Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.mft
File: w4yh1BjCGOJveVGBqeO7e3nURD8.mft (raw, json)
Hash identifier: eOwr4PA5uUTYTI+l0q9UuimirJaQCyDApVacJdHpa0s=
Subject key identifier: 9C:13:11:C2:79:66:AB:9B:12:3A:F2:A4:2E:79:98:AB:C1:E5:84:3A
Authority key identifier: C3:8C:A1:D4:18:C2:18:E2:6F:79:51:81:A9:E3:BB:7B:79:D4:44:3F
Certificate issuer: /CN=c38ca1d418c218e26f795181a9e3bb7b79d4443f
Certificate serial: 0199FBEB2C00F5297DDC60BA7013B28B4B08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4yh1BjCGOJveVGBqeO7e3nURD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 10:01:57 +0000
Manifest this update: Sun 19 Oct 2025 10:01:57 +0000
Manifest next update: Mon 20 Oct 2025 10:01:57 +0000
Files and hashes: 1: HtKtiVg-0zn3K5n3LScDDg1_p88.roa (hash: to3WuOq+FMznKALAAApfBe9RQEcWrRQ420WrsW7wdUU=)
2: w4yh1BjCGOJveVGBqeO7e3nURD8.crl (hash: FahvOmZQDB5nk4pdz2ML3C2y4YdG0HwaWr/3Xk+034o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w4yh1BjCGOJveVGBqeO7e3nURD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:2c:00:f5:29:7d:dc:60:ba:70:13:b2:8b:4b:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38ca1d418c218e26f795181a9e3bb7b79d4443f
Validity
Not Before: Oct 19 10:01:57 2025 GMT
Not After : Oct 20 10:01:57 2025 GMT
Subject: CN=9c1311c27966ab9b123af2a42e7998abc1e5843a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8f:6e:62:d1:a6:e3:dc:23:79:6b:ba:c6:0b:
b4:6e:5c:98:71:ff:ed:80:9e:45:29:24:18:db:8b:
f5:eb:bb:5c:4e:4f:db:1f:cf:b5:e6:b4:03:4a:02:
28:f4:ed:61:65:f4:96:f1:dc:44:ad:59:8d:f3:d5:
8f:d6:0e:13:9c:3b:03:4b:c5:21:6a:81:bc:b3:de:
bc:1d:f9:47:41:37:a1:51:dd:50:d2:3e:c5:89:1b:
d3:6e:20:64:72:f4:f1:55:be:5e:3d:54:f3:59:92:
f9:15:07:61:4e:37:31:2f:d6:ec:ff:6a:38:58:13:
27:fc:b9:64:bd:20:76:1e:58:92:13:38:26:22:91:
41:ba:57:dd:c3:da:83:ff:9d:7c:a1:0b:f5:f6:d4:
c3:5f:70:2c:53:e2:6c:79:e0:c4:3e:10:0a:87:ac:
84:4d:3a:03:a4:71:ce:9d:03:3e:03:6c:79:3b:b2:
bb:8d:ca:85:0e:61:54:19:49:55:d7:b2:13:73:b7:
8d:d9:e5:93:14:0f:55:48:1e:01:9a:7a:e2:3c:82:
a8:8d:54:2e:86:8d:e7:6b:f6:dd:b2:2f:4b:ca:22:
64:54:cc:f5:1c:e5:65:b1:50:1a:40:f2:3e:36:9a:
8d:c5:0b:87:ca:0d:ba:6d:ae:77:6a:1b:6d:8f:fc:
4c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:13:11:C2:79:66:AB:9B:12:3A:F2:A4:2E:79:98:AB:C1:E5:84:3A
X509v3 Authority Key Identifier:
keyid:C3:8C:A1:D4:18:C2:18:E2:6F:79:51:81:A9:E3:BB:7B:79:D4:44:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4yh1BjCGOJveVGBqeO7e3nURD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:46:98:eb:04:06:8b:08:d2:37:2b:e6:6e:56:12:60:c5:f9:
52:16:b4:23:0a:ec:ce:4e:51:c0:8a:05:e9:71:9e:d0:af:c4:
af:73:e4:bd:84:c9:f6:6d:10:e8:37:e5:a4:6b:cf:4b:4a:9a:
5d:03:ef:4d:2f:da:16:33:c6:11:80:5a:34:24:fb:05:a3:eb:
05:e3:9e:bd:0b:e5:ca:10:c7:64:cc:3b:50:f8:59:02:30:47:
59:1d:71:72:2e:61:93:2f:5c:6c:d8:fa:95:d4:1e:bb:7c:2d:
70:63:2e:49:34:e4:73:d7:37:7e:50:33:5b:9a:76:fc:c1:a4:
be:33:0b:a7:6f:68:49:f2:d1:20:b4:60:15:7d:03:3c:c6:f9:
a7:3f:04:c7:e3:b6:55:03:50:40:ca:4d:74:83:72:2f:a2:d7:
20:f0:02:09:14:14:7d:7a:0c:05:64:14:8c:fb:ce:db:15:db:
a0:ac:fd:5a:f6:37:99:64:c6:c5:d5:d7:de:16:09:4f:9e:bf:
a1:16:76:af:c7:f5:c9:8a:75:18:92:57:8a:e3:90:65:60:65:
9e:76:f3:f5:56:61:e8:d7:04:a5:aa:8a:78:d9:27:05:7f:f8:
49:cf:6c:e2:b9:9f:d9:d8:0c:3c:aa:2f:cd:52:f6:93:3b:c3:
41:0a:cc:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76ywA9Sl93GC6cBOyi0sIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzOGNhMWQ0MThjMjE4ZTI2Zjc5NTE4MWE5ZTNiYjdiNzlk
NDQ0M2YwHhcNMjUxMDE5MTAwMTU3WhcNMjUxMDIwMTAwMTU3WjAzMTEwLwYDVQQD
Eyg5YzEzMTFjMjc5NjZhYjliMTIzYWYyYTQyZTc5OThhYmMxZTU4NDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr49uYtGm49wjeWu6xgu0blyYcf/t
gJ5FKSQY24v167tcTk/bH8+15rQDSgIo9O1hZfSW8dxErVmN89WP1g4TnDsDS8Uh
aoG8s968HflHQTehUd1Q0j7FiRvTbiBkcvTxVb5ePVTzWZL5FQdhTjcxL9bs/2o4
WBMn/LlkvSB2HliSEzgmIpFBulfdw9qD/518oQv19tTDX3AsU+JseeDEPhAKh6yE
TToDpHHOnQM+A2x5O7K7jcqFDmFUGUlV17ITc7eN2eWTFA9VSB4BmnriPIKojVQu
ho3na/bdsi9LyiJkVMz1HOVlsVAaQPI+NpqNxQuHyg26ba53ahttj/xMFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJwTEcJ5ZqubEjrypC55mKvB5YQ6MB8GA1UdIwQY
MBaAFMOModQYwhjib3lRganju3t51EQ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzR5aDFCakNHT0p2ZVZHQnFlTzdlM25VUkQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS82ZmNiYTgtYWRiOC00MTFmLTllNDYt
MmVmMjdhMTkxNmJkLzEvdzR5aDFCakNHT0p2ZVZHQnFlTzdlM25VUkQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS82ZmNiYTgtYWRiOC00MTFmLTllNDYtMmVmMjdhMTkxNmJk
LzEvdzR5aDFCakNHT0p2ZVZHQnFlTzdlM25VUkQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcUaY6wQG
iwjSNyvmblYSYMX5Uha0Iwrszk5RwIoF6XGe0K/Er3PkvYTJ9m0Q6DflpGvPS0qa
XQPvTS/aFjPGEYBaNCT7BaPrBeOevQvlyhDHZMw7UPhZAjBHWR1xci5hky9cbNj6
ldQeu3wtcGMuSTTkc9c3flAzW5p2/MGkvjMLp29oSfLRILRgFX0DPMb5pz8Ex+O2
VQNQQMpNdINyL6LXIPACCRQUfXoMBWQUjPvO2xXboKz9WvY3mWTGxdXX3hYJT56/
oRZ2r8f1yYp1GJJXiuOQZWBlnnbz9VZh6NcEpaqKeNknBX/4Sc9s4rmf2dgMPKov
zVL2kzvDQQrMtg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:53 2025 by rpki-client