Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft
File: mTfH9VuM8OdKXeCQMprZtyjGrXc.mft (raw, json)
Hash identifier: /8vwC+BOgisqVEWe/PEXyaiNgbGHLUpSehoChEZwSDQ=
Subject key identifier: 2E:58:2D:2C:27:8E:3F:37:8C:E5:5F:24:90:EA:1A:A8:2D:6E:E7:BE
Authority key identifier: 99:37:C7:F5:5B:8C:F0:E7:4A:5D:E0:90:32:9A:D9:B7:28:C6:AD:77
Certificate issuer: /CN=9937c7f55b8cf0e74a5de090329ad9b728c6ad77
Certificate serial: 0199FDD92DB0131FEFBD6C2DDF31C43E13B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mTfH9VuM8OdKXeCQMprZtyjGrXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 19:01:32 +0000
Manifest this update: Sun 19 Oct 2025 19:01:32 +0000
Manifest next update: Mon 20 Oct 2025 19:01:32 +0000
Files and hashes: 1: QDRodL1Ij0kvPV6RatQCpAs4M7Q.roa (hash: 8yQMKLh2R6BvydYUR3v0EXrX6Bu8MKleBRx4SEEyIAM=)
2: mTfH9VuM8OdKXeCQMprZtyjGrXc.crl (hash: gsv2ke9aaUGQ7S5yh1/1RasHDEIoXoERWdtu4Vq698A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mTfH9VuM8OdKXeCQMprZtyjGrXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:2d:b0:13:1f:ef:bd:6c:2d:df:31:c4:3e:13:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9937c7f55b8cf0e74a5de090329ad9b728c6ad77
Validity
Not Before: Oct 19 19:01:32 2025 GMT
Not After : Oct 20 19:01:32 2025 GMT
Subject: CN=2e582d2c278e3f378ce55f2490ea1aa82d6ee7be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f4:9a:15:c8:3f:37:98:82:61:8a:07:e5:97:
59:66:a6:c4:41:44:10:a7:36:be:e3:df:60:8f:3b:
23:64:32:96:34:cf:a0:de:5b:12:ca:23:88:6c:67:
05:87:ad:7b:87:6f:18:56:84:e7:89:ba:f8:26:88:
f2:e2:86:b5:40:a2:81:71:d9:5c:69:10:c3:ba:55:
98:bd:88:f1:2c:15:31:4b:32:5b:b0:9a:84:6d:4c:
bd:1e:42:34:02:f7:55:95:29:71:3a:c7:02:2b:a9:
35:71:aa:82:15:e9:d2:d6:4f:f7:27:c2:94:51:c9:
aa:3a:9b:1a:8c:0f:69:9d:a7:0e:39:69:5b:6b:b5:
73:11:1a:be:f0:f6:71:91:e7:61:b9:26:50:04:23:
ea:dc:a9:98:9a:1a:66:fe:34:fe:8c:0d:89:48:93:
f0:0f:79:01:be:9c:53:bc:2d:9d:3d:92:09:01:54:
18:24:20:99:a7:b0:8f:a2:bb:8f:88:e8:2a:06:db:
5a:d6:a1:bb:6c:6f:ab:66:97:65:6a:79:fd:32:62:
09:85:58:29:db:01:17:aa:32:6f:4e:b3:d1:97:30:
6b:e9:de:82:bc:a3:48:d2:65:97:bc:a7:c9:e3:97:
b7:f3:a1:32:dd:0e:0f:c0:10:69:23:a8:49:2d:86:
1e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:58:2D:2C:27:8E:3F:37:8C:E5:5F:24:90:EA:1A:A8:2D:6E:E7:BE
X509v3 Authority Key Identifier:
keyid:99:37:C7:F5:5B:8C:F0:E7:4A:5D:E0:90:32:9A:D9:B7:28:C6:AD:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mTfH9VuM8OdKXeCQMprZtyjGrXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:d6:71:41:30:37:96:7a:75:05:44:e3:70:cf:63:82:27:0f:
c1:73:60:64:f2:34:9d:6a:dc:70:d5:ed:15:d1:09:00:18:29:
2e:a6:45:94:51:77:37:6c:82:57:e1:67:f9:10:c2:72:49:91:
f2:70:32:c4:3d:66:23:ca:f6:3d:ec:aa:13:33:8c:46:bd:55:
23:92:42:70:f6:87:5c:01:05:d4:a5:37:50:e3:84:b0:b4:b9:
1a:88:a4:24:b6:0a:4c:6b:46:c6:02:16:fd:18:f1:f5:c2:5e:
2c:dc:5a:d1:02:1b:3d:a1:13:32:d3:20:e1:4e:b1:91:fa:96:
cd:a0:8c:30:54:96:56:89:de:16:44:c9:5c:d8:72:c6:3a:81:
58:5f:da:d6:22:d9:59:b5:ae:1f:df:7a:bf:eb:e4:f0:e1:ee:
84:7f:95:84:81:86:ba:44:99:91:07:eb:6e:16:e6:e0:60:21:
e2:fc:78:9b:d5:8c:7a:83:0e:48:7a:e8:da:c1:8c:f6:3c:18:
94:ac:ef:fd:68:54:83:d0:73:f6:49:cf:e2:23:61:d4:1e:7d:
bc:af:ae:70:35:83:29:d2:49:78:a9:74:71:df:d0:89:f2:27:
00:04:26:90:a2:5c:a3:e0:48:e1:90:ae:bc:09:06:e7:e4:16:
81:dd:c3:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92S2wEx/vvWwt3zHEPhOxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MzdjN2Y1NWI4Y2YwZTc0YTVkZTA5MDMyOWFkOWI3Mjhj
NmFkNzcwHhcNMjUxMDE5MTkwMTMyWhcNMjUxMDIwMTkwMTMyWjAzMTEwLwYDVQQD
EygyZTU4MmQyYzI3OGUzZjM3OGNlNTVmMjQ5MGVhMWFhODJkNmVlN2JlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvSaFcg/N5iCYYoH5ZdZZqbEQUQQ
pza+499gjzsjZDKWNM+g3lsSyiOIbGcFh617h28YVoTnibr4Jojy4oa1QKKBcdlc
aRDDulWYvYjxLBUxSzJbsJqEbUy9HkI0AvdVlSlxOscCK6k1caqCFenS1k/3J8KU
UcmqOpsajA9pnacOOWlba7VzERq+8PZxkedhuSZQBCPq3KmYmhpm/jT+jA2JSJPw
D3kBvpxTvC2dPZIJAVQYJCCZp7CPoruPiOgqBtta1qG7bG+rZpdlann9MmIJhVgp
2wEXqjJvTrPRlzBr6d6CvKNI0mWXvKfJ45e386Ey3Q4PwBBpI6hJLYYeBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC5YLSwnjj83jOVfJJDqGqgtbue+MB8GA1UdIwQY
MBaAFJk3x/VbjPDnSl3gkDKa2bcoxq13MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVRmSDlWdU04T2RLWGVDUU1wclp0eWpHclhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS80ZjhjMmQtZWM0MC00ZDNjLTg0MjYt
Yjc1ZWY1NjM3MjBjLzEvbVRmSDlWdU04T2RLWGVDUU1wclp0eWpHclhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS80ZjhjMmQtZWM0MC00ZDNjLTg0MjYtYjc1ZWY1NjM3MjBj
LzEvbVRmSDlWdU04T2RLWGVDUU1wclp0eWpHclhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgtZxQTA3
lnp1BUTjcM9jgicPwXNgZPI0nWrccNXtFdEJABgpLqZFlFF3N2yCV+Fn+RDCckmR
8nAyxD1mI8r2PeyqEzOMRr1VI5JCcPaHXAEF1KU3UOOEsLS5GoikJLYKTGtGxgIW
/Rjx9cJeLNxa0QIbPaETMtMg4U6xkfqWzaCMMFSWVoneFkTJXNhyxjqBWF/a1iLZ
WbWuH996v+vk8OHuhH+VhIGGukSZkQfrbhbm4GAh4vx4m9WMeoMOSHro2sGM9jwY
lKzv/WhUg9Bz9knP4iNh1B59vK+ucDWDKdJJeKl0cd/QifInAAQmkKJco+BI4ZCu
vAkG5+QWgd3Djg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:06:48 2025 by rpki-client