
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft
File: hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft (raw, json)
Hash identifier: oU0svhRdlleHdvXyjemDgCwb75Fp9nuIBiEQeNOKdg0=
Subject key identifier: 2E:CB:77:6F:48:EF:C4:A9:C1:90:4D:DD:98:9C:41:AA:C4:E6:DD:BF
Authority key identifier: 85:6F:0C:90:07:3A:FB:8E:CD:E7:E8:34:09:CE:AB:DB:93:B4:1A:4E
Certificate issuer: /CN=856f0c90073afb8ecde7e83409ceabdb93b41a4e
Certificate serial: 0199FCC6BE0A745C1050A1CBB55A2DA63F2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 14:01:47 +0000
Manifest this update: Sun 19 Oct 2025 14:01:47 +0000
Manifest next update: Mon 20 Oct 2025 14:01:47 +0000
Files and hashes: 1: 0mePZR1kaf-hX2Yp4hjxtaHCXOY.roa (hash: Iz51+DSbV7Tr3oZnznfPb0ztDkoHj3CGvdnh39JEVfU=)
2: Dh6Kyc_0YRpUkQaciLKNTFpj2yY.roa (hash: XwxfewChyQGnh/6DJxz8pIZg+xrexkVvjsVCqgpoH3U=)
3: ZovzMlbHa6h-Fl7gDQG_Zq7WfR4.roa (hash: H/iI+5AR6wdmCN1X+mmy0vutxGeF8cVAtih493U1ycg=)
4: hW8MkAc6-47N5-g0Cc6r25O0Gk4.crl (hash: n9gaLZ8a1zRaM96bZrqBiTSS6imV8h4k/TZiE+q8d+Y=)
5: l73B-rq6PzNDiKoxaYkXjLCugtw.roa (hash: 3VSqbyAVKfkVsGJFnzfZhKO8PUH5YDBnP4CFYJUZ7hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:be:0a:74:5c:10:50:a1:cb:b5:5a:2d:a6:3f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=856f0c90073afb8ecde7e83409ceabdb93b41a4e
Validity
Not Before: Oct 19 14:01:47 2025 GMT
Not After : Oct 20 14:01:47 2025 GMT
Subject: CN=2ecb776f48efc4a9c1904ddd989c41aac4e6ddbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:be:f8:77:08:f6:69:79:99:c5:c6:c0:59:15:
c0:9f:e2:f6:b7:a0:40:24:63:20:3c:3d:5d:33:4b:
48:23:be:98:3e:96:12:27:00:77:fc:23:95:8e:84:
81:e5:50:88:3b:d3:d2:9f:0f:2f:c1:37:3c:0d:94:
87:4e:2f:4a:c4:a0:70:72:17:41:77:fa:d8:bd:e8:
6a:06:05:42:0e:5a:cb:2c:31:fd:ca:ae:1e:8d:ac:
57:71:93:79:98:d3:a7:d8:1e:31:3c:ec:08:8f:ce:
25:b3:b6:27:75:25:7f:ea:5e:f3:2a:78:e8:ca:6c:
47:28:52:93:e8:43:22:fc:5c:43:90:0d:12:73:73:
8a:b2:f8:13:aa:f5:62:a8:88:59:89:0a:e5:3c:32:
30:32:06:41:2a:de:aa:5b:4f:48:45:5e:bb:8a:2b:
9b:4a:5a:d7:0f:89:47:07:1e:dd:18:eb:d2:8e:ec:
f5:9a:63:2f:50:15:0f:8d:a1:33:4a:65:45:97:b2:
bd:2c:d9:bf:60:22:81:38:c8:02:9d:a3:9d:c7:a5:
a1:9b:30:e0:39:47:e4:74:41:04:3c:37:92:bf:fd:
57:35:bf:33:6d:cf:29:7a:38:14:4d:66:d7:be:c9:
db:29:f4:d1:7c:9e:50:3c:08:13:46:5a:0f:57:7b:
d5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:CB:77:6F:48:EF:C4:A9:C1:90:4D:DD:98:9C:41:AA:C4:E6:DD:BF
X509v3 Authority Key Identifier:
keyid:85:6F:0C:90:07:3A:FB:8E:CD:E7:E8:34:09:CE:AB:DB:93:B4:1A:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:73:f0:d7:10:cd:cd:9e:af:03:6c:ec:0f:20:d5:d1:4c:7f:
3e:d1:d3:80:31:03:1b:8c:79:86:73:93:a7:2b:3b:2a:4f:dc:
f7:ce:9a:a3:17:ad:82:b0:29:77:8f:37:95:9d:1e:dd:2f:f3:
3a:47:46:ed:c6:25:be:06:59:c4:41:f2:7e:fb:44:4a:cc:ba:
86:92:f8:40:f4:5c:1c:c9:5a:36:b1:59:d8:36:f1:88:13:72:
79:b7:f6:30:87:cf:df:a8:1e:03:66:b6:b8:42:c4:31:0c:4f:
ab:cb:77:06:fd:7e:e1:ab:0d:b7:4d:ca:24:e4:e6:ee:bd:8a:
60:12:65:13:eb:e1:d2:1c:f8:17:e4:c4:2e:df:d1:16:e7:74:
9b:a2:f5:49:82:37:ac:00:96:dd:30:2a:0f:3d:d3:3c:48:fc:
e2:06:c8:0a:e2:a4:cd:0e:58:e4:35:c8:00:3d:c0:53:da:b5:
46:5f:44:13:f4:08:9c:0f:24:17:a1:83:f8:d1:81:87:5f:be:
4b:d5:e0:37:f9:04:d2:b5:85:61:1f:89:3a:38:30:85:70:d1:
71:91:f0:77:12:22:9f:3c:da:b8:d5:29:01:94:d9:22:cd:3e:
1d:d5:10:1c:c6:b2:5d:2e:fc:c9:c1:67:08:75:5f:01:03:69:
35:0f:bc:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xr4KdFwQUKHLtVotpj8sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NmYwYzkwMDczYWZiOGVjZGU3ZTgzNDA5Y2VhYmRiOTNi
NDFhNGUwHhcNMjUxMDE5MTQwMTQ3WhcNMjUxMDIwMTQwMTQ3WjAzMTEwLwYDVQQD
EygyZWNiNzc2ZjQ4ZWZjNGE5YzE5MDRkZGQ5ODljNDFhYWM0ZTZkZGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx774dwj2aXmZxcbAWRXAn+L2t6BA
JGMgPD1dM0tII76YPpYSJwB3/COVjoSB5VCIO9PSnw8vwTc8DZSHTi9KxKBwchdB
d/rYvehqBgVCDlrLLDH9yq4ejaxXcZN5mNOn2B4xPOwIj84ls7YndSV/6l7zKnjo
ymxHKFKT6EMi/FxDkA0Sc3OKsvgTqvViqIhZiQrlPDIwMgZBKt6qW09IRV67iiub
SlrXD4lHBx7dGOvSjuz1mmMvUBUPjaEzSmVFl7K9LNm/YCKBOMgCnaOdx6WhmzDg
OUfkdEEEPDeSv/1XNb8zbc8pejgUTWbXvsnbKfTRfJ5QPAgTRloPV3vViwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC7Ld29I78SpwZBN3ZicQarE5t2/MB8GA1UdIwQY
MBaAFIVvDJAHOvuOzefoNAnOq9uTtBpOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFc4TWtBYzYtNDdONS1nMENjNnIyNU8wR2s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8yMDQyNjgtNjA3OC00YjUzLTk0ZDIt
NDRmZGU5NmI4YWVjLzEvaFc4TWtBYzYtNDdONS1nMENjNnIyNU8wR2s0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy8yMDQyNjgtNjA3OC00YjUzLTk0ZDItNDRmZGU5NmI4YWVj
LzEvaFc4TWtBYzYtNDdONS1nMENjNnIyNU8wR2s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALXPw1xDN
zZ6vA2zsDyDV0Ux/PtHTgDEDG4x5hnOTpys7Kk/c986aoxetgrApd483lZ0e3S/z
OkdG7cYlvgZZxEHyfvtESsy6hpL4QPRcHMlaNrFZ2DbxiBNyebf2MIfP36geA2a2
uELEMQxPq8t3Bv1+4asNt03KJOTm7r2KYBJlE+vh0hz4F+TELt/RFud0m6L1SYI3
rACW3TAqDz3TPEj84gbICuKkzQ5Y5DXIAD3AU9q1Rl9EE/QInA8kF6GD+NGBh1++
S9XgN/kE0rWFYR+JOjgwhXDRcZHwdxIinzzauNUpAZTZIs0+HdUQHMayXS78ycFn
CHVfAQNpNQ+89Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:36:50 2025 by rpki-client