
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.mft
File: xQSRCSEw3t2EZv_VzFEFdsiU324.mft (raw, json)
Hash identifier: ZyrI7DipikiO5qF0PpKDUINya+Rz0TLFMjHHM4R3INc=
Subject key identifier: 80:40:BE:BE:EC:83:CE:85:0A:A9:C9:C9:27:A5:EA:14:AD:3F:9C:DD
Authority key identifier: C5:04:91:09:21:30:DE:DD:84:66:FF:D5:CC:51:05:76:C8:94:DF:6E
Certificate issuer: /CN=c50491092130dedd8466ffd5cc510576c894df6e
Certificate serial: 0199FBEB4E26E17136C3C9F4C91E88F8E447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQSRCSEw3t2EZv_VzFEFdsiU324.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 10:02:06 +0000
Manifest this update: Sun 19 Oct 2025 10:02:06 +0000
Manifest next update: Mon 20 Oct 2025 10:02:06 +0000
Files and hashes: 1: jdCs0ZL0SC55THdB8buccPHazLk.roa (hash: Ysfj2YuY8qZacfJ0Pia1kl0dqiNsbRo1lLBBPEofGfg=)
2: xQSRCSEw3t2EZv_VzFEFdsiU324.crl (hash: mqRWhMQMdDipjhNN6jEQJFiD1oldq8lTm+k58RawKa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.mft
rsync://rpki.ripe.net/repository/DEFAULT/xQSRCSEw3t2EZv_VzFEFdsiU324.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:4e:26:e1:71:36:c3:c9:f4:c9:1e:88:f8:e4:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50491092130dedd8466ffd5cc510576c894df6e
Validity
Not Before: Oct 19 10:02:06 2025 GMT
Not After : Oct 20 10:02:06 2025 GMT
Subject: CN=8040bebeec83ce850aa9c9c927a5ea14ad3f9cdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9c:7b:9f:c3:ec:a3:8f:d4:95:9c:81:00:e0:
8b:eb:38:c3:0e:b1:c7:57:0f:b2:9f:c7:eb:96:eb:
7e:fe:33:31:bf:67:22:59:35:e9:8e:20:73:7a:b5:
b8:56:f8:57:34:e8:61:fd:41:b3:3e:71:37:4a:62:
89:8e:a6:c2:7b:58:c8:6e:06:c5:f2:75:c9:a9:ff:
f6:17:73:3c:0a:b4:87:d7:c8:22:0d:27:e2:d4:1f:
c9:3e:b1:10:f8:03:d2:0f:9c:5c:ea:b5:ee:aa:f1:
2b:91:a8:8e:03:d4:93:c3:cf:89:ad:a7:4c:9b:2c:
d0:51:db:74:9a:fa:7b:2a:65:ad:74:9a:48:45:96:
21:46:92:41:10:6d:6a:08:d1:2e:1b:d4:83:6d:21:
a6:b0:69:a1:af:ac:82:b7:dc:7a:78:bf:a4:0c:07:
2f:a4:68:9a:6c:fe:8a:1d:51:c3:06:7d:20:09:5d:
93:cf:16:ec:1d:7e:b1:5c:6f:2c:28:dc:45:69:0e:
71:36:09:de:44:0e:84:4f:84:b5:46:68:2c:0a:8b:
b3:78:c4:7e:18:48:54:64:95:81:34:92:47:3d:9a:
fd:65:a5:2f:bb:b6:75:94:cb:f6:c7:bb:81:2a:9d:
46:e5:26:09:08:2e:d1:62:72:30:92:16:5b:07:f8:
19:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:40:BE:BE:EC:83:CE:85:0A:A9:C9:C9:27:A5:EA:14:AD:3F:9C:DD
X509v3 Authority Key Identifier:
keyid:C5:04:91:09:21:30:DE:DD:84:66:FF:D5:CC:51:05:76:C8:94:DF:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQSRCSEw3t2EZv_VzFEFdsiU324.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:77:21:ed:33:26:97:06:53:4d:7a:db:77:bf:45:4d:2d:35:
d4:7f:9e:48:92:6b:88:5c:18:a8:8f:f6:f1:df:ce:27:44:d5:
2d:ba:0b:6e:61:b1:d4:f1:34:5a:07:e0:8d:a7:b9:e7:32:8d:
8f:bb:1f:4d:10:4a:3d:3e:ad:7a:d4:ff:89:59:e2:c7:31:5b:
9c:7a:ad:26:5a:82:29:0c:9a:4f:f9:a8:a1:34:ec:03:95:4b:
34:79:fb:67:80:3f:3a:8b:17:da:9f:41:70:cd:9b:18:75:d2:
3d:30:58:8d:4a:28:b9:35:a4:ff:83:f5:9b:fc:8c:67:53:61:
a9:e8:28:ff:90:4d:51:70:36:d9:7a:0a:a9:54:07:93:1e:53:
27:a0:48:4f:64:33:f8:f0:b8:80:60:3f:5e:f4:48:23:79:4f:
6d:55:00:a9:bc:af:1e:0e:51:d0:70:96:68:7e:02:2c:5c:89:
05:2b:d6:05:ff:db:12:02:f8:1e:03:a6:44:dd:f4:47:34:00:
57:ed:d7:8a:89:c0:68:0c:1c:30:c3:bf:75:b7:20:04:a8:db:
3c:60:f6:3d:cb:db:ba:6d:98:7a:18:18:c8:76:19:6f:6d:f3:
ce:cf:38:47:1c:51:ae:bf:cd:d4:bb:67:98:ce:83:59:99:7d:
4b:00:2c:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7604m4XE2w8n0yR6I+ORHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MDQ5MTA5MjEzMGRlZGQ4NDY2ZmZkNWNjNTEwNTc2Yzg5
NGRmNmUwHhcNMjUxMDE5MTAwMjA2WhcNMjUxMDIwMTAwMjA2WjAzMTEwLwYDVQQD
Eyg4MDQwYmViZWVjODNjZTg1MGFhOWM5YzkyN2E1ZWExNGFkM2Y5Y2RkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJx7n8Pso4/UlZyBAOCL6zjDDrHH
Vw+yn8frlut+/jMxv2ciWTXpjiBzerW4VvhXNOhh/UGzPnE3SmKJjqbCe1jIbgbF
8nXJqf/2F3M8CrSH18giDSfi1B/JPrEQ+APSD5xc6rXuqvErkaiOA9STw8+JradM
myzQUdt0mvp7KmWtdJpIRZYhRpJBEG1qCNEuG9SDbSGmsGmhr6yCt9x6eL+kDAcv
pGiabP6KHVHDBn0gCV2TzxbsHX6xXG8sKNxFaQ5xNgneRA6ET4S1RmgsCouzeMR+
GEhUZJWBNJJHPZr9ZaUvu7Z1lMv2x7uBKp1G5SYJCC7RYnIwkhZbB/gZyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIBAvr7sg86FCqnJySel6hStP5zdMB8GA1UdIwQY
MBaAFMUEkQkhMN7dhGb/1cxRBXbIlN9uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFFTUkNTRXczdDJFWnZfVnpGRUZkc2lVMzI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kN2EyNmMtYzM3My00ZTZkLTlmZDgt
YmYxOTFkOWEyYzljLzEveFFTUkNTRXczdDJFWnZfVnpGRUZkc2lVMzI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9kN2EyNmMtYzM3My00ZTZkLTlmZDgtYmYxOTFkOWEyYzlj
LzEveFFTUkNTRXczdDJFWnZfVnpGRUZkc2lVMzI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUnch7TMm
lwZTTXrbd79FTS011H+eSJJriFwYqI/28d/OJ0TVLboLbmGx1PE0Wgfgjae55zKN
j7sfTRBKPT6tetT/iVnixzFbnHqtJlqCKQyaT/mooTTsA5VLNHn7Z4A/OosX2p9B
cM2bGHXSPTBYjUoouTWk/4P1m/yMZ1Nhqego/5BNUXA22XoKqVQHkx5TJ6BIT2Qz
+PC4gGA/XvRII3lPbVUAqbyvHg5R0HCWaH4CLFyJBSvWBf/bEgL4HgOmRN30RzQA
V+3XionAaAwcMMO/dbcgBKjbPGD2Pcvbum2YehgYyHYZb23zzs84RxxRrr/N1Ltn
mM6DWZl9SwAsTw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:08:01 2025 by rpki-client