Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft
File: QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft (raw, json)
Hash identifier: NMXROL8eDDPb/VZ+0NGT47L5+DEYSW+d3CPrhUTYgic=
Subject key identifier: DF:2C:71:94:6F:BA:F0:7C:33:DA:9B:91:A7:20:78:EE:B3:02:81:A9
Authority key identifier: 43:0A:56:48:E1:D4:6B:66:2F:4D:1D:CC:06:6D:39:42:7C:65:F0:D1
Certificate issuer: /CN=430a5648e1d46b662f4d1dcc066d39427c65f0d1
Certificate serial: 0199FBEBCF06A431ED1164DF96AEE595ED31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwpWSOHUa2YvTR3MBm05Qnxl8NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 10:02:39 +0000
Manifest this update: Sun 19 Oct 2025 10:02:39 +0000
Manifest next update: Mon 20 Oct 2025 10:02:39 +0000
Files and hashes: 1: 1OkV1FOSt0CIRzcv_xhQZDIhaCY.roa (hash: 0nS1ugbBt4Oiv/4rCAPHlWm5w4EZo3UZ1Why6gpAxu4=)
2: KmelkdSsmbJtVWU94thK7d4v5RE.roa (hash: oIEVJa5VewYKMBXTZDUCkwziB09TzVnzHNBtgzRneDA=)
3: QwpWSOHUa2YvTR3MBm05Qnxl8NE.crl (hash: RtDkWfhjewQ7HD+Ii1qN+6a3DgGxYfwr63rM/eGw004=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwpWSOHUa2YvTR3MBm05Qnxl8NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:cf:06:a4:31:ed:11:64:df:96:ae:e5:95:ed:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=430a5648e1d46b662f4d1dcc066d39427c65f0d1
Validity
Not Before: Oct 19 10:02:39 2025 GMT
Not After : Oct 20 10:02:39 2025 GMT
Subject: CN=df2c71946fbaf07c33da9b91a72078eeb30281a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:42:ab:6d:b6:2a:33:7c:17:1b:32:a9:99:b7:
ea:5a:54:f8:55:55:a2:b2:3a:f5:50:ee:53:57:a6:
b6:63:34:04:82:0d:15:d8:29:1a:24:f4:c9:ba:23:
93:e7:72:86:47:64:a5:e8:3e:91:7d:9f:ea:54:9b:
32:a5:b9:2a:8e:78:f6:35:bc:56:d6:b9:d9:2d:09:
2d:85:a3:88:3f:58:4d:19:8e:bf:be:94:92:fb:a1:
e7:1e:22:07:23:dc:b3:2c:94:d0:73:ba:63:d8:bc:
1f:72:38:1f:48:1e:52:cb:05:4e:79:d7:3c:40:7c:
7a:3d:a9:bb:8f:bc:c9:60:58:52:86:14:52:78:c6:
61:9b:b0:b8:a2:87:3e:97:ea:88:06:41:62:9f:0c:
5b:7b:0a:39:db:27:50:aa:28:a1:5e:8c:aa:0a:16:
6d:42:59:ca:c6:02:ac:fc:b8:49:78:7f:8d:b2:68:
68:1f:fa:86:66:43:32:60:30:ee:05:e3:f5:67:80:
11:22:47:83:97:46:de:9d:68:df:a7:26:19:65:67:
81:e3:d1:f9:ff:bc:75:58:c9:7a:8e:f7:9e:47:cc:
80:38:ce:60:b4:73:4e:b1:e0:ea:e7:2b:48:08:0a:
36:c6:f7:34:51:1d:9d:62:ab:83:60:da:ab:3c:27:
e9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:2C:71:94:6F:BA:F0:7C:33:DA:9B:91:A7:20:78:EE:B3:02:81:A9
X509v3 Authority Key Identifier:
keyid:43:0A:56:48:E1:D4:6B:66:2F:4D:1D:CC:06:6D:39:42:7C:65:F0:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwpWSOHUa2YvTR3MBm05Qnxl8NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:f8:76:b7:15:99:d9:0a:db:04:b7:1f:81:cb:ba:8f:84:77:
c6:e6:51:0f:0b:be:be:15:4b:25:8f:2c:4a:54:50:05:53:9c:
a8:b5:27:da:6e:3b:10:09:da:72:aa:11:0e:68:65:fc:52:ad:
21:d9:e5:71:f7:27:da:1f:bc:c6:72:ae:ea:f2:8b:a7:80:9b:
cf:c3:7e:2c:2a:cb:48:0f:42:d3:47:4d:89:ba:95:cd:6c:55:
48:9a:83:2a:b2:db:8b:b4:b0:f1:a2:15:fa:83:ee:bf:84:9f:
f1:11:d0:69:29:bf:01:93:a7:99:16:18:5d:f4:87:ae:4c:dd:
fd:ca:e1:76:65:58:df:6b:85:c4:6c:a0:cd:61:6d:6e:bb:fc:
dc:b5:49:94:56:ec:2d:0e:f2:15:42:6b:63:4a:0a:33:3f:39:
37:7e:94:4d:25:3f:a5:57:c1:78:2c:3c:4f:7e:a5:13:09:aa:
87:8c:55:bf:e4:8a:af:cb:47:6b:1a:f6:a3:2b:de:24:32:88:
46:cd:ad:79:75:fd:8b:cb:47:5d:3e:ef:48:7c:68:96:d1:87:
2d:20:ac:6b:84:b3:65:38:97:e1:7b:4a:82:4b:a2:4c:45:9d:
05:bc:26:a4:d9:a3:19:1c:4c:3e:68:49:5a:1c:dc:7b:1d:3e:
b9:d3:4b:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7688GpDHtEWTflq7lle0xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMGE1NjQ4ZTFkNDZiNjYyZjRkMWRjYzA2NmQzOTQyN2M2
NWYwZDEwHhcNMjUxMDE5MTAwMjM5WhcNMjUxMDIwMTAwMjM5WjAzMTEwLwYDVQQD
EyhkZjJjNzE5NDZmYmFmMDdjMzNkYTliOTFhNzIwNzhlZWIzMDI4MWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEKrbbYqM3wXGzKpmbfqWlT4VVWi
sjr1UO5TV6a2YzQEgg0V2CkaJPTJuiOT53KGR2Sl6D6RfZ/qVJsypbkqjnj2NbxW
1rnZLQkthaOIP1hNGY6/vpSS+6HnHiIHI9yzLJTQc7pj2LwfcjgfSB5SywVOedc8
QHx6Pam7j7zJYFhShhRSeMZhm7C4ooc+l+qIBkFinwxbewo52ydQqiihXoyqChZt
QlnKxgKs/LhJeH+NsmhoH/qGZkMyYDDuBeP1Z4ARIkeDl0benWjfpyYZZWeB49H5
/7x1WMl6jveeR8yAOM5gtHNOseDq5ytICAo2xvc0UR2dYquDYNqrPCfpPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN8scZRvuvB8M9qbkacgeO6zAoGpMB8GA1UdIwQY
MBaAFEMKVkjh1GtmL00dzAZtOUJ8ZfDRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdwV1NPSFVhMll2VFIzTUJtMDVRbnhsOE5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS84NjFjNzUtZGQwMy00MzdiLTlmYzct
ODkwNTIyYzYxMDViLzEvUXdwV1NPSFVhMll2VFIzTUJtMDVRbnhsOE5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS84NjFjNzUtZGQwMy00MzdiLTlmYzctODkwNTIyYzYxMDVi
LzEvUXdwV1NPSFVhMll2VFIzTUJtMDVRbnhsOE5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlfh2txWZ
2QrbBLcfgcu6j4R3xuZRDwu+vhVLJY8sSlRQBVOcqLUn2m47EAnacqoRDmhl/FKt
Idnlcfcn2h+8xnKu6vKLp4Cbz8N+LCrLSA9C00dNibqVzWxVSJqDKrLbi7Sw8aIV
+oPuv4Sf8RHQaSm/AZOnmRYYXfSHrkzd/crhdmVY32uFxGygzWFtbrv83LVJlFbs
LQ7yFUJrY0oKMz85N36UTSU/pVfBeCw8T36lEwmqh4xVv+SKr8tHaxr2oyveJDKI
Rs2teXX9i8tHXT7vSHxoltGHLSCsa4SzZTiX4XtKgkuiTEWdBbwmpNmjGRxMPmhJ
Whzcex0+udNLeg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:45 2025 by rpki-client