Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.mft
File: RpNQgcd6h0XntiuTuC2iliN5suI.mft (raw, json)
Hash identifier: 0Gg1yioZNWUm/L7mJVTNJ2kprcl7xBCgPuUKM70ikMY=
Subject key identifier: 49:4D:4D:D2:30:5F:CF:AD:93:B9:5B:04:16:21:1B:70:13:79:12:48
Authority key identifier: 46:93:50:81:C7:7A:87:45:E7:B6:2B:93:B8:2D:A2:96:23:79:B2:E2
Certificate issuer: /CN=46935081c77a8745e7b62b93b82da2962379b2e2
Certificate serial: 0199FB45A3F0F1DF663D86D7E3F45194AAEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RpNQgcd6h0XntiuTuC2iliN5suI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 07:01:09 +0000
Manifest this update: Sun 19 Oct 2025 07:01:09 +0000
Manifest next update: Mon 20 Oct 2025 07:01:09 +0000
Files and hashes: 1: 5S9DzB-Zkm3msjgPAbdmsNofi_E.roa (hash: JVrfzyFqi2bm7cADIRU0rzxEk+g6lOHGxW3e0YIX/NA=)
2: RpNQgcd6h0XntiuTuC2iliN5suI.crl (hash: N0pARE6K8uXuqTZczUWctK0v7HJk5DXVd8B/Tfb2i0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RpNQgcd6h0XntiuTuC2iliN5suI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:a3:f0:f1:df:66:3d:86:d7:e3:f4:51:94:aa:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46935081c77a8745e7b62b93b82da2962379b2e2
Validity
Not Before: Oct 19 07:01:09 2025 GMT
Not After : Oct 20 07:01:09 2025 GMT
Subject: CN=494d4dd2305fcfad93b95b0416211b7013791248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b4:21:bf:3f:43:4c:ea:01:59:0b:b5:90:0d:
b2:19:5c:54:ca:ab:f7:e7:bd:81:4a:b3:91:65:6c:
9a:1b:35:a6:26:ac:35:f7:ef:85:b0:01:8b:4e:34:
6e:d9:ba:d4:7f:37:6a:af:a9:83:65:34:6f:6a:ba:
36:f2:8f:94:90:ab:19:8b:79:41:53:e3:f4:59:a8:
dc:64:f9:71:e8:f7:14:66:07:ab:b5:0c:a6:9c:51:
85:1e:e3:f3:a1:cf:f3:4e:e5:c7:f9:d0:3c:99:ee:
2a:92:21:9f:bd:38:59:9f:db:02:c2:4a:d8:c5:64:
6c:68:b0:69:ab:b3:27:9e:da:f9:43:7a:a6:b8:55:
b3:97:59:de:3b:ef:d0:ce:ea:99:d4:8e:fc:12:eb:
3e:9e:ac:c4:16:c7:99:5f:47:43:ba:7d:ed:db:70:
40:48:19:43:00:0a:1f:bc:d2:17:e6:22:87:a8:63:
88:b6:2f:73:5e:40:91:5d:8b:6c:2c:a4:3b:10:d9:
9a:ca:c2:4b:6e:9d:c5:44:9a:08:ee:82:21:2c:f0:
22:e7:58:9d:ed:b5:92:ff:27:c0:ea:38:e6:d7:ef:
0e:50:29:34:be:1f:80:53:36:19:cf:f1:25:9b:c7:
86:04:51:54:12:7d:bf:11:01:9d:11:f3:5e:06:c4:
c3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:4D:4D:D2:30:5F:CF:AD:93:B9:5B:04:16:21:1B:70:13:79:12:48
X509v3 Authority Key Identifier:
keyid:46:93:50:81:C7:7A:87:45:E7:B6:2B:93:B8:2D:A2:96:23:79:B2:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RpNQgcd6h0XntiuTuC2iliN5suI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:2e:4b:d4:8f:02:7e:b1:d2:a0:59:cf:91:9c:cb:57:db:7c:
89:48:ba:7b:5c:2d:d0:d6:ad:13:24:86:02:5b:fd:a4:85:e1:
c9:79:fd:42:71:4c:dc:7f:00:d5:47:c7:3d:55:39:9b:37:0b:
24:91:29:c1:c9:77:5d:24:f6:47:78:e2:00:37:af:96:03:64:
a1:2f:84:bf:0b:4e:eb:e1:a7:51:45:5a:87:13:c3:c2:52:d0:
a8:aa:ab:8b:50:ad:27:25:93:8d:67:2a:5b:bb:80:d7:e2:ec:
91:1c:66:55:ff:fd:98:7f:47:88:66:2b:1e:ca:73:38:42:d8:
53:b3:dc:da:04:92:d9:9b:b5:ee:f4:00:12:30:a2:17:19:f8:
e9:f8:88:9c:9d:60:73:06:91:43:4e:46:81:6b:e0:f3:27:5d:
a5:86:0c:db:e1:d9:c2:0c:d7:ed:b0:f0:20:fc:40:f5:f1:a6:
9d:0d:44:68:09:d7:54:9b:c0:a7:ea:9d:2c:a6:bc:90:6f:7a:
3b:70:ed:6a:ba:a8:26:0f:74:bd:eb:f2:8b:f3:99:8d:15:6d:
26:eb:aa:27:15:ff:2f:47:20:fe:e6:89:43:a8:48:99:4a:1f:
fe:64:f5:0a:0f:d5:97:f5:af:0a:a7:d0:ce:b3:e5:3c:ac:9d:
f8:8b:7c:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7RaPw8d9mPYbX4/RRlKruMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2OTM1MDgxYzc3YTg3NDVlN2I2MmI5M2I4MmRhMjk2MjM3
OWIyZTIwHhcNMjUxMDE5MDcwMTA5WhcNMjUxMDIwMDcwMTA5WjAzMTEwLwYDVQQD
Eyg0OTRkNGRkMjMwNWZjZmFkOTNiOTViMDQxNjIxMWI3MDEzNzkxMjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrQhvz9DTOoBWQu1kA2yGVxUyqv3
572BSrORZWyaGzWmJqw19++FsAGLTjRu2brUfzdqr6mDZTRvaro28o+UkKsZi3lB
U+P0WajcZPlx6PcUZgertQymnFGFHuPzoc/zTuXH+dA8me4qkiGfvThZn9sCwkrY
xWRsaLBpq7Mnntr5Q3qmuFWzl1neO+/QzuqZ1I78Eus+nqzEFseZX0dDun3t23BA
SBlDAAofvNIX5iKHqGOIti9zXkCRXYtsLKQ7ENmaysJLbp3FRJoI7oIhLPAi51id
7bWS/yfA6jjm1+8OUCk0vh+AUzYZz/Elm8eGBFFUEn2/EQGdEfNeBsTDbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFElNTdIwX8+tk7lbBBYhG3ATeRJIMB8GA1UdIwQY
MBaAFEaTUIHHeodF57Yrk7gtopYjebLiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnBOUWdjZDZoMFhudGl1VHVDMmlsaU41c3VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85MDYwNmUtOTMxNi00ZWEzLWJjNzQt
YTM1YzI3ZDk1MTg2LzEvUnBOUWdjZDZoMFhudGl1VHVDMmlsaU41c3VJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS85MDYwNmUtOTMxNi00ZWEzLWJjNzQtYTM1YzI3ZDk1MTg2
LzEvUnBOUWdjZDZoMFhudGl1VHVDMmlsaU41c3VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANC5L1I8C
frHSoFnPkZzLV9t8iUi6e1wt0NatEySGAlv9pIXhyXn9QnFM3H8A1UfHPVU5mzcL
JJEpwcl3XST2R3jiADevlgNkoS+EvwtO6+GnUUVahxPDwlLQqKqri1CtJyWTjWcq
W7uA1+LskRxmVf/9mH9HiGYrHspzOELYU7Pc2gSS2Zu17vQAEjCiFxn46fiInJ1g
cwaRQ05GgWvg8yddpYYM2+HZwgzX7bDwIPxA9fGmnQ1EaAnXVJvAp+qdLKa8kG96
O3DtarqoJg90vevyi/OZjRVtJuuqJxX/L0cg/uaJQ6hImUof/mT1Cg/Vl/WvCqfQ
zrPlPKyd+It8zQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:06 2025 by rpki-client