Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
File: QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft (raw, json)
Hash identifier: XYz0ATP69yFI8owsgdUTK0CQX2b72vHV5HtzVl8zl2c=
Subject key identifier: 43:95:82:31:5B:2B:3A:31:9E:EA:52:6A:2C:04:6B:3A:B9:99:A2:69
Authority key identifier: 41:FC:55:EE:24:88:FB:94:01:C4:B6:68:AB:AC:54:11:0E:BB:80:92
Certificate issuer: /CN=41fc55ee2488fb9401c4b668abac54110ebb8092
Certificate serial: 0199FC215425CAEE02C8FE8E2AE85928995B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
Manifest number: 13E8
Signing time: Sun 19 Oct 2025 11:01:06 +0000
Manifest this update: Sun 19 Oct 2025 11:01:06 +0000
Manifest next update: Mon 20 Oct 2025 11:01:06 +0000
Files and hashes: 1: CLemqr75Yb48Km-cD1hApiGwC9E.roa (hash: EAtUhRgJzB5CWn94r1qk7eU5voV0S7bWsYXXanEEayY=)
2: QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl (hash: IV38IIaibrrdKB9lEMIufaWGStwGL+N1NKxpE0d4vtY=)
3: yEsMSFNm5dJ-A_JpG2DXLz7wI-Y.roa (hash: 8AHka5aF5G+PfLY03Vs1HshDxFgYYrha9TXGX/Fcp3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:54:25:ca:ee:02:c8:fe:8e:2a:e8:59:28:99:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41fc55ee2488fb9401c4b668abac54110ebb8092
Validity
Not Before: Oct 19 11:01:06 2025 GMT
Not After : Oct 20 11:01:06 2025 GMT
Subject: CN=439582315b2b3a319eea526a2c046b3ab999a269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f7:8e:28:3b:15:f4:ec:da:22:5f:3c:90:ff:
65:b8:da:b1:88:fb:84:bd:01:8d:7d:21:0c:62:64:
2d:1c:f5:39:de:f9:f2:f2:a6:c8:e9:19:18:db:61:
17:b7:e7:39:d9:3e:e3:a0:c9:ee:6e:2b:15:48:dd:
82:28:35:1d:d0:53:63:7b:6b:44:9b:dc:80:14:31:
66:75:3c:8c:25:2e:30:8c:dd:41:64:cc:c5:dd:f1:
df:06:15:e5:83:dc:54:e9:06:d6:e5:70:4d:eb:a5:
51:75:fa:a9:c3:e0:b9:28:53:4f:9c:80:42:40:ef:
6b:a1:a1:67:f1:cd:57:dc:84:0a:f9:20:7d:27:0f:
09:25:e6:56:09:bb:b9:12:9f:a0:38:db:24:0e:a7:
01:bf:a0:b6:e7:e4:ea:05:c2:b4:dd:7c:c1:08:38:
28:79:7e:5e:83:08:de:8b:f0:94:db:6b:1a:25:32:
33:e0:18:df:08:7c:86:36:8e:c3:73:a4:88:12:68:
30:96:02:f5:da:ee:72:79:ea:a0:9f:c3:6b:a6:b9:
a2:30:46:38:37:0e:1e:b5:98:9f:3e:62:15:92:4e:
fd:72:e7:a4:b8:34:eb:eb:f8:a6:a9:96:f6:35:d6:
ff:dc:c6:55:a8:fb:50:b2:ad:ef:78:d3:a7:59:73:
d3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:95:82:31:5B:2B:3A:31:9E:EA:52:6A:2C:04:6B:3A:B9:99:A2:69
X509v3 Authority Key Identifier:
keyid:41:FC:55:EE:24:88:FB:94:01:C4:B6:68:AB:AC:54:11:0E:BB:80:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:31:7e:67:35:3c:b1:cb:34:57:be:32:83:b2:c3:c9:40:94:
bc:af:36:8f:c9:61:fd:ea:f1:b9:19:af:3b:22:ea:6d:54:be:
df:30:23:34:b0:e8:45:fb:72:0f:57:70:2e:ed:46:95:6e:39:
21:d6:6d:15:db:04:cc:09:79:f0:5b:72:65:fe:2b:48:0d:36:
02:bc:47:0c:f6:61:13:eb:ab:58:50:4c:68:56:11:c7:72:e6:
48:80:b2:7f:8c:ef:60:4d:7b:93:a7:6a:35:d4:23:77:1d:71:
47:cc:5f:9b:1a:2b:0c:5d:87:a3:6f:8a:49:ec:5f:87:75:35:
4f:80:60:91:eb:ab:f2:50:48:43:2a:1a:d1:03:6c:d2:ef:27:
ca:97:10:43:e5:72:df:27:0f:d7:a3:d9:43:83:ff:d8:8d:fa:
94:85:84:75:b2:49:96:44:58:de:62:1c:5f:8a:e8:36:3b:0a:
8e:b6:77:ed:7d:8d:4c:7a:c7:63:46:0e:a1:16:eb:48:07:ff:
c0:45:c0:80:8e:19:f6:4f:24:9a:79:97:dd:e4:e7:19:af:d3:
cf:72:b4:c8:ba:1d:40:5b:f7:6b:fb:3c:2c:05:24:c9:60:b1:
00:04:4d:6a:c0:65:f9:e5:e0:6b:74:45:2c:d9:28:52:fd:6e:
72:65:f3:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IVQlyu4CyP6OKuhZKJlbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZmM1NWVlMjQ4OGZiOTQwMWM0YjY2OGFiYWM1NDExMGVi
YjgwOTIwHhcNMjUxMDE5MTEwMTA2WhcNMjUxMDIwMTEwMTA2WjAzMTEwLwYDVQQD
Eyg0Mzk1ODIzMTViMmIzYTMxOWVlYTUyNmEyYzA0NmIzYWI5OTlhMjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/eOKDsV9OzaIl88kP9luNqxiPuE
vQGNfSEMYmQtHPU53vny8qbI6RkY22EXt+c52T7joMnubisVSN2CKDUd0FNje2tE
m9yAFDFmdTyMJS4wjN1BZMzF3fHfBhXlg9xU6QbW5XBN66VRdfqpw+C5KFNPnIBC
QO9roaFn8c1X3IQK+SB9Jw8JJeZWCbu5Ep+gONskDqcBv6C25+TqBcK03XzBCDgo
eX5egwjei/CU22saJTIz4BjfCHyGNo7Dc6SIEmgwlgL12u5yeeqgn8NrprmiMEY4
Nw4etZifPmIVkk79cuekuDTr6/imqZb2Ndb/3MZVqPtQsq3veNOnWXPT3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEOVgjFbKzoxnupSaiwEazq5maJpMB8GA1UdIwQY
MBaAFEH8Ve4kiPuUAcS2aKusVBEOu4CSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWZ4VjdpU0ktNVFCeExab3E2eFVFUTY3Z0pJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hYTM2NjEtZGViMy00NWE0LTg2OTMt
Mzg4MWE4YjgyN2FjLzEvUWZ4VjdpU0ktNVFCeExab3E2eFVFUTY3Z0pJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hYTM2NjEtZGViMy00NWE0LTg2OTMtMzg4MWE4YjgyN2Fj
LzEvUWZ4VjdpU0ktNVFCeExab3E2eFVFUTY3Z0pJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcjF+ZzU8
scs0V74yg7LDyUCUvK82j8lh/erxuRmvOyLqbVS+3zAjNLDoRftyD1dwLu1GlW45
IdZtFdsEzAl58FtyZf4rSA02ArxHDPZhE+urWFBMaFYRx3LmSICyf4zvYE17k6dq
NdQjdx1xR8xfmxorDF2Ho2+KSexfh3U1T4Bgkeur8lBIQyoa0QNs0u8nypcQQ+Vy
3ycP16PZQ4P/2I36lIWEdbJJlkRY3mIcX4roNjsKjrZ37X2NTHrHY0YOoRbrSAf/
wEXAgI4Z9k8kmnmX3eTnGa/Tz3K0yLodQFv3a/s8LAUkyWCxAARNasBl+eXga3RF
LNkoUv1ucmXzNA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:15 2025 by rpki-client