
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft
File: Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft (raw, json)
Hash identifier: bj20ZRbnLMJZwnx2W/XNtNZBjN1utWzeoZK7T2NM6xU=
Subject key identifier: 32:40:A5:ED:DA:50:7E:FA:00:FD:61:D7:64:E9:36:61:1D:95:EF:82
Authority key identifier: 1D:AF:46:A4:0C:24:6D:65:40:D9:92:C3:21:B1:CC:36:23:D6:59:95
Certificate issuer: /CN=1daf46a40c246d6540d992c321b1cc3623d65995
Certificate serial: 0199FB7CFA4CA206EA84BA55C278208F2C3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 08:01:35 +0000
Manifest this update: Sun 19 Oct 2025 08:01:35 +0000
Manifest next update: Mon 20 Oct 2025 08:01:35 +0000
Files and hashes: 1: BVP4OCAjXeBuYLTryI3p58Cue9E.roa (hash: GynK6g284SA7T19UvRRdioOJG3DySiSaR/JNDB0lXJg=)
2: Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.crl (hash: EmtDahAnp/UfubKTq03FfjsmnnJwXSXNilV3a0S9Qss=)
3: cakGt0BPf0eiXSoum2ks2bU2JjU.roa (hash: SdKj2O/1M+1PiGNRUnkBd4BW4j8l343Ya8DxtNwWNfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:fa:4c:a2:06:ea:84:ba:55:c2:78:20:8f:2c:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1daf46a40c246d6540d992c321b1cc3623d65995
Validity
Not Before: Oct 19 08:01:35 2025 GMT
Not After : Oct 20 08:01:35 2025 GMT
Subject: CN=3240a5edda507efa00fd61d764e936611d95ef82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e4:18:42:1d:d5:0a:1d:88:f7:0d:77:14:71:
68:d5:49:00:a8:86:25:38:f4:83:dd:06:9e:fa:51:
86:b6:43:df:23:6c:4b:a9:68:ee:14:97:2e:69:9e:
27:78:dc:ab:67:7d:57:7a:b2:b9:9b:dc:bb:1f:5b:
1f:c7:aa:d5:e6:92:42:d0:47:65:06:cd:12:1b:29:
43:47:21:f4:2f:e0:4d:e2:95:3b:e5:8b:1f:01:8b:
92:3b:94:5a:e9:38:d1:0f:90:d5:a0:bc:c0:ec:0f:
de:e1:96:ad:e2:28:90:3b:cf:75:ff:2b:dd:fa:03:
94:d3:16:54:b9:cd:ce:8e:b0:5d:69:73:ee:ba:6e:
3c:81:9d:f7:d3:a5:ab:f2:60:85:61:3a:30:ae:9b:
4f:d6:df:13:2e:92:6b:a9:b5:33:54:5f:e8:94:57:
80:08:1f:46:f4:6f:49:e1:18:0a:0c:dc:0f:ca:ac:
19:fd:12:fa:18:18:66:75:7e:f4:f0:0b:6c:86:37:
c8:d2:e6:4a:70:74:9b:bc:c9:df:54:11:a9:8c:fa:
24:a4:6b:4d:3b:1d:ba:9a:7d:a5:b3:bc:da:be:46:
5c:c8:50:89:5c:5c:66:68:59:42:b3:ff:cc:66:cc:
95:a5:25:98:25:3c:7a:78:2d:ec:82:0e:ac:6f:4f:
3d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:40:A5:ED:DA:50:7E:FA:00:FD:61:D7:64:E9:36:61:1D:95:EF:82
X509v3 Authority Key Identifier:
keyid:1D:AF:46:A4:0C:24:6D:65:40:D9:92:C3:21:B1:CC:36:23:D6:59:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:8d:71:05:48:36:95:87:50:e2:a1:2f:d7:18:9f:cd:1e:1a:
83:2c:ce:b7:56:7c:21:27:ac:83:7a:56:a6:85:ec:f7:94:88:
5d:1b:5d:14:49:bc:f5:b8:5a:44:1f:f4:67:29:48:85:04:6e:
2d:4e:50:fb:d9:df:c8:fb:84:a3:54:49:34:2c:ce:c1:be:79:
ab:b2:ef:0c:ba:53:8e:76:0d:d1:79:e2:a4:65:6e:2d:50:ba:
f3:53:ff:f9:ae:5b:d8:2d:d6:58:8c:cf:f9:a8:f3:ae:4b:87:
da:12:c6:15:f9:94:f6:97:12:a7:ff:e5:8d:77:24:6b:89:60:
d4:e9:bb:c6:78:27:21:ab:23:45:31:7e:40:3b:b5:e6:62:41:
cc:6e:cf:5a:3a:e4:6a:e1:e2:1f:e7:51:b2:ae:09:0f:a7:c1:
77:4c:2a:de:8d:5c:58:da:ec:b0:20:f2:27:75:a2:30:2c:09:
db:c0:b2:76:f2:de:6b:1f:cb:61:05:20:09:8a:b0:1b:3a:22:
78:c3:ec:b5:52:09:ef:94:67:1d:6c:cc:14:57:ca:16:b7:28:
54:85:fd:a5:42:3f:74:36:03:e2:93:89:ae:38:37:c1:c0:29:
53:fc:22:42:69:d2:b2:61:a4:15:9e:fb:c0:53:b5:e8:86:4c:
a5:55:ee:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fPpMogbqhLpVwnggjyw6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkYWY0NmE0MGMyNDZkNjU0MGQ5OTJjMzIxYjFjYzM2MjNk
NjU5OTUwHhcNMjUxMDE5MDgwMTM1WhcNMjUxMDIwMDgwMTM1WjAzMTEwLwYDVQQD
EygzMjQwYTVlZGRhNTA3ZWZhMDBmZDYxZDc2NGU5MzY2MTFkOTVlZjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+QYQh3VCh2I9w13FHFo1UkAqIYl
OPSD3Qae+lGGtkPfI2xLqWjuFJcuaZ4neNyrZ31XerK5m9y7H1sfx6rV5pJC0Edl
Bs0SGylDRyH0L+BN4pU75YsfAYuSO5Ra6TjRD5DVoLzA7A/e4Zat4iiQO891/yvd
+gOU0xZUuc3OjrBdaXPuum48gZ3306Wr8mCFYTowrptP1t8TLpJrqbUzVF/olFeA
CB9G9G9J4RgKDNwPyqwZ/RL6GBhmdX708AtshjfI0uZKcHSbvMnfVBGpjPokpGtN
Ox26mn2ls7zavkZcyFCJXFxmaFlCs//MZsyVpSWYJTx6eC3sgg6sb089rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJApe3aUH76AP1h12TpNmEdle+CMB8GA1UdIwQY
MBaAFB2vRqQMJG1lQNmSwyGxzDYj1lmVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGE5R3BBd2tiV1ZBMlpMREliSE1OaVBXV1pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS80NGMwZWYtNWRhNi00ZmYyLWI1ZWYt
NzlmMDQ4YmQyYTdhLzEvSGE5R3BBd2tiV1ZBMlpMREliSE1OaVBXV1pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS80NGMwZWYtNWRhNi00ZmYyLWI1ZWYtNzlmMDQ4YmQyYTdh
LzEvSGE5R3BBd2tiV1ZBMlpMREliSE1OaVBXV1pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATI1xBUg2
lYdQ4qEv1xifzR4agyzOt1Z8ISesg3pWpoXs95SIXRtdFEm89bhaRB/0ZylIhQRu
LU5Q+9nfyPuEo1RJNCzOwb55q7LvDLpTjnYN0XnipGVuLVC681P/+a5b2C3WWIzP
+ajzrkuH2hLGFfmU9pcSp//ljXcka4lg1Om7xngnIasjRTF+QDu15mJBzG7PWjrk
auHiH+dRsq4JD6fBd0wq3o1cWNrssCDyJ3WiMCwJ28CydvLeax/LYQUgCYqwGzoi
eMPstVIJ75RnHWzMFFfKFrcoVIX9pUI/dDYD4pOJrjg3wcApU/wiQmnSsmGkFZ77
wFO16IZMpVXunw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:32 2025 by rpki-client