
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
File: m2fALef8jRGhr-euYsWFTRd2dVM.mft (raw, json)
Hash identifier: pXA5TSyotyz5UwsaZ+UJdLnHaotRrszlKHcbv65g4fU=
Subject key identifier: 9B:17:6D:AD:4B:06:9D:38:4D:8B:6F:E9:DF:8C:ED:82:BC:72:8C:56
Authority key identifier: 9B:67:C0:2D:E7:FC:8D:11:A1:AF:E7:AE:62:C5:85:4D:17:76:75:53
Certificate issuer: /CN=9b67c02de7fc8d11a1afe7ae62c5854d17767553
Certificate serial: 0199FB45CA575F645C7E0C30AAEADB151D44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 07:01:18 +0000
Manifest this update: Sun 19 Oct 2025 07:01:18 +0000
Manifest next update: Mon 20 Oct 2025 07:01:18 +0000
Files and hashes: 1: 1mDSvWCAPrTbdUwmp52_NsdaJps.roa (hash: FwQIJqtRB7XaFGpge2zOocq9MbKJo1suVWwULTT7sHA=)
2: JI_IFEVZOLgwy-WHZOm2izr6PIo.roa (hash: OO8EbVI1MKPERWUpbisO0H4MA7HYDCDhv160pD1pO5c=)
3: m2fALef8jRGhr-euYsWFTRd2dVM.crl (hash: HN1/EsurWGBqai/opHJ54ZYG++zP6JWnZVAau3O8CZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:ca:57:5f:64:5c:7e:0c:30:aa:ea:db:15:1d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b67c02de7fc8d11a1afe7ae62c5854d17767553
Validity
Not Before: Oct 19 07:01:18 2025 GMT
Not After : Oct 20 07:01:18 2025 GMT
Subject: CN=9b176dad4b069d384d8b6fe9df8ced82bc728c56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e0:eb:e5:e2:b9:35:b8:3d:63:99:8d:b2:3e:
4f:c0:c4:13:56:d1:57:11:e4:f0:26:d5:1a:ae:99:
1d:9f:cc:e0:5d:5e:2d:22:1f:b3:6d:61:7f:cb:a9:
e3:bf:ac:4b:bd:9b:66:b9:0c:51:3b:5d:a4:ae:4f:
01:b8:95:e9:5e:a5:3f:40:90:ea:7a:c8:b0:ac:bf:
e7:18:32:5a:77:4e:4d:34:e8:38:93:17:47:89:1f:
2b:b3:a2:d9:57:8b:c3:b0:6f:ee:3c:8f:af:ea:29:
4b:40:3e:dc:93:08:0c:bf:45:15:0c:40:8e:4d:98:
5e:63:4d:aa:a5:70:67:33:cc:bc:6c:10:e3:89:2a:
a1:ca:f0:57:e6:0b:9f:aa:97:86:ce:ed:11:d8:5d:
6e:09:50:cf:fb:c8:9c:be:a6:1a:8d:39:01:99:3d:
6f:5c:4c:a2:c2:cd:48:05:c6:3f:43:3e:37:b4:95:
4f:6a:22:b3:e8:b8:d3:e8:ab:ae:b4:2d:50:81:22:
c7:1e:65:3e:a9:8e:8c:d4:2f:96:da:ac:4e:15:cd:
2d:b5:7c:b0:ce:a3:69:2e:1a:3b:2e:06:e5:6d:fd:
95:be:09:c7:43:57:d0:b4:42:7b:52:0d:3a:65:c1:
b9:f4:6a:40:f3:9e:15:25:64:38:ab:c1:76:8e:b6:
e2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:17:6D:AD:4B:06:9D:38:4D:8B:6F:E9:DF:8C:ED:82:BC:72:8C:56
X509v3 Authority Key Identifier:
keyid:9B:67:C0:2D:E7:FC:8D:11:A1:AF:E7:AE:62:C5:85:4D:17:76:75:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:fc:63:52:a3:96:d0:a1:aa:26:eb:d2:82:f1:f7:3d:94:dc:
7a:8e:ed:70:ca:7f:12:12:5b:77:d5:6b:78:ad:19:e3:9c:c3:
4e:87:68:61:84:08:dc:b7:b2:72:a3:10:b3:07:fb:b5:fc:55:
02:bc:00:dc:02:4e:ba:f3:f4:ba:62:c6:ef:4b:a9:fd:eb:72:
20:53:04:86:99:08:0f:38:99:d9:ba:61:c3:f2:6a:7d:0e:60:
e2:2d:74:30:f8:c6:1c:6d:b2:b2:c8:f5:46:39:c7:82:b2:7f:
ba:ff:d9:f9:33:ff:0a:5a:46:a3:bc:0c:fe:ab:85:26:d7:45:
4a:ce:0b:c9:c1:b3:d9:4f:92:ad:20:9a:9b:d3:6c:07:3c:1f:
79:09:c3:45:d1:c8:f4:57:5f:e9:fa:c4:18:62:23:4f:38:b1:
eb:86:fb:1f:49:d0:46:f7:bd:c9:c7:6e:6e:89:bd:9f:8e:2e:
64:d3:a0:a0:54:b5:0a:eb:91:c8:e9:61:b0:96:7f:c9:78:18:
96:bc:82:06:c7:46:07:41:93:c4:8f:e1:98:ab:ae:a2:a5:28:
5c:b5:38:eb:be:6a:ed:6a:5d:d8:fd:ce:e2:61:99:01:fb:73:
ef:b0:d6:e6:2a:75:77:e7:7c:46:8b:ae:60:a8:bd:b8:f7:5f:
fc:dc:34:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7RcpXX2RcfgwwqurbFR1EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliNjdjMDJkZTdmYzhkMTFhMWFmZTdhZTYyYzU4NTRkMTc3
Njc1NTMwHhcNMjUxMDE5MDcwMTE4WhcNMjUxMDIwMDcwMTE4WjAzMTEwLwYDVQQD
Eyg5YjE3NmRhZDRiMDY5ZDM4NGQ4YjZmZTlkZjhjZWQ4MmJjNzI4YzU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsODr5eK5Nbg9Y5mNsj5PwMQTVtFX
EeTwJtUarpkdn8zgXV4tIh+zbWF/y6njv6xLvZtmuQxRO12krk8BuJXpXqU/QJDq
esiwrL/nGDJad05NNOg4kxdHiR8rs6LZV4vDsG/uPI+v6ilLQD7ckwgMv0UVDECO
TZheY02qpXBnM8y8bBDjiSqhyvBX5gufqpeGzu0R2F1uCVDP+8icvqYajTkBmT1v
XEyiws1IBcY/Qz43tJVPaiKz6LjT6KuutC1QgSLHHmU+qY6M1C+W2qxOFc0ttXyw
zqNpLho7Lgblbf2VvgnHQ1fQtEJ7Ug06ZcG59GpA854VJWQ4q8F2jrbikwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJsXba1LBp04TYtv6d+M7YK8coxWMB8GA1UdIwQY
MBaAFJtnwC3n/I0Roa/nrmLFhU0XdnVTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTJmQUxlZjhqUkdoci1ldVlzV0ZUUmQyZFZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9kNTRlODEtMzMxNy00MjgzLWI0NWYt
YzgxNzQzYjJjYWU2LzEvbTJmQUxlZjhqUkdoci1ldVlzV0ZUUmQyZFZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9kNTRlODEtMzMxNy00MjgzLWI0NWYtYzgxNzQzYjJjYWU2
LzEvbTJmQUxlZjhqUkdoci1ldVlzV0ZUUmQyZFZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATPxjUqOW
0KGqJuvSgvH3PZTceo7tcMp/EhJbd9VreK0Z45zDTodoYYQI3LeycqMQswf7tfxV
ArwA3AJOuvP0umLG70up/etyIFMEhpkIDziZ2bphw/JqfQ5g4i10MPjGHG2yssj1
RjnHgrJ/uv/Z+TP/ClpGo7wM/quFJtdFSs4LycGz2U+SrSCam9NsBzwfeQnDRdHI
9Fdf6frEGGIjTzix64b7H0nQRve9ycdubom9n44uZNOgoFS1CuuRyOlhsJZ/yXgY
lryCBsdGB0GTxI/hmKuuoqUoXLU4675q7Wpd2P3O4mGZAftz77DW5ip1d+d8Rouu
YKi9uPdf/Nw0pw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:56 2025 by rpki-client