Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
File: q838GnxSDPjRdykgjoXosZfErf8.mft (raw, json)
Hash identifier: aLfTjfpsB4ZfMJqExBoe++UTI5n2bkPegKfD9YRTcdE=
Subject key identifier: E9:60:CD:65:E0:F8:FD:75:F7:A5:A7:B7:A9:87:B1:F3:BB:AB:D3:42
Authority key identifier: AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF
Certificate issuer: /CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff
Certificate serial: 0199FBEAEA55B4F04915E4C92F4853B0DD87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
Manifest number: 0D14
Signing time: Sun 19 Oct 2025 10:01:40 +0000
Manifest this update: Sun 19 Oct 2025 10:01:40 +0000
Manifest next update: Mon 20 Oct 2025 10:01:40 +0000
Files and hashes: 1: 1HhNu8sG2l0hcVfkxopBJPM0AJA.roa (hash: Qt4OCtipxtwIwXuC2KjZFTe3zgqaRe5IKbtJYrVBUxM=)
2: hJbHpAPOiNkNScuafVbq5FNZ7D4.roa (hash: /FjzkSwns/04Wx3/dyzKMt8M5RMeRjhJm2fdzZxup8w=)
3: q838GnxSDPjRdykgjoXosZfErf8.crl (hash: SeBHmQiVXk9RhJRI6uyccabcN+h2Tp92L8/7M7kztdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:ea:55:b4:f0:49:15:e4:c9:2f:48:53:b0:dd:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff
Validity
Not Before: Oct 19 10:01:40 2025 GMT
Not After : Oct 20 10:01:40 2025 GMT
Subject: CN=e960cd65e0f8fd75f7a5a7b7a987b1f3bbabd342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:60:96:d8:37:1e:09:85:f5:be:79:9a:71:b7:
49:08:38:d1:b4:fa:93:06:2a:9f:7a:8b:5a:46:d5:
91:8a:f3:52:ba:89:23:9b:c8:b4:11:60:56:9d:9a:
ac:75:ba:11:1c:fe:1f:db:9d:5b:3d:3d:58:78:5e:
98:9f:02:50:f7:2b:8d:6e:7d:5c:b6:4f:43:a1:80:
1a:11:8b:f7:ef:f2:b0:77:57:ec:c5:97:cc:f1:d2:
bd:b0:1f:25:fc:7d:91:57:26:db:f9:35:82:8a:12:
e8:28:a7:ae:ec:e6:d1:6b:1e:53:4f:63:01:3a:23:
0e:17:36:0a:47:b5:95:32:ff:30:61:b1:30:51:5e:
df:cd:b3:a8:f4:c1:18:68:2f:25:ba:8d:ce:da:25:
b5:20:8e:a1:3c:a0:63:89:7a:5d:80:aa:e0:62:f9:
6e:9d:4f:a4:72:ed:3d:eb:b1:50:7d:45:d5:bd:5f:
34:68:cb:ab:41:96:6e:6d:32:c0:22:6e:d6:92:80:
69:80:10:b3:98:93:8e:a6:a4:4a:d4:dc:68:22:f6:
89:84:3a:67:ea:b5:5a:5d:57:56:68:47:dd:51:5f:
aa:c3:27:cc:49:b7:42:9b:bc:52:c2:8f:24:cf:91:
5c:7f:84:c1:db:3f:a9:e2:b0:3e:c2:e9:cf:24:de:
03:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:60:CD:65:E0:F8:FD:75:F7:A5:A7:B7:A9:87:B1:F3:BB:AB:D3:42
X509v3 Authority Key Identifier:
keyid:AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:35:c2:c0:46:c1:47:52:64:df:5b:b5:b9:65:6d:88:8b:d6:
ab:69:c4:87:fe:ff:ec:5d:3d:7c:49:f5:38:e7:7a:fb:ec:1e:
a4:c8:fb:3b:0c:8d:a7:01:6c:8a:c5:15:33:7b:fa:36:22:91:
96:f8:12:22:92:8c:11:2d:54:b4:b3:ff:fc:08:37:2f:3a:ad:
e7:36:0e:f5:c3:ba:17:48:21:7d:f9:44:95:b7:30:fc:33:2f:
5a:23:cc:2f:a7:80:36:37:26:6e:2f:c9:f0:50:d2:05:50:11:
83:88:a1:71:96:18:8a:2c:87:29:83:3e:1d:a9:08:ba:7c:7f:
c2:5e:bc:eb:e2:f3:6d:d7:4c:60:52:eb:45:20:ed:cb:eb:af:
fe:07:b4:fa:16:ad:b2:9f:4b:70:ea:6f:3d:25:e4:59:ae:7b:
8a:81:5f:d2:3f:e9:db:ad:dc:1c:02:df:0d:1f:00:2b:01:38:
ee:c2:9a:c6:69:b5:d4:9e:d1:7b:b2:d2:b0:a2:15:71:56:68:
4b:83:5e:ed:25:25:7a:f6:da:48:f3:28:23:5c:d0:0a:55:c4:
32:78:15:a6:5e:6e:48:2d:7d:e2:7a:d6:0f:ad:83:9c:0d:8e:
ac:ed:a8:62:0e:1e:96:e5:86:7e:56:fe:67:0c:ff:12:49:81:
a2:38:20:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76upVtPBJFeTJL0hTsN2HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiY2RmYzFhN2M1MjBjZjhkMTc3MjkyMDhlODVlOGIxOTdj
NGFkZmYwHhcNMjUxMDE5MTAwMTQwWhcNMjUxMDIwMTAwMTQwWjAzMTEwLwYDVQQD
EyhlOTYwY2Q2NWUwZjhmZDc1ZjdhNWE3YjdhOTg3YjFmM2JiYWJkMzQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGCW2DceCYX1vnmacbdJCDjRtPqT
BiqfeotaRtWRivNSuokjm8i0EWBWnZqsdboRHP4f251bPT1YeF6YnwJQ9yuNbn1c
tk9DoYAaEYv37/Kwd1fsxZfM8dK9sB8l/H2RVybb+TWCihLoKKeu7ObRax5TT2MB
OiMOFzYKR7WVMv8wYbEwUV7fzbOo9MEYaC8luo3O2iW1II6hPKBjiXpdgKrgYvlu
nU+kcu0967FQfUXVvV80aMurQZZubTLAIm7WkoBpgBCzmJOOpqRK1NxoIvaJhDpn
6rVaXVdWaEfdUV+qwyfMSbdCm7xSwo8kz5Fcf4TB2z+p4rA+wunPJN4DxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOlgzWXg+P1196Wnt6mHsfO7q9NCMB8GA1UdIwQY
MBaAFKvN/Bp8Ugz40XcpII6F6LGXxK3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTgzOEdueFNEUGpSZHlrZ2pvWG9zWmZFcmY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9lNTEyNGYtMTM2OS00OTAxLTlmNTYt
MmJiODJhODM3YjdiLzEvcTgzOEdueFNEUGpSZHlrZ2pvWG9zWmZFcmY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9lNTEyNGYtMTM2OS00OTAxLTlmNTYtMmJiODJhODM3Yjdi
LzEvcTgzOEdueFNEUGpSZHlrZ2pvWG9zWmZFcmY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABzXCwEbB
R1Jk31u1uWVtiIvWq2nEh/7/7F09fEn1OOd6++wepMj7OwyNpwFsisUVM3v6NiKR
lvgSIpKMES1UtLP//Ag3Lzqt5zYO9cO6F0ghfflElbcw/DMvWiPML6eANjcmbi/J
8FDSBVARg4ihcZYYiiyHKYM+HakIunx/wl686+LzbddMYFLrRSDty+uv/ge0+hat
sp9LcOpvPSXkWa57ioFf0j/p263cHALfDR8AKwE47sKaxmm11J7Re7LSsKIVcVZo
S4Ne7SUlevbaSPMoI1zQClXEMngVpl5uSC194nrWD62DnA2OrO2oYg4eluWGflb+
Zwz/EkmBojggCw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:25:44 2025 by rpki-client