
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.mft
File: qw8tGCnW-40kf6TpZY6hfwbACwU.mft (raw, json)
Hash identifier: YqcZBpwPyn5ixZeNn+HwC/2TGEx8b95Gw6ltFh8pmGQ=
Subject key identifier: 26:2B:B3:F5:8F:90:51:FC:BC:F6:5B:5F:02:0E:EE:0A:FA:51:C4:D3
Authority key identifier: AB:0F:2D:18:29:D6:FB:8D:24:7F:A4:E9:65:8E:A1:7F:06:C0:0B:05
Certificate issuer: /CN=ab0f2d1829d6fb8d247fa4e9658ea17f06c00b05
Certificate serial: 0199FDD9747A957507D8D205650FA6320DFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qw8tGCnW-40kf6TpZY6hfwbACwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.mft
Manifest number: 0578
Signing time: Sun 19 Oct 2025 19:01:50 +0000
Manifest this update: Sun 19 Oct 2025 19:01:50 +0000
Manifest next update: Mon 20 Oct 2025 19:01:50 +0000
Files and hashes: 1: OUpskfGQwP1azsM6n4Ec-VCqNso.roa (hash: +d2WLz7J+vMS5D/Rs6fGhF8erps5E2C6DQvq3JVrWbY=)
2: qw8tGCnW-40kf6TpZY6hfwbACwU.crl (hash: uaXIZOzUnA7/5468i0bl1lpsogHOI3Q6ejMbEHlRkNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qw8tGCnW-40kf6TpZY6hfwbACwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:74:7a:95:75:07:d8:d2:05:65:0f:a6:32:0d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0f2d1829d6fb8d247fa4e9658ea17f06c00b05
Validity
Not Before: Oct 19 19:01:50 2025 GMT
Not After : Oct 20 19:01:50 2025 GMT
Subject: CN=262bb3f58f9051fcbcf65b5f020eee0afa51c4d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b5:1b:69:02:ef:09:1a:47:f1:dc:33:f9:75:
26:1c:65:c5:73:41:18:3b:de:cd:31:e5:b7:fb:8b:
4d:7f:85:e5:70:48:60:45:c2:3d:47:f6:08:03:e8:
57:70:56:32:c7:85:21:ff:e9:7e:af:e3:83:5d:89:
20:cb:46:1d:05:7f:c8:4c:30:a2:74:63:7e:9d:2e:
09:41:23:a3:8c:a5:02:45:ff:cb:f8:9c:d2:14:26:
f9:37:88:dd:9f:94:49:69:4e:a3:3f:ee:9f:2c:41:
a5:b5:b9:f5:1a:b5:02:c8:0f:30:bf:51:c2:09:e9:
c5:11:17:dd:be:ba:03:db:74:9f:22:57:cf:67:a3:
19:91:df:d1:b1:d2:9b:13:7b:9f:99:98:44:be:48:
b3:94:ce:76:94:00:8b:01:84:4b:fd:11:d3:9d:f5:
f3:b1:23:73:03:b0:57:63:8b:f0:33:8a:e7:7e:b3:
97:21:f8:18:23:99:4f:79:3c:16:7e:fc:8c:c3:7f:
70:83:47:f1:ed:72:11:e0:14:59:5b:ba:81:e9:41:
f2:f1:5a:45:58:61:54:a9:4b:c2:9a:42:8b:fd:9c:
65:f7:5e:94:a8:e3:3b:11:7d:60:63:ad:1e:9b:d9:
82:e6:d9:15:de:99:5b:c6:97:34:1e:f9:c1:45:72:
2e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:2B:B3:F5:8F:90:51:FC:BC:F6:5B:5F:02:0E:EE:0A:FA:51:C4:D3
X509v3 Authority Key Identifier:
keyid:AB:0F:2D:18:29:D6:FB:8D:24:7F:A4:E9:65:8E:A1:7F:06:C0:0B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qw8tGCnW-40kf6TpZY6hfwbACwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:f7:d0:a8:f7:1d:82:60:1b:b4:9b:83:91:4e:78:4e:72:d0:
2b:78:57:72:e2:67:52:88:83:d4:41:d2:0f:6c:64:2d:03:36:
2e:97:7b:2a:9a:b4:39:a7:04:80:c9:a8:bf:cc:0f:ba:1c:7a:
33:b6:40:96:78:87:70:38:2e:4a:3a:3b:3e:9f:f8:7d:32:22:
da:69:c6:24:c9:f7:66:55:6e:24:46:ee:66:8d:22:38:f5:3a:
c2:02:45:02:12:60:92:5e:e5:67:96:70:80:87:aa:ef:4c:18:
23:37:fd:b5:ca:19:4c:a9:21:9e:27:1b:53:95:d1:52:1d:75:
9a:24:64:6f:dc:77:1e:30:dd:5c:cc:20:c0:99:96:4e:ef:2e:
d2:ed:82:d8:20:7d:26:f7:00:7c:2e:aa:a4:92:03:2f:22:c9:
c0:74:6f:59:a9:49:fa:6f:7d:40:3e:19:f2:fc:54:df:a8:4c:
9c:90:90:c8:2b:30:b1:df:12:ae:23:f9:bc:29:a8:a0:b9:85:
e7:2d:49:42:46:e1:9d:22:76:10:85:9c:3f:7d:e1:69:eb:0e:
fd:a3:75:fc:e2:47:79:0a:4a:11:bb:6b:af:12:f7:29:05:26:
cd:4c:c4:24:3e:00:e2:99:56:73:fc:a4:f9:bb:85:56:3e:bd:
d5:58:d3:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:06 2025 by rpki-client