Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
File: q6gfB6STo-ZDdS5mvYFG9Xca34g.mft (raw, json)
Hash identifier: SUKuvIgEHn0b1VpI2yMTvjAnWWBBhjyKV4A7zVQWgMk=
Subject key identifier: 03:27:18:85:E7:F3:86:79:41:24:A8:0F:FE:E7:6D:CB:6B:88:17:28
Authority key identifier: AB:A8:1F:07:A4:93:A3:E6:43:75:2E:66:BD:81:46:F5:77:1A:DF:88
Certificate issuer: /CN=aba81f07a493a3e643752e66bd8146f5771adf88
Certificate serial: 0199FE0FCDD6BEEEE7282E5D4F128F70EB33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
Manifest number: 16BE
Signing time: Sun 19 Oct 2025 20:01:12 +0000
Manifest this update: Sun 19 Oct 2025 20:01:12 +0000
Manifest next update: Mon 20 Oct 2025 20:01:12 +0000
Files and hashes: 1: _7nFqf5lz5tcDACtAr9RF1OczjU.roa (hash: +++HO383AAZs8DTGnKyEbL2DY3xsbwwnVwL8cUM+bTU=)
2: dABSJLRi0TLcB4OYtofXt8vc5mI.roa (hash: LxLgAjIFySbpl2HK3ef4vXYPLVBckR21OqAdcEmHAdI=)
3: q6gfB6STo-ZDdS5mvYFG9Xca34g.crl (hash: yONxYU3WknxkEyJtCBgQrJ4upoPLc0Duy5bIh1oi9eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:cd:d6:be:ee:e7:28:2e:5d:4f:12:8f:70:eb:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aba81f07a493a3e643752e66bd8146f5771adf88
Validity
Not Before: Oct 19 20:01:12 2025 GMT
Not After : Oct 20 20:01:12 2025 GMT
Subject: CN=03271885e7f386794124a80ffee76dcb6b881728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f8:4c:b9:34:bc:0e:a0:21:8d:cf:00:36:bb:
61:22:bc:72:b3:c7:6b:4f:52:b0:2c:63:a8:4a:cb:
bc:7a:d6:1b:7a:34:a9:b6:00:7b:99:0b:6a:68:cf:
b6:6d:28:41:e9:53:fa:71:8c:d1:91:3e:d3:ec:9f:
f3:da:80:1a:ef:90:17:c6:3b:ff:cd:5a:0a:e7:65:
33:8c:0f:cd:11:db:6a:31:e0:f8:61:ee:20:9b:3b:
21:b6:39:89:b7:38:ac:ae:4c:d1:7c:4e:cd:f4:16:
6c:76:be:2c:33:eb:ac:f9:f3:9b:83:1d:8c:df:dd:
eb:91:c2:04:df:6a:5c:d7:a9:f6:a0:9c:df:52:ba:
ff:bd:79:76:47:df:07:a4:47:a8:53:70:04:2b:e8:
35:e8:2d:13:63:5d:06:c2:98:ba:e9:4f:92:76:2b:
3f:70:86:58:bf:bd:29:1d:1b:6c:64:62:c9:ed:21:
15:94:b4:3f:f6:57:4d:ee:3f:38:e7:6a:aa:c2:68:
76:3a:53:f1:10:c6:00:78:51:f7:29:11:12:2b:e7:
da:ed:d4:87:17:73:32:ee:95:8b:f3:0d:cc:3e:a8:
9c:c4:ee:6d:ac:71:39:91:fc:d3:80:45:7b:3e:07:
f1:c0:14:e1:15:4f:fd:45:be:aa:78:aa:90:81:52:
e3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:27:18:85:E7:F3:86:79:41:24:A8:0F:FE:E7:6D:CB:6B:88:17:28
X509v3 Authority Key Identifier:
keyid:AB:A8:1F:07:A4:93:A3:E6:43:75:2E:66:BD:81:46:F5:77:1A:DF:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:36:a1:16:25:67:dd:d9:d2:62:47:7d:bc:b3:ea:29:b2:50:
fe:53:ba:03:b1:51:84:2f:29:4a:dd:51:e9:b1:18:95:ed:ef:
c9:ff:ff:d9:49:d2:ec:71:de:0b:c7:95:1e:b6:01:d3:d4:cd:
f8:2c:22:37:8b:95:00:58:5b:1c:d4:52:c4:a5:0e:0f:2b:ca:
a7:a6:97:d8:83:20:bf:33:41:fc:af:44:b9:77:13:fa:22:e1:
9d:17:56:a1:01:6c:57:9d:f6:c1:f9:8f:d6:ae:f0:68:c1:41:
2b:54:de:90:46:22:12:a8:25:24:ad:50:f1:85:7e:f7:93:6d:
9f:8a:ca:d2:d0:90:6c:42:28:44:3b:d0:45:e7:20:a4:55:41:
c5:2c:91:ed:65:f3:b0:06:aa:bf:a9:f5:7e:7e:40:96:c1:67:
39:77:e3:7a:3d:af:ee:7c:9b:ea:a4:49:91:24:b8:70:41:50:
ba:be:f0:87:ac:72:47:13:81:25:45:cb:33:18:80:f3:42:16:
e4:8e:76:33:bf:b2:bc:8a:5b:97:6a:55:ba:33:ac:fa:6d:d8:
70:7b:9b:12:cc:09:b3:12:82:64:12:16:fc:0f:cd:59:42:d4:
b0:09:62:9f:7d:e0:ea:80:f1:2a:92:7b:7c:d6:88:00:9a:0a:
c3:0f:77:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+D83Wvu7nKC5dTxKPcOszMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYTgxZjA3YTQ5M2EzZTY0Mzc1MmU2NmJkODE0NmY1Nzcx
YWRmODgwHhcNMjUxMDE5MjAwMTEyWhcNMjUxMDIwMjAwMTEyWjAzMTEwLwYDVQQD
EygwMzI3MTg4NWU3ZjM4Njc5NDEyNGE4MGZmZWU3NmRjYjZiODgxNzI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPhMuTS8DqAhjc8ANrthIrxys8dr
T1KwLGOoSsu8etYbejSptgB7mQtqaM+2bShB6VP6cYzRkT7T7J/z2oAa75AXxjv/
zVoK52UzjA/NEdtqMeD4Ye4gmzshtjmJtzisrkzRfE7N9BZsdr4sM+us+fObgx2M
393rkcIE32pc16n2oJzfUrr/vXl2R98HpEeoU3AEK+g16C0TY10Gwpi66U+Sdis/
cIZYv70pHRtsZGLJ7SEVlLQ/9ldN7j8452qqwmh2OlPxEMYAeFH3KRESK+fa7dSH
F3My7pWL8w3MPqicxO5trHE5kfzTgEV7PgfxwBThFU/9Rb6qeKqQgVLjZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAMnGIXn84Z5QSSoD/7nbctriBcoMB8GA1UdIwQY
MBaAFKuoHwekk6PmQ3UuZr2BRvV3Gt+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTZnZkI2U1RvLVpEZFM1bXZZRkc5WGNhMzRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC84NGUyY2UtMWVhYy00ZTEyLWFjNTgt
NTFjM2NjY2U3MmRmLzEvcTZnZkI2U1RvLVpEZFM1bXZZRkc5WGNhMzRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC84NGUyY2UtMWVhYy00ZTEyLWFjNTgtNTFjM2NjY2U3MmRm
LzEvcTZnZkI2U1RvLVpEZFM1bXZZRkc5WGNhMzRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlzahFiVn
3dnSYkd9vLPqKbJQ/lO6A7FRhC8pSt1R6bEYle3vyf//2UnS7HHeC8eVHrYB09TN
+CwiN4uVAFhbHNRSxKUODyvKp6aX2IMgvzNB/K9EuXcT+iLhnRdWoQFsV532wfmP
1q7waMFBK1TekEYiEqglJK1Q8YV+95Ntn4rK0tCQbEIoRDvQRecgpFVBxSyR7WXz
sAaqv6n1fn5AlsFnOXfjej2v7nyb6qRJkSS4cEFQur7wh6xyRxOBJUXLMxiA80IW
5I52M7+yvIpbl2pVujOs+m3YcHubEswJsxKCZBIW/A/NWULUsAlin33g6oDxKpJ7
fNaIAJoKww93OA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:49:34 2025 by rpki-client