Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.mft
File: qZtHOUN7VflE0iKdFrbm-lmRloc.mft (raw, json)
Hash identifier: UC2zfdGRkJxqAwN+p5VLkI8tFcHSUb3sh2Mq2C6q1Go=
Subject key identifier: 89:0A:A3:7B:52:45:06:37:F5:5E:2C:91:14:CD:33:8A:A0:33:7C:BD
Authority key identifier: A9:9B:47:39:43:7B:55:F9:44:D2:22:9D:16:B6:E6:FA:59:91:96:87
Certificate issuer: /CN=a99b4739437b55f944d2229d16b6e6fa59919687
Certificate serial: 0199FCC642617744515F2667B5CC52EDC999
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qZtHOUN7VflE0iKdFrbm-lmRloc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 14:01:15 +0000
Manifest this update: Sun 19 Oct 2025 14:01:15 +0000
Manifest next update: Mon 20 Oct 2025 14:01:15 +0000
Files and hashes: 1: qMxnjU0y2BirW8Msof1Jf0nPV6Y.roa (hash: mETKuHxxI80kK1mEz5SE5kB8etbeHSydtbh41gdDMVo=)
2: qZtHOUN7VflE0iKdFrbm-lmRloc.crl (hash: 0O/PfiToiBXIpdtw5MvcbERP8p0gnPXrakOz7m1l7+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qZtHOUN7VflE0iKdFrbm-lmRloc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:42:61:77:44:51:5f:26:67:b5:cc:52:ed:c9:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a99b4739437b55f944d2229d16b6e6fa59919687
Validity
Not Before: Oct 19 14:01:15 2025 GMT
Not After : Oct 20 14:01:15 2025 GMT
Subject: CN=890aa37b52450637f55e2c9114cd338aa0337cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:43:93:62:78:f5:7e:fb:61:8a:cd:58:69:34:
c4:92:0c:07:9c:4b:4a:ed:65:92:44:9c:3c:b4:6e:
13:e8:d4:a8:f4:b2:9b:87:fa:ec:14:d6:bf:86:10:
3f:2b:7a:cf:66:b8:4b:99:12:98:73:f7:9a:7c:ad:
f5:cc:6f:0f:c3:39:f4:43:e9:00:5d:a2:e3:01:99:
46:27:82:d7:e7:58:bf:a9:82:aa:05:4e:50:2d:58:
87:00:ff:3e:a4:30:63:5c:a8:ab:29:a1:14:4b:fd:
16:bf:01:fa:ea:55:c9:de:5e:de:cf:ca:af:9c:82:
8f:90:d2:12:8f:2e:24:9c:e3:3a:21:dc:1c:2d:18:
63:c1:e5:07:4e:77:53:3d:45:90:fb:0c:c3:a6:4f:
fc:f6:4f:6f:dd:07:fe:58:9b:e3:8f:a9:7f:94:6d:
3e:55:d2:92:31:c3:ef:15:78:d5:5b:db:93:a6:9c:
f3:b9:6a:65:6b:1c:23:88:7b:8b:67:30:69:bc:99:
a2:ef:ca:2d:28:f9:29:94:2e:1e:fc:77:34:1d:2b:
38:bc:9f:32:4f:0c:fb:e8:41:ac:d8:5c:a7:4f:08:
b2:5d:8e:53:cd:e2:5a:ba:53:10:6d:75:33:cb:f4:
6d:88:c8:dd:ca:08:ac:f3:00:20:7c:a2:ea:68:8c:
f5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:0A:A3:7B:52:45:06:37:F5:5E:2C:91:14:CD:33:8A:A0:33:7C:BD
X509v3 Authority Key Identifier:
keyid:A9:9B:47:39:43:7B:55:F9:44:D2:22:9D:16:B6:E6:FA:59:91:96:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZtHOUN7VflE0iKdFrbm-lmRloc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:e0:79:4c:47:b7:a2:66:cf:35:09:0e:6c:f4:4c:72:44:48:
0d:2c:7d:75:d7:82:cd:38:5c:47:0f:01:fb:44:24:54:05:29:
89:30:ce:64:e8:3f:ba:86:46:f6:29:0b:37:f0:1f:0b:24:64:
34:3d:95:4f:34:3d:29:38:1a:94:e4:9a:ef:e6:e2:bb:4c:bc:
a8:0d:97:93:a5:f5:3d:74:1a:11:04:5e:7f:c0:8f:f8:43:a6:
fd:88:e3:c1:8a:d9:82:ba:78:26:d1:67:17:b0:e6:92:5b:b0:
6e:11:aa:b7:fc:d9:22:8b:c6:21:70:10:5d:24:79:94:01:de:
d1:6b:17:55:c6:25:42:89:9d:a2:fc:83:01:a9:59:a5:3d:5f:
ab:99:2e:b3:47:13:8e:86:26:64:38:59:38:69:0a:74:7a:00:
e9:6f:51:a8:39:6a:ca:a3:86:8c:b4:63:82:0e:ab:ac:fe:e2:
1a:87:1c:81:22:5e:0d:b5:e2:86:e5:be:af:71:a2:c4:18:af:
fa:0b:c9:7e:7e:da:79:0f:da:f0:46:aa:b1:a4:d1:38:7e:ec:
7c:14:ac:f9:96:e0:27:d7:80:10:4c:67:48:df:b3:c4:b5:95:
8d:84:24:f7:32:d7:da:6c:e4:3c:69:4c:33:a3:dd:2e:8d:88:
da:72:e1:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xkJhd0RRXyZntcxS7cmZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5OWI0NzM5NDM3YjU1Zjk0NGQyMjI5ZDE2YjZlNmZhNTk5
MTk2ODcwHhcNMjUxMDE5MTQwMTE1WhcNMjUxMDIwMTQwMTE1WjAzMTEwLwYDVQQD
Eyg4OTBhYTM3YjUyNDUwNjM3ZjU1ZTJjOTExNGNkMzM4YWEwMzM3Y2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7UOTYnj1fvthis1YaTTEkgwHnEtK
7WWSRJw8tG4T6NSo9LKbh/rsFNa/hhA/K3rPZrhLmRKYc/eafK31zG8Pwzn0Q+kA
XaLjAZlGJ4LX51i/qYKqBU5QLViHAP8+pDBjXKirKaEUS/0WvwH66lXJ3l7ez8qv
nIKPkNISjy4knOM6IdwcLRhjweUHTndTPUWQ+wzDpk/89k9v3Qf+WJvjj6l/lG0+
VdKSMcPvFXjVW9uTppzzuWplaxwjiHuLZzBpvJmi78otKPkplC4e/Hc0HSs4vJ8y
Twz76EGs2FynTwiyXY5TzeJaulMQbXUzy/RtiMjdygis8wAgfKLqaIz14wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIkKo3tSRQY39V4skRTNM4qgM3y9MB8GA1UdIwQY
MBaAFKmbRzlDe1X5RNIinRa25vpZkZaHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVp0SE9VTjdWZmxFMGlLZEZyYm0tbG1SbG9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9hNDExNGUtZGIxNC00NGI0LTliMjUt
ZTQ3NTY0Y2QwYmFlLzEvcVp0SE9VTjdWZmxFMGlLZEZyYm0tbG1SbG9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9hNDExNGUtZGIxNC00NGI0LTliMjUtZTQ3NTY0Y2QwYmFl
LzEvcVp0SE9VTjdWZmxFMGlLZEZyYm0tbG1SbG9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACeB5TEe3
ombPNQkObPRMckRIDSx9ddeCzThcRw8B+0QkVAUpiTDOZOg/uoZG9ikLN/AfCyRk
ND2VTzQ9KTgalOSa7+biu0y8qA2Xk6X1PXQaEQRef8CP+EOm/YjjwYrZgrp4JtFn
F7DmkluwbhGqt/zZIovGIXAQXSR5lAHe0WsXVcYlQomdovyDAalZpT1fq5kus0cT
joYmZDhZOGkKdHoA6W9RqDlqyqOGjLRjgg6rrP7iGoccgSJeDbXihuW+r3GixBiv
+gvJfn7aeQ/a8EaqsaTROH7sfBSs+ZbgJ9eAEExnSN+zxLWVjYQk9zLX2mzkPGlM
M6PdLo2I2nLhaA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:50:51 2025 by rpki-client