Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
File: QSrIOifKhyPGGxRGw-Z4EQxlBok.mft (raw, json)
Hash identifier: uhoGI6fne+GEShiTyfd/E4bhoMX1gCM6OERcmQpF7mc=
Subject key identifier: 48:87:54:D1:9D:80:92:66:B5:E6:99:31:4E:FE:93:75:F7:64:76:D8
Authority key identifier: 41:2A:C8:3A:27:CA:87:23:C6:1B:14:46:C3:E6:78:11:0C:65:06:89
Certificate issuer: /CN=412ac83a27ca8723c61b1446c3e678110c650689
Certificate serial: 0199FC586F8DC97F76E7AF5D9A54A913DDC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 12:01:18 +0000
Manifest this update: Sun 19 Oct 2025 12:01:18 +0000
Manifest next update: Mon 20 Oct 2025 12:01:18 +0000
Files and hashes: 1: BriG5n_d334rZ6dRB6OmkxalNXQ.roa (hash: gR3OKMrFwiMtW4+rQqu+QkKInRaAYo99fA48hRcfRho=)
2: QSrIOifKhyPGGxRGw-Z4EQxlBok.crl (hash: q0SJzx8ZRpP3bVCBDwS0jZXWajUdFinKbmd1PLNqKeU=)
3: fFU1nOvAp1rSs4Piya9lGEHH2qQ.roa (hash: 2ngeI6kdV66tUb5OqMLCCP5yBBWk//A11XWcWwTz/1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:6f:8d:c9:7f:76:e7:af:5d:9a:54:a9:13:dd:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=412ac83a27ca8723c61b1446c3e678110c650689
Validity
Not Before: Oct 19 12:01:18 2025 GMT
Not After : Oct 20 12:01:18 2025 GMT
Subject: CN=488754d19d809266b5e699314efe9375f76476d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:77:6e:45:45:96:bc:7d:27:ce:0d:58:79:e0:
e0:37:0f:e2:17:df:5e:08:1d:17:ba:f4:d1:23:fa:
13:e3:f6:3d:e7:b4:0b:0e:05:cd:18:0b:8d:95:2b:
cc:c9:f7:1c:bc:89:51:c8:4f:8e:e5:0d:8d:7d:0f:
ce:d7:63:cc:31:57:7a:b7:2a:9a:99:d4:36:7b:14:
b8:b6:e3:87:ab:8f:f9:42:4a:2f:ae:01:ba:b5:ed:
22:5b:f0:85:36:5c:ba:65:b2:47:05:7c:71:35:29:
12:47:14:93:cb:cc:81:ec:fd:17:97:95:f1:81:e0:
fa:35:d6:d7:2f:be:b7:13:b3:5e:9f:6f:2a:17:5e:
ef:d9:64:35:47:a6:c0:5c:b0:af:b6:8a:77:71:54:
12:e3:c2:32:b4:04:c0:e3:b7:14:be:4f:c6:92:bd:
a4:ca:c8:6a:ef:fb:e4:9b:f1:c1:97:9e:eb:33:2d:
f7:23:6b:f5:fe:10:3a:66:79:25:74:2a:7f:0f:3e:
2e:fc:99:7f:d9:22:e7:8d:af:36:6b:60:10:ec:68:
44:4d:65:77:30:b8:a6:00:f1:04:e9:9b:62:cf:91:
cc:63:e6:60:69:10:d5:11:5d:dd:93:23:d8:bc:4b:
6b:01:ca:fb:f0:cc:76:38:7f:d2:d0:bc:34:56:da:
fb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:87:54:D1:9D:80:92:66:B5:E6:99:31:4E:FE:93:75:F7:64:76:D8
X509v3 Authority Key Identifier:
keyid:41:2A:C8:3A:27:CA:87:23:C6:1B:14:46:C3:E6:78:11:0C:65:06:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:9d:07:38:c4:13:4d:79:24:fb:ca:ea:33:34:2b:4f:bc:31:
e2:af:a0:cc:61:46:1d:a1:ea:2c:df:43:c6:13:51:8e:8d:d5:
bc:50:93:a8:b2:60:9e:2c:c6:41:10:3e:7d:36:3c:06:73:fc:
29:da:79:2a:9d:ef:ce:2c:8f:02:76:f2:3e:e7:c0:af:55:cd:
d5:d1:06:04:3b:a3:17:92:c8:9c:9d:53:56:01:2d:59:c1:e0:
55:2b:d1:20:5d:58:2d:e9:42:4d:6d:31:8c:a1:fa:48:a3:9a:
9e:40:33:c4:61:92:c6:3f:bd:e0:e2:66:82:21:cf:6d:89:71:
0e:59:90:11:04:44:65:4b:e6:27:ed:34:a6:06:3c:ea:38:6c:
14:cc:4c:23:88:32:69:3a:1d:4f:25:e9:da:c6:66:b8:7a:8d:
4a:14:d1:48:ff:cb:b5:b3:f9:78:51:07:45:5a:1f:2d:5b:20:
da:42:35:20:72:66:b2:fa:e6:bd:61:11:54:e8:6b:ee:a9:fc:
69:d9:ba:36:78:7d:09:3b:89:02:ad:77:8c:d5:89:9b:ac:82:
9f:3c:fc:9b:ba:16:2a:35:91:0e:dd:1b:c0:f2:08:fc:e5:9d:
1b:6f:ea:77:f7:30:b1:b9:62:4c:50:1b:23:85:df:40:4c:d8:
13:e9:22:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WG+NyX92569dmlSpE93DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMmFjODNhMjdjYTg3MjNjNjFiMTQ0NmMzZTY3ODExMGM2
NTA2ODkwHhcNMjUxMDE5MTIwMTE4WhcNMjUxMDIwMTIwMTE4WjAzMTEwLwYDVQQD
Eyg0ODg3NTRkMTlkODA5MjY2YjVlNjk5MzE0ZWZlOTM3NWY3NjQ3NmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA73duRUWWvH0nzg1YeeDgNw/iF99e
CB0XuvTRI/oT4/Y957QLDgXNGAuNlSvMyfccvIlRyE+O5Q2NfQ/O12PMMVd6tyqa
mdQ2exS4tuOHq4/5QkovrgG6te0iW/CFNly6ZbJHBXxxNSkSRxSTy8yB7P0Xl5Xx
geD6NdbXL763E7Nen28qF17v2WQ1R6bAXLCvtop3cVQS48IytATA47cUvk/Gkr2k
yshq7/vkm/HBl57rMy33I2v1/hA6ZnkldCp/Dz4u/Jl/2SLnja82a2AQ7GhETWV3
MLimAPEE6Ztiz5HMY+ZgaRDVEV3dkyPYvEtrAcr78Mx2OH/S0Lw0Vtr7JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEiHVNGdgJJmteaZMU7+k3X3ZHbYMB8GA1UdIwQY
MBaAFEEqyDonyocjxhsURsPmeBEMZQaJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVNySU9pZktoeVBHR3hSR3ctWjRFUXhsQm9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8zMjFjMGQtMzY3MS00OTI3LTg5Mzct
MWY4NTZjMDkzYWU4LzEvUVNySU9pZktoeVBHR3hSR3ctWjRFUXhsQm9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8zMjFjMGQtMzY3MS00OTI3LTg5MzctMWY4NTZjMDkzYWU4
LzEvUVNySU9pZktoeVBHR3hSR3ctWjRFUXhsQm9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWJ0HOMQT
TXkk+8rqMzQrT7wx4q+gzGFGHaHqLN9DxhNRjo3VvFCTqLJgnizGQRA+fTY8BnP8
Kdp5Kp3vziyPAnbyPufAr1XN1dEGBDujF5LInJ1TVgEtWcHgVSvRIF1YLelCTW0x
jKH6SKOankAzxGGSxj+94OJmgiHPbYlxDlmQEQREZUvmJ+00pgY86jhsFMxMI4gy
aTodTyXp2sZmuHqNShTRSP/LtbP5eFEHRVofLVsg2kI1IHJmsvrmvWERVOhr7qn8
adm6Nnh9CTuJAq13jNWJm6yCnzz8m7oWKjWRDt0bwPII/OWdG2/qd/cwsbliTFAb
I4XfQEzYE+kiCw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:42:38 2025 by rpki-client