Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft
File: QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft (raw, json)
Hash identifier: CgI4fdPPIFkqbF+0A9ZFGB7IOjjW5NgOSgZmi+fRqec=
Subject key identifier: E4:83:CC:40:B3:47:7B:FA:67:BF:87:A0:E5:3D:F5:29:C4:42:DB:84
Authority key identifier: 40:51:8E:CB:D6:46:4D:78:AD:45:15:51:64:8F:92:06:F7:FB:5F:42
Certificate issuer: /CN=40518ecbd6464d78ad451551648f9206f7fb5f42
Certificate serial: 0199FB0F3374AA621445FD5806D5B8137208
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QFGOy9ZGTXitRRVRZI-SBvf7X0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft
Manifest number: 03FA
Signing time: Sun 19 Oct 2025 06:01:41 +0000
Manifest this update: Sun 19 Oct 2025 06:01:41 +0000
Manifest next update: Mon 20 Oct 2025 06:01:41 +0000
Files and hashes: 1: 7fqM8GCj-eNanfhBlPQ1PMMaPkQ.roa (hash: cyPdhHEtqG0jKqnla9COVxpAyirC8qiWW4mGGbTTw34=)
2: QFGOy9ZGTXitRRVRZI-SBvf7X0I.crl (hash: ken/qvjen/y5CoYznQ76SEElluq4r3wICQ4SDN5imE8=)
3: WRsKHbHpQ9jZIvciUb2Wz6AHSW4.roa (hash: 8Nnxx5No66UiBNPIjWPMS0jddJkyISjgfdGXoNS0d/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/QFGOy9ZGTXitRRVRZI-SBvf7X0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:33:74:aa:62:14:45:fd:58:06:d5:b8:13:72:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40518ecbd6464d78ad451551648f9206f7fb5f42
Validity
Not Before: Oct 19 06:01:41 2025 GMT
Not After : Oct 20 06:01:41 2025 GMT
Subject: CN=e483cc40b3477bfa67bf87a0e53df529c442db84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:71:39:d5:02:12:ad:82:af:5d:62:d9:14:04:
21:7f:f9:8b:16:14:95:41:66:2b:c1:d5:e1:aa:27:
f6:d4:7e:2e:fa:95:a7:e7:cc:6d:ef:ee:1e:fc:fa:
2f:0b:c7:94:75:f2:fc:f7:25:b3:40:67:1f:1f:31:
e1:c1:df:28:c9:e3:44:dd:e1:68:d5:62:7f:99:21:
12:e2:da:e6:db:bc:9c:38:e6:3f:d8:3e:86:34:c0:
a8:4d:6d:f8:5d:28:bd:a9:f4:26:db:cb:cb:05:8a:
f6:14:b7:fd:e8:cf:e5:8c:24:6f:b3:a1:34:03:98:
d9:a8:71:70:32:44:0c:81:5c:72:1f:80:ef:c3:32:
95:ae:78:d1:c1:9f:ab:73:10:ba:cd:ad:29:de:35:
40:f8:da:41:b4:84:fc:17:42:68:8b:e6:10:8d:39:
21:49:9d:b4:a2:d5:b6:37:c8:1f:da:e2:31:80:bd:
95:98:b4:38:74:82:30:d0:84:c1:0f:54:7e:8a:55:
4b:c2:cd:0c:60:fb:35:9a:8d:22:2e:bb:20:d5:db:
7f:74:bf:4c:98:ec:9f:63:ff:85:5e:38:19:cf:5c:
2c:bc:45:e7:be:68:54:57:6d:96:70:b7:f8:b0:ec:
58:2c:55:2e:74:4d:02:bc:71:df:43:b3:1b:c1:a9:
db:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:83:CC:40:B3:47:7B:FA:67:BF:87:A0:E5:3D:F5:29:C4:42:DB:84
X509v3 Authority Key Identifier:
keyid:40:51:8E:CB:D6:46:4D:78:AD:45:15:51:64:8F:92:06:F7:FB:5F:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QFGOy9ZGTXitRRVRZI-SBvf7X0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:94:ce:8f:3d:5a:b6:58:83:82:e8:d2:7e:00:8f:0e:57:8a:
0b:5c:9e:f3:b1:a6:a4:e0:0d:a4:08:eb:1b:4e:87:8c:36:e6:
bf:69:f8:05:c0:b8:c0:c4:e4:61:0a:5d:a2:92:a2:c7:87:95:
fb:a0:7f:b8:19:86:c8:37:23:9f:de:8c:0f:ae:ef:fc:c4:a8:
6e:36:cd:7d:a9:e5:af:5d:1b:3a:00:72:c9:40:d2:fd:1c:94:
aa:1d:29:66:f2:d7:ff:9b:db:cc:9c:f3:55:f9:99:37:c8:7f:
1f:d6:96:75:8d:dd:73:b8:46:8d:02:68:78:9c:f9:4e:3e:46:
99:ea:1f:63:82:f1:29:81:9a:7a:5d:88:94:cb:3e:82:5f:8f:
ff:5a:55:b7:e6:1e:94:6e:c5:33:f1:5c:f6:a7:57:0b:af:ff:
c2:aa:a8:bf:47:a9:8e:52:f2:90:a3:86:87:f4:3c:ae:1a:bc:
36:21:05:47:f6:f1:78:47:b5:91:d7:48:f7:17:5c:51:ca:1e:
e5:0f:9f:58:a5:8c:c7:f1:27:29:53:0a:5e:b0:76:29:17:66:
22:cf:7c:d0:e5:59:47:24:4c:40:73:54:b4:61:fd:87:76:7c:
f8:07:6f:6b:8b:05:9e:d1:d5:0e:87:e0:84:71:48:60:3c:69:
7e:16:7a:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7DzN0qmIURf1YBtW4E3IIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwNTE4ZWNiZDY0NjRkNzhhZDQ1MTU1MTY0OGY5MjA2Zjdm
YjVmNDIwHhcNMjUxMDE5MDYwMTQxWhcNMjUxMDIwMDYwMTQxWjAzMTEwLwYDVQQD
EyhlNDgzY2M0MGIzNDc3YmZhNjdiZjg3YTBlNTNkZjUyOWM0NDJkYjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03E51QISrYKvXWLZFAQhf/mLFhSV
QWYrwdXhqif21H4u+pWn58xt7+4e/PovC8eUdfL89yWzQGcfHzHhwd8oyeNE3eFo
1WJ/mSES4trm27ycOOY/2D6GNMCoTW34XSi9qfQm28vLBYr2FLf96M/ljCRvs6E0
A5jZqHFwMkQMgVxyH4DvwzKVrnjRwZ+rcxC6za0p3jVA+NpBtIT8F0Joi+YQjTkh
SZ20otW2N8gf2uIxgL2VmLQ4dIIw0ITBD1R+ilVLws0MYPs1mo0iLrsg1dt/dL9M
mOyfY/+FXjgZz1wsvEXnvmhUV22WcLf4sOxYLFUudE0CvHHfQ7MbwanbhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOSDzECzR3v6Z7+HoOU99SnEQtuEMB8GA1UdIwQY
MBaAFEBRjsvWRk14rUUVUWSPkgb3+19CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUZHT3k5WkdUWGl0UlJWUlpJLVNCdmY3WDBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni80MzcxNTAtNzgzYy00MzFhLWIzZmQt
N2MzZDc5NDAxZWMyLzEvUUZHT3k5WkdUWGl0UlJWUlpJLVNCdmY3WDBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni80MzcxNTAtNzgzYy00MzFhLWIzZmQtN2MzZDc5NDAxZWMy
LzEvUUZHT3k5WkdUWGl0UlJWUlpJLVNCdmY3WDBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdpTOjz1a
tliDgujSfgCPDleKC1ye87GmpOANpAjrG06HjDbmv2n4BcC4wMTkYQpdopKix4eV
+6B/uBmGyDcjn96MD67v/MSobjbNfanlr10bOgByyUDS/RyUqh0pZvLX/5vbzJzz
VfmZN8h/H9aWdY3dc7hGjQJoeJz5Tj5GmeofY4LxKYGael2IlMs+gl+P/1pVt+Ye
lG7FM/Fc9qdXC6//wqqov0epjlLykKOGh/Q8rhq8NiEFR/bxeEe1kddI9xdcUcoe
5Q+fWKWMx/EnKVMKXrB2KRdmIs980OVZRyRMQHNUtGH9h3Z8+Adva4sFntHVDofg
hHFIYDxpfhZ6mA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:14 2025 by rpki-client