Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
File: D_z8NFoGRqfPIlkFR34hg1dIhuA.mft (raw, json)
Hash identifier: T3WR8wPHyXLYUtZScZFewu8kWWwt3lOjQ0C7ADpwh8Q=
Subject key identifier: 9E:A4:BB:04:36:AF:B7:24:13:F0:0B:9A:85:71:E7:F2:83:71:0F:06
Authority key identifier: 0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0
Certificate issuer: /CN=0ffcfc345a0646a7cf225905477e2183574886e0
Certificate serial: 0199FBEB9CB509005B1B9B24BAC6D8BCEDEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
Manifest number: 1421
Signing time: Sun 19 Oct 2025 10:02:26 +0000
Manifest this update: Sun 19 Oct 2025 10:02:26 +0000
Manifest next update: Mon 20 Oct 2025 10:02:26 +0000
Files and hashes: 1: D_z8NFoGRqfPIlkFR34hg1dIhuA.crl (hash: XzfQCV4N78sBmvQzEAjn6eV45WejnWRWNWEoQHG520o=)
2: Md8iGia1MbUzqtIWwDExWkmRVgM.roa (hash: 9TNv7T0YESkDbmJU8WmVBlvb3hJYh8sZp0R9zt0P83g=)
3: zzfWrdnIm-Z-w7o1PR68Qstk9VY.roa (hash: kTwVtQXhrNaWPZylIvh+tacEo9MdRsMxrNowU5p51wY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:9c:b5:09:00:5b:1b:9b:24:ba:c6:d8:bc:ed:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ffcfc345a0646a7cf225905477e2183574886e0
Validity
Not Before: Oct 19 10:02:26 2025 GMT
Not After : Oct 20 10:02:26 2025 GMT
Subject: CN=9ea4bb0436afb72413f00b9a8571e7f283710f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ff:d1:97:65:1c:bd:e9:02:29:c4:be:94:14:
f8:df:4a:d5:57:f0:55:bc:37:7e:26:57:65:d9:55:
b1:80:7d:48:0b:f4:31:6e:a6:b8:79:21:73:72:8f:
d3:3f:ee:d2:5e:25:fc:ff:72:e7:3c:27:f9:b2:b3:
cb:13:e1:e8:06:de:a5:28:48:a1:90:47:2c:16:31:
7f:19:50:72:35:9a:a0:fa:0d:2b:38:0d:f4:d8:6c:
df:e2:6d:40:1b:08:dd:5e:ab:9b:bd:b5:9e:fd:b2:
0d:64:c6:52:ad:5b:33:94:30:87:4f:cb:3c:5e:eb:
cc:61:65:8c:4d:68:c7:ba:45:9f:af:f6:b9:39:fb:
0f:91:38:b7:07:03:be:82:62:bc:f6:cc:81:b8:0e:
d5:7d:18:ed:c2:00:67:73:d2:02:b6:52:ef:96:86:
35:56:0d:65:82:3f:e5:5f:3d:bd:4d:1a:a7:6a:fd:
d5:9c:70:61:ae:38:f6:8e:ca:55:b2:5c:e7:b2:63:
9f:10:7b:2f:5f:18:94:99:32:12:fd:0e:6a:53:72:
69:62:4f:b0:0e:62:a8:86:a0:65:55:00:a1:79:b4:
29:02:f5:1a:58:8b:b9:96:dd:90:c5:68:08:2d:0a:
7a:cf:6c:cd:0c:7b:2c:c7:84:1d:b5:c1:30:bc:10:
15:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A4:BB:04:36:AF:B7:24:13:F0:0B:9A:85:71:E7:F2:83:71:0F:06
X509v3 Authority Key Identifier:
keyid:0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:b1:25:1f:80:ee:67:d5:55:35:1e:08:2d:cb:9e:37:86:2f:
29:d4:c7:f9:e2:88:d3:b9:02:eb:f2:26:1c:4b:72:64:e2:a2:
8b:36:49:fa:63:9b:54:d4:cb:cd:38:f7:36:cd:b7:09:da:e9:
23:ca:20:53:ec:2b:05:d7:30:f4:43:45:5e:28:85:0a:92:db:
9a:d5:59:5f:d7:18:eb:3c:55:0d:ab:aa:9a:5c:ba:88:68:83:
0b:9e:73:fb:db:67:b7:9a:02:85:ff:fc:dd:df:8d:87:a4:c3:
5b:96:63:0d:10:35:85:91:7f:b5:c9:f3:34:c7:33:fe:fa:89:
cf:91:9a:a9:93:e4:2b:bc:e4:8c:80:b5:72:1e:a3:14:3e:76:
87:e7:99:26:52:3e:24:e5:69:41:3e:9e:5d:4a:21:ee:90:a9:
1b:d0:47:5c:cc:b4:ab:7a:a3:f8:cc:14:1f:cf:e9:d6:f2:89:
41:90:45:ab:f5:d4:bb:e1:46:4e:9f:d8:61:f0:ed:9c:c1:f2:
5c:0e:0b:00:7e:9e:f1:55:59:a3:e1:96:1c:f8:96:5b:49:2f:
e8:3a:04:ba:a7:7c:bb:c0:b9:65:ff:e8:c3:e4:8e:e7:2f:92:
16:9b:cf:b7:81:8f:d7:a5:32:13:aa:11:80:54:cc:49:9e:7e:
4e:db:8b:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn765y1CQBbG5skusbYvO3uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZmNmYzM0NWEwNjQ2YTdjZjIyNTkwNTQ3N2UyMTgzNTc0
ODg2ZTAwHhcNMjUxMDE5MTAwMjI2WhcNMjUxMDIwMTAwMjI2WjAzMTEwLwYDVQQD
Eyg5ZWE0YmIwNDM2YWZiNzI0MTNmMDBiOWE4NTcxZTdmMjgzNzEwZjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtv/Rl2UcvekCKcS+lBT430rVV/BV
vDd+Jldl2VWxgH1IC/Qxbqa4eSFzco/TP+7SXiX8/3LnPCf5srPLE+HoBt6lKEih
kEcsFjF/GVByNZqg+g0rOA302Gzf4m1AGwjdXqubvbWe/bINZMZSrVszlDCHT8s8
XuvMYWWMTWjHukWfr/a5OfsPkTi3BwO+gmK89syBuA7VfRjtwgBnc9ICtlLvloY1
Vg1lgj/lXz29TRqnav3VnHBhrjj2jspVslznsmOfEHsvXxiUmTIS/Q5qU3JpYk+w
DmKohqBlVQChebQpAvUaWIu5lt2QxWgILQp6z2zNDHssx4QdtcEwvBAVeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ6kuwQ2r7ckE/ALmoVx5/KDcQ8GMB8GA1UdIwQY
MBaAFA/8/DRaBkanzyJZBUd+IYNXSIbgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRF96OE5Gb0dScWZQSWxrRlIzNGhnMWRJaHVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9hZjI4MmItZjU5Ny00MDdhLWJlZjUt
MTMyZjk5Y2ZhYTUzLzEvRF96OE5Gb0dScWZQSWxrRlIzNGhnMWRJaHVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9hZjI4MmItZjU5Ny00MDdhLWJlZjUtMTMyZjk5Y2ZhYTUz
LzEvRF96OE5Gb0dScWZQSWxrRlIzNGhnMWRJaHVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnLElH4Du
Z9VVNR4ILcueN4YvKdTH+eKI07kC6/ImHEtyZOKiizZJ+mObVNTLzTj3Ns23Cdrp
I8ogU+wrBdcw9ENFXiiFCpLbmtVZX9cY6zxVDauqmly6iGiDC55z+9tnt5oChf/8
3d+Nh6TDW5ZjDRA1hZF/tcnzNMcz/vqJz5GaqZPkK7zkjIC1ch6jFD52h+eZJlI+
JOVpQT6eXUoh7pCpG9BHXMy0q3qj+MwUH8/p1vKJQZBFq/XUu+FGTp/YYfDtnMHy
XA4LAH6e8VVZo+GWHPiWW0kv6DoEuqd8u8C5Zf/ow+SO5y+SFpvPt4GP16UyE6oR
gFTMSZ5+TtuLgw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:58 2025 by rpki-client