
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/c6f76b-7887-412a-bab4-ec2819c0ac4d/1/saC9QgWKA5D0Y8_rexfiHeC3VQA.mft
File: saC9QgWKA5D0Y8_rexfiHeC3VQA.mft (raw, json)
Hash identifier: Wg4xNUumG8NHc+Wy7Jdoic4PnpEpxLVEsRiGy0LSxcs=
Subject key identifier: FC:F6:7F:90:A6:69:1B:18:FA:2E:F6:24:73:80:2E:D8:0E:2A:87:5E
Authority key identifier: B1:A0:BD:42:05:8A:03:90:F4:63:CF:EB:7B:17:E2:1D:E0:B7:55:00
Certificate issuer: /CN=b1a0bd42058a0390f463cfeb7b17e21de0b75500
Certificate serial: 0199FB7CC15903D02CAF95D7B0B1B3D6A800
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saC9QgWKA5D0Y8_rexfiHeC3VQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/c6f76b-7887-412a-bab4-ec2819c0ac4d/1/saC9QgWKA5D0Y8_rexfiHeC3VQA.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 08:01:21 +0000
Manifest this update: Sun 19 Oct 2025 08:01:21 +0000
Manifest next update: Mon 20 Oct 2025 08:01:21 +0000
Files and hashes: 1: M5ygsUf6TUqUYI8FV2cjTiESBdE.roa (hash: inJMcRO+0HtRn269DlSaUq0NeeQUCkuMxbxILPu+WG8=)
2: saC9QgWKA5D0Y8_rexfiHeC3VQA.crl (hash: vAk+Gd+K92b+0NkYMHuyI9DByUOpbzPFS7qOIUp/R7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/c6f76b-7887-412a-bab4-ec2819c0ac4d/1/saC9QgWKA5D0Y8_rexfiHeC3VQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/c6f76b-7887-412a-bab4-ec2819c0ac4d/1/saC9QgWKA5D0Y8_rexfiHeC3VQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/saC9QgWKA5D0Y8_rexfiHeC3VQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:c1:59:03:d0:2c:af:95:d7:b0:b1:b3:d6:a8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a0bd42058a0390f463cfeb7b17e21de0b75500
Validity
Not Before: Oct 19 08:01:21 2025 GMT
Not After : Oct 20 08:01:21 2025 GMT
Subject: CN=fcf67f90a6691b18fa2ef62473802ed80e2a875e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6f:ae:1b:22:90:9d:87:fd:3d:61:df:99:3c:
68:9f:d2:0b:91:37:ef:53:c6:74:8e:43:7c:5a:1e:
4a:db:ae:82:0a:63:5a:5b:6f:8a:e0:32:e0:8f:62:
d2:7e:4c:b2:90:3d:e0:fe:e4:d3:12:4b:df:a8:9f:
9d:4f:3e:40:93:1a:91:64:0f:65:f6:98:f7:cb:6a:
15:ee:f8:0d:7d:4a:bf:99:de:60:c7:99:db:2c:45:
ff:8d:ce:55:7f:dc:d1:4f:db:1e:e7:e0:9f:87:78:
5c:94:5f:79:c8:6e:0a:65:8d:5e:62:01:51:fb:f5:
60:17:3b:94:74:29:42:47:fb:92:3b:b6:91:51:b8:
de:61:2d:9c:d0:f9:fe:43:69:47:61:8f:77:4c:ea:
9b:7f:11:32:75:05:22:b5:ce:f3:c7:21:1f:03:b7:
65:ef:d9:84:1f:53:eb:b6:63:70:84:d0:68:a5:b2:
95:34:d5:d3:64:c3:e7:45:a1:bc:44:8f:d2:e8:5c:
6b:bb:ad:6e:75:31:21:13:e5:d9:4a:02:96:9b:c3:
e5:d6:36:e5:5a:20:45:b0:c4:a7:db:47:ad:ff:81:
9b:7a:75:c9:48:e4:51:1d:7d:90:52:88:68:ba:5e:
67:8b:e3:a3:82:78:41:14:3d:1c:eb:24:e5:2d:e2:
6c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F6:7F:90:A6:69:1B:18:FA:2E:F6:24:73:80:2E:D8:0E:2A:87:5E
X509v3 Authority Key Identifier:
keyid:B1:A0:BD:42:05:8A:03:90:F4:63:CF:EB:7B:17:E2:1D:E0:B7:55:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saC9QgWKA5D0Y8_rexfiHeC3VQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c6f76b-7887-412a-bab4-ec2819c0ac4d/1/saC9QgWKA5D0Y8_rexfiHeC3VQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c6f76b-7887-412a-bab4-ec2819c0ac4d/1/saC9QgWKA5D0Y8_rexfiHeC3VQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:f1:62:7a:84:9a:6d:6e:56:03:01:14:13:46:5f:ef:76:17:
c6:48:b5:61:fa:0f:ff:5b:9f:fd:18:9c:df:62:06:e1:73:79:
4c:17:2b:7b:8b:d6:d0:37:f7:36:b9:4e:b5:bf:21:c2:42:5c:
df:ab:5c:7d:64:cc:c1:41:45:e0:76:3a:96:54:25:b3:a7:d7:
10:e1:64:a9:b3:4a:f3:92:5f:18:84:1b:e8:c9:95:8b:05:30:
1f:33:d5:3c:04:14:22:5e:33:1f:9a:b3:28:33:cc:ae:13:9c:
4e:be:db:be:2e:14:17:28:fe:9f:54:16:54:34:0a:50:c8:42:
f6:87:ca:61:64:eb:17:8f:fd:15:bb:e7:00:26:64:56:ff:63:
03:bb:76:b2:5b:c0:4a:cb:13:43:dc:df:32:78:fc:fa:46:03:
ad:57:17:22:1f:92:3b:20:ec:26:3a:21:51:6f:dd:47:bd:98:
82:00:a4:2e:54:94:ff:4a:8d:a2:b3:27:c1:e1:09:34:fc:33:
e0:5b:a4:c6:21:8d:c0:30:3f:8e:c4:b7:12:ce:a2:f5:de:5c:
d0:03:f0:3e:ab:20:11:8b:c5:6e:4f:11:8f:40:ca:99:34:2c:
f1:38:00:6e:b8:60:5b:30:1c:f1:7d:53:63:ba:f1:fb:da:7a:
a9:65:31:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fMFZA9Asr5XXsLGz1qgAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYTBiZDQyMDU4YTAzOTBmNDYzY2ZlYjdiMTdlMjFkZTBi
NzU1MDAwHhcNMjUxMDE5MDgwMTIxWhcNMjUxMDIwMDgwMTIxWjAzMTEwLwYDVQQD
EyhmY2Y2N2Y5MGE2NjkxYjE4ZmEyZWY2MjQ3MzgwMmVkODBlMmE4NzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4W+uGyKQnYf9PWHfmTxon9ILkTfv
U8Z0jkN8Wh5K266CCmNaW2+K4DLgj2LSfkyykD3g/uTTEkvfqJ+dTz5AkxqRZA9l
9pj3y2oV7vgNfUq/md5gx5nbLEX/jc5Vf9zRT9se5+Cfh3hclF95yG4KZY1eYgFR
+/VgFzuUdClCR/uSO7aRUbjeYS2c0Pn+Q2lHYY93TOqbfxEydQUitc7zxyEfA7dl
79mEH1PrtmNwhNBopbKVNNXTZMPnRaG8RI/S6Fxru61udTEhE+XZSgKWm8Pl1jbl
WiBFsMSn20et/4GbenXJSORRHX2QUohoul5ni+OjgnhBFD0c6yTlLeJsqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPz2f5CmaRsY+i72JHOALtgOKodeMB8GA1UdIwQY
MBaAFLGgvUIFigOQ9GPP63sX4h3gt1UAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2FDOVFnV0tBNUQwWThfcmV4ZmlIZUMzVlFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9jNmY3NmItNzg4Ny00MTJhLWJhYjQt
ZWMyODE5YzBhYzRkLzEvc2FDOVFnV0tBNUQwWThfcmV4ZmlIZUMzVlFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9jNmY3NmItNzg4Ny00MTJhLWJhYjQtZWMyODE5YzBhYzRk
LzEvc2FDOVFnV0tBNUQwWThfcmV4ZmlIZUMzVlFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi/FieoSa
bW5WAwEUE0Zf73YXxki1YfoP/1uf/Ric32IG4XN5TBcre4vW0Df3NrlOtb8hwkJc
36tcfWTMwUFF4HY6llQls6fXEOFkqbNK85JfGIQb6MmViwUwHzPVPAQUIl4zH5qz
KDPMrhOcTr7bvi4UFyj+n1QWVDQKUMhC9ofKYWTrF4/9FbvnACZkVv9jA7t2slvA
SssTQ9zfMnj8+kYDrVcXIh+SOyDsJjohUW/dR72YggCkLlSU/0qNorMnweEJNPwz
4FukxiGNwDA/jsS3Es6i9d5c0APwPqsgEYvFbk8Rj0DKmTQs8TgAbrhgWzAc8X1T
Y7rx+9p6qWUxbA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:01 2025 by rpki-client