
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
File: Y9nR2VwetxbugZUEWnfLohgdeew.mft (raw, json)
Hash identifier: RlKQ11FH7nu7G3hA+RRqNr8JNT7SMTKooOJIU5yHtMI=
Subject key identifier: D5:2C:42:73:B7:37:95:EF:20:61:33:10:CB:26:09:CF:35:62:EA:CF
Authority key identifier: 63:D9:D1:D9:5C:1E:B7:16:EE:81:95:04:5A:77:CB:A2:18:1D:79:EC
Certificate issuer: /CN=63d9d1d95c1eb716ee8195045a77cba2181d79ec
Certificate serial: 0199FAD7FD2C8D2DE5F4355417666B2DF5DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
Manifest number: 16F3
Signing time: Sun 19 Oct 2025 05:01:23 +0000
Manifest this update: Sun 19 Oct 2025 05:01:23 +0000
Manifest next update: Mon 20 Oct 2025 05:01:23 +0000
Files and hashes: 1: Xpr9sRgbPmZViC8BU1QHYCRAm3g.roa (hash: /PhmdbdMunM2MY+0QaCxgwKDHy7Elu8z4ortzYVhL+Y=)
2: Y9nR2VwetxbugZUEWnfLohgdeew.crl (hash: bFpqzY8iRhIqGUM5X1Bh4hHjZn0jmJq5XNliHWfpMwA=)
3: emyVhdOtUpRyesCtl5eoHp0JGEE.roa (hash: 86qnK0w4Cm+zX9631HiXs9UjrDd9iFThMb03qwigYKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:fd:2c:8d:2d:e5:f4:35:54:17:66:6b:2d:f5:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63d9d1d95c1eb716ee8195045a77cba2181d79ec
Validity
Not Before: Oct 19 05:01:23 2025 GMT
Not After : Oct 20 05:01:23 2025 GMT
Subject: CN=d52c4273b73795ef20613310cb2609cf3562eacf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:57:cb:61:04:24:3b:e6:3d:3e:fa:43:27:c3:
05:dd:de:a1:53:9a:ad:43:d4:c5:9b:4e:0f:25:f3:
e8:ee:dc:7f:84:a2:a6:72:38:fb:59:4e:01:43:3a:
15:da:06:c4:53:cf:9f:60:a5:4c:ef:6e:cb:f4:0f:
68:6d:d3:a3:7d:e6:a5:7a:38:8d:14:aa:1f:95:72:
af:e9:a8:08:c2:bd:25:82:3d:9a:42:75:9b:9c:a4:
fc:18:ef:f9:5d:8b:ff:68:97:b4:54:55:6d:a3:f8:
4d:64:92:7d:5c:3f:93:8d:eb:db:f8:95:d1:1b:31:
70:8b:35:6b:55:4f:ff:8b:b8:81:ad:4e:c3:fe:05:
f4:02:db:df:b1:73:05:f5:52:23:eb:c6:d6:50:ff:
44:8b:b6:66:8b:65:e7:a6:79:5e:16:d0:8e:99:4a:
e5:ae:7c:15:29:ba:a3:87:f4:b8:48:5a:f4:6b:f9:
2f:2f:89:37:8e:8c:4d:a7:75:dc:07:6d:53:6e:27:
d4:b4:3e:e4:f2:bd:80:c8:00:73:20:25:3e:f6:3d:
c2:26:f4:93:c7:33:61:68:59:d4:4d:1a:40:fa:c2:
c6:a7:6f:5e:3f:93:a9:f6:81:66:37:44:3f:6f:26:
8f:14:3b:37:b4:74:d1:b6:fb:3b:2c:eb:dc:29:91:
5f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:2C:42:73:B7:37:95:EF:20:61:33:10:CB:26:09:CF:35:62:EA:CF
X509v3 Authority Key Identifier:
keyid:63:D9:D1:D9:5C:1E:B7:16:EE:81:95:04:5A:77:CB:A2:18:1D:79:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:67:d7:cf:f3:30:03:1c:1f:2c:1b:6b:09:c0:c5:33:63:77:
08:e9:4d:bb:e3:af:67:8b:db:0a:37:c8:8e:85:fe:1f:22:78:
cf:33:37:74:f3:07:11:b1:6c:3c:94:a7:91:6f:0f:86:df:97:
98:11:52:f9:65:ec:9f:27:81:ea:cd:4c:26:de:b2:0e:f8:01:
6f:8a:4b:93:a6:5a:03:6c:23:83:5f:7d:b0:4d:8c:47:23:7b:
c3:32:88:96:78:20:bd:b2:63:ad:fe:d2:bd:21:71:63:33:97:
fb:4d:e7:39:a2:51:79:d3:e7:a2:23:c5:f7:92:3a:39:d3:ed:
16:56:bf:e2:8e:48:5b:f3:b0:e4:ce:7d:4c:a5:76:6b:42:11:
14:3f:0e:a8:e4:c2:0f:61:be:6d:d7:85:b8:f3:a3:e4:61:ad:
26:30:e5:ed:c6:50:c2:11:83:f5:25:f4:b9:b4:26:9e:d7:bb:
22:2a:ae:53:9b:c2:d5:4f:ad:55:99:17:5f:2b:2c:6c:4b:d6:
73:04:0b:ab:19:80:ef:64:06:4c:ad:ae:93:43:c9:12:18:37:
a1:0a:09:95:61:d6:92:ac:5d:b7:5d:f8:ee:d6:65:cb:91:59:
98:29:1d:44:bc:61:53:2c:3c:48:66:de:2e:c3:3f:09:32:dd:
b5:2b:f0:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn61/0sjS3l9DVUF2ZrLfXdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZDlkMWQ5NWMxZWI3MTZlZTgxOTUwNDVhNzdjYmEyMTgx
ZDc5ZWMwHhcNMjUxMDE5MDUwMTIzWhcNMjUxMDIwMDUwMTIzWjAzMTEwLwYDVQQD
EyhkNTJjNDI3M2I3Mzc5NWVmMjA2MTMzMTBjYjI2MDljZjM1NjJlYWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVfLYQQkO+Y9PvpDJ8MF3d6hU5qt
Q9TFm04PJfPo7tx/hKKmcjj7WU4BQzoV2gbEU8+fYKVM727L9A9obdOjfealejiN
FKoflXKv6agIwr0lgj2aQnWbnKT8GO/5XYv/aJe0VFVto/hNZJJ9XD+Tjevb+JXR
GzFwizVrVU//i7iBrU7D/gX0AtvfsXMF9VIj68bWUP9Ei7Zmi2XnpnleFtCOmUrl
rnwVKbqjh/S4SFr0a/kvL4k3joxNp3XcB21TbifUtD7k8r2AyABzICU+9j3CJvST
xzNhaFnUTRpA+sLGp29eP5Op9oFmN0Q/byaPFDs3tHTRtvs7LOvcKZFfuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNUsQnO3N5XvIGEzEMsmCc81YurPMB8GA1UdIwQY
MBaAFGPZ0dlcHrcW7oGVBFp3y6IYHXnsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTluUjJWd2V0eGJ1Z1pVRVduZkxvaGdkZWV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zZWQ4ZGQtZDM2ZS00NDBjLTgxNDIt
ZDgwYzZiODVjZGE0LzEvWTluUjJWd2V0eGJ1Z1pVRVduZkxvaGdkZWV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8zZWQ4ZGQtZDM2ZS00NDBjLTgxNDItZDgwYzZiODVjZGE0
LzEvWTluUjJWd2V0eGJ1Z1pVRVduZkxvaGdkZWV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu2fXz/Mw
AxwfLBtrCcDFM2N3COlNu+OvZ4vbCjfIjoX+HyJ4zzM3dPMHEbFsPJSnkW8Pht+X
mBFS+WXsnyeB6s1MJt6yDvgBb4pLk6ZaA2wjg199sE2MRyN7wzKIlnggvbJjrf7S
vSFxYzOX+03nOaJRedPnoiPF95I6OdPtFla/4o5IW/Ow5M59TKV2a0IRFD8OqOTC
D2G+bdeFuPOj5GGtJjDl7cZQwhGD9SX0ubQmnte7IiquU5vC1U+tVZkXXyssbEvW
cwQLqxmA72QGTK2uk0PJEhg3oQoJlWHWkqxdt1347tZly5FZmCkdRLxhUyw8SGbe
LsM/CTLdtSvwzw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:46 2025 by rpki-client