Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.mft
File: _ieWxamFRTLp7WONHDmlQcLYlSw.mft (raw, json)
Hash identifier: WXI7VgzJZSk5pjjRlETf/cF/6IbkwEWI5N/I4NwBQ/8=
Subject key identifier: C8:53:AB:A2:2C:36:16:28:33:99:84:B2:CE:07:B3:95:F6:13:8B:C5
Authority key identifier: FE:27:96:C5:A9:85:45:32:E9:ED:63:8D:1C:39:A5:41:C2:D8:95:2C
Certificate issuer: /CN=fe2796c5a9854532e9ed638d1c39a541c2d8952c
Certificate serial: 019A00351369129798A9BEFA63FDF1338899
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ieWxamFRTLp7WONHDmlQcLYlSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.mft
Manifest number: 16E2
Signing time: Mon 20 Oct 2025 06:01:09 +0000
Manifest this update: Mon 20 Oct 2025 06:01:09 +0000
Manifest next update: Tue 21 Oct 2025 06:01:09 +0000
Files and hashes: 1: _ieWxamFRTLp7WONHDmlQcLYlSw.crl (hash: uXy2kObirA1uvYlFTHd9m3uFR5ooT1YMzanXfL2AjCw=)
2: lVgaXBqK9ipwWOL2JmWoEWoiLBY.roa (hash: Oh3cZzMySDT+Ikxg+sUYVfiZZ5GP7qV/BWdrXyebTLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ieWxamFRTLp7WONHDmlQcLYlSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:13:69:12:97:98:a9:be:fa:63:fd:f1:33:88:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe2796c5a9854532e9ed638d1c39a541c2d8952c
Validity
Not Before: Oct 20 06:01:09 2025 GMT
Not After : Oct 21 06:01:09 2025 GMT
Subject: CN=c853aba22c361628339984b2ce07b395f6138bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:53:93:57:0b:59:b8:8a:0f:9e:db:9e:a7:53:
5f:e5:77:01:ca:08:fa:61:0a:85:b8:09:d2:36:b4:
55:bd:4c:ed:32:31:1e:74:57:ed:b8:97:65:17:76:
39:8e:b9:f8:11:d0:76:ae:dd:d6:41:1b:0b:11:e5:
d6:b8:13:3f:4b:6e:90:a2:15:b2:2a:a1:14:25:21:
a9:94:c7:f0:dc:d7:c7:f8:7d:0e:58:6d:bb:c7:a4:
92:6e:00:bb:e0:25:6b:d0:b8:49:73:c7:e2:5a:04:
ad:01:68:53:09:d7:f3:ac:d2:bc:6a:05:be:f0:13:
c7:17:d3:70:25:3f:8d:12:db:c5:ce:1a:ea:00:5c:
31:c3:86:74:9e:01:7c:e9:36:af:ce:69:27:ef:bd:
56:d0:af:e3:5f:45:f2:ad:73:76:ac:85:b7:15:e0:
ed:56:75:83:e3:d9:81:3a:b5:0b:6c:06:17:e3:ee:
ec:f4:0f:3a:08:83:90:d0:e7:f8:bd:a7:d1:9f:92:
9b:71:d4:e7:ef:5b:11:70:30:7f:8c:52:d5:b5:2f:
1b:2d:5b:a7:95:f6:71:f1:a7:31:cd:80:d0:77:ab:
d5:69:54:77:29:65:c5:22:6a:40:a0:65:4d:3a:49:
3d:8f:07:e4:14:fc:1a:57:bc:0e:eb:78:8d:01:7a:
14:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:53:AB:A2:2C:36:16:28:33:99:84:B2:CE:07:B3:95:F6:13:8B:C5
X509v3 Authority Key Identifier:
keyid:FE:27:96:C5:A9:85:45:32:E9:ED:63:8D:1C:39:A5:41:C2:D8:95:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ieWxamFRTLp7WONHDmlQcLYlSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:78:a7:2d:db:0e:8c:ea:16:68:13:45:07:08:ec:df:cd:25:
83:9f:5f:7e:b2:1a:b2:ce:da:e4:ca:ee:22:84:02:cd:39:51:
5a:41:71:3a:02:61:c8:be:4e:19:9a:83:6a:53:6c:bb:88:4e:
2b:f1:00:59:c6:db:42:41:98:db:69:dd:70:2c:ed:17:fd:b8:
18:54:5d:a4:30:9f:c0:1c:da:63:86:43:68:5b:46:68:83:1d:
bd:bf:49:f5:a6:78:e3:9b:67:bc:e0:d2:51:06:7d:5b:05:6d:
b8:91:16:a1:26:4c:e1:4d:f2:f6:e0:a7:20:50:0e:2e:df:46:
23:74:57:21:73:f3:44:2a:14:17:3c:c9:1e:40:2b:28:d4:89:
71:5e:78:2a:0e:17:4f:b2:2f:5c:19:a9:d4:18:a5:28:34:0a:
b6:83:43:77:9e:72:93:f7:52:cb:35:82:56:b0:a5:cc:a6:e0:
99:e5:1b:52:0f:8a:63:de:5f:6b:1d:1e:de:4e:15:53:1f:d5:
97:30:a1:8f:ee:5e:94:aa:43:7d:e3:41:ac:50:18:39:aa:2a:
a9:db:33:73:8f:14:1d:de:35:93:66:d0:c3:61:4a:1a:2f:3c:
d3:a5:71:37:54:8f:5b:82:32:f0:1d:11:0d:08:0a:1e:b3:c2:
42:97:9f:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoANRNpEpeYqb76Y/3xM4iZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlMjc5NmM1YTk4NTQ1MzJlOWVkNjM4ZDFjMzlhNTQxYzJk
ODk1MmMwHhcNMjUxMDIwMDYwMTA5WhcNMjUxMDIxMDYwMTA5WjAzMTEwLwYDVQQD
EyhjODUzYWJhMjJjMzYxNjI4MzM5OTg0YjJjZTA3YjM5NWY2MTM4YmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFOTVwtZuIoPntuep1Nf5XcBygj6
YQqFuAnSNrRVvUztMjEedFftuJdlF3Y5jrn4EdB2rt3WQRsLEeXWuBM/S26QohWy
KqEUJSGplMfw3NfH+H0OWG27x6SSbgC74CVr0LhJc8fiWgStAWhTCdfzrNK8agW+
8BPHF9NwJT+NEtvFzhrqAFwxw4Z0ngF86Tavzmkn771W0K/jX0XyrXN2rIW3FeDt
VnWD49mBOrULbAYX4+7s9A86CIOQ0Of4vafRn5KbcdTn71sRcDB/jFLVtS8bLVun
lfZx8acxzYDQd6vVaVR3KWXFImpAoGVNOkk9jwfkFPwaV7wO63iNAXoUaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMhTq6IsNhYoM5mEss4Hs5X2E4vFMB8GA1UdIwQY
MBaAFP4nlsWphUUy6e1jjRw5pUHC2JUsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2llV3hhbUZSVExwN1dPTkhEbWxRY0xZbFN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9jYmExODYtZTRkMi00NWUxLWE5Mzgt
MGU0YWIyNjM3YmVkLzEvX2llV3hhbUZSVExwN1dPTkhEbWxRY0xZbFN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9jYmExODYtZTRkMi00NWUxLWE5MzgtMGU0YWIyNjM3YmVk
LzEvX2llV3hhbUZSVExwN1dPTkhEbWxRY0xZbFN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp3inLdsO
jOoWaBNFBwjs380lg59ffrIass7a5MruIoQCzTlRWkFxOgJhyL5OGZqDalNsu4hO
K/EAWcbbQkGY22ndcCztF/24GFRdpDCfwBzaY4ZDaFtGaIMdvb9J9aZ445tnvODS
UQZ9WwVtuJEWoSZM4U3y9uCnIFAOLt9GI3RXIXPzRCoUFzzJHkArKNSJcV54Kg4X
T7IvXBmp1BilKDQKtoNDd55yk/dSyzWCVrClzKbgmeUbUg+KY95fax0e3k4VUx/V
lzChj+5elKpDfeNBrFAYOaoqqdszc48UHd41k2bQw2FKGi8806VxN1SPW4Iy8B0R
DQgKHrPCQpefCA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:44:34 2025 by rpki-client