjSCCG3h4epcBPBMB8GA1UdIwQY
MBaAFKrFNJn/IPA1y4scCqm3fD19KJdsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXNVMG1mOGc4RFhMaXh3S3FiZDhQWDBvbDJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi82MThlZTAtYmNjNy00ODUxLWJjMmMt
ZmFiOWJmN2EyNmQ4LzEvcXNVMG1mOGc4RFhMaXh3S3FiZDhQWDBvbDJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi82MThlZTAtYmNjNy00ODUxLWJjMmMtZmFiOWJmN2EyNmQ4
LzEvcXNVMG1mOGc4RFhMaXh3S3FiZDhQWDBvbDJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmGtDPuK1
uEEs7RJw10cLzVbbbxRXHzi4ixdVvJF9k5LExYHjbzz1re6AuQRV8keqDjm7jROj
BF1Dg1hoyj0nTJ4KJGQq2Z5vnJ/iRSmw+J0N8hDOq6c7UGygb0zxJ/sfnmYu4TIo
DyUbxp6yLILIXO4Yn66m2q6XrJIOH7u/uDvG9QY9rKkIWWt/M6ruFS29CtDf83q1
/jYJsk6ObAUHsuoyuek2W9ZMNxGgTWucY48J/cgziczp4LieJRgTm2DbyFRXJ25G
DLPPNUV5jstry0sQAPgTF+UxdN3A8TIWIph7Uo7bN+tHd5DX8EJyn3dm6DdzfvDv
SXBfwm6SDoYgYw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 18:06:13 2025 by rpki-client