Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft
File: q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft (raw, json)
Hash identifier: DTWrN14IkLsLfWlzWwqV3fdCEKJcTfZiAC8GX56Ojoc=
Subject key identifier: FD:01:73:15:6D:C8:D3:ED:B6:B6:6B:8B:36:72:B7:20:89:14:37:E6
Authority key identifier: AB:4F:00:F5:C3:AB:3D:F4:C6:74:A4:10:D8:A0:F0:18:2F:B5:E9:18
Certificate issuer: /CN=ab4f00f5c3ab3df4c674a410d8a0f0182fb5e918
Certificate serial: 019A02FEE7372CDD61B3110700E85C2E61DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft
Manifest number: 16EF
Signing time: Mon 20 Oct 2025 19:00:50 +0000
Manifest this update: Mon 20 Oct 2025 19:00:50 +0000
Manifest next update: Tue 21 Oct 2025 19:00:50 +0000
Files and hashes: 1: EV5m5XkVlwJiCAVuE-Ap-f7iyzE.roa (hash: 5PDn99juoAn/xETBDuvN6m9sq91U6NavWyjHbCXKOeQ=)
2: FAhtWfmDEr62tA8-MdL4s1_WH2Q.roa (hash: GtQmguJ7Q5PK416zswB+RN8W/nrjymWunr8cc+Q6G9I=)
3: q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl (hash: EyYAPSfw/lVAnMqrNepTAcFiBgtyD4rg6FQpWyPfjtY=)
4: q_qPSgEpylFC-voOECXeWUWdHJM.roa (hash: jFOGBq/GXOLKGj5Jj8L6FPHFg+Kwe4gyyf67qENLLPY=)
5: tS4qFuiX3ntHvDjVyJpnqQIgubM.roa (hash: N7idUn1lSpqbvStbcsN5u6MjxI9pbc7GDDAuvP2mI1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft
rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:fe:e7:37:2c:dd:61:b3:11:07:00:e8:5c:2e:61:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab4f00f5c3ab3df4c674a410d8a0f0182fb5e918
Validity
Not Before: Oct 20 19:00:50 2025 GMT
Not After : Oct 21 19:00:50 2025 GMT
Subject: CN=fd0173156dc8d3edb6b66b8b3672b720891437e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9c:a7:e6:bc:7e:69:c5:af:33:05:8f:92:09:
40:bc:90:4c:b6:25:d8:d1:f3:2a:de:2c:3c:ea:72:
5b:65:4e:6f:4c:fa:1d:54:c1:a3:d5:7f:25:b8:66:
cd:b6:0c:88:eb:be:4f:30:98:8d:8c:e0:5e:bc:cc:
20:8f:cb:08:56:0e:a2:b4:de:97:88:be:f3:4c:c4:
0f:75:97:37:a0:72:a1:4b:a4:14:e4:a8:da:73:a3:
b2:31:aa:83:47:df:63:a4:dc:6b:b7:24:c6:a8:c5:
9e:d5:b9:e6:f1:97:d7:9b:44:e3:d3:97:e4:a3:ca:
31:6b:e6:8c:df:1a:ff:f1:4d:1d:23:42:33:b3:83:
b9:23:cf:80:38:c5:41:e6:87:04:e2:18:e6:1a:8c:
ab:8c:d7:75:eb:98:55:71:2f:bd:9c:0c:39:3f:33:
ee:3c:ee:c9:86:b5:55:37:83:4c:ac:03:af:8d:eb:
1d:68:47:59:6d:58:f9:29:5a:02:51:2c:1e:86:10:
9e:a6:42:e9:1a:f7:24:76:a5:d4:1c:88:8c:a4:51:
fa:c9:30:b3:e9:bc:3a:0a:87:14:12:5a:9c:24:a1:
c5:52:2b:ca:82:86:f9:7a:40:4c:e3:1c:cf:08:d5:
88:94:24:b5:de:f6:bb:d2:27:08:d2:68:eb:fa:65:
94:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:01:73:15:6D:C8:D3:ED:B6:B6:6B:8B:36:72:B7:20:89:14:37:E6
X509v3 Authority Key Identifier:
keyid:AB:4F:00:F5:C3:AB:3D:F4:C6:74:A4:10:D8:A0:F0:18:2F:B5:E9:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:81:01:a2:de:42:4b:72:c9:7a:0e:af:99:24:f9:bd:25:24:
07:08:3d:d7:af:aa:25:24:44:2a:84:1d:b8:08:ef:8b:bd:92:
51:2e:24:72:80:4a:cc:cb:f6:d3:c6:5d:f6:bb:8b:a3:18:c9:
14:bc:e1:ad:43:f8:66:9c:3c:23:72:ea:39:3a:11:e1:87:6c:
fc:1b:2f:3c:53:15:e0:56:76:f2:57:d3:67:60:55:14:b0:32:
a9:57:d6:db:79:2a:9c:ce:26:d6:5b:06:c2:26:43:b3:8a:ca:
ef:d2:a0:be:37:b9:23:ae:51:25:0b:c1:76:c6:ad:b7:66:49:
6a:34:6d:21:4d:e9:12:ad:c1:82:a8:c4:80:7d:0b:ef:1a:89:
d4:c4:1c:8a:b9:56:48:7a:85:d7:ad:02:7e:39:66:f4:c2:b9:
73:b7:a2:fd:db:d4:18:ca:d6:f4:33:fa:31:f2:41:73:5e:33:
83:f5:e1:f4:86:05:d0:21:d1:e1:af:6a:23:d8:83:ad:9e:50:
79:9f:66:ac:a1:35:14:3b:2a:bb:83:e2:90:56:31:de:cc:4c:
80:e3:26:c4:ff:7d:a5:96:63:1e:b5:90:ee:f8:b5:1b:c3:78:
58:0f:4c:bd:fd:70:83:95:48:fe:d4:d5:3b:0a:5f:f4:49:88:
82:fd:c1:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoC/uc3LN1hsxEHAOhcLmHfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiNGYwMGY1YzNhYjNkZjRjNjc0YTQxMGQ4YTBmMDE4MmZi
NWU5MTgwHhcNMjUxMDIwMTkwMDUwWhcNMjUxMDIxMTkwMDUwWjAzMTEwLwYDVQQD
EyhmZDAxNzMxNTZkYzhkM2VkYjZiNjZiOGIzNjcyYjcyMDg5MTQzN2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopyn5rx+acWvMwWPkglAvJBMtiXY
0fMq3iw86nJbZU5vTPodVMGj1X8luGbNtgyI675PMJiNjOBevMwgj8sIVg6itN6X
iL7zTMQPdZc3oHKhS6QU5Kjac6OyMaqDR99jpNxrtyTGqMWe1bnm8ZfXm0Tj05fk
o8oxa+aM3xr/8U0dI0Izs4O5I8+AOMVB5ocE4hjmGoyrjNd165hVcS+9nAw5PzPu
PO7JhrVVN4NMrAOvjesdaEdZbVj5KVoCUSwehhCepkLpGvckdqXUHIiMpFH6yTCz
6bw6CocUElqcJKHFUivKgob5ekBM4xzPCNWIlCS13va70icI0mjr+mWUwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP0BcxVtyNPttrZrizZytyCJFDfmMB8GA1UdIwQY
MBaAFKtPAPXDqz30xnSkENig8BgvtekYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTA4QTljT3JQZlRHZEtRUTJLRHdHQy0xNlJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hMWYyMTItYmEzNS00NjZiLWI1MmUt
Mzg1M2QzNDBjOWE2LzEvcTA4QTljT3JQZlRHZEtRUTJLRHdHQy0xNlJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9hMWYyMTItYmEzNS00NjZiLWI1MmUtMzg1M2QzNDBjOWE2
LzEvcTA4QTljT3JQZlRHZEtRUTJLRHdHQy0xNlJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC4EBot5C
S3LJeg6vmST5vSUkBwg916+qJSREKoQduAjvi72SUS4kcoBKzMv208Zd9ruLoxjJ
FLzhrUP4Zpw8I3LqOToR4Yds/BsvPFMV4FZ28lfTZ2BVFLAyqVfW23kqnM4m1lsG
wiZDs4rK79Kgvje5I65RJQvBdsatt2ZJajRtIU3pEq3BgqjEgH0L7xqJ1MQcirlW
SHqF160Cfjlm9MK5c7ei/dvUGMrW9DP6MfJBc14zg/Xh9IYF0CHR4a9qI9iDrZ5Q
eZ9mrKE1FDsqu4PikFYx3sxMgOMmxP99pZZjHrWQ7vi1G8N4WA9Mvf1wg5VI/tTV
Owpf9EmIgv3Baw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:40:36 2025 by rpki-client