Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft
File: k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft (raw, json)
Hash identifier: wxizuqGhxd89xjSs6HQDWOmF4ZHy2lnOupqXkCfvw2Q=
Subject key identifier: 55:ED:A6:98:63:78:8C:EE:4C:58:95:1B:3B:F6:E4:FA:30:49:15:5B
Authority key identifier: 93:D4:3D:49:98:68:09:1B:BD:C4:7D:95:AE:E1:C9:09:9F:00:56:20
Certificate issuer: /CN=93d43d499868091bbdc47d95aee1c9099f005620
Certificate serial: 0199FBEC56A2837EF236C57E21E99A3515B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9Q9SZhoCRu9xH2VruHJCZ8AViA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 10:03:13 +0000
Manifest this update: Sun 19 Oct 2025 10:03:13 +0000
Manifest next update: Mon 20 Oct 2025 10:03:13 +0000
Files and hashes: 1: d_f-2basXF4ecUjEUuL7_QGvdV8.roa (hash: 3qi4PJf12FWilDaOg+5R4nsdnVGnK/XQkSLQfanFNGo=)
2: k9Q9SZhoCRu9xH2VruHJCZ8AViA.crl (hash: ncCrOXkr6OnAsv6f7mNCJRQU9Stb85i6omE0sT3M7mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9Q9SZhoCRu9xH2VruHJCZ8AViA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:56:a2:83:7e:f2:36:c5:7e:21:e9:9a:35:15:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93d43d499868091bbdc47d95aee1c9099f005620
Validity
Not Before: Oct 19 10:03:13 2025 GMT
Not After : Oct 20 10:03:13 2025 GMT
Subject: CN=55eda69863788cee4c58951b3bf6e4fa3049155b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:42:fc:f4:70:c0:35:23:31:68:05:ff:a7:ad:
43:19:3d:fa:17:d4:17:76:3a:2f:7f:8e:d1:4d:29:
06:82:3a:13:a9:1c:b8:17:8f:65:ec:06:e9:f1:7c:
b4:9b:0f:87:8f:a2:b3:54:14:5d:0d:45:23:9f:15:
cf:c8:c6:2f:92:22:d4:af:46:1e:54:86:58:ac:fc:
91:ea:75:fc:c1:80:ca:06:81:1b:8d:18:96:ef:2c:
23:7a:29:b9:ee:57:c9:2e:46:24:b0:8a:e8:25:88:
8f:cf:03:0c:d5:8b:56:43:dc:25:4f:b3:97:df:17:
4d:a7:ac:fc:db:f0:b8:a8:9d:49:64:84:50:af:85:
12:73:52:2e:66:b4:4b:55:98:59:48:fb:9a:7a:90:
65:3a:d4:e0:dc:02:74:ca:81:b8:1f:17:94:38:94:
b3:2f:e9:cb:95:ed:9e:21:5a:29:d7:ff:43:68:4c:
0a:63:d7:eb:0d:d2:fe:2a:b3:14:27:f0:23:48:21:
47:48:8b:ff:96:14:5e:ab:46:3c:ac:9b:37:5f:9e:
90:18:6f:b1:62:26:aa:b5:c7:83:10:96:ac:66:80:
e5:51:86:40:cd:9d:15:3f:7a:e3:47:24:29:b6:33:
c0:1a:39:c0:e7:90:44:53:9f:b5:d1:df:7b:77:1c:
46:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:ED:A6:98:63:78:8C:EE:4C:58:95:1B:3B:F6:E4:FA:30:49:15:5B
X509v3 Authority Key Identifier:
keyid:93:D4:3D:49:98:68:09:1B:BD:C4:7D:95:AE:E1:C9:09:9F:00:56:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9Q9SZhoCRu9xH2VruHJCZ8AViA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:03:a6:fc:fd:32:6d:e0:83:c6:83:37:14:4b:bc:21:5e:6d:
eb:29:ef:b1:1b:a7:c8:a2:2e:89:48:51:97:64:4b:3c:9d:b4:
04:de:ad:a1:f5:5b:65:ec:44:a1:19:91:5a:f4:e8:94:66:8b:
36:91:4f:2a:d0:34:9e:0a:4d:96:0b:4e:1e:1e:ac:37:9d:03:
78:da:d2:3f:0e:b2:d1:ce:6a:49:5c:a5:db:68:51:88:c7:75:
b0:6b:97:60:df:fb:0f:c0:53:0f:95:4e:99:e7:e6:e5:00:56:
13:ca:f0:4d:6c:35:8a:61:9b:a7:9c:a1:57:f2:c3:ef:76:ec:
4c:0a:b9:93:a5:9a:6d:a7:35:8a:5a:72:2b:ec:d9:9f:14:4a:
68:ae:25:df:72:8d:99:87:0c:7d:6f:78:40:78:2b:2e:d5:75:
80:7a:de:b8:d9:6e:4e:80:83:f9:7f:7f:bf:fc:83:90:38:87:
26:8e:29:3d:ba:f5:39:7b:77:6c:c5:76:d2:d3:04:c6:ec:f0:
17:db:05:55:b3:f4:75:0b:78:c0:ce:6c:4d:2d:6f:42:d0:1a:
a2:24:a0:96:76:28:a5:b4:21:bf:f9:91:ec:e2:71:76:2c:e4:
e0:21:ee:59:e4:9a:63:be:3b:a5:e6:ac:c5:7d:3b:38:8e:39:
ec:36:94:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn77Faig37yNsV+IemaNRWyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZDQzZDQ5OTg2ODA5MWJiZGM0N2Q5NWFlZTFjOTA5OWYw
MDU2MjAwHhcNMjUxMDE5MTAwMzEzWhcNMjUxMDIwMTAwMzEzWjAzMTEwLwYDVQQD
Eyg1NWVkYTY5ODYzNzg4Y2VlNGM1ODk1MWIzYmY2ZTRmYTMwNDkxNTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUL89HDANSMxaAX/p61DGT36F9QX
djovf47RTSkGgjoTqRy4F49l7Abp8Xy0mw+Hj6KzVBRdDUUjnxXPyMYvkiLUr0Ye
VIZYrPyR6nX8wYDKBoEbjRiW7ywjeim57lfJLkYksIroJYiPzwMM1YtWQ9wlT7OX
3xdNp6z82/C4qJ1JZIRQr4USc1IuZrRLVZhZSPuaepBlOtTg3AJ0yoG4HxeUOJSz
L+nLle2eIVop1/9DaEwKY9frDdL+KrMUJ/AjSCFHSIv/lhReq0Y8rJs3X56QGG+x
YiaqtceDEJasZoDlUYZAzZ0VP3rjRyQptjPAGjnA55BEU5+10d97dxxGHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFXtpphjeIzuTFiVGzv25PowSRVbMB8GA1UdIwQY
MBaAFJPUPUmYaAkbvcR9la7hyQmfAFYgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazlROVNaaG9DUnU5eEgyVnJ1SEpDWjhBVmlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC82YjA4YzItNWMzYS00Mjg4LTg0NGIt
N2ZlNDJmZjRkY2Q4LzEvazlROVNaaG9DUnU5eEgyVnJ1SEpDWjhBVmlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC82YjA4YzItNWMzYS00Mjg4LTg0NGItN2ZlNDJmZjRkY2Q4
LzEvazlROVNaaG9DUnU5eEgyVnJ1SEpDWjhBVmlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkQOm/P0y
beCDxoM3FEu8IV5t6ynvsRunyKIuiUhRl2RLPJ20BN6tofVbZexEoRmRWvTolGaL
NpFPKtA0ngpNlgtOHh6sN50DeNrSPw6y0c5qSVyl22hRiMd1sGuXYN/7D8BTD5VO
mefm5QBWE8rwTWw1imGbp5yhV/LD73bsTAq5k6Wabac1ilpyK+zZnxRKaK4l33KN
mYcMfW94QHgrLtV1gHreuNluToCD+X9/v/yDkDiHJo4pPbr1OXt3bMV20tMExuzw
F9sFVbP0dQt4wM5sTS1vQtAaoiSglnYopbQhv/mR7OJxdizk4CHuWeSaY747peas
xX07OI457DaUJg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:40:42 2025 by rpki-client