Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.mft
File: hTodtQq3cdy1KTZ92VGmfKzEhSc.mft (raw, json)
Hash identifier: QmVuJZ96GPMTJ85V9PeSuP2DKGjD1heoLP1xs3EyII0=
Subject key identifier: 3C:27:55:4F:EF:6B:4F:61:02:79:AD:F8:2D:75:24:1C:43:E1:25:8E
Authority key identifier: 85:3A:1D:B5:0A:B7:71:DC:B5:29:36:7D:D9:51:A6:7C:AC:C4:85:27
Certificate issuer: /CN=853a1db50ab771dcb529367dd951a67cacc48527
Certificate serial: 0199FAA10A7B49E695B0BD525D78553AA338
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTodtQq3cdy1KTZ92VGmfKzEhSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 04:01:21 +0000
Manifest this update: Sun 19 Oct 2025 04:01:21 +0000
Manifest next update: Mon 20 Oct 2025 04:01:21 +0000
Files and hashes: 1: KFxs769oKYSlN9E-IJj7uVI5-Jk.roa (hash: oeJ8lNpcZ8slOJ+v6lew9m45/w6Rj6vHO1zS6reB6dA=)
2: hTodtQq3cdy1KTZ92VGmfKzEhSc.crl (hash: kuJGjZlhW3DNqkuvjvf73RJN8MS2QDnZ7uGSlh3PTgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hTodtQq3cdy1KTZ92VGmfKzEhSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a1:0a:7b:49:e6:95:b0:bd:52:5d:78:55:3a:a3:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=853a1db50ab771dcb529367dd951a67cacc48527
Validity
Not Before: Oct 19 04:01:21 2025 GMT
Not After : Oct 20 04:01:21 2025 GMT
Subject: CN=3c27554fef6b4f610279adf82d75241c43e1258e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:64:4d:cf:cc:2d:20:57:52:65:01:ab:d8:e6:
34:1c:99:c0:19:4d:6c:e3:80:34:f8:64:bc:d5:cf:
a4:8c:10:f3:83:48:f9:3d:02:63:a0:52:57:35:fe:
8f:4f:58:69:b9:d3:61:79:48:01:20:e9:34:d6:6f:
07:cc:12:9e:b0:fe:a8:c8:ef:25:e7:a9:20:1a:2a:
4f:dd:10:42:86:53:5c:a8:27:5b:d2:28:36:59:03:
ce:ab:84:90:54:dd:84:2a:90:f0:4c:0e:96:fc:2a:
37:6e:b9:e9:f3:54:46:cf:df:d0:f7:79:78:ab:f7:
28:45:7c:5e:fb:99:e2:7b:62:88:e3:d0:e8:d7:f6:
63:23:6c:b9:b9:f1:3f:15:bc:1d:5c:78:a1:b0:a3:
59:b0:96:43:b6:3d:a1:f2:4e:c7:58:24:30:86:d3:
7a:a7:44:0a:27:02:b8:5c:0c:b8:a5:65:d8:23:5a:
18:a3:0d:e5:f7:fb:26:ef:fe:bb:53:6e:e8:e1:3d:
a1:bd:9f:ae:d6:cd:aa:20:23:5e:ec:47:75:3a:3d:
29:99:73:8f:c8:4d:5f:e9:e6:41:83:7f:08:cc:29:
7c:c1:06:03:b1:87:47:5f:fd:c9:19:d7:3d:e5:0e:
78:0f:ce:9a:ec:79:e9:ca:bf:92:75:3c:6e:40:c9:
5b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:27:55:4F:EF:6B:4F:61:02:79:AD:F8:2D:75:24:1C:43:E1:25:8E
X509v3 Authority Key Identifier:
keyid:85:3A:1D:B5:0A:B7:71:DC:B5:29:36:7D:D9:51:A6:7C:AC:C4:85:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTodtQq3cdy1KTZ92VGmfKzEhSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:9c:73:90:01:0a:dd:83:82:37:f8:19:a4:05:ea:5c:6c:68:
76:a1:2a:02:94:24:3e:a8:f5:89:28:f3:4a:8d:87:27:b7:23:
2c:e7:9c:6c:0b:2c:92:23:9b:2a:5f:0a:bc:e9:9f:38:3b:2e:
6f:78:9e:a2:33:85:03:54:85:29:f6:50:27:2f:3a:54:d3:58:
9a:74:ba:8d:7f:39:a7:e7:54:27:3c:f8:2d:2f:5d:35:df:b7:
a0:df:84:b1:52:9c:5f:8d:c2:a2:26:55:d3:84:f9:c1:a9:73:
85:14:b7:b6:69:95:50:00:77:56:06:fc:2f:cd:88:af:01:63:
ee:00:a0:06:23:e0:9f:04:0f:42:72:bf:ea:df:2e:fc:97:09:
49:c7:d5:17:36:9f:3b:ff:2e:0f:52:5b:d6:ef:aa:8b:81:27:
33:e9:c0:f9:86:b3:52:82:ca:13:6f:4c:1b:c1:2b:db:da:dc:
9b:0f:fd:1f:1c:71:c5:53:20:96:9d:94:8b:28:2b:68:b5:e6:
cf:aa:37:4f:4f:97:ac:0c:54:5b:52:c2:4e:86:be:fb:b9:2e:
b4:7d:ae:89:fe:2b:fe:5b:ef:7e:85:0b:92:82:af:6e:08:72:
29:63:0a:59:28:7c:84:48:06:13:60:81:88:ee:90:48:d2:46:
51:de:ac:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn6oQp7SeaVsL1SXXhVOqM4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1M2ExZGI1MGFiNzcxZGNiNTI5MzY3ZGQ5NTFhNjdjYWNj
NDg1MjcwHhcNMjUxMDE5MDQwMTIxWhcNMjUxMDIwMDQwMTIxWjAzMTEwLwYDVQQD
EygzYzI3NTU0ZmVmNmI0ZjYxMDI3OWFkZjgyZDc1MjQxYzQzZTEyNThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5GRNz8wtIFdSZQGr2OY0HJnAGU1s
44A0+GS81c+kjBDzg0j5PQJjoFJXNf6PT1hpudNheUgBIOk01m8HzBKesP6oyO8l
56kgGipP3RBChlNcqCdb0ig2WQPOq4SQVN2EKpDwTA6W/Co3brnp81RGz9/Q93l4
q/coRXxe+5nie2KI49Do1/ZjI2y5ufE/FbwdXHihsKNZsJZDtj2h8k7HWCQwhtN6
p0QKJwK4XAy4pWXYI1oYow3l9/sm7/67U27o4T2hvZ+u1s2qICNe7Ed1Oj0pmXOP
yE1f6eZBg38IzCl8wQYDsYdHX/3JGdc95Q54D86a7Hnpyr+SdTxuQMlb3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDwnVU/va09hAnmt+C11JBxD4SWOMB8GA1UdIwQY
MBaAFIU6HbUKt3HctSk2fdlRpnysxIUnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFRvZHRRcTNjZHkxS1RaOTJWR21mS3pFaFNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9kYzY2ZjMtOGFjOS00MWI5LThlYjgt
NzcyOTVjOWNlODY2LzEvaFRvZHRRcTNjZHkxS1RaOTJWR21mS3pFaFNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9kYzY2ZjMtOGFjOS00MWI5LThlYjgtNzcyOTVjOWNlODY2
LzEvaFRvZHRRcTNjZHkxS1RaOTJWR21mS3pFaFNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADJxzkAEK
3YOCN/gZpAXqXGxodqEqApQkPqj1iSjzSo2HJ7cjLOecbAsskiObKl8KvOmfODsu
b3ieojOFA1SFKfZQJy86VNNYmnS6jX85p+dUJzz4LS9dNd+3oN+EsVKcX43CoiZV
04T5walzhRS3tmmVUAB3Vgb8L82IrwFj7gCgBiPgnwQPQnK/6t8u/JcJScfVFzaf
O/8uD1Jb1u+qi4EnM+nA+YazUoLKE29MG8Er29rcmw/9HxxxxVMglp2UiygraLXm
z6o3T0+XrAxUW1LCToa++7kutH2uif4r/lvvfoULkoKvbghyKWMKWSh8hEgGE2CB
iO6QSNJGUd6srg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:00 2025 by rpki-client