
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.mft
File: rFPL63FQhLMioaFJyW4JxA7W2IM.mft (raw, json)
Hash identifier: SAfHQbGoV8UVQIwKHFOS7NthE+sdWJLDfpwjEz/JQqY=
Subject key identifier: 2B:56:7E:B0:12:E3:C9:FD:B9:78:FB:A4:FA:99:25:8C:16:C2:D6:FE
Authority key identifier: AC:53:CB:EB:71:50:84:B3:22:A1:A1:49:C9:6E:09:C4:0E:D6:D8:83
Certificate issuer: /CN=ac53cbeb715084b322a1a149c96e09c40ed6d883
Certificate serial: 0199FC8F94AF4B982A84C5CBA473D5DD60C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rFPL63FQhLMioaFJyW4JxA7W2IM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.mft
Manifest number: 1309
Signing time: Sun 19 Oct 2025 13:01:32 +0000
Manifest this update: Sun 19 Oct 2025 13:01:32 +0000
Manifest next update: Mon 20 Oct 2025 13:01:32 +0000
Files and hashes: 1: Wfce3ZtHFc99tmFyN64Q-vZ2RpA.roa (hash: Y3X9Ri7kJ6o/ebs+JUXNiJ+ZA7lhHw1uv9ydtQHMGRI=)
2: rFPL63FQhLMioaFJyW4JxA7W2IM.crl (hash: PpoeMGWJdm2d4BMdreFaSBGMTvUnQ1aEfM+iEXo/AUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rFPL63FQhLMioaFJyW4JxA7W2IM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:94:af:4b:98:2a:84:c5:cb:a4:73:d5:dd:60:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac53cbeb715084b322a1a149c96e09c40ed6d883
Validity
Not Before: Oct 19 13:01:32 2025 GMT
Not After : Oct 20 13:01:32 2025 GMT
Subject: CN=2b567eb012e3c9fdb978fba4fa99258c16c2d6fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7d:76:e8:98:03:d3:8d:77:f0:73:07:00:a3:
7f:d0:e2:69:30:6b:ff:01:9b:18:89:79:67:22:f0:
ac:a4:21:be:81:42:96:0a:bd:72:b7:a8:d9:f6:b1:
83:16:af:29:75:d0:bb:6e:08:09:f9:24:43:64:17:
77:56:3c:0f:e9:b4:2e:89:6e:b6:3d:cc:75:d6:10:
0b:b1:1d:6d:fd:15:34:45:f8:d0:b7:6c:cf:46:9c:
17:73:a2:51:4b:2e:44:4e:78:a5:7a:7e:bc:02:b1:
dc:fd:50:ed:3d:db:83:ce:5b:3d:81:e1:52:1c:12:
18:d3:79:4b:78:03:e6:a8:99:08:57:6b:8d:74:bd:
43:fa:1f:c5:07:ce:76:39:2c:a4:52:87:ca:fc:df:
99:53:e2:85:37:02:6a:2e:06:10:58:96:b9:47:84:
9e:d8:87:9a:05:13:5c:40:46:a0:4a:32:21:fe:94:
2c:f8:69:36:2c:6d:93:0d:73:28:53:e5:4d:0e:38:
bc:b5:e4:50:03:93:44:1e:5d:5b:ce:5e:d1:a0:8e:
11:8b:59:f8:91:ff:ce:a7:c1:e9:98:24:b6:2c:0a:
05:9a:7c:86:84:bf:32:a5:f8:d2:3e:b1:5e:d7:58:
8c:54:cc:ca:b8:7d:5b:4f:c4:f4:fe:c2:bc:be:52:
c7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:56:7E:B0:12:E3:C9:FD:B9:78:FB:A4:FA:99:25:8C:16:C2:D6:FE
X509v3 Authority Key Identifier:
keyid:AC:53:CB:EB:71:50:84:B3:22:A1:A1:49:C9:6E:09:C4:0E:D6:D8:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFPL63FQhLMioaFJyW4JxA7W2IM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:a9:bc:85:9c:3b:1f:0a:37:8b:00:56:ac:1e:eb:05:0b:4c:
c5:5a:b2:32:1d:ad:88:21:93:88:4c:f8:e3:45:ff:de:af:48:
ba:e1:cf:39:6b:9a:a1:21:bf:25:07:d0:4e:08:78:08:dc:02:
5e:4e:34:93:b2:f6:42:4c:9d:eb:70:3c:7c:5b:4b:de:93:e2:
3f:d2:47:f4:33:3e:d5:10:b5:46:f3:a8:e3:9c:4e:6b:9a:bd:
8f:44:05:66:09:a2:1d:49:3d:73:ce:be:c8:c3:93:b2:52:e6:
cb:e8:4a:78:cb:a8:a6:df:ba:de:a9:52:5f:c4:62:19:78:3f:
99:3f:ce:2a:9a:25:d9:33:83:8e:b4:1c:2d:ff:30:ea:58:9b:
73:1c:a0:a3:32:fc:a2:98:02:e1:84:2d:cd:0b:b4:49:0d:03:
f9:8c:02:75:ad:f5:8d:14:ae:33:a4:23:18:78:6d:4e:69:f8:
9a:8a:45:af:20:7d:02:90:8d:b0:cf:51:7d:f2:9f:fe:1e:e3:
e2:3b:e8:fa:44:16:d8:7d:e6:dd:2c:42:37:aa:50:9e:c8:9c:
1e:b9:93:dd:0f:ff:cf:a4:50:a8:9a:bd:55:17:0c:e7:fa:d3:
85:5d:ce:b6:e2:e2:e5:30:8f:21:f2:09:20:75:1b:19:b5:d2:
c4:54:1d:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j5SvS5gqhMXLpHPV3WDHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjNTNjYmViNzE1MDg0YjMyMmExYTE0OWM5NmUwOWM0MGVk
NmQ4ODMwHhcNMjUxMDE5MTMwMTMyWhcNMjUxMDIwMTMwMTMyWjAzMTEwLwYDVQQD
EygyYjU2N2ViMDEyZTNjOWZkYjk3OGZiYTRmYTk5MjU4YzE2YzJkNmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0X126JgD04138HMHAKN/0OJpMGv/
AZsYiXlnIvCspCG+gUKWCr1yt6jZ9rGDFq8pddC7bggJ+SRDZBd3VjwP6bQuiW62
Pcx11hALsR1t/RU0RfjQt2zPRpwXc6JRSy5ETnilen68ArHc/VDtPduDzls9geFS
HBIY03lLeAPmqJkIV2uNdL1D+h/FB852OSykUofK/N+ZU+KFNwJqLgYQWJa5R4Se
2IeaBRNcQEagSjIh/pQs+Gk2LG2TDXMoU+VNDji8teRQA5NEHl1bzl7RoI4Ri1n4
kf/Op8HpmCS2LAoFmnyGhL8ypfjSPrFe11iMVMzKuH1bT8T0/sK8vlLHhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCtWfrAS48n9uXj7pPqZJYwWwtb+MB8GA1UdIwQY
MBaAFKxTy+txUISzIqGhScluCcQO1tiDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckZQTDYzRlFoTE1pb2FGSnlXNEp4QTdXMklNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi83ZWM4Y2ItMzY5ZS00YmJiLWI4YjQt
N2FlYWRiNDVhMjM3LzEvckZQTDYzRlFoTE1pb2FGSnlXNEp4QTdXMklNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi83ZWM4Y2ItMzY5ZS00YmJiLWI4YjQtN2FlYWRiNDVhMjM3
LzEvckZQTDYzRlFoTE1pb2FGSnlXNEp4QTdXMklNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkam8hZw7
Hwo3iwBWrB7rBQtMxVqyMh2tiCGTiEz440X/3q9IuuHPOWuaoSG/JQfQTgh4CNwC
Xk40k7L2Qkyd63A8fFtL3pPiP9JH9DM+1RC1RvOo45xOa5q9j0QFZgmiHUk9c86+
yMOTslLmy+hKeMuopt+63qlSX8RiGXg/mT/OKpol2TODjrQcLf8w6libcxygozL8
opgC4YQtzQu0SQ0D+YwCda31jRSuM6QjGHhtTmn4mopFryB9ApCNsM9RffKf/h7j
4jvo+kQW2H3m3SxCN6pQnsicHrmT3Q//z6RQqJq9VRcM5/rThV3OtuLi5TCPIfIJ
IHUbGbXSxFQdGA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:22:01 2025 by rpki-client