Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
File: T32IU5OzK17uOgv0M44Pqu88dTw.mft (raw, json)
Hash identifier: L9o7G4/yU/OFwqgqRuZlZERjpCw1JbdI66ojGcNTahI=
Subject key identifier: B6:EC:F7:B8:16:6C:2B:76:EC:E6:CB:24:13:07:8F:5D:A6:B8:91:D1
Authority key identifier: 4F:7D:88:53:93:B3:2B:5E:EE:3A:0B:F4:33:8E:0F:AA:EF:3C:75:3C
Certificate issuer: /CN=4f7d885393b32b5eee3a0bf4338e0faaef3c753c
Certificate serial: 0199FBEA99035B1FE526402F2FC129717427
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
Manifest number: 14B0
Signing time: Sun 19 Oct 2025 10:01:19 +0000
Manifest this update: Sun 19 Oct 2025 10:01:19 +0000
Manifest next update: Mon 20 Oct 2025 10:01:19 +0000
Files and hashes: 1: K_MyGvHR4IdSBZBjdPl8MukbNFk.roa (hash: HrMHQD3uVG8sdR811mtsQpZxidNNmctDC5Taskmcc7A=)
2: T32IU5OzK17uOgv0M44Pqu88dTw.crl (hash: NHNXazFFtrO5gi24TaUweojHK3C4rm+MOzmTEhHJ+wE=)
3: qt5f6XAHUjkOK9CEjEv3rd6845Q.roa (hash: JhK1mHuSEOx5aV2MrmFZp4Cs5i5KltcCemHPpXmD5pI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:99:03:5b:1f:e5:26:40:2f:2f:c1:29:71:74:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f7d885393b32b5eee3a0bf4338e0faaef3c753c
Validity
Not Before: Oct 19 10:01:19 2025 GMT
Not After : Oct 20 10:01:19 2025 GMT
Subject: CN=b6ecf7b8166c2b76ece6cb2413078f5da6b891d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:16:7f:21:8a:02:c8:27:82:ab:3e:90:e0:f5:
38:cd:cb:cc:11:94:1e:dc:5a:96:5f:2e:93:1c:89:
d7:c1:02:99:86:23:72:25:8f:b7:88:04:3f:1d:c9:
b2:63:15:87:c0:1d:5f:f6:05:bc:da:53:d5:49:66:
72:12:0f:49:3b:17:79:96:8c:fc:af:30:75:dc:ab:
d6:57:60:c0:9a:6e:04:7b:0f:02:db:d0:fd:6e:07:
36:35:f9:47:d7:ec:9a:6f:54:d9:d7:10:5c:d1:d3:
0b:1f:21:cf:cb:73:6d:77:1e:47:41:e1:08:d7:92:
58:dc:6a:93:a5:0e:9a:96:a1:20:40:86:0b:ac:aa:
32:7b:87:b8:83:23:f2:1f:83:6c:80:81:b0:a0:67:
4b:c1:bc:63:f1:b6:4c:9c:36:f0:2d:80:df:ee:7a:
2e:3b:3f:44:0a:2c:e0:0c:30:f1:c7:d8:90:88:0a:
ac:47:c8:bd:85:8e:30:10:59:95:bb:be:e4:7e:7c:
f7:fc:0e:7e:55:7c:44:ba:b3:2b:9b:ee:83:9a:87:
60:da:77:91:83:3c:09:b0:1e:42:50:91:7e:a6:36:
1f:d1:56:41:a6:f9:db:7c:f2:dc:5d:9d:61:1b:02:
bf:1f:7e:9e:04:80:5e:cc:80:1d:00:9c:92:ad:6f:
55:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:EC:F7:B8:16:6C:2B:76:EC:E6:CB:24:13:07:8F:5D:A6:B8:91:D1
X509v3 Authority Key Identifier:
keyid:4F:7D:88:53:93:B3:2B:5E:EE:3A:0B:F4:33:8E:0F:AA:EF:3C:75:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:43:fd:ad:a8:62:42:cf:d4:24:b5:0c:49:c8:2a:ba:bd:53:
7c:ff:3d:fd:30:52:40:d4:19:6c:a2:38:d1:c0:89:99:d6:88:
b1:15:4f:dd:ec:11:3e:3a:45:37:bf:a9:b4:43:ec:09:04:1f:
57:af:35:fa:a8:55:b8:36:58:5e:85:f9:28:f4:4e:af:b0:49:
63:e5:14:0f:72:b2:cc:1f:8e:24:9c:06:f7:1a:31:a8:11:32:
47:3f:55:18:e0:d7:26:d6:7a:38:dc:53:1f:7a:2f:0f:06:8c:
ee:fd:ef:58:64:fd:49:78:c7:ba:ad:41:85:e3:98:8d:87:87:
cd:66:b7:b9:63:5d:1b:bb:bc:81:7e:74:db:08:0d:1d:5d:5d:
38:21:8d:39:35:db:e1:43:aa:36:96:2e:00:04:87:09:eb:ae:
e3:cf:d5:af:64:0c:e1:94:45:e4:e1:b9:63:c3:6f:7a:65:09:
07:24:a2:96:b5:b0:dc:46:00:3c:17:81:83:71:b1:74:2b:0a:
4c:ee:d8:b8:c4:86:0d:5f:d8:68:7b:0e:88:69:e2:12:83:5c:
40:3d:36:ad:01:2e:c9:2f:30:9f:f3:0a:f6:f1:5f:2a:84:dd:
2f:66:a5:95:f8:aa:94:24:b9:c0:fa:91:5a:03:9c:5b:44:9f:
23:e8:74:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76pkDWx/lJkAvL8EpcXQnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmN2Q4ODUzOTNiMzJiNWVlZTNhMGJmNDMzOGUwZmFhZWYz
Yzc1M2MwHhcNMjUxMDE5MTAwMTE5WhcNMjUxMDIwMTAwMTE5WjAzMTEwLwYDVQQD
EyhiNmVjZjdiODE2NmMyYjc2ZWNlNmNiMjQxMzA3OGY1ZGE2Yjg5MWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRZ/IYoCyCeCqz6Q4PU4zcvMEZQe
3FqWXy6THInXwQKZhiNyJY+3iAQ/HcmyYxWHwB1f9gW82lPVSWZyEg9JOxd5loz8
rzB13KvWV2DAmm4Eew8C29D9bgc2NflH1+yab1TZ1xBc0dMLHyHPy3Ntdx5HQeEI
15JY3GqTpQ6alqEgQIYLrKoye4e4gyPyH4NsgIGwoGdLwbxj8bZMnDbwLYDf7nou
Oz9ECizgDDDxx9iQiAqsR8i9hY4wEFmVu77kfnz3/A5+VXxEurMrm+6Dmodg2neR
gzwJsB5CUJF+pjYf0VZBpvnbfPLcXZ1hGwK/H36eBIBezIAdAJySrW9V/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLbs97gWbCt27ObLJBMHj12muJHRMB8GA1UdIwQY
MBaAFE99iFOTsyte7joL9DOOD6rvPHU8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDMySVU1T3pLMTd1T2d2ME00NFBxdTg4ZFR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9mMmEzN2MtYTEyOS00YzBiLTllZDEt
YjE4ZGFjMmQyNTliLzEvVDMySVU1T3pLMTd1T2d2ME00NFBxdTg4ZFR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9mMmEzN2MtYTEyOS00YzBiLTllZDEtYjE4ZGFjMmQyNTli
LzEvVDMySVU1T3pLMTd1T2d2ME00NFBxdTg4ZFR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAekP9rahi
Qs/UJLUMScgqur1TfP89/TBSQNQZbKI40cCJmdaIsRVP3ewRPjpFN7+ptEPsCQQf
V681+qhVuDZYXoX5KPROr7BJY+UUD3KyzB+OJJwG9xoxqBEyRz9VGODXJtZ6ONxT
H3ovDwaM7v3vWGT9SXjHuq1BheOYjYeHzWa3uWNdG7u8gX502wgNHV1dOCGNOTXb
4UOqNpYuAASHCeuu48/Vr2QM4ZRF5OG5Y8NvemUJBySilrWw3EYAPBeBg3GxdCsK
TO7YuMSGDV/YaHsOiGniEoNcQD02rQEuyS8wn/MK9vFfKoTdL2allfiqlCS5wPqR
WgOcW0SfI+h0Jg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:48:27 2025 by rpki-client