
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
File: CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft (raw, json)
Hash identifier: hqEEQ4+yFJHtyZVls7Dx7kh9NXj8QDzyRCinyhza+7Q=
Subject key identifier: 0D:B6:A9:62:BF:E3:2F:B8:43:67:45:DB:E8:10:25:CC:B2:D0:5E:8F
Authority key identifier: 09:6E:29:3B:A3:80:DC:C7:5F:00:10:64:43:66:8F:51:00:25:55:B7
Certificate issuer: /CN=096e293ba380dcc75f00106443668f51002555b7
Certificate serial: 0199FBEAC971CC6A8CC55FFF43AA1C64BC83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 10:01:32 +0000
Manifest this update: Sun 19 Oct 2025 10:01:32 +0000
Manifest next update: Mon 20 Oct 2025 10:01:32 +0000
Files and hashes: 1: 2137GkYhKriIsKTcyKMgkP9brCg.roa (hash: /7cteLANHoZOiqVgusN3Dqohbx1yk5x8PXrJnu2i8Fs=)
2: CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl (hash: 7msSq8qJXdCTNUVvF+IZ0sShqEeNJT6lhnSsSObuG7k=)
3: hBvLKP5ixrQ0yB2qI1fJnI3xUfo.roa (hash: i0IaWEblK+pRuW5nqjbRL2Vkq0LREWGYkXklug1G2BI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:c9:71:cc:6a:8c:c5:5f:ff:43:aa:1c:64:bc:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=096e293ba380dcc75f00106443668f51002555b7
Validity
Not Before: Oct 19 10:01:32 2025 GMT
Not After : Oct 20 10:01:32 2025 GMT
Subject: CN=0db6a962bfe32fb8436745dbe81025ccb2d05e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:de:c9:63:b1:1b:b0:23:bc:43:01:56:8f:3d:
22:0c:08:b5:0e:fd:e0:69:f2:a0:12:be:c2:4e:a6:
97:3e:78:35:bf:e8:ce:f4:1d:20:51:68:17:37:50:
29:39:6e:ba:fa:13:46:74:51:16:19:9b:65:08:32:
ef:37:bb:fd:9b:a4:0c:05:17:40:af:1c:e4:23:dc:
75:2e:7a:24:ea:04:e8:7d:e4:29:dd:02:82:49:ef:
2a:30:34:bd:08:e2:4a:3a:4d:33:47:2d:b2:20:35:
f1:76:64:d3:7a:26:27:b7:98:7a:5f:c1:93:d1:cf:
03:35:0f:d5:a4:60:d1:f4:c4:90:16:ef:34:46:e4:
82:bf:42:73:d2:8e:a2:43:2d:1e:de:25:e5:80:0e:
70:56:0c:dd:86:ce:b9:ba:19:7a:f0:b7:75:5c:f7:
57:24:4b:9c:b6:92:e5:5e:ff:fc:96:9c:9c:b8:2b:
2c:65:fc:37:b4:dd:ec:b8:87:c1:01:dd:22:23:bc:
f4:cc:bd:41:0c:df:2d:4d:2f:33:76:4d:5d:05:34:
bd:cf:a4:c3:77:3f:56:4e:42:0c:7d:d9:18:f6:29:
cd:4a:3f:7a:6c:17:c9:aa:9e:82:42:50:be:c0:38:
d8:39:88:4c:ad:65:1b:28:02:77:d0:be:19:bc:09:
74:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B6:A9:62:BF:E3:2F:B8:43:67:45:DB:E8:10:25:CC:B2:D0:5E:8F
X509v3 Authority Key Identifier:
keyid:09:6E:29:3B:A3:80:DC:C7:5F:00:10:64:43:66:8F:51:00:25:55:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:d3:5f:2a:e9:4a:8f:d3:a5:97:c4:77:2b:15:be:bd:31:17:
63:39:ae:8d:27:e4:b2:e9:29:60:9d:db:5c:c4:6b:c0:98:49:
c9:60:c2:cb:fb:43:75:7f:e0:94:8e:65:cd:16:69:55:17:db:
03:d9:ad:cd:27:ac:b4:c2:c3:bd:a6:01:09:b8:ab:a1:d2:7a:
15:5b:cf:74:c5:bb:14:82:ec:1f:0d:f9:88:fd:5a:7c:8d:5d:
7f:3e:72:68:a3:8f:73:8b:f4:bf:12:eb:e4:5d:46:87:23:d6:
6c:c5:0e:aa:73:3d:12:01:dc:9b:73:b6:07:08:93:03:96:b4:
21:ec:90:29:12:f4:72:1d:d9:80:da:e5:c8:55:71:49:cb:67:
91:d7:cc:09:4c:fc:61:ef:59:59:2f:0a:63:a7:4e:6a:0a:fd:
e0:b2:1f:21:73:f5:3f:9e:fb:38:3d:68:ec:2e:56:55:2b:4f:
e8:0d:72:79:c1:b4:3f:a5:55:ef:c1:25:1f:14:cf:24:d1:af:
34:d8:84:0c:aa:bd:26:09:44:18:bd:9d:c5:49:37:80:8f:0f:
e9:e0:6a:4b:79:34:91:80:ef:45:c2:20:86:b3:7e:d8:47:e7:
df:69:96:f9:38:b7:62:a9:14:e1:c6:e9:a3:6c:be:ea:47:f2:
c2:00:45:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76slxzGqMxV//Q6ocZLyDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NmUyOTNiYTM4MGRjYzc1ZjAwMTA2NDQzNjY4ZjUxMDAy
NTU1YjcwHhcNMjUxMDE5MTAwMTMyWhcNMjUxMDIwMTAwMTMyWjAzMTEwLwYDVQQD
EygwZGI2YTk2MmJmZTMyZmI4NDM2NzQ1ZGJlODEwMjVjY2IyZDA1ZThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsd7JY7EbsCO8QwFWjz0iDAi1Dv3g
afKgEr7CTqaXPng1v+jO9B0gUWgXN1ApOW66+hNGdFEWGZtlCDLvN7v9m6QMBRdA
rxzkI9x1Lnok6gTofeQp3QKCSe8qMDS9COJKOk0zRy2yIDXxdmTTeiYnt5h6X8GT
0c8DNQ/VpGDR9MSQFu80RuSCv0Jz0o6iQy0e3iXlgA5wVgzdhs65uhl68Ld1XPdX
JEuctpLlXv/8lpycuCssZfw3tN3suIfBAd0iI7z0zL1BDN8tTS8zdk1dBTS9z6TD
dz9WTkIMfdkY9inNSj96bBfJqp6CQlC+wDjYOYhMrWUbKAJ30L4ZvAl08QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA22qWK/4y+4Q2dF2+gQJcyy0F6PMB8GA1UdIwQY
MBaAFAluKTujgNzHXwAQZENmj1EAJVW3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1c0cE82T0EzTWRmQUJCa1EyYVBVUUFsVmJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9iZGFlYjctNTJkNS00OWZmLTlhNGIt
ZGYwNWQ0ODlkYTE3LzEvQ1c0cE82T0EzTWRmQUJCa1EyYVBVUUFsVmJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9iZGFlYjctNTJkNS00OWZmLTlhNGItZGYwNWQ0ODlkYTE3
LzEvQ1c0cE82T0EzTWRmQUJCa1EyYVBVUUFsVmJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgdNfKulK
j9Oll8R3KxW+vTEXYzmujSfksukpYJ3bXMRrwJhJyWDCy/tDdX/glI5lzRZpVRfb
A9mtzSestMLDvaYBCbirodJ6FVvPdMW7FILsHw35iP1afI1dfz5yaKOPc4v0vxLr
5F1GhyPWbMUOqnM9EgHcm3O2BwiTA5a0IeyQKRL0ch3ZgNrlyFVxSctnkdfMCUz8
Ye9ZWS8KY6dOagr94LIfIXP1P577OD1o7C5WVStP6A1yecG0P6VV78ElHxTPJNGv
NNiEDKq9JglEGL2dxUk3gI8P6eBqS3k0kYDvRcIghrN+2Efn32mW+Ti3YqkU4cbp
o2y+6kfywgBFCg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:58 2025 by rpki-client