Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/_QsmgyFXCqBCF7NThHwQv3MSVLU.mft
File: _QsmgyFXCqBCF7NThHwQv3MSVLU.mft (raw, json)
Hash identifier: pFU/9FceRRWnTLHWt7/AiwymeNO1uzrrFgEelVug8qM=
Subject key identifier: F4:BB:19:CA:37:AE:9D:2A:6A:8B:77:D4:01:09:18:21:12:8E:EC:86
Authority key identifier: FD:0B:26:83:21:57:0A:A0:42:17:B3:53:84:7C:10:BF:73:12:54:B5
Certificate issuer: /CN=fd0b268321570aa04217b353847c10bf731254b5
Certificate serial: 0199FC586AA4E69DA694B519F82DEEA993EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QsmgyFXCqBCF7NThHwQv3MSVLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/_QsmgyFXCqBCF7NThHwQv3MSVLU.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 12:01:16 +0000
Manifest this update: Sun 19 Oct 2025 12:01:16 +0000
Manifest next update: Mon 20 Oct 2025 12:01:16 +0000
Files and hashes: 1: Th8E4wMERzzrtf61mMlHU7T-O1E.roa (hash: fBxF7gzjtDOzJ+1yYpryOgnsRtCjhNj/m+OItkfcoW4=)
2: _QsmgyFXCqBCF7NThHwQv3MSVLU.crl (hash: deQWyNy2OPPXZcAbKso8/1LPnx4WtEDqEJSG5JcckGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/_QsmgyFXCqBCF7NThHwQv3MSVLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/_QsmgyFXCqBCF7NThHwQv3MSVLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_QsmgyFXCqBCF7NThHwQv3MSVLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:6a:a4:e6:9d:a6:94:b5:19:f8:2d:ee:a9:93:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd0b268321570aa04217b353847c10bf731254b5
Validity
Not Before: Oct 19 12:01:16 2025 GMT
Not After : Oct 20 12:01:16 2025 GMT
Subject: CN=f4bb19ca37ae9d2a6a8b77d401091821128eec86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c3:93:21:67:72:f5:02:46:73:95:89:fd:4d:
26:d9:2b:3b:d4:90:86:17:3a:58:7c:00:35:c3:2a:
46:bd:51:4c:ee:b6:8e:c8:fc:f1:ff:01:ca:2d:e7:
bd:a9:d5:3e:1e:c0:7b:b2:0f:14:54:e4:59:da:51:
6c:0d:9d:8b:9e:a0:ce:4a:90:e1:1c:f6:30:a1:42:
e7:20:05:39:93:d3:b1:91:8e:ec:6a:91:8b:92:49:
49:87:64:5a:64:a4:ed:0b:ee:77:cd:71:10:ba:37:
dc:f9:a0:98:81:d4:bd:9b:f3:31:d6:30:d4:87:7f:
25:5b:9e:9b:9b:40:fc:98:fd:e3:3d:da:df:a3:33:
ea:09:93:63:8d:c4:94:e3:34:f3:66:6b:3a:c3:a7:
43:13:2d:f0:ab:36:0a:19:87:a8:bd:0d:d9:a4:0b:
df:77:6d:9a:55:2c:1d:a6:06:bc:38:11:fe:7b:14:
7b:da:16:09:ec:6e:8f:10:69:92:e6:f8:1e:67:00:
ca:c4:2c:a7:dc:de:2a:6d:ce:02:08:07:52:da:0f:
21:d3:42:7c:3c:4f:25:13:bb:83:7e:8e:b5:e6:eb:
83:43:62:d1:21:24:b3:f1:dc:2f:2f:56:95:cc:c4:
5e:8a:2b:10:86:66:ed:e8:d1:a8:27:7d:6a:39:cd:
e7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:BB:19:CA:37:AE:9D:2A:6A:8B:77:D4:01:09:18:21:12:8E:EC:86
X509v3 Authority Key Identifier:
keyid:FD:0B:26:83:21:57:0A:A0:42:17:B3:53:84:7C:10:BF:73:12:54:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QsmgyFXCqBCF7NThHwQv3MSVLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/_QsmgyFXCqBCF7NThHwQv3MSVLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/_QsmgyFXCqBCF7NThHwQv3MSVLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:c8:a6:51:44:3a:0a:0b:33:1e:e7:5b:fc:95:7e:41:31:f8:
80:73:a3:e4:fc:f4:4b:19:49:c8:02:97:21:56:3c:7b:c1:fc:
4d:9f:94:c6:25:9e:55:47:95:2b:68:e2:cb:69:8a:9d:44:2e:
29:57:84:fe:77:f5:02:6c:71:45:e4:41:01:a7:3f:30:b3:b5:
5a:24:87:45:b8:e4:4c:e4:fc:04:3b:e0:4a:94:a9:1f:2d:46:
5c:57:50:eb:be:4b:4d:c2:3c:f5:66:06:ca:31:8e:01:0d:e4:
a1:2a:ab:28:cc:72:8f:7d:4b:71:59:22:cf:37:1e:2b:c5:d4:
a8:bd:90:5b:39:8b:12:e8:90:6c:6b:bb:79:f3:6a:38:06:93:
d7:2b:e1:1b:21:75:52:96:3b:5f:a0:98:4f:cd:f1:06:04:65:
f3:16:90:bc:10:55:5e:de:27:ff:30:64:0d:30:1c:d8:65:2a:
c6:15:b5:0b:f5:7a:1d:82:63:1d:5b:8c:27:fc:b9:b3:76:69:
81:62:65:fb:1d:43:c7:55:7d:fc:18:e6:62:ac:ef:a1:dc:7f:
cd:94:b2:62:12:e0:40:89:46:cf:72:00:c3:ae:30:57:f2:b8:
82:71:29:2d:ed:fa:db:e0:dc:45:79:2c:e7:54:cd:cf:5b:50:
40:af:e2:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WGqk5p2mlLUZ+C3uqZPuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMGIyNjgzMjE1NzBhYTA0MjE3YjM1Mzg0N2MxMGJmNzMx
MjU0YjUwHhcNMjUxMDE5MTIwMTE2WhcNMjUxMDIwMTIwMTE2WjAzMTEwLwYDVQQD
EyhmNGJiMTljYTM3YWU5ZDJhNmE4Yjc3ZDQwMTA5MTgyMTEyOGVlYzg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8OTIWdy9QJGc5WJ/U0m2Ss71JCG
FzpYfAA1wypGvVFM7raOyPzx/wHKLee9qdU+HsB7sg8UVORZ2lFsDZ2LnqDOSpDh
HPYwoULnIAU5k9OxkY7sapGLkklJh2RaZKTtC+53zXEQujfc+aCYgdS9m/Mx1jDU
h38lW56bm0D8mP3jPdrfozPqCZNjjcSU4zTzZms6w6dDEy3wqzYKGYeovQ3ZpAvf
d22aVSwdpga8OBH+exR72hYJ7G6PEGmS5vgeZwDKxCyn3N4qbc4CCAdS2g8h00J8
PE8lE7uDfo615uuDQ2LRISSz8dwvL1aVzMReiisQhmbt6NGoJ31qOc3n4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPS7Gco3rp0qaot31AEJGCESjuyGMB8GA1UdIwQY
MBaAFP0LJoMhVwqgQhezU4R8EL9zElS1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1FzbWd5RlhDcUJDRjdOVGhId1F2M01TVkxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi80M2YxNzctNTM2OC00YjMxLTg5Yzkt
NWIzZjY0MTgxZmZmLzEvX1FzbWd5RlhDcUJDRjdOVGhId1F2M01TVkxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi80M2YxNzctNTM2OC00YjMxLTg5YzktNWIzZjY0MTgxZmZm
LzEvX1FzbWd5RlhDcUJDRjdOVGhId1F2M01TVkxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAisimUUQ6
CgszHudb/JV+QTH4gHOj5Pz0SxlJyAKXIVY8e8H8TZ+UxiWeVUeVK2jiy2mKnUQu
KVeE/nf1AmxxReRBAac/MLO1WiSHRbjkTOT8BDvgSpSpHy1GXFdQ675LTcI89WYG
yjGOAQ3koSqrKMxyj31LcVkizzceK8XUqL2QWzmLEuiQbGu7efNqOAaT1yvhGyF1
UpY7X6CYT83xBgRl8xaQvBBVXt4n/zBkDTAc2GUqxhW1C/V6HYJjHVuMJ/y5s3Zp
gWJl+x1Dx1V9/BjmYqzvodx/zZSyYhLgQIlGz3IAw64wV/K4gnEpLe362+DcRXks
51TNz1tQQK/iOw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:29:49 2025 by rpki-client