Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
File: N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft (raw, json)
Hash identifier: 7Cg7ScovqOu4ayc8ZaNNt2hYcjdFe8vJSIGGHm93wFY=
Subject key identifier: DB:D9:3E:E2:63:5E:F7:F8:DB:C1:76:D6:31:02:81:B6:DA:22:43:5E
Authority key identifier: 37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04
Certificate issuer: /CN=37ceaa626cbd89052f3545335dfdb31a13383004
Certificate serial: 0199FE7DF1B6AED3C10839E7C5BCB94CDC40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
Manifest number: 163E
Signing time: Sun 19 Oct 2025 22:01:30 +0000
Manifest this update: Sun 19 Oct 2025 22:01:30 +0000
Manifest next update: Mon 20 Oct 2025 22:01:30 +0000
Files and hashes: 1: N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl (hash: IcJxuFc3xN3NoJUs4KjrKZz2scDollKgDkl8nLBMXgo=)
2: n9uV52lUlBfny_mibwK9eMiu_og.roa (hash: 54PSRM/jpJmSMS9ihIFUAJNjZSe2qLiVsg1xoZD4Jhk=)
3: spA2D5bFhwjtsAUrsUVWAYuQYCw.roa (hash: G0F7ImWqWoF9HSrIReZ5ZDnra1S9Yg59kPLrgfQKBWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:f1:b6:ae:d3:c1:08:39:e7:c5:bc:b9:4c:dc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ceaa626cbd89052f3545335dfdb31a13383004
Validity
Not Before: Oct 19 22:01:30 2025 GMT
Not After : Oct 20 22:01:30 2025 GMT
Subject: CN=dbd93ee2635ef7f8dbc176d6310281b6da22435e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a9:39:12:8e:be:13:c4:3f:e5:e8:65:7b:15:
38:e7:e2:6b:81:9c:7b:65:32:96:b5:c7:00:0a:8c:
2a:c4:b2:12:37:7d:04:83:6d:05:b8:68:f6:89:20:
e0:cf:55:ad:44:11:d3:77:fc:a2:ac:aa:9f:7c:69:
21:17:41:a2:eb:28:47:c1:2c:50:19:8a:b0:d2:f3:
0d:5a:17:dc:6a:f9:e4:f8:18:62:cc:5e:19:73:11:
a6:1c:e3:b9:54:28:db:7e:cb:d8:68:ea:4a:08:11:
12:bf:30:e9:65:26:47:95:6c:28:38:e6:00:25:ef:
ea:33:b2:0f:8b:b4:55:02:3f:b9:4c:3d:7d:6e:91:
e8:bc:de:ae:51:06:3e:09:c4:9d:3c:2f:ab:bb:d7:
f7:22:4a:10:83:fe:85:ab:34:72:19:05:2a:94:a9:
e7:a0:39:67:79:ad:aa:3a:2a:04:33:7e:94:04:c8:
d7:2f:2c:20:2e:a1:67:df:90:75:a4:90:e3:56:8a:
02:19:d3:63:66:8b:61:89:9b:45:e7:e6:ab:08:47:
22:dd:37:a4:9b:d7:b1:6d:8f:8b:00:e6:26:7b:2e:
c1:9a:3e:0f:78:9d:7d:6d:bc:73:23:41:be:f7:4c:
95:dc:b9:29:59:fa:5e:23:6c:82:2b:b9:70:9e:3a:
2f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D9:3E:E2:63:5E:F7:F8:DB:C1:76:D6:31:02:81:B6:DA:22:43:5E
X509v3 Authority Key Identifier:
keyid:37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:f1:a9:3b:25:06:40:ed:7e:cf:a0:34:31:0b:a6:fb:a2:00:
a5:c0:ca:15:2d:ad:46:05:47:18:a8:5f:16:b1:5b:9f:2f:5e:
8e:5a:f1:f9:89:a2:54:fa:90:4f:e4:01:60:1e:fd:f3:ac:46:
3f:26:d5:36:1c:28:24:80:e6:ae:9b:b8:20:2f:ec:aa:18:6e:
ee:1b:06:ef:a4:95:f1:2d:5d:d7:b9:43:26:b9:78:2e:10:a8:
e5:0d:e9:26:3e:d1:72:90:b8:a7:01:d7:6d:b4:a5:ca:34:02:
ea:e8:01:2d:a4:27:d6:3f:e2:65:17:3c:d8:32:29:36:f8:56:
8a:f3:5f:c3:28:32:17:8b:ce:88:1c:87:43:62:45:8a:ea:2b:
3c:80:75:d4:88:09:e5:4c:76:10:ab:04:a9:34:6f:69:64:d5:
31:0c:85:7a:2b:e7:36:f7:cf:82:16:65:48:55:b3:7d:93:fa:
97:6f:d2:54:24:06:0a:b9:cd:73:d5:36:a4:41:e5:65:16:43:
ea:0f:96:ad:fe:08:a0:ba:31:52:86:7d:5d:af:89:6a:bd:5b:
28:ef:dd:d2:fe:21:90:e1:6d:18:62:7e:94:2a:64:48:ff:d3:
af:6a:38:39:9a:94:a5:f6:ec:51:20:fa:f6:3b:16:80:1d:07:
04:c9:67:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+ffG2rtPBCDnnxby5TNxAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3Y2VhYTYyNmNiZDg5MDUyZjM1NDUzMzVkZmRiMzFhMTMz
ODMwMDQwHhcNMjUxMDE5MjIwMTMwWhcNMjUxMDIwMjIwMTMwWjAzMTEwLwYDVQQD
EyhkYmQ5M2VlMjYzNWVmN2Y4ZGJjMTc2ZDYzMTAyODFiNmRhMjI0MzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqk5Eo6+E8Q/5ehlexU45+JrgZx7
ZTKWtccACowqxLISN30Eg20FuGj2iSDgz1WtRBHTd/yirKqffGkhF0Gi6yhHwSxQ
GYqw0vMNWhfcavnk+BhizF4ZcxGmHOO5VCjbfsvYaOpKCBESvzDpZSZHlWwoOOYA
Je/qM7IPi7RVAj+5TD19bpHovN6uUQY+CcSdPC+ru9f3IkoQg/6FqzRyGQUqlKnn
oDlnea2qOioEM36UBMjXLywgLqFn35B1pJDjVooCGdNjZothiZtF5+arCEci3Tek
m9exbY+LAOYmey7Bmj4PeJ19bbxzI0G+90yV3LkpWfpeI2yCK7lwnjovEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNvZPuJjXvf428F21jECgbbaIkNeMB8GA1UdIwQY
MBaAFDfOqmJsvYkFLzVFM139sxoTODAEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjg2cVlteTlpUVV2TlVVelhmMnpHaE00TUFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9hZDg5OTQtNTFmMS00YjY1LWFjYTAt
ZTE1YThiNzBlOGQyLzEvTjg2cVlteTlpUVV2TlVVelhmMnpHaE00TUFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9hZDg5OTQtNTFmMS00YjY1LWFjYTAtZTE1YThiNzBlOGQy
LzEvTjg2cVlteTlpUVV2TlVVelhmMnpHaE00TUFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABvGpOyUG
QO1+z6A0MQum+6IApcDKFS2tRgVHGKhfFrFbny9ejlrx+YmiVPqQT+QBYB7986xG
PybVNhwoJIDmrpu4IC/sqhhu7hsG76SV8S1d17lDJrl4LhCo5Q3pJj7RcpC4pwHX
bbSlyjQC6ugBLaQn1j/iZRc82DIpNvhWivNfwygyF4vOiByHQ2JFiuorPIB11IgJ
5Ux2EKsEqTRvaWTVMQyFeivnNvfPghZlSFWzfZP6l2/SVCQGCrnNc9U2pEHlZRZD
6g+Wrf4IoLoxUoZ9Xa+Jar1bKO/d0v4hkOFtGGJ+lCpkSP/Tr2o4OZqUpfbsUSD6
9jsWgB0HBMlnsw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:14:53 2025 by rpki-client