Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft
File: w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft (raw, json)
Hash identifier: zD/6pKcvtzcqv1IUk/wylyEdEmHBiVlZ0zbMOEkldYU=
Subject key identifier: A4:D2:1A:D4:8F:91:4F:EB:18:AD:63:DD:E5:09:10:E4:64:EB:1B:AC
Authority key identifier: C3:B4:35:1E:0A:49:5C:26:EF:DC:6E:41:5F:0B:B1:89:FB:BD:6E:DF
Certificate issuer: /CN=c3b4351e0a495c26efdc6e415f0bb189fbbd6edf
Certificate serial: 0199FBEB59F4EF5F56C86959EC928431A878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w7Q1HgpJXCbv3G5BXwuxifu9bt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 10:02:09 +0000
Manifest this update: Sun 19 Oct 2025 10:02:09 +0000
Manifest next update: Mon 20 Oct 2025 10:02:09 +0000
Files and hashes: 1: 4mL1zKKLOxGn25fl7m9On5y2ZYA.roa (hash: 9EgYMO8cQ5z/aiE1aC8zT4GRbu01MVUJ2bPVFVsvu8U=)
2: jdL88fKfBRcDZQd2LJ3KQAGZWz0.roa (hash: Rtx6TLOA/PMGBKD0sU4jO9D8OJMlb2E7ArhYwQT50vQ=)
3: w7Q1HgpJXCbv3G5BXwuxifu9bt8.crl (hash: LpeKSX5Wr5N/4TqPTIRJCZmIm8m6VwqERylv939sVQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w7Q1HgpJXCbv3G5BXwuxifu9bt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:59:f4:ef:5f:56:c8:69:59:ec:92:84:31:a8:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3b4351e0a495c26efdc6e415f0bb189fbbd6edf
Validity
Not Before: Oct 19 10:02:09 2025 GMT
Not After : Oct 20 10:02:09 2025 GMT
Subject: CN=a4d21ad48f914feb18ad63dde50910e464eb1bac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:08:2d:1c:80:27:0e:e9:fe:98:35:b9:3a:28:
01:39:cb:23:26:07:3f:86:e6:fd:03:7f:1a:c8:e8:
a7:c3:d6:46:fa:35:e2:c4:10:e7:a0:16:bd:1a:a4:
e6:84:51:ae:4b:41:40:11:23:80:29:38:75:c0:72:
91:74:ee:02:29:cb:4f:db:e6:f9:18:e0:a9:4b:53:
cf:f3:82:db:40:f8:7b:ab:c2:30:83:5d:df:71:cf:
69:49:7f:ed:27:b2:5f:6b:d4:ce:d2:3e:fa:76:c5:
78:b4:e2:4a:25:b7:fd:96:80:ec:42:a2:e7:c1:a7:
5d:46:34:6c:79:98:6f:29:d5:ee:54:dd:d0:f9:47:
27:e0:97:d2:76:ce:f7:da:5a:17:b4:b4:9f:ed:89:
5b:5c:8a:9f:24:79:2e:64:36:af:e9:ab:04:fc:70:
8f:f7:7a:96:05:77:52:8e:62:09:5a:24:29:c7:e0:
e1:c0:3e:52:88:fe:0e:5a:eb:27:2f:0d:ac:a9:05:
6f:44:ce:1d:22:21:a1:98:5b:27:9d:24:31:a0:1e:
ab:d3:77:c1:eb:4d:cf:04:37:a1:8d:3e:84:de:bb:
6b:d1:ab:15:1d:b4:05:a3:0f:e8:0b:09:5f:42:b9:
4a:29:4e:d5:91:77:72:21:05:c9:26:76:7f:5f:51:
83:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D2:1A:D4:8F:91:4F:EB:18:AD:63:DD:E5:09:10:E4:64:EB:1B:AC
X509v3 Authority Key Identifier:
keyid:C3:B4:35:1E:0A:49:5C:26:EF:DC:6E:41:5F:0B:B1:89:FB:BD:6E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7Q1HgpJXCbv3G5BXwuxifu9bt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:c3:b6:4a:35:21:10:e1:21:18:0f:d4:3b:0a:5d:48:3a:dd:
96:58:96:44:37:01:f6:fc:86:ac:69:d8:de:29:23:4f:b9:5e:
28:f7:c8:56:28:af:cf:bd:42:1c:cb:2d:08:7e:df:81:77:ec:
55:45:d1:03:2e:83:51:b7:cb:c3:07:43:fe:57:b2:ee:ac:38:
96:05:66:16:9d:ef:e7:8d:99:dc:d2:b9:88:57:af:be:4d:5f:
13:f2:1b:ff:65:fb:f0:16:81:18:08:e8:f3:ca:e8:56:bb:01:
a5:e2:a0:37:0d:dd:25:02:08:c4:11:67:79:1f:f6:a4:c7:b2:
38:ca:cb:53:a7:fa:56:8d:ed:9a:de:df:d6:12:0a:25:98:e8:
91:66:13:75:b1:13:08:a7:2e:79:45:e2:14:1a:4a:ac:2d:b5:
64:4b:c1:a6:df:98:a8:39:8c:d2:fd:ba:4d:22:77:3c:87:70:
6e:0b:04:32:f4:af:ff:23:1a:c0:52:91:44:ef:2c:16:76:a6:
f7:37:51:23:16:58:ce:e2:41:5b:df:6e:15:58:b3:d8:f1:68:
d4:82:8f:a9:2e:c0:68:c8:90:d9:f5:11:19:bf:7a:03:d6:5c:
2c:c0:f4:1a:fe:62:11:d7:c8:18:70:ec:e4:07:75:b5:23:f4:
9b:c7:75:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn761n0719WyGlZ7JKEMah4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYjQzNTFlMGE0OTVjMjZlZmRjNmU0MTVmMGJiMTg5ZmJi
ZDZlZGYwHhcNMjUxMDE5MTAwMjA5WhcNMjUxMDIwMTAwMjA5WjAzMTEwLwYDVQQD
EyhhNGQyMWFkNDhmOTE0ZmViMThhZDYzZGRlNTA5MTBlNDY0ZWIxYmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqggtHIAnDun+mDW5OigBOcsjJgc/
hub9A38ayOinw9ZG+jXixBDnoBa9GqTmhFGuS0FAESOAKTh1wHKRdO4CKctP2+b5
GOCpS1PP84LbQPh7q8Iwg13fcc9pSX/tJ7Jfa9TO0j76dsV4tOJKJbf9loDsQqLn
waddRjRseZhvKdXuVN3Q+Ucn4JfSds732loXtLSf7YlbXIqfJHkuZDav6asE/HCP
93qWBXdSjmIJWiQpx+DhwD5SiP4OWusnLw2sqQVvRM4dIiGhmFsnnSQxoB6r03fB
603PBDehjT6E3rtr0asVHbQFow/oCwlfQrlKKU7VkXdyIQXJJnZ/X1GDgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKTSGtSPkU/rGK1j3eUJEORk6xusMB8GA1UdIwQY
MBaAFMO0NR4KSVwm79xuQV8LsYn7vW7fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzdRMUhncEpYQ2J2M0c1Qlh3dXhpZnU5YnQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zN2UzNjMtODRkMS00NzBlLTk2YTIt
MGVmMWNhYzc0MThkLzEvdzdRMUhncEpYQ2J2M0c1Qlh3dXhpZnU5YnQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8zN2UzNjMtODRkMS00NzBlLTk2YTItMGVmMWNhYzc0MThk
LzEvdzdRMUhncEpYQ2J2M0c1Qlh3dXhpZnU5YnQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgsO2SjUh
EOEhGA/UOwpdSDrdlliWRDcB9vyGrGnY3ikjT7leKPfIViivz71CHMstCH7fgXfs
VUXRAy6DUbfLwwdD/ley7qw4lgVmFp3v542Z3NK5iFevvk1fE/Ib/2X78BaBGAjo
88roVrsBpeKgNw3dJQIIxBFneR/2pMeyOMrLU6f6Vo3tmt7f1hIKJZjokWYTdbET
CKcueUXiFBpKrC21ZEvBpt+YqDmM0v26TSJ3PIdwbgsEMvSv/yMawFKRRO8sFnam
9zdRIxZYzuJBW99uFViz2PFo1IKPqS7AaMiQ2fURGb96A9ZcLMD0Gv5iEdfIGHDs
5Ad1tSP0m8d1Vg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:02:56 2025 by rpki-client