Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft
File: Y9krglYVmJTSubJfTYWYbBcnI8M.mft (raw, json)
Hash identifier: faCnWgGicouTs/nI0XYH4fn5GTo+RFftgR6lcJQnOHs=
Subject key identifier: 77:94:4B:D9:A7:1F:36:2E:4C:33:1C:58:C1:BB:3F:1F:EF:89:5E:AE
Authority key identifier: 63:D9:2B:82:56:15:98:94:D2:B9:B2:5F:4D:85:98:6C:17:27:23:C3
Certificate issuer: /CN=63d92b8256159894d2b9b25f4d85986c172723c3
Certificate serial: 0199FCC68D7DE3E1999FEBCAA1BC6818D70F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft
Manifest number: 0EAC
Signing time: Sun 19 Oct 2025 14:01:34 +0000
Manifest this update: Sun 19 Oct 2025 14:01:34 +0000
Manifest next update: Mon 20 Oct 2025 14:01:34 +0000
Files and hashes: 1: VWwybFqWy2MXRW4GlH3TydNfWoU.roa (hash: AWURtsDjcCoYL2cv7BnBoU4GwDRl+uRuBqffs+8EChU=)
2: VsWH0dh23uHGDE4kVE5VRVWnLr0.roa (hash: hOVkpMTlrRKsdZ/dZuqLj9eHRUgLLpUyv0shzANzums=)
3: Y9krglYVmJTSubJfTYWYbBcnI8M.crl (hash: WIx8xiynjjTDu/qLWZVufzLUmqmNB5XSmqbCj+JWISY=)
4: gUlf15cCFOrr7zCpeZmrXHzHdJI.roa (hash: BZcCVc7umSblQi+mV0dsvmWzWVZejT4EU9eRPoEWNCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:8d:7d:e3:e1:99:9f:eb:ca:a1:bc:68:18:d7:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63d92b8256159894d2b9b25f4d85986c172723c3
Validity
Not Before: Oct 19 14:01:34 2025 GMT
Not After : Oct 20 14:01:34 2025 GMT
Subject: CN=77944bd9a71f362e4c331c58c1bb3f1fef895eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5a:a8:a1:f0:31:39:0c:27:40:39:a6:03:f1:
49:ae:d2:05:53:0e:e6:18:a8:d6:84:7c:13:69:d2:
c0:ae:4a:9b:26:47:c8:9f:13:ef:07:05:8f:b3:be:
05:a0:bd:80:bd:24:8f:d2:e7:97:67:7a:ca:b1:eb:
36:5a:a9:bd:c3:10:49:87:e4:1c:38:50:09:44:e8:
5f:38:37:2e:72:69:9c:b7:ec:ad:7a:da:83:7a:c2:
a9:e5:a9:78:54:61:a6:91:da:ce:9b:cf:af:fd:39:
b9:6c:44:79:c5:a1:ea:ad:8f:cd:cc:8e:5b:97:f2:
61:eb:3f:d9:cf:22:b4:3a:52:0a:b0:3b:d4:ca:a0:
3d:95:a0:d6:b6:9c:a8:e9:b5:10:07:7b:30:12:71:
dd:64:46:16:ac:dc:0b:ba:8f:1e:96:ff:44:2b:1d:
dd:51:e8:0b:15:10:cf:81:73:a0:9c:78:ee:c0:77:
bf:5e:66:ac:5a:63:b7:e1:c5:c9:e0:cf:6c:23:7f:
5b:ac:c8:b2:ed:61:5d:58:d2:e6:21:23:85:4f:c4:
e3:47:f7:f2:db:c5:2a:5c:04:57:06:90:a0:00:b6:
c0:91:d4:dc:cb:ac:2b:1e:c0:3b:df:82:07:4a:b2:
cf:e9:1f:45:1b:d4:a7:1f:7c:69:06:89:10:cf:01:
76:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:94:4B:D9:A7:1F:36:2E:4C:33:1C:58:C1:BB:3F:1F:EF:89:5E:AE
X509v3 Authority Key Identifier:
keyid:63:D9:2B:82:56:15:98:94:D2:B9:B2:5F:4D:85:98:6C:17:27:23:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:b0:75:5a:ae:63:80:61:ce:90:f2:ef:c8:d4:b1:21:75:ba:
d5:1f:83:31:0d:f1:5d:0a:34:fd:f8:6f:6f:c0:14:cc:c7:bc:
dd:f9:fc:26:8d:5d:de:72:e2:13:ea:7c:5e:ac:c4:36:1b:9b:
d9:f1:10:ec:75:fb:7b:34:9e:60:12:1d:19:c1:77:f7:fc:e4:
78:38:50:e4:34:84:77:62:31:c9:36:c7:d1:6d:6a:88:0a:68:
f7:9e:ef:88:09:f6:2b:b2:ba:ef:1c:31:7e:45:86:10:19:b3:
b6:ec:18:0b:b0:da:eb:80:10:3b:5f:08:5f:54:0b:9e:95:9e:
8f:85:3b:00:19:43:a5:7d:fa:1c:eb:9e:52:fe:cd:be:8c:f4:
5c:8b:4a:66:35:c6:d9:e5:bb:4b:5c:ee:d1:54:d0:5f:1a:3e:
d9:97:61:79:d7:23:c6:0b:11:ae:bd:4c:5d:1b:9c:a5:a3:e5:
fa:61:9d:82:96:22:68:7b:93:2f:7f:b1:ea:f8:2d:aa:e5:ec:
d3:1b:ae:f7:40:e3:ec:a4:68:a8:6f:e7:d0:05:df:cb:ca:9c:
3e:9f:ba:4e:12:8e:c1:36:2b:dc:ac:ce:36:00:24:4d:11:4a:
a6:8d:c4:7b:45:e7:f5:6a:4b:a8:15:55:cd:ed:55:f3:2e:40:
5c:fc:44:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xo194+GZn+vKobxoGNcPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZDkyYjgyNTYxNTk4OTRkMmI5YjI1ZjRkODU5ODZjMTcy
NzIzYzMwHhcNMjUxMDE5MTQwMTM0WhcNMjUxMDIwMTQwMTM0WjAzMTEwLwYDVQQD
Eyg3Nzk0NGJkOWE3MWYzNjJlNGMzMzFjNThjMWJiM2YxZmVmODk1ZWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4FqoofAxOQwnQDmmA/FJrtIFUw7m
GKjWhHwTadLArkqbJkfInxPvBwWPs74FoL2AvSSP0ueXZ3rKses2Wqm9wxBJh+Qc
OFAJROhfODcucmmct+ytetqDesKp5al4VGGmkdrOm8+v/Tm5bER5xaHqrY/NzI5b
l/Jh6z/ZzyK0OlIKsDvUyqA9laDWtpyo6bUQB3swEnHdZEYWrNwLuo8elv9EKx3d
UegLFRDPgXOgnHjuwHe/XmasWmO34cXJ4M9sI39brMiy7WFdWNLmISOFT8TjR/fy
28UqXARXBpCgALbAkdTcy6wrHsA734IHSrLP6R9FG9SnH3xpBokQzwF2uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHeUS9mnHzYuTDMcWMG7Px/viV6uMB8GA1UdIwQY
MBaAFGPZK4JWFZiU0rmyX02FmGwXJyPDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTlrcmdsWVZtSlRTdWJKZlRZV1liQmNuSThNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8yNmQ5MTctOGM5MS00NWFiLTg0NDIt
ZTRlNTJhYzBmZWZlLzEvWTlrcmdsWVZtSlRTdWJKZlRZV1liQmNuSThNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8yNmQ5MTctOGM5MS00NWFiLTg0NDItZTRlNTJhYzBmZWZl
LzEvWTlrcmdsWVZtSlRTdWJKZlRZV1liQmNuSThNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASbB1Wq5j
gGHOkPLvyNSxIXW61R+DMQ3xXQo0/fhvb8AUzMe83fn8Jo1d3nLiE+p8XqzENhub
2fEQ7HX7ezSeYBIdGcF39/zkeDhQ5DSEd2IxyTbH0W1qiApo957viAn2K7K67xwx
fkWGEBmztuwYC7Da64AQO18IX1QLnpWej4U7ABlDpX36HOueUv7Nvoz0XItKZjXG
2eW7S1zu0VTQXxo+2ZdhedcjxgsRrr1MXRucpaPl+mGdgpYiaHuTL3+x6vgtquXs
0xuu90Dj7KRoqG/n0AXfy8qcPp+6ThKOwTYr3KzONgAkTRFKpo3Ee0Xn9WpLqBVV
ze1V8y5AXPxEPw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:29 2025 by rpki-client