Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.mft
File: t9yTan9rpQeCJPgBc2_esNroqfs.mft (raw, json)
Hash identifier: Onk+MK7gwo9CiHQBNbcfBSjFzSzeie190cpskV9sJXQ=
Subject key identifier: D2:8A:E5:6B:FD:0D:C0:BC:A6:77:89:37:B3:E9:C0:FB:40:56:21:5B
Authority key identifier: B7:DC:93:6A:7F:6B:A5:07:82:24:F8:01:73:6F:DE:B0:DA:E8:A9:FB
Certificate issuer: /CN=b7dc936a7f6ba5078224f801736fdeb0dae8a9fb
Certificate serial: 0199FB7CD0F324CBFAC847FCEF5A7BB7F281
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t9yTan9rpQeCJPgBc2_esNroqfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 08:01:25 +0000
Manifest this update: Sun 19 Oct 2025 08:01:25 +0000
Manifest next update: Mon 20 Oct 2025 08:01:25 +0000
Files and hashes: 1: O8AFVnBt1m_KBZSzBdlAy6IskOk.roa (hash: drC0SH2uIRu+wIVyTkJpGVnxmbNSIHA06selPLS2xnY=)
2: t9yTan9rpQeCJPgBc2_esNroqfs.crl (hash: Wci8n9TsE0Rll2qS+kOiKlSGL2RpkFi3eySs9oH0QHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/t9yTan9rpQeCJPgBc2_esNroqfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:d0:f3:24:cb:fa:c8:47:fc:ef:5a:7b:b7:f2:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7dc936a7f6ba5078224f801736fdeb0dae8a9fb
Validity
Not Before: Oct 19 08:01:25 2025 GMT
Not After : Oct 20 08:01:25 2025 GMT
Subject: CN=d28ae56bfd0dc0bca6778937b3e9c0fb4056215b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:29:7d:8f:97:5e:36:18:9d:79:ee:92:41:b3:
03:09:bb:f4:a1:49:f6:dd:45:29:19:49:85:66:da:
94:ae:dc:d6:96:5c:c6:36:f9:81:fa:fb:e0:2a:30:
3a:f7:4c:76:88:a2:92:dc:2e:a6:a5:f5:9f:f5:96:
95:06:1e:3c:2e:56:31:a0:06:0c:b2:b5:80:cd:ab:
08:cc:36:c7:c7:df:48:f8:61:ce:7c:aa:65:17:c5:
84:57:28:4d:97:c1:9e:35:59:d1:dd:88:f9:40:92:
25:b8:86:82:cb:4d:d3:7e:8a:c8:67:b5:57:d3:c5:
4b:7c:86:78:96:7d:2e:d2:58:71:f7:a0:c7:19:56:
53:11:4b:fc:69:2a:9b:52:d3:0d:c0:c2:ca:4b:e3:
14:32:65:79:62:70:b7:62:e7:8f:7f:3c:77:41:11:
b6:a8:0b:80:5d:38:f6:4b:6e:6f:39:11:8e:5a:ac:
28:a5:04:73:60:c9:3e:6e:71:0e:5a:46:03:28:8b:
ca:31:54:b0:80:a7:ea:45:42:82:e6:00:95:f3:56:
16:e8:6a:15:fa:7a:05:7c:79:35:58:0c:ab:b1:34:
fc:0f:64:1a:42:66:d2:eb:18:5c:d9:3b:47:19:5c:
79:04:9c:0d:89:be:8c:ec:76:39:9b:76:6c:63:bd:
0f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:8A:E5:6B:FD:0D:C0:BC:A6:77:89:37:B3:E9:C0:FB:40:56:21:5B
X509v3 Authority Key Identifier:
keyid:B7:DC:93:6A:7F:6B:A5:07:82:24:F8:01:73:6F:DE:B0:DA:E8:A9:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t9yTan9rpQeCJPgBc2_esNroqfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:62:f7:fc:a0:d6:6e:e3:1f:15:72:db:c1:a4:41:31:7b:f2:
25:3f:90:50:23:3f:df:4a:d9:59:59:88:f1:e6:b9:50:c9:06:
15:0b:ba:26:8f:27:50:14:e0:c0:71:3c:fb:0a:f5:a3:08:fc:
53:cb:9c:cc:c4:f4:ea:b0:0f:d3:6b:22:3f:b6:09:3c:4c:d4:
c4:81:63:34:7c:bc:47:d4:c4:fe:af:5e:14:be:b2:40:73:d5:
f4:33:16:a1:86:eb:33:db:3f:87:5f:fc:6e:69:cd:c2:cf:de:
83:71:4d:c6:a8:81:c7:39:a1:b8:10:05:13:a5:46:ed:f0:84:
ef:43:70:99:b8:84:8a:6c:86:ba:db:23:bf:1d:b5:6c:f7:7b:
36:ad:e7:78:4b:b5:da:f9:4c:76:f6:5d:a1:fc:3d:e8:ed:1c:
b2:44:a6:d7:87:96:eb:8e:58:48:cc:f5:3b:a3:9a:60:58:19:
8d:81:6f:dc:cf:98:74:64:64:48:2c:a0:db:db:ff:d0:a6:df:
01:77:f5:06:89:23:69:02:d7:db:50:09:23:f3:20:1f:c2:e7:
b1:8b:c0:37:eb:70:97:4a:9e:00:ee:e7:ab:e2:b1:ef:bc:b8:
00:0b:46:bd:da:bf:ed:71:d6:6e:e0:61:a1:c2:e6:75:99:06:
ef:6a:1e:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fNDzJMv6yEf871p7t/KBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3ZGM5MzZhN2Y2YmE1MDc4MjI0ZjgwMTczNmZkZWIwZGFl
OGE5ZmIwHhcNMjUxMDE5MDgwMTI1WhcNMjUxMDIwMDgwMTI1WjAzMTEwLwYDVQQD
EyhkMjhhZTU2YmZkMGRjMGJjYTY3Nzg5MzdiM2U5YzBmYjQwNTYyMTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyl9j5deNhidee6SQbMDCbv0oUn2
3UUpGUmFZtqUrtzWllzGNvmB+vvgKjA690x2iKKS3C6mpfWf9ZaVBh48LlYxoAYM
srWAzasIzDbHx99I+GHOfKplF8WEVyhNl8GeNVnR3Yj5QJIluIaCy03TforIZ7VX
08VLfIZ4ln0u0lhx96DHGVZTEUv8aSqbUtMNwMLKS+MUMmV5YnC3YuePfzx3QRG2
qAuAXTj2S25vORGOWqwopQRzYMk+bnEOWkYDKIvKMVSwgKfqRUKC5gCV81YW6GoV
+noFfHk1WAyrsTT8D2QaQmbS6xhc2TtHGVx5BJwNib6M7HY5m3ZsY70P+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNKK5Wv9DcC8pneJN7PpwPtAViFbMB8GA1UdIwQY
MBaAFLfck2p/a6UHgiT4AXNv3rDa6Kn7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDl5VGFuOXJwUWVDSlBnQmMyX2VzTnJvcWZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC84YjE2MmMtNGUzNS00MDYxLTgxYmUt
NzlkNDI4ODJjOGMwLzEvdDl5VGFuOXJwUWVDSlBnQmMyX2VzTnJvcWZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC84YjE2MmMtNGUzNS00MDYxLTgxYmUtNzlkNDI4ODJjOGMw
LzEvdDl5VGFuOXJwUWVDSlBnQmMyX2VzTnJvcWZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlmL3/KDW
buMfFXLbwaRBMXvyJT+QUCM/30rZWVmI8ea5UMkGFQu6Jo8nUBTgwHE8+wr1owj8
U8uczMT06rAP02siP7YJPEzUxIFjNHy8R9TE/q9eFL6yQHPV9DMWoYbrM9s/h1/8
bmnNws/eg3FNxqiBxzmhuBAFE6VG7fCE70NwmbiEimyGutsjvx21bPd7Nq3neEu1
2vlMdvZdofw96O0cskSm14eW645YSMz1O6OaYFgZjYFv3M+YdGRkSCyg29v/0Kbf
AXf1BokjaQLX21AJI/MgH8LnsYvAN+twl0qeAO7nq+Kx77y4AAtGvdq/7XHWbuBh
ocLmdZkG72oeJA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:08 2025 by rpki-client