
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft
File: hX9MEi5PjGAfIcXIaHFtRgidheE.mft (raw, json)
Hash identifier: 1LA4abU8C0OLAgXBuNAOy9zAjUJxlhzRItTK3OWuNLY=
Subject key identifier: F5:3E:9B:76:E8:29:8F:27:51:3F:8E:AC:D5:FA:FB:DE:F7:FC:B1:46
Authority key identifier: 85:7F:4C:12:2E:4F:8C:60:1F:21:C5:C8:68:71:6D:46:08:9D:85:E1
Certificate issuer: /CN=857f4c122e4f8c601f21c5c868716d46089d85e1
Certificate serial: 019A06A42B2BBBC3FEC1F077CB92729FB09D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hX9MEi5PjGAfIcXIaHFtRgidheE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft
Manifest number: 0BAF
Signing time: Tue 21 Oct 2025 12:00:13 +0000
Manifest this update: Tue 21 Oct 2025 12:00:13 +0000
Manifest next update: Wed 22 Oct 2025 12:00:13 +0000
Files and hashes: 1: hX9MEi5PjGAfIcXIaHFtRgidheE.crl (hash: tbdzMHFVxHWiXIuPh0izA0MJWB6s+RCYsp1eLhEeDFU=)
2: wypxlBc1J8Bpx8wsCukzLkT7CzM.roa (hash: VSR04yRc8P3tg6W5nBtOO4BrNXPIDW2s4T0F9VJBzcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hX9MEi5PjGAfIcXIaHFtRgidheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 12:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:06:a4:2b:2b:bb:c3:fe:c1:f0:77:cb:92:72:9f:b0:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=857f4c122e4f8c601f21c5c868716d46089d85e1
Validity
Not Before: Oct 21 12:00:13 2025 GMT
Not After : Oct 22 12:00:13 2025 GMT
Subject: CN=f53e9b76e8298f27513f8eacd5fafbdef7fcb146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7b:1d:b7:50:03:e0:13:e2:8e:61:cd:e8:75:
b4:70:89:78:d3:20:c2:fe:b2:5b:0e:1d:27:f8:30:
40:37:cf:67:e9:79:2b:a6:60:47:fa:cb:f4:76:77:
67:f2:6e:c7:2e:e2:6d:11:76:65:de:e6:b0:37:f9:
18:aa:fd:53:c2:4b:16:c7:e3:1b:df:73:b3:a8:03:
ba:c7:3f:b7:fd:f4:e4:1f:b3:fc:e7:81:db:e4:bd:
bc:bf:f8:83:79:e3:70:f8:20:e3:67:53:42:c0:c3:
35:e3:c0:57:18:6f:01:57:cb:4e:60:3b:32:93:f8:
50:21:a7:c1:75:5b:3b:2e:a2:d3:27:1c:55:c9:90:
a2:d5:0a:15:9c:cd:f7:97:ae:18:d9:43:76:0b:02:
dc:09:c0:d8:20:77:54:58:03:60:22:34:38:a9:cd:
07:05:cc:a3:cb:4d:41:41:bb:07:d6:2b:9c:e1:0c:
e3:7d:2e:93:f2:51:b1:52:77:c7:ff:ac:75:cb:72:
0a:db:65:77:fe:ee:09:cb:92:05:90:38:2e:3a:ed:
75:9c:da:49:1b:a5:96:81:82:96:ad:8f:f1:cd:31:
c4:4c:34:d1:5c:a7:93:f4:d2:82:54:a5:18:34:22:
c7:ea:91:92:ae:7a:41:5b:a0:53:97:0c:7a:ed:7d:
79:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:3E:9B:76:E8:29:8F:27:51:3F:8E:AC:D5:FA:FB:DE:F7:FC:B1:46
X509v3 Authority Key Identifier:
keyid:85:7F:4C:12:2E:4F:8C:60:1F:21:C5:C8:68:71:6D:46:08:9D:85:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hX9MEi5PjGAfIcXIaHFtRgidheE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:39:75:8a:e9:70:9e:3b:c7:08:41:62:07:b5:58:42:cf:35:
a3:5d:16:90:20:68:88:46:4d:7d:af:86:93:7c:a8:02:ad:7f:
50:e8:4b:47:f8:27:f0:63:76:7c:bb:8a:76:73:a4:10:11:aa:
bd:4c:e3:17:6a:db:7a:12:97:32:50:52:c7:e3:d6:d2:af:c8:
fa:c4:85:9b:35:14:38:bc:c1:65:9d:04:2d:b7:50:77:7b:62:
02:30:f9:4f:86:1c:e2:50:e8:80:d3:1c:61:50:60:47:47:9e:
53:e9:0a:a5:91:8b:5b:71:20:7f:42:9c:45:a8:9a:f3:f3:ea:
b2:81:7f:4d:68:24:10:a1:e9:04:1b:bc:1e:5c:1e:08:5d:b9:
d3:ce:c9:d8:f0:e3:7b:14:9e:b8:ed:a0:05:d2:b4:a1:57:d8:
17:e9:69:f0:9d:e0:66:3e:a9:32:b1:8f:da:e1:d7:c3:49:8e:
50:c5:f0:ee:da:37:14:00:51:93:bf:ac:29:92:66:de:0c:cf:
65:6e:9e:17:57:6b:42:e4:6a:a3:7d:cf:1b:32:eb:11:cd:bc:
b1:62:29:68:65:f2:cf:42:e2:d5:c2:5a:fb:55:d9:63:f8:13:
18:40:f5:15:3c:28:6b:6c:b0:0e:cf:ee:7d:25:1e:26:90:a2:
c2:c7:5a:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoGpCsru8P+wfB3y5Jyn7CdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1N2Y0YzEyMmU0ZjhjNjAxZjIxYzVjODY4NzE2ZDQ2MDg5
ZDg1ZTEwHhcNMjUxMDIxMTIwMDEzWhcNMjUxMDIyMTIwMDEzWjAzMTEwLwYDVQQD
EyhmNTNlOWI3NmU4Mjk4ZjI3NTEzZjhlYWNkNWZhZmJkZWY3ZmNiMTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3sdt1AD4BPijmHN6HW0cIl40yDC
/rJbDh0n+DBAN89n6XkrpmBH+sv0dndn8m7HLuJtEXZl3uawN/kYqv1TwksWx+Mb
33OzqAO6xz+3/fTkH7P854Hb5L28v/iDeeNw+CDjZ1NCwMM148BXGG8BV8tOYDsy
k/hQIafBdVs7LqLTJxxVyZCi1QoVnM33l64Y2UN2CwLcCcDYIHdUWANgIjQ4qc0H
Bcyjy01BQbsH1iuc4QzjfS6T8lGxUnfH/6x1y3IK22V3/u4Jy5IFkDguOu11nNpJ
G6WWgYKWrY/xzTHETDTRXKeT9NKCVKUYNCLH6pGSrnpBW6BTlwx67X15DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPU+m3boKY8nUT+OrNX6+973/LFGMB8GA1UdIwQY
MBaAFIV/TBIuT4xgHyHFyGhxbUYInYXhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFg5TUVpNVBqR0FmSWNYSWFIRnRSZ2lkaGVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85NjE5MzktYWM4ZS00ZDEyLWIxMmYt
ZGE1Y2IwZmIxOWU3LzEvaFg5TUVpNVBqR0FmSWNYSWFIRnRSZ2lkaGVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi85NjE5MzktYWM4ZS00ZDEyLWIxMmYtZGE1Y2IwZmIxOWU3
LzEvaFg5TUVpNVBqR0FmSWNYSWFIRnRSZ2lkaGVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkTl1iulw
njvHCEFiB7VYQs81o10WkCBoiEZNfa+Gk3yoAq1/UOhLR/gn8GN2fLuKdnOkEBGq
vUzjF2rbehKXMlBSx+PW0q/I+sSFmzUUOLzBZZ0ELbdQd3tiAjD5T4Yc4lDogNMc
YVBgR0eeU+kKpZGLW3Egf0KcRaia8/PqsoF/TWgkEKHpBBu8HlweCF25087J2PDj
exSeuO2gBdK0oVfYF+lp8J3gZj6pMrGP2uHXw0mOUMXw7to3FABRk7+sKZJm3gzP
ZW6eF1drQuRqo33PGzLrEc28sWIpaGXyz0Li1cJa+1XZY/gTGED1FTwoa2ywDs/u
fSUeJpCiwsda9w==
-----END CERTIFICATE-----
Generated at Tue Oct 21 16:05:59 2025 by rpki-client