Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.mft
File: MF140gdceCCXnXulDSWxQntn1FY.mft (raw, json)
Hash identifier: IfyfqKS4upY+ZXdMMOc0yRH7m8wv4/brWwcMzl3e6eU=
Subject key identifier: 39:35:67:21:A3:18:5B:F6:E5:D6:0D:1D:71:E2:50:25:A6:A7:58:D9
Authority key identifier: 30:5D:78:D2:07:5C:78:20:97:9D:7B:A5:0D:25:B1:42:7B:67:D4:56
Certificate issuer: /CN=305d78d2075c7820979d7ba50d25b1427b67d456
Certificate serial: 0199FC8FC819C9A79ACA2568A7F456E8180A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MF140gdceCCXnXulDSWxQntn1FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 13:01:45 +0000
Manifest this update: Sun 19 Oct 2025 13:01:45 +0000
Manifest next update: Mon 20 Oct 2025 13:01:45 +0000
Files and hashes: 1: MF140gdceCCXnXulDSWxQntn1FY.crl (hash: zbZO181ajaYIFaLN6NG4xDyB9AgzsNxPIeRmxLxnYDg=)
2: w22fMY9NDCCcG4e2_IUcNQ_Kq9Q.roa (hash: pqPEuP/XkZYkW0RjNxblrG+NfoIqGAgVKY/Jqk/oP3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MF140gdceCCXnXulDSWxQntn1FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:c8:19:c9:a7:9a:ca:25:68:a7:f4:56:e8:18:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=305d78d2075c7820979d7ba50d25b1427b67d456
Validity
Not Before: Oct 19 13:01:45 2025 GMT
Not After : Oct 20 13:01:45 2025 GMT
Subject: CN=39356721a3185bf6e5d60d1d71e25025a6a758d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:52:fd:dd:5a:e1:fd:e7:8b:16:a1:df:ef:87:
59:79:3e:d1:6b:7c:00:eb:ce:ba:66:b4:81:86:c0:
79:38:ee:38:a1:ef:63:e6:d9:4a:a2:80:0b:3d:b4:
e3:67:86:aa:49:04:c3:81:b2:b8:45:14:a0:77:e0:
e0:ae:f3:eb:9e:aa:d4:ab:cb:c0:0b:45:e6:b6:92:
75:f5:b4:b2:56:25:ca:85:23:14:e7:67:9b:1c:ec:
1d:2c:d9:06:54:9f:b9:19:19:17:32:4f:8a:38:5e:
09:21:50:43:d9:b7:47:1b:c7:63:fa:0e:a0:d4:55:
b7:70:33:81:4f:06:33:57:4f:2e:71:07:3e:b9:b9:
bb:e8:49:f8:89:30:37:da:0c:c6:fa:f1:42:bf:14:
aa:14:1d:c0:27:bb:f2:55:1d:bf:f7:3a:fb:97:bd:
46:be:66:19:c2:6f:e8:de:c0:b7:28:c4:43:8d:57:
ed:ad:70:bd:fd:a3:db:47:6f:33:13:0a:26:79:2d:
81:4d:57:aa:45:21:f7:da:48:08:7d:76:c2:e8:d0:
0f:17:5d:fe:26:b4:d9:06:48:d8:0b:e0:81:f4:6a:
53:d7:85:a9:a9:14:23:c5:6f:eb:c0:be:24:fa:5c:
46:77:d1:a2:98:76:d4:50:b3:79:07:32:87:37:a8:
a5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:35:67:21:A3:18:5B:F6:E5:D6:0D:1D:71:E2:50:25:A6:A7:58:D9
X509v3 Authority Key Identifier:
keyid:30:5D:78:D2:07:5C:78:20:97:9D:7B:A5:0D:25:B1:42:7B:67:D4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MF140gdceCCXnXulDSWxQntn1FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:43:26:99:05:01:cc:7f:0b:bc:ef:4e:13:49:88:48:cc:71:
78:89:ca:d5:a3:5b:b6:2a:1e:99:e2:46:89:2f:ec:f4:c0:48:
40:34:0a:a8:8b:d9:4a:9f:34:05:4b:3c:d5:ff:4a:9c:4b:18:
2a:d4:6a:dc:49:9e:aa:8a:78:62:b9:64:2e:8c:4a:a8:de:bd:
7e:1e:2a:84:eb:9f:c7:fd:a0:69:3b:1b:0d:d3:80:f8:68:32:
74:ff:1d:1e:b2:0d:8d:b2:30:5f:b3:76:eb:38:78:61:f9:cc:
75:35:3a:a2:1d:aa:3c:e6:dd:d0:0c:17:22:2e:ee:31:dc:8a:
8a:99:bf:d0:af:95:9f:96:ab:6d:72:30:23:ad:13:96:69:12:
83:7f:76:2b:05:01:97:6e:a5:13:23:49:9d:0a:5f:df:6f:43:
36:1b:23:8e:cb:26:32:4d:ff:60:29:05:50:62:81:51:51:2b:
3f:46:5d:11:40:3e:9f:68:bd:ef:18:db:3b:a1:bf:32:c3:4f:
1f:f5:47:ac:f0:71:ef:7b:df:a7:6f:3a:c9:b4:1b:3f:49:ac:
66:68:c4:de:44:9b:00:fc:b5:30:72:2a:66:cb:a4:bf:df:15:
41:23:8a:8f:16:c6:24:92:df:2c:95:d5:63:ec:09:69:cf:87:
69:b1:84:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j8gZyaeayiVop/RW6BgKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNWQ3OGQyMDc1Yzc4MjA5NzlkN2JhNTBkMjViMTQyN2I2
N2Q0NTYwHhcNMjUxMDE5MTMwMTQ1WhcNMjUxMDIwMTMwMTQ1WjAzMTEwLwYDVQQD
EygzOTM1NjcyMWEzMTg1YmY2ZTVkNjBkMWQ3MWUyNTAyNWE2YTc1OGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VL93Vrh/eeLFqHf74dZeT7Ra3wA
6866ZrSBhsB5OO44oe9j5tlKooALPbTjZ4aqSQTDgbK4RRSgd+DgrvPrnqrUq8vA
C0XmtpJ19bSyViXKhSMU52ebHOwdLNkGVJ+5GRkXMk+KOF4JIVBD2bdHG8dj+g6g
1FW3cDOBTwYzV08ucQc+ubm76En4iTA32gzG+vFCvxSqFB3AJ7vyVR2/9zr7l71G
vmYZwm/o3sC3KMRDjVftrXC9/aPbR28zEwomeS2BTVeqRSH32kgIfXbC6NAPF13+
JrTZBkjYC+CB9GpT14WpqRQjxW/rwL4k+lxGd9GimHbUULN5BzKHN6ilUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDk1ZyGjGFv25dYNHXHiUCWmp1jZMB8GA1UdIwQY
MBaAFDBdeNIHXHggl517pQ0lsUJ7Z9RWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUYxNDBnZGNlQ0NYblh1bERTV3hRbnRuMUZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9jNzE1NmEtOGZlYi00MzllLWE4OGYt
MDg2YzRlYTFkOGNhLzEvTUYxNDBnZGNlQ0NYblh1bERTV3hRbnRuMUZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9jNzE1NmEtOGZlYi00MzllLWE4OGYtMDg2YzRlYTFkOGNh
LzEvTUYxNDBnZGNlQ0NYblh1bERTV3hRbnRuMUZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEUMmmQUB
zH8LvO9OE0mISMxxeInK1aNbtioemeJGiS/s9MBIQDQKqIvZSp80BUs81f9KnEsY
KtRq3Emeqop4YrlkLoxKqN69fh4qhOufx/2gaTsbDdOA+GgydP8dHrINjbIwX7N2
6zh4YfnMdTU6oh2qPObd0AwXIi7uMdyKipm/0K+Vn5arbXIwI60TlmkSg392KwUB
l26lEyNJnQpf329DNhsjjssmMk3/YCkFUGKBUVErP0ZdEUA+n2i97xjbO6G/MsNP
H/VHrPBx73vfp286ybQbP0msZmjE3kSbAPy1MHIqZsukv98VQSOKjxbGJJLfLJXV
Y+wJac+HabGE5w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:57 2025 by rpki-client