Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
File: XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft (raw, json)
Hash identifier: /0t44m6iCnW+WMp74JQl2ILDKypCVU+ACYyHrbe5f2k=
Subject key identifier: FB:DF:96:E7:12:A3:28:0F:EC:3A:CB:B0:EF:92:79:A7:F2:30:B7:19
Authority key identifier: 5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03
Certificate issuer: /CN=5c61dcd3eb50c83d68060bcba4af152204193503
Certificate serial: 0199FB7CCBA166A30DE510F31EA4C73C85C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
Manifest number: 0E9E
Signing time: Sun 19 Oct 2025 08:01:23 +0000
Manifest this update: Sun 19 Oct 2025 08:01:23 +0000
Manifest next update: Mon 20 Oct 2025 08:01:23 +0000
Files and hashes: 1: 1-YgT2Dp81wwlxN4YhUFJI1jv6Y.roa (hash: yL6zyGeH92adtXQSKd8Mq3UDRt+aKFGYWzlFrk9kOSk=)
2: I8DMWQAbEysV4PDmbb3bRruhjec.roa (hash: Cl7Aw52r728Nutene1KOGwtu14nrh0ED/njKmWb9bKc=)
3: XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl (hash: GuCBUmpNAcaCyamsGOUPP3ddFZM+5PYsknCXNAHPORw=)
4: Z81p6D_dRIvEDGrIYx1WijPMCWI.roa (hash: B0c4eefCOibc6e3+7zDAkWkLSK4xkeiQAdhY0t08sgw=)
5: h_7ZeyN0CJd5pV3oePoLMnfCfv4.roa (hash: eo68bGKMEV2uIG8GoiwpOo5Bk9D1vHS+LUaw94GkOVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:cb:a1:66:a3:0d:e5:10:f3:1e:a4:c7:3c:85:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c61dcd3eb50c83d68060bcba4af152204193503
Validity
Not Before: Oct 19 08:01:23 2025 GMT
Not After : Oct 20 08:01:23 2025 GMT
Subject: CN=fbdf96e712a3280fec3acbb0ef9279a7f230b719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6c:f3:f5:97:54:f9:75:c1:8b:09:16:94:f6:
c8:54:17:d2:1e:ee:a7:57:36:d1:7b:4e:a8:f5:c0:
99:c0:da:56:d3:b1:a8:ed:e5:0a:1a:6a:a6:21:cc:
de:e6:93:de:ca:b5:f3:b0:5c:49:67:aa:c4:6c:9e:
c6:08:62:96:1c:cc:49:8b:f5:84:eb:6e:11:ba:d7:
95:ab:2e:a5:ab:dc:1b:81:2d:b0:d0:ef:1c:ec:1a:
d1:5b:e3:8e:b2:26:3a:a5:a2:57:e6:cf:21:59:07:
fa:76:ca:7f:76:3d:30:2e:9b:e0:a8:2f:51:dc:5c:
44:59:ad:cc:06:f6:46:54:59:63:19:fa:6b:c9:8d:
c3:03:df:30:02:27:ad:0d:74:02:f9:d0:b8:8b:d7:
8d:12:8c:45:a0:8a:64:d3:31:98:c5:2a:c9:50:f4:
f7:7d:bd:a8:63:9c:c6:98:2f:15:8f:e9:5f:99:b9:
8f:d6:36:9f:c3:71:9c:9f:e7:32:3a:7c:f6:b4:be:
f4:35:d9:da:4d:18:d0:ed:ce:87:cf:1b:b4:ed:99:
87:f1:21:96:2a:e1:2b:dc:0f:4f:43:b9:4a:5d:61:
b7:b9:46:ce:3e:df:ec:94:3c:4b:bb:eb:75:42:b2:
df:67:df:db:c2:b6:a0:30:a8:3e:8e:ca:f9:d8:9b:
54:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:DF:96:E7:12:A3:28:0F:EC:3A:CB:B0:EF:92:79:A7:F2:30:B7:19
X509v3 Authority Key Identifier:
keyid:5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:80:69:e5:af:f6:27:6d:71:b4:33:43:b9:49:11:f2:16:0e:
87:42:37:89:3e:30:c2:50:db:b7:2f:1f:ee:66:ba:7b:08:6f:
fd:8e:fa:73:d1:68:1f:35:c6:9f:eb:f4:11:2f:b4:e1:68:ac:
0b:ad:af:f1:6a:cc:66:1b:70:d4:4f:60:20:2b:1f:4c:e6:04:
de:41:45:33:ca:a6:43:9d:18:c7:75:01:3e:fb:40:aa:b6:32:
a3:85:14:1b:aa:56:24:3f:11:5d:d7:3d:77:c4:97:8d:70:dc:
94:51:c3:f8:1d:71:aa:8d:b2:5c:63:f5:3f:ec:b8:3f:1d:c7:
97:b1:23:96:18:d1:88:3a:f8:d2:7d:50:a1:89:73:fa:81:03:
b9:14:29:10:b7:98:71:43:5a:5a:83:85:7f:e2:cd:5b:81:86:
2b:3d:56:df:ac:f4:e0:3f:e2:01:a3:be:e6:1f:e1:dc:b5:a3:
ab:25:20:f6:37:39:4e:5e:00:b9:38:4a:19:95:53:52:13:0f:
48:7e:c6:8b:c2:e8:de:08:1a:a4:e7:5a:b4:46:14:c7:6f:e5:
7d:df:33:24:d6:9f:96:9c:d1:9b:29:60:af:c1:7e:9d:ff:5d:
24:df:11:da:f5:49:27:17:3b:7b:e0:b0:5e:ad:72:51:1d:55:
8a:c2:c6:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fMuhZqMN5RDzHqTHPIXIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNjFkY2QzZWI1MGM4M2Q2ODA2MGJjYmE0YWYxNTIyMDQx
OTM1MDMwHhcNMjUxMDE5MDgwMTIzWhcNMjUxMDIwMDgwMTIzWjAzMTEwLwYDVQQD
EyhmYmRmOTZlNzEyYTMyODBmZWMzYWNiYjBlZjkyNzlhN2YyMzBiNzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmzz9ZdU+XXBiwkWlPbIVBfSHu6n
VzbRe06o9cCZwNpW07Go7eUKGmqmIcze5pPeyrXzsFxJZ6rEbJ7GCGKWHMxJi/WE
624RuteVqy6lq9wbgS2w0O8c7BrRW+OOsiY6paJX5s8hWQf6dsp/dj0wLpvgqC9R
3FxEWa3MBvZGVFljGfpryY3DA98wAietDXQC+dC4i9eNEoxFoIpk0zGYxSrJUPT3
fb2oY5zGmC8Vj+lfmbmP1jafw3Gcn+cyOnz2tL70NdnaTRjQ7c6Hzxu07ZmH8SGW
KuEr3A9PQ7lKXWG3uUbOPt/slDxLu+t1QrLfZ9/bwragMKg+jsr52JtUcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPvflucSoygP7DrLsO+SeafyMLcZMB8GA1UdIwQY
MBaAFFxh3NPrUMg9aAYLy6SvFSIEGTUDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEdIYzAtdFF5RDFvQmd2THBLOFZJZ1FaTlFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80NGExNTUtNGQwMi00MDAyLThmM2Qt
YzM2ZDFjNDYwZTJmLzEvWEdIYzAtdFF5RDFvQmd2THBLOFZJZ1FaTlFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS80NGExNTUtNGQwMi00MDAyLThmM2QtYzM2ZDFjNDYwZTJm
LzEvWEdIYzAtdFF5RDFvQmd2THBLOFZJZ1FaTlFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhoBp5a/2
J21xtDNDuUkR8hYOh0I3iT4wwlDbty8f7ma6ewhv/Y76c9FoHzXGn+v0ES+04Wis
C62v8WrMZhtw1E9gICsfTOYE3kFFM8qmQ50Yx3UBPvtAqrYyo4UUG6pWJD8RXdc9
d8SXjXDclFHD+B1xqo2yXGP1P+y4Px3Hl7EjlhjRiDr40n1QoYlz+oEDuRQpELeY
cUNaWoOFf+LNW4GGKz1W36z04D/iAaO+5h/h3LWjqyUg9jc5Tl4AuThKGZVTUhMP
SH7Gi8Lo3ggapOdatEYUx2/lfd8zJNaflpzRmylgr8F+nf9dJN8R2vVJJxc7e+Cw
Xq1yUR1VisLGfg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 12:54:41 2025 by rpki-client