Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
File: 86yMfjK693i4xFGi0kzGgZaWS_w.mft (raw, json)
Hash identifier: 6b3pFXwOL+S1lBcUbGsWs3DVkC539dSstGtlx/4CtZQ=
Subject key identifier: 33:24:DB:92:DC:48:F1:E1:53:AE:27:1C:EF:EC:C4:8E:BB:A0:55:7B
Authority key identifier: F3:AC:8C:7E:32:BA:F7:78:B8:C4:51:A2:D2:4C:C6:81:96:96:4B:FC
Certificate issuer: /CN=f3ac8c7e32baf778b8c451a2d24cc68196964bfc
Certificate serial: 0199FFC84C893E753C478A712BD01227B4F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 04:02:20 +0000
Manifest this update: Mon 20 Oct 2025 04:02:20 +0000
Manifest next update: Tue 21 Oct 2025 04:02:20 +0000
Files and hashes: 1: 86yMfjK693i4xFGi0kzGgZaWS_w.crl (hash: R+MUKponBKWyHxeZ3M/d7zQT8PP86XvTP7ZappsXJec=)
2: _WY9oVFOYqmtmX68AGnfgT7sREE.roa (hash: q9/lH0PLXrWCsLPCcce8J+bMagH3s+E/1JbmVpZu4OE=)
3: rhwUtXnir6Ij3bx9MKQbSbz6QMs.roa (hash: lHIMVJIkgOZjzszGdrunsUWlov0VvywXObxobD5RkaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:4c:89:3e:75:3c:47:8a:71:2b:d0:12:27:b4:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ac8c7e32baf778b8c451a2d24cc68196964bfc
Validity
Not Before: Oct 20 04:02:20 2025 GMT
Not After : Oct 21 04:02:20 2025 GMT
Subject: CN=3324db92dc48f1e153ae271cefecc48ebba0557b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:10:f1:01:a3:be:25:04:15:70:ae:c7:b9:f8:
88:42:a8:12:72:96:1a:b7:05:c5:fb:18:e2:db:17:
c3:17:45:9a:6c:b0:cb:94:06:87:05:d3:2f:19:a0:
14:67:85:77:12:39:65:79:1e:80:ca:19:59:74:f4:
ef:69:ec:61:b8:1f:62:cd:a0:df:5c:9c:0e:31:d9:
90:31:02:f6:a6:44:95:9b:5a:e8:4d:da:55:40:bb:
fc:22:bf:0a:d1:f5:14:30:39:61:4f:7a:8b:08:54:
3e:8e:51:24:98:e4:51:91:94:64:f7:ff:ba:f5:7f:
cc:59:86:34:28:a2:cc:2f:1a:4d:50:45:47:42:6d:
4a:d7:41:b4:23:26:62:c5:1e:37:06:92:f2:8b:9e:
19:63:30:7e:05:dd:1a:9e:f4:7d:56:3e:df:6c:6f:
f1:d7:14:f9:8e:d8:f8:67:9a:68:19:b5:18:f1:a9:
e3:6e:23:4a:1c:08:a7:e4:5c:91:8b:d9:49:e5:c9:
16:1f:24:2f:d6:32:dd:21:c7:a2:2d:1b:ab:8a:03:
27:99:71:da:c5:86:05:6c:98:2e:4b:25:33:da:80:
43:b8:2d:e4:e0:02:c0:0b:8d:e3:d4:36:44:11:ea:
96:eb:df:31:bb:dd:8b:d3:4a:67:36:33:27:1a:08:
e3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:24:DB:92:DC:48:F1:E1:53:AE:27:1C:EF:EC:C4:8E:BB:A0:55:7B
X509v3 Authority Key Identifier:
keyid:F3:AC:8C:7E:32:BA:F7:78:B8:C4:51:A2:D2:4C:C6:81:96:96:4B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:b4:db:b6:ec:ea:94:39:b6:6b:b7:bc:5c:5b:fc:6d:6b:5b:
e6:6d:0a:5d:98:d4:e6:e5:70:be:d7:67:82:a1:15:99:03:45:
26:82:34:cb:9e:8f:dd:1a:ba:fa:43:e2:28:32:d4:43:fa:09:
9e:1f:e5:a7:7e:55:1b:75:74:74:ec:d1:56:5c:d5:94:1b:81:
d5:f0:57:f7:43:d0:68:3b:fb:ee:d7:70:9a:b9:6f:3a:a3:63:
a2:f8:63:00:41:4d:6c:81:05:d3:77:cd:89:c1:9f:28:4b:5c:
cb:e2:d0:2f:f9:56:a2:e7:0a:c6:08:e4:c4:38:d9:3e:be:2f:
94:e3:42:4d:72:4a:01:39:76:c2:f2:45:34:18:20:34:1f:4c:
9c:f0:09:ba:56:73:00:1d:11:c1:c4:7c:9f:9d:a0:d1:d3:26:
a7:94:be:82:2d:48:6d:75:0c:11:26:a4:a3:0e:e2:bf:66:9e:
4b:eb:16:51:9f:05:5f:24:30:86:e2:37:fe:0e:0d:ce:dc:45:
c1:d4:e0:32:aa:a9:dc:40:92:90:e5:7c:43:2e:55:08:0b:18:
11:16:0b:a5:60:bf:b0:51:11:da:08:17:81:b0:b1:2d:4e:7d:
5c:0c:55:1d:39:2d:67:67:41:bd:fd:d1:7d:18:61:91:a6:cf:
14:70:0d:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/yEyJPnU8R4pxK9ASJ7TzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYWM4YzdlMzJiYWY3NzhiOGM0NTFhMmQyNGNjNjgxOTY5
NjRiZmMwHhcNMjUxMDIwMDQwMjIwWhcNMjUxMDIxMDQwMjIwWjAzMTEwLwYDVQQD
EygzMzI0ZGI5MmRjNDhmMWUxNTNhZTI3MWNlZmVjYzQ4ZWJiYTA1NTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxDxAaO+JQQVcK7HufiIQqgScpYa
twXF+xji2xfDF0WabLDLlAaHBdMvGaAUZ4V3EjlleR6AyhlZdPTvaexhuB9izaDf
XJwOMdmQMQL2pkSVm1roTdpVQLv8Ir8K0fUUMDlhT3qLCFQ+jlEkmORRkZRk9/+6
9X/MWYY0KKLMLxpNUEVHQm1K10G0IyZixR43BpLyi54ZYzB+Bd0anvR9Vj7fbG/x
1xT5jtj4Z5poGbUY8anjbiNKHAin5FyRi9lJ5ckWHyQv1jLdIceiLRurigMnmXHa
xYYFbJguSyUz2oBDuC3k4ALAC43j1DZEEeqW698xu92L00pnNjMnGgjjLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDMk25LcSPHhU64nHO/sxI67oFV7MB8GA1UdIwQY
MBaAFPOsjH4yuvd4uMRRotJMxoGWlkv8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODZ5TWZqSzY5M2k0eEZHaTBrekdnWmFXU193LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni81YzU4NTktNzVjMC00MzQ1LWJkMjkt
NDVjNTY4ZjhhMjdjLzEvODZ5TWZqSzY5M2k0eEZHaTBrekdnWmFXU193Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni81YzU4NTktNzVjMC00MzQ1LWJkMjktNDVjNTY4ZjhhMjdj
LzEvODZ5TWZqSzY5M2k0eEZHaTBrekdnWmFXU193LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgrTbtuzq
lDm2a7e8XFv8bWtb5m0KXZjU5uVwvtdngqEVmQNFJoI0y56P3Rq6+kPiKDLUQ/oJ
nh/lp35VG3V0dOzRVlzVlBuB1fBX90PQaDv77tdwmrlvOqNjovhjAEFNbIEF03fN
icGfKEtcy+LQL/lWoucKxgjkxDjZPr4vlONCTXJKATl2wvJFNBggNB9MnPAJulZz
AB0RwcR8n52g0dMmp5S+gi1IbXUMESakow7iv2aeS+sWUZ8FXyQwhuI3/g4NztxF
wdTgMqqp3ECSkOV8Qy5VCAsYERYLpWC/sFER2ggXgbCxLU59XAxVHTktZ2dBvf3R
fRhhkabPFHANFw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:55:14 2025 by rpki-client