Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
File: U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft (raw, json)
Hash identifier: EmdK+vSpNiP+/j9vCsIBK6BWVG4btvuAIF2Y1M6HlEo=
Subject key identifier: 8F:E6:82:DC:42:57:D9:2F:F6:26:AA:18:34:7B:F9:1C:26:85:48:37
Authority key identifier: 53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2
Certificate issuer: /CN=535761913f575c411c992322ebb06cd2f37f02a2
Certificate serial: 0199FCC658E008EA5F4AB1B3EAA379E94A86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 14:01:21 +0000
Manifest this update: Sun 19 Oct 2025 14:01:21 +0000
Manifest next update: Mon 20 Oct 2025 14:01:21 +0000
Files and hashes: 1: 9jLVpGilYmQEGxg1WpK2yNt9KVk.roa (hash: z5eyd/uvSVUU4CsN83uQVJdluniXFQjAaunOHdc2Khs=)
2: U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl (hash: yzB3HEWp5JXa9WOApQalCx2aMA+u0c/ehNqkX0x8zHY=)
3: bjlUEqaZF5EwCSDk_Sxf_mEHztc.roa (hash: RU5KJnOEEBCQibHDxtY5+aLGfLDV7MxXDGkjvgxmqg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:58:e0:08:ea:5f:4a:b1:b3:ea:a3:79:e9:4a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535761913f575c411c992322ebb06cd2f37f02a2
Validity
Not Before: Oct 19 14:01:21 2025 GMT
Not After : Oct 20 14:01:21 2025 GMT
Subject: CN=8fe682dc4257d92ff626aa18347bf91c26854837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6a:35:18:b5:c1:b0:6b:d9:fb:c3:e2:17:2b:
35:59:15:95:a1:26:21:34:4e:fe:34:f9:45:5b:51:
96:72:54:ab:2e:a0:48:ed:24:5b:1e:97:02:82:6b:
e1:7d:84:69:98:02:2a:3f:78:16:ce:02:5c:5a:ab:
88:01:61:8f:1b:64:8f:c3:3f:5e:aa:0f:43:4c:d0:
44:4a:6c:4f:3d:ff:60:63:59:2b:b4:ce:99:88:ed:
3f:41:eb:73:a0:25:f6:b6:5a:99:d5:5b:e5:94:fe:
3a:81:93:f9:d1:41:c7:23:1d:be:2b:b2:7c:20:06:
35:85:6e:70:7e:74:ae:12:e4:90:ca:64:ca:78:1c:
a9:4f:e2:2f:17:d6:08:ae:13:cd:e7:a2:d1:9f:cb:
00:5a:69:a6:21:5a:dc:ab:cb:3a:73:93:a7:04:fe:
65:e5:9f:62:b2:4c:9b:09:14:56:bb:0b:f5:8a:ca:
88:82:f0:45:13:08:0a:ab:c3:f1:36:00:f0:dc:aa:
df:62:3f:94:26:e6:60:f7:7e:e1:5a:52:45:8b:78:
a2:c2:eb:b0:82:72:cc:70:f3:3f:ee:41:1e:0b:48:
e5:90:54:54:2b:28:0c:2b:ed:4c:a5:fe:02:57:9b:
9f:e0:06:0d:17:7a:ba:3a:0e:f4:76:e1:b4:5b:cf:
7c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E6:82:DC:42:57:D9:2F:F6:26:AA:18:34:7B:F9:1C:26:85:48:37
X509v3 Authority Key Identifier:
keyid:53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:5c:69:a7:12:98:d4:21:07:be:35:d5:e7:92:53:8d:33:59:
0f:c1:96:a0:a8:d7:7f:fe:69:3e:f6:cd:30:f4:e9:16:83:43:
39:12:89:24:32:bd:15:e5:58:fa:40:14:90:d4:58:8e:ea:8b:
e9:30:b5:37:58:6d:61:07:98:9b:64:c1:2c:7e:9b:65:10:f6:
fe:d6:b3:73:dd:2f:90:f7:45:aa:e8:18:24:09:aa:f8:d1:f9:
d4:eb:d1:19:88:0e:98:b9:fa:bb:93:79:69:f1:ab:ea:ab:10:
bf:51:e2:62:66:3d:56:14:7a:34:2e:5d:30:9e:63:aa:61:32:
01:d7:68:26:97:d9:be:37:2b:89:91:da:77:6b:c4:40:b5:0a:
13:b8:19:6c:f4:57:ec:87:f4:28:6c:78:f9:e0:b7:5a:a6:bd:
9f:98:93:d8:54:c2:95:1e:9b:68:bc:a2:a0:9b:77:4f:67:14:
f6:0f:f3:2f:3b:bd:7d:aa:eb:b7:39:e7:cd:19:ca:0b:f5:19:
e3:54:c0:18:c6:18:50:21:79:bc:f1:db:0e:ba:73:48:4a:3b:
5c:b7:84:f9:54:7b:1e:89:b6:07:4a:f5:e6:9e:f7:cb:b5:4d:
21:29:8c:99:d9:46:e9:d6:f8:b5:c5:7d:8b:be:a5:70:cc:fa:
f6:da:e2:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xljgCOpfSrGz6qN56UqGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNTc2MTkxM2Y1NzVjNDExYzk5MjMyMmViYjA2Y2QyZjM3
ZjAyYTIwHhcNMjUxMDE5MTQwMTIxWhcNMjUxMDIwMTQwMTIxWjAzMTEwLwYDVQQD
Eyg4ZmU2ODJkYzQyNTdkOTJmZjYyNmFhMTgzNDdiZjkxYzI2ODU0ODM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Go1GLXBsGvZ+8PiFys1WRWVoSYh
NE7+NPlFW1GWclSrLqBI7SRbHpcCgmvhfYRpmAIqP3gWzgJcWquIAWGPG2SPwz9e
qg9DTNBESmxPPf9gY1krtM6ZiO0/QetzoCX2tlqZ1VvllP46gZP50UHHIx2+K7J8
IAY1hW5wfnSuEuSQymTKeBypT+IvF9YIrhPN56LRn8sAWmmmIVrcq8s6c5OnBP5l
5Z9iskybCRRWuwv1isqIgvBFEwgKq8PxNgDw3KrfYj+UJuZg937hWlJFi3iiwuuw
gnLMcPM/7kEeC0jlkFRUKygMK+1Mpf4CV5uf4AYNF3q6Og70duG0W898MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI/mgtxCV9kv9iaqGDR7+RwmhUg3MB8GA1UdIwQY
MBaAFFNXYZE/V1xBHJkjIuuwbNLzfwKiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTFkaGtUOVhYRUVjbVNNaTY3QnMwdk5fQXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS85ZjAwYTktYjYwZi00ZTMyLTkwMzct
MDRkZmMzNjYzZTM1LzEvVTFkaGtUOVhYRUVjbVNNaTY3QnMwdk5fQXFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS85ZjAwYTktYjYwZi00ZTMyLTkwMzctMDRkZmMzNjYzZTM1
LzEvVTFkaGtUOVhYRUVjbVNNaTY3QnMwdk5fQXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAclxppxKY
1CEHvjXV55JTjTNZD8GWoKjXf/5pPvbNMPTpFoNDORKJJDK9FeVY+kAUkNRYjuqL
6TC1N1htYQeYm2TBLH6bZRD2/tazc90vkPdFqugYJAmq+NH51OvRGYgOmLn6u5N5
afGr6qsQv1HiYmY9VhR6NC5dMJ5jqmEyAddoJpfZvjcriZHad2vEQLUKE7gZbPRX
7If0KGx4+eC3Wqa9n5iT2FTClR6baLyioJt3T2cU9g/zLzu9farrtznnzRnKC/UZ
41TAGMYYUCF5vPHbDrpzSEo7XLeE+VR7Hom2B0r15p73y7VNISmMmdlG6db4tcV9
i76lcMz69trinQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:58:08 2025 by rpki-client