
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
File: aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft (raw, json)
Hash identifier: quX1C8Y3zNHULXLhuzoBb4C+/IgG0grjeQAbkzf5X54=
Subject key identifier: 87:C6:2F:F7:CB:80:FF:9F:AC:9C:95:E6:D7:54:CD:B5:B8:A9:88:B0
Authority key identifier: 68:B2:2E:EA:4A:4A:3B:81:65:4A:22:7E:DA:94:E0:E7:59:37:B0:15
Certificate issuer: /CN=68b22eea4a4a3b81654a227eda94e0e75937b015
Certificate serial: 0199FBEB84E4F8A75849FA5516E8D27B8385
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
Manifest number: 12AB
Signing time: Sun 19 Oct 2025 10:02:20 +0000
Manifest this update: Sun 19 Oct 2025 10:02:20 +0000
Manifest next update: Mon 20 Oct 2025 10:02:20 +0000
Files and hashes: 1: CGPoOJknrvd8SI5T8ORU1Iqt9Hc.roa (hash: hep1Wj/UUlgL43jUgR9ytYwV+6+e7lZrxraYcWtC/JE=)
2: aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl (hash: 609vqU6dxVXTKRQnsce2ravsRSJzPS3W0XLZUoDo+j4=)
3: pA69kigPY-rHAuVsRrW13R0aZeM.roa (hash: pYVfBq1JCxgc3lobgl41dLccuxJHZgCaSlieF8Jm/Tc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:84:e4:f8:a7:58:49:fa:55:16:e8:d2:7b:83:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b22eea4a4a3b81654a227eda94e0e75937b015
Validity
Not Before: Oct 19 10:02:20 2025 GMT
Not After : Oct 20 10:02:20 2025 GMT
Subject: CN=87c62ff7cb80ff9fac9c95e6d754cdb5b8a988b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:41:44:ba:16:20:f7:b6:d3:18:8c:4e:7f:aa:
29:0c:57:0f:e6:5d:b2:a9:70:79:c8:cc:d6:2a:1d:
82:1c:ce:18:ae:1a:64:df:4d:17:28:e9:f5:42:94:
c9:2b:09:8a:c1:dc:0c:3f:ed:6b:1e:3e:f8:61:cb:
9c:43:68:d5:78:1d:d8:f7:f6:12:36:be:38:de:f4:
2f:a7:a7:00:5b:53:1c:c0:3d:31:76:d5:c9:14:f5:
3d:97:6a:18:85:cf:15:31:7c:52:3b:8f:ab:0f:c8:
16:57:f0:f1:a8:26:e8:60:ea:24:fc:cd:59:fe:11:
76:bd:6c:ca:c9:7a:1e:5a:55:7a:09:cd:07:2f:a3:
63:c4:1a:e8:fd:8d:7f:7c:8e:c8:98:9c:d0:12:7d:
3c:d1:58:4d:c6:5b:00:a8:c5:64:2a:80:5c:05:43:
e6:32:82:f2:37:d8:2b:b3:b8:69:88:17:1f:ae:96:
9b:33:6c:10:5b:77:cc:96:f6:0d:37:1a:7d:0d:2c:
cb:de:68:d2:cd:c1:85:23:52:be:a7:21:25:83:5d:
fd:37:1a:f7:7b:37:d4:63:81:7a:8c:f2:c0:9d:61:
a4:59:3e:82:5d:96:e9:cb:4f:d5:40:55:74:41:f1:
52:18:50:17:eb:2a:c6:e3:40:81:ca:00:d9:51:ec:
88:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C6:2F:F7:CB:80:FF:9F:AC:9C:95:E6:D7:54:CD:B5:B8:A9:88:B0
X509v3 Authority Key Identifier:
keyid:68:B2:2E:EA:4A:4A:3B:81:65:4A:22:7E:DA:94:E0:E7:59:37:B0:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ae:b3:60:a9:1b:53:99:d5:c3:14:8e:3e:56:d5:59:9c:d0:
da:41:bf:4e:f5:00:ca:03:88:32:00:5a:81:2d:64:8a:01:b6:
57:1f:db:bd:b0:20:0d:ff:6a:e7:1a:68:35:97:7a:b3:a4:96:
7f:b8:53:47:bc:56:83:d1:cc:5d:57:fe:26:45:17:44:e1:51:
0b:d3:9a:ca:bb:3c:16:9a:51:93:b9:1d:a2:96:c3:21:c1:f9:
86:a1:c3:ae:83:bc:7d:2d:c7:dd:7f:df:e6:ce:b6:00:35:ed:
c3:58:09:95:1c:b3:6a:20:9d:58:33:80:9a:13:1e:03:1f:17:
9c:7f:e4:40:3e:24:39:86:3d:c5:be:19:d2:e7:ad:aa:db:ec:
fa:dc:82:fb:f6:6a:e6:b5:cc:92:37:eb:17:45:59:b2:87:32:
7e:f5:a3:6e:11:08:5a:5c:db:fb:71:67:17:1e:d1:e2:e9:bf:
40:3c:ce:2b:d4:10:38:dc:8d:94:c8:3c:39:9c:a2:c2:c8:a3:
e3:32:fd:23:0e:c7:eb:c6:4e:d2:2d:dc:bb:a4:b4:47:ac:0a:
47:00:c4:b8:78:81:fe:4c:7a:58:86:15:54:5c:cb:a6:10:4e:
c1:06:0b:f3:e8:48:27:22:87:4d:68:92:24:06:fc:b3:37:98:
d6:f4:ef:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn764Tk+KdYSfpVFujSe4OFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YjIyZWVhNGE0YTNiODE2NTRhMjI3ZWRhOTRlMGU3NTkz
N2IwMTUwHhcNMjUxMDE5MTAwMjIwWhcNMjUxMDIwMTAwMjIwWjAzMTEwLwYDVQQD
Eyg4N2M2MmZmN2NiODBmZjlmYWM5Yzk1ZTZkNzU0Y2RiNWI4YTk4OGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0FEuhYg97bTGIxOf6opDFcP5l2y
qXB5yMzWKh2CHM4Yrhpk300XKOn1QpTJKwmKwdwMP+1rHj74YcucQ2jVeB3Y9/YS
Nr443vQvp6cAW1McwD0xdtXJFPU9l2oYhc8VMXxSO4+rD8gWV/DxqCboYOok/M1Z
/hF2vWzKyXoeWlV6Cc0HL6NjxBro/Y1/fI7ImJzQEn080VhNxlsAqMVkKoBcBUPm
MoLyN9grs7hpiBcfrpabM2wQW3fMlvYNNxp9DSzL3mjSzcGFI1K+pyElg139Nxr3
ezfUY4F6jPLAnWGkWT6CXZbpy0/VQFV0QfFSGFAX6yrG40CBygDZUeyIdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIfGL/fLgP+frJyV5tdUzbW4qYiwMB8GA1UdIwQY
MBaAFGiyLupKSjuBZUoiftqU4OdZN7AVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUxJdTZrcEtPNEZsU2lKLTJwVGc1MWszc0JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy82OWNiYzAtYjZjNS00ZTY3LWE3M2It
MmI2NWE3YThiZThjLzEvYUxJdTZrcEtPNEZsU2lKLTJwVGc1MWszc0JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy82OWNiYzAtYjZjNS00ZTY3LWE3M2ItMmI2NWE3YThiZThj
LzEvYUxJdTZrcEtPNEZsU2lKLTJwVGc1MWszc0JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACq6zYKkb
U5nVwxSOPlbVWZzQ2kG/TvUAygOIMgBagS1kigG2Vx/bvbAgDf9q5xpoNZd6s6SW
f7hTR7xWg9HMXVf+JkUXROFRC9Oayrs8FppRk7kdopbDIcH5hqHDroO8fS3H3X/f
5s62ADXtw1gJlRyzaiCdWDOAmhMeAx8XnH/kQD4kOYY9xb4Z0uetqtvs+tyC+/Zq
5rXMkjfrF0VZsocyfvWjbhEIWlzb+3FnFx7R4um/QDzOK9QQONyNlMg8OZyiwsij
4zL9Iw7H68ZO0i3cu6S0R6wKRwDEuHiB/kx6WIYVVFzLphBOwQYL8+hIJyKHTWiS
JAb8szeY1vTvXw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:39 2025 by rpki-client