Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.mft
File: u76WEtFEC8bHBOBGXw711spzl6Y.mft (raw, json)
Hash identifier: GEe9Qb81ykj819f84bqxMaZiSjFxCyDr1VTYbDPHBu8=
Subject key identifier: 80:6A:9B:4B:AA:9B:1A:69:C0:80:FA:0F:44:E3:18:35:A2:C1:04:72
Authority key identifier: BB:BE:96:12:D1:44:0B:C6:C7:04:E0:46:5F:0E:F5:D6:CA:73:97:A6
Certificate issuer: /CN=bbbe9612d1440bc6c704e0465f0ef5d6ca7397a6
Certificate serial: 0199FCFDADA8298708B75C472FA061AD83A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u76WEtFEC8bHBOBGXw711spzl6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 15:01:47 +0000
Manifest this update: Sun 19 Oct 2025 15:01:47 +0000
Manifest next update: Mon 20 Oct 2025 15:01:47 +0000
Files and hashes: 1: D46VMQb05uTNgl5dbNVDFYzDjzE.roa (hash: V0B6OmfcULHphu50p4sAuyLvveC3GQAGdFvTao1f9Y8=)
2: u76WEtFEC8bHBOBGXw711spzl6Y.crl (hash: QcnnKk/FWuaYuEno04ryJ1yt3/19+6mkmTEz7vbzaEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/u76WEtFEC8bHBOBGXw711spzl6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:ad:a8:29:87:08:b7:5c:47:2f:a0:61:ad:83:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbbe9612d1440bc6c704e0465f0ef5d6ca7397a6
Validity
Not Before: Oct 19 15:01:47 2025 GMT
Not After : Oct 20 15:01:47 2025 GMT
Subject: CN=806a9b4baa9b1a69c080fa0f44e31835a2c10472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:37:74:e8:4d:ce:6a:5d:79:6d:79:2a:8b:c2:
e1:ac:29:4b:3a:b1:86:40:50:12:9e:77:44:01:f1:
e2:19:6a:f4:ee:a5:d7:ed:56:87:76:9e:3d:ea:5c:
61:67:ea:c1:fe:9f:ca:a5:3d:c6:78:1c:43:44:48:
d3:3f:9a:43:8c:a9:24:0d:0d:02:5a:42:a0:a5:c5:
11:02:57:df:66:65:28:2d:03:29:b8:c7:b2:41:e8:
aa:4f:e6:6e:dc:f3:a6:e4:de:2e:54:f4:52:bf:8e:
0b:08:c1:d6:8a:dd:61:66:82:0a:58:23:39:91:32:
1e:b1:90:cd:d6:48:d4:c5:10:d6:1f:42:b6:ae:1b:
b7:c8:b4:d6:56:36:bf:f9:94:73:ac:6b:4f:21:27:
51:69:1c:21:0b:db:a5:9b:12:87:c2:24:4a:56:8b:
ac:91:6e:e8:a5:e4:08:ff:40:92:9f:f7:14:0d:f7:
bc:88:c1:fe:9f:2f:1e:67:ef:6d:cd:03:7b:86:46:
f0:ec:a1:e3:be:33:88:03:8f:ea:a3:b1:28:06:66:
d6:31:ff:ca:b3:55:5e:0d:f5:3d:81:8f:31:3b:ee:
dc:2c:82:e3:a2:8a:52:0c:29:bb:af:b9:08:76:31:
27:60:1b:e6:0f:81:83:17:28:2b:02:39:cb:88:7b:
b5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:6A:9B:4B:AA:9B:1A:69:C0:80:FA:0F:44:E3:18:35:A2:C1:04:72
X509v3 Authority Key Identifier:
keyid:BB:BE:96:12:D1:44:0B:C6:C7:04:E0:46:5F:0E:F5:D6:CA:73:97:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u76WEtFEC8bHBOBGXw711spzl6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:91:0f:8d:1f:09:cc:ae:1d:4b:7a:fb:2e:50:19:9b:7c:b5:
20:82:ff:05:2b:35:47:ba:9f:28:b3:23:f9:f7:10:f2:59:ba:
e8:a0:8f:5c:9e:a1:cb:e7:6a:59:a7:d2:d1:20:fa:ab:71:57:
88:e5:a5:02:1d:06:6e:9b:76:59:90:64:c5:77:bb:c6:8d:70:
b2:f9:b2:f9:90:5e:9b:4a:1f:df:1f:2b:e7:d5:16:01:15:c2:
8a:38:c9:66:29:77:2c:1c:7e:af:49:96:31:35:76:ae:7c:a6:
cb:34:fd:c7:e9:67:01:f2:76:49:21:4b:9f:52:ac:cd:d4:aa:
09:56:49:e9:01:a2:b8:69:20:12:5e:11:2f:8b:ce:fa:1b:32:
96:34:4c:05:53:1d:fa:43:33:80:a8:53:9c:ef:97:28:53:51:
08:30:9c:36:03:fe:e4:51:2a:69:a5:a2:62:1e:64:d2:3a:b7:
70:48:15:55:db:64:16:86:ff:3f:97:e8:32:58:d9:6d:ef:6b:
e6:5d:b6:4b:4f:b8:b5:d6:6c:c5:0c:ff:f1:b7:a6:db:d3:b0:
ea:0c:be:3c:82:e1:8a:57:f0:18:04:63:2d:f0:71:ca:8d:86:
92:dd:e4:28:ca:ab:13:4a:b0:63:da:49:a7:15:b8:44:2e:e7:
8c:64:93:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/a2oKYcIt1xHL6BhrYOpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiYmU5NjEyZDE0NDBiYzZjNzA0ZTA0NjVmMGVmNWQ2Y2E3
Mzk3YTYwHhcNMjUxMDE5MTUwMTQ3WhcNMjUxMDIwMTUwMTQ3WjAzMTEwLwYDVQQD
Eyg4MDZhOWI0YmFhOWIxYTY5YzA4MGZhMGY0NGUzMTgzNWEyYzEwNDcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zd06E3Oal15bXkqi8LhrClLOrGG
QFASnndEAfHiGWr07qXX7VaHdp496lxhZ+rB/p/KpT3GeBxDREjTP5pDjKkkDQ0C
WkKgpcURAlffZmUoLQMpuMeyQeiqT+Zu3POm5N4uVPRSv44LCMHWit1hZoIKWCM5
kTIesZDN1kjUxRDWH0K2rhu3yLTWVja/+ZRzrGtPISdRaRwhC9ulmxKHwiRKVous
kW7opeQI/0CSn/cUDfe8iMH+ny8eZ+9tzQN7hkbw7KHjvjOIA4/qo7EoBmbWMf/K
s1VeDfU9gY8xO+7cLILjoopSDCm7r7kIdjEnYBvmD4GDFygrAjnLiHu1OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIBqm0uqmxppwID6D0TjGDWiwQRyMB8GA1UdIwQY
MBaAFLu+lhLRRAvGxwTgRl8O9dbKc5emMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTc2V0V0RkVDOGJIQk9CR1h3NzExc3B6bDZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9mMjY0MGEtNDZlNy00NjUwLTgzYzUt
Y2M1NWI4MTMwMmNmLzEvdTc2V0V0RkVDOGJIQk9CR1h3NzExc3B6bDZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9mMjY0MGEtNDZlNy00NjUwLTgzYzUtY2M1NWI4MTMwMmNm
LzEvdTc2V0V0RkVDOGJIQk9CR1h3NzExc3B6bDZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWpEPjR8J
zK4dS3r7LlAZm3y1IIL/BSs1R7qfKLMj+fcQ8lm66KCPXJ6hy+dqWafS0SD6q3FX
iOWlAh0Gbpt2WZBkxXe7xo1wsvmy+ZBem0of3x8r59UWARXCijjJZil3LBx+r0mW
MTV2rnymyzT9x+lnAfJ2SSFLn1KszdSqCVZJ6QGiuGkgEl4RL4vO+hsyljRMBVMd
+kMzgKhTnO+XKFNRCDCcNgP+5FEqaaWiYh5k0jq3cEgVVdtkFob/P5foMljZbe9r
5l22S0+4tdZsxQz/8bem29Ow6gy+PILhilfwGARjLfBxyo2Gkt3kKMqrE0qwY9pJ
pxW4RC7njGSTxA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:11 2025 by rpki-client