Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
File: TzYQM0T807V1ny2z88cHE3b54jM.mft (raw, json)
Hash identifier: pbqx0xEPQ2KSIq2t8yu5wI5HoBI7SsqQAuQaJnD2VWs=
Subject key identifier: 2A:C7:8C:3A:4E:48:4F:01:B5:0F:39:3B:6E:D4:BC:0B:2D:CB:18:24
Authority key identifier: 4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
Certificate issuer: /CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Certificate serial: 0199FB7C80AE0E55EF5CA94E542518C41BA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
Manifest number: 16CF
Signing time: Sun 19 Oct 2025 08:01:04 +0000
Manifest this update: Sun 19 Oct 2025 08:01:04 +0000
Manifest next update: Mon 20 Oct 2025 08:01:04 +0000
Files and hashes: 1: 8Wt50oYgSIhV5-nromefXM1xUHs.roa (hash: nonj7X6EJpkPkTZ26/d/JTxCuBr7E4OqIEl5kLX7Uvc=)
2: 8_cQRjzqzZHtBUadp-m1RHbfYtA.roa (hash: UqDtwYBpkHo94AcNyXlmGDGQI5vQH42VfJTVEsv7Dqg=)
3: LlXFwn2Cp-oz5_wkoV4hnOjpZhc.roa (hash: b+9t4WdjfYrQBYgVT5TU7qZAYZFFGjvTZY/AWbdEORo=)
4: TzYQM0T807V1ny2z88cHE3b54jM.crl (hash: McI8Nb2IZwgI/cU2+nNKUBj3sPZnO/YNRwk4FP4gfGw=)
5: X73zSfeynuQ2HFhZg92JJjuC-hI.roa (hash: S3jxFVJaRrRBYwj6SGNBku30PnQhyId+dYaYtS51gvo=)
6: qzzHZUBjcSRGFasL_IeeyUOUJ98.roa (hash: Lhbg0pCg1KfB+dSdb+vO645LuzkQlZQdXs3opMNsPwc=)
7: uFl9Jbyr6wsOz0RTyXyU1uLpiuQ.roa (hash: IIGP5wcOQKkgCwi0o8TwNvlGqyYDZZaNOwMVkOIQtWw=)
8: ugnRmlrkR8TJKKb_eVy88x5cRBU.roa (hash: wA1+l0+3DAminFs23I5vSPrzOSbWOqFz2PTbS6VlnsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:80:ae:0e:55:ef:5c:a9:4e:54:25:18:c4:1b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Validity
Not Before: Oct 19 08:01:04 2025 GMT
Not After : Oct 20 08:01:04 2025 GMT
Subject: CN=2ac78c3a4e484f01b50f393b6ed4bc0b2dcb1824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2a:eb:0f:9d:2a:d2:23:9d:4a:72:e0:59:67:
2b:dc:84:36:f2:a9:8a:eb:0b:a8:90:38:78:66:b1:
12:ca:aa:49:4e:85:45:2e:d6:69:43:49:94:24:47:
1b:61:e8:f6:cb:24:2e:f6:91:83:4d:37:1d:45:60:
ac:ab:14:61:20:d4:3f:eb:02:e7:25:e0:90:34:5e:
09:a4:78:18:dd:9f:a6:94:d2:5a:2e:3d:f8:82:37:
a3:fd:d6:bb:63:9e:eb:d0:75:bd:24:af:9f:cd:28:
c2:f3:74:8e:a6:db:74:bb:86:f7:b7:a2:73:93:1e:
c7:1a:04:b2:f9:75:fd:28:5b:f6:87:0c:c5:63:97:
07:83:fb:35:0c:e5:2e:e3:80:94:77:1f:8f:5c:47:
52:1c:89:c2:49:3b:ae:89:b8:13:d2:f0:6f:6f:b0:
03:fa:57:9f:ad:2a:5b:52:8e:f8:b3:90:8a:9c:5c:
37:be:00:69:e2:75:2e:67:cc:e1:b1:d9:9d:69:a5:
5a:5a:c9:f8:e8:67:3f:90:7b:7b:47:e8:8b:ad:08:
0e:05:74:ec:e2:c8:d3:4b:e0:88:59:09:65:00:b3:
a2:87:a7:7c:bd:4a:99:7b:8c:44:0a:6b:d8:94:63:
1d:2c:18:28:92:a9:99:59:5f:e7:fc:0d:46:47:45:
eb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C7:8C:3A:4E:48:4F:01:B5:0F:39:3B:6E:D4:BC:0B:2D:CB:18:24
X509v3 Authority Key Identifier:
keyid:4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:4e:79:7a:82:b7:2a:7c:bf:cb:13:ae:65:85:85:42:b0:03:
aa:c9:99:a3:b5:56:bf:1c:19:bc:21:4e:a9:02:91:de:0b:12:
39:f0:b5:5a:ee:97:ac:c5:04:0d:af:84:10:cb:b7:ba:71:05:
d0:86:aa:ad:4f:d6:70:83:67:68:47:18:bc:09:bd:eb:b5:bb:
8d:3b:e4:06:1a:65:a3:9c:ed:ac:32:24:88:78:6f:e5:e0:92:
80:0e:92:2f:a8:94:f6:58:0d:db:e5:87:8c:b8:02:38:59:a0:
8e:5f:89:78:a2:99:d8:91:14:7a:7a:00:c8:0a:22:37:ad:b2:
16:18:76:4d:dd:e1:44:7f:7f:c0:a4:69:8b:1d:31:8e:92:eb:
a6:ad:7a:9c:4d:03:a7:21:71:e8:5e:ed:72:a9:b1:5c:1e:1d:
e4:d9:0a:60:51:d1:a2:b4:1e:4f:df:00:0c:4d:4f:5f:62:6f:
e5:67:b5:85:5d:fa:35:b2:8d:2a:0a:65:6e:e3:d4:b2:da:f1:
d3:66:59:34:a4:8f:54:77:6b:09:31:10:16:19:9d:9b:ea:e8:
1b:d1:cd:cc:3e:3c:5b:29:a2:6a:53:8e:5f:8a:ff:83:84:90:
bb:a0:1a:18:f5:d4:57:a5:08:90:2b:20:60:e5:e1:5a:de:f5:
53:54:d3:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fICuDlXvXKlOVCUYxBuiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMzYxMDMzNDRmY2QzYjU3NTlmMmRiM2YzYzcwNzEzNzZm
OWUyMzMwHhcNMjUxMDE5MDgwMTA0WhcNMjUxMDIwMDgwMTA0WjAzMTEwLwYDVQQD
EygyYWM3OGMzYTRlNDg0ZjAxYjUwZjM5M2I2ZWQ0YmMwYjJkY2IxODI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2yrrD50q0iOdSnLgWWcr3IQ28qmK
6wuokDh4ZrESyqpJToVFLtZpQ0mUJEcbYej2yyQu9pGDTTcdRWCsqxRhINQ/6wLn
JeCQNF4JpHgY3Z+mlNJaLj34gjej/da7Y57r0HW9JK+fzSjC83SOptt0u4b3t6Jz
kx7HGgSy+XX9KFv2hwzFY5cHg/s1DOUu44CUdx+PXEdSHInCSTuuibgT0vBvb7AD
+lefrSpbUo74s5CKnFw3vgBp4nUuZ8zhsdmdaaVaWsn46Gc/kHt7R+iLrQgOBXTs
4sjTS+CIWQllALOih6d8vUqZe4xECmvYlGMdLBgokqmZWV/n/A1GR0XrEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCrHjDpOSE8BtQ85O27UvAstyxgkMB8GA1UdIwQY
MBaAFE82EDNE/NO1dZ8ts/PHBxN2+eIzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHpZUU0wVDgwN1Yxbnkyejg4Y0hFM2I1NGpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy84MGQ5ZGYtZWFmMy00OGI2LThmZDUt
MGFjYzg5MmIxMWQyLzEvVHpZUU0wVDgwN1Yxbnkyejg4Y0hFM2I1NGpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy84MGQ5ZGYtZWFmMy00OGI2LThmZDUtMGFjYzg5MmIxMWQy
LzEvVHpZUU0wVDgwN1Yxbnkyejg4Y0hFM2I1NGpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqU55eoK3
Kny/yxOuZYWFQrADqsmZo7VWvxwZvCFOqQKR3gsSOfC1Wu6XrMUEDa+EEMu3unEF
0IaqrU/WcINnaEcYvAm967W7jTvkBhplo5ztrDIkiHhv5eCSgA6SL6iU9lgN2+WH
jLgCOFmgjl+JeKKZ2JEUenoAyAoiN62yFhh2Td3hRH9/wKRpix0xjpLrpq16nE0D
pyFx6F7tcqmxXB4d5NkKYFHRorQeT98ADE1PX2Jv5We1hV36NbKNKgplbuPUstrx
02ZZNKSPVHdrCTEQFhmdm+roG9HNzD48WymialOOX4r/g4SQu6AaGPXUV6UIkCsg
YOXhWt71U1TTNw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:26 2025 by rpki-client