Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
File: _9v7226XXdyo9t2WjDen1VYOaR0.mft (raw, json)
Hash identifier: Ka2sKdjyloB91xR/kD4vY4UdcPGaPNLyovAvax+GA7s=
Subject key identifier: A0:E5:52:DF:88:A7:A0:13:EF:DA:99:31:EA:72:6D:99:61:82:07:BD
Authority key identifier: FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
Certificate issuer: /CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Certificate serial: 0199FB4599DE57D95B25D496A71790875C6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
Manifest number: 0683
Signing time: Sun 19 Oct 2025 07:01:06 +0000
Manifest this update: Sun 19 Oct 2025 07:01:06 +0000
Manifest next update: Mon 20 Oct 2025 07:01:06 +0000
Files and hashes: 1: A9DsFGO2ojSTU3t3H_591t6w8WI.roa (hash: gC24AHMgjd4fXEF4FVeYBDZGQOBnnQ+nj7K20zYP6Oc=)
2: JPk8qHaA0VqJJwM_cRiEk2hiNN4.roa (hash: UcrJOHgb+5M2bbcwOpZ1qAySq77AEN4vifocol3LdDU=)
3: OI1uK9LvyBYMrxZk6Wtsms4rrxQ.roa (hash: r4xm6yQr/cgOXWzX1uA52pwqnclq3721sVsfso5FXPI=)
4: RuN1CEEKgWM9o41cCPWtfZFuKKk.roa (hash: KY9kNkQ0Sz03RyPbQ91gb1ujhJwFYP1J5IWur4t9itw=)
5: XtH0htLAKG6Q5dcfnWZEaEHDokg.roa (hash: 6hipGrL8gPx/AA1jsYDtYKkvzd7jAI7crI4ZoMmJgjA=)
6: _9v7226XXdyo9t2WjDen1VYOaR0.crl (hash: bD+qY/o6vUtTFnTf8J3o3T8obDm+SNj5tUQQqJHwAVs=)
7: jEuhOWOO-QlWKQlP_vQxpSPLQb4.roa (hash: T76BJeDOcF7APO1x6/gqGhi/5iskR6Zu3KBZKjePpuU=)
8: w065yF2KMBb9aVnQ4BfNT-qmTRU.roa (hash: jJgjEmmyXXQf+/0rV+v9URt/GJe8fT1hRfQv43u3dw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:99:de:57:d9:5b:25:d4:96:a7:17:90:87:5c:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Validity
Not Before: Oct 19 07:01:06 2025 GMT
Not After : Oct 20 07:01:06 2025 GMT
Subject: CN=a0e552df88a7a013efda9931ea726d99618207bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9e:e7:70:5b:5f:d4:02:93:b8:f9:02:41:8b:
9b:74:79:14:aa:3d:27:b7:59:bd:2c:43:75:4c:42:
7f:b0:f6:87:6b:b9:27:0d:9f:38:20:ff:ee:f9:ab:
f5:33:10:d7:3e:71:87:46:2b:c0:91:0b:d3:ac:c0:
60:b7:f1:1a:26:8e:73:a6:8a:5f:b5:9e:fb:bc:47:
27:30:38:fc:07:3e:b1:19:30:76:9b:69:eb:19:fb:
52:71:f7:ae:69:a8:80:61:26:56:5b:14:e8:d8:e0:
da:42:33:0e:3f:f6:cb:c9:53:ff:dd:6c:78:df:ac:
c4:39:bc:05:2b:c2:b3:a9:ca:d0:23:8f:49:35:3c:
a3:5a:78:01:f2:d2:a8:1d:1e:fe:97:50:3d:11:f8:
3e:36:fd:d7:73:ec:82:be:9b:96:bf:78:46:10:a7:
b1:8f:86:4d:d3:20:ae:ed:43:95:9a:10:cf:8b:17:
31:07:66:03:d8:ce:f1:5a:20:52:9e:5d:14:9a:79:
95:f8:c0:84:58:3a:4d:f5:33:1d:e4:e6:da:42:a2:
1f:f0:4e:8d:a2:e1:48:7e:be:d0:e2:82:6d:aa:49:
17:32:83:a9:64:21:31:36:ea:0c:b5:30:56:6e:19:
3d:6a:58:e4:8d:2c:d9:8a:79:9c:2f:90:5f:c7:ac:
22:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:E5:52:DF:88:A7:A0:13:EF:DA:99:31:EA:72:6D:99:61:82:07:BD
X509v3 Authority Key Identifier:
keyid:FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:87:03:90:f8:54:5c:76:04:92:da:d5:46:e4:78:19:ba:3b:
f7:bd:9e:63:8d:d8:86:4b:ea:bf:83:a3:d0:10:79:35:bf:c4:
08:71:64:44:8e:ae:39:e2:f9:ae:17:0e:57:88:ae:b6:f5:ce:
16:6f:1b:c3:67:54:e8:b6:0e:1e:0c:de:09:1b:56:18:d7:a5:
b3:29:f5:70:7c:6b:13:a0:a4:50:75:10:55:63:35:3f:ce:b2:
fd:9c:4a:e4:47:55:82:72:2b:66:c0:ab:a5:45:2a:63:be:c0:
41:5b:94:f0:12:ad:d4:01:a4:88:d2:71:fc:6d:eb:cd:e8:87:
a0:10:5c:12:89:bd:c7:c4:8b:75:63:3e:82:2c:0a:dc:73:a7:
ff:00:d0:59:3a:5a:e9:99:0c:f6:93:b7:5f:2a:aa:fb:7c:d2:
68:31:6d:7a:37:eb:5d:0c:0c:d1:61:22:6f:b8:d4:c3:14:ab:
97:7d:6c:2a:89:4a:83:d2:0f:58:21:54:3b:a2:f2:87:cf:28:
67:0d:a3:0d:10:78:ed:28:03:47:45:a9:a0:93:00:a5:ab:91:
c9:92:5f:07:8f:cd:b6:cd:e4:07:f9:7d:14:c8:89:14:63:0d:
5a:cc:84:29:ce:85:a5:7a:2d:cf:51:1e:28:d4:23:51:f8:f7:
bb:a4:37:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7RZneV9lbJdSWpxeQh1xrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmZGJmYmRiNmU5NzVkZGNhOGY2ZGQ5NjhjMzdhN2Q1NTYw
ZTY5MWQwHhcNMjUxMDE5MDcwMTA2WhcNMjUxMDIwMDcwMTA2WjAzMTEwLwYDVQQD
EyhhMGU1NTJkZjg4YTdhMDEzZWZkYTk5MzFlYTcyNmQ5OTYxODIwN2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo57ncFtf1AKTuPkCQYubdHkUqj0n
t1m9LEN1TEJ/sPaHa7knDZ84IP/u+av1MxDXPnGHRivAkQvTrMBgt/EaJo5zpopf
tZ77vEcnMDj8Bz6xGTB2m2nrGftScfeuaaiAYSZWWxTo2ODaQjMOP/bLyVP/3Wx4
36zEObwFK8KzqcrQI49JNTyjWngB8tKoHR7+l1A9Efg+Nv3Xc+yCvpuWv3hGEKex
j4ZN0yCu7UOVmhDPixcxB2YD2M7xWiBSnl0UmnmV+MCEWDpN9TMd5ObaQqIf8E6N
ouFIfr7Q4oJtqkkXMoOpZCExNuoMtTBWbhk9aljkjSzZinmcL5Bfx6wiSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKDlUt+Ip6AT79qZMepybZlhgge9MB8GA1UdIwQY
MBaAFP/b+9tul13cqPbdlow3p9VWDmkdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzl2NzIyNlhYZHlvOXQyV2pEZW4xVllPYVIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi82NmZmZjMtYmZhOS00NzMyLWI0YjUt
MTk3NjlmNTc4ZWZkLzEvXzl2NzIyNlhYZHlvOXQyV2pEZW4xVllPYVIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi82NmZmZjMtYmZhOS00NzMyLWI0YjUtMTk3NjlmNTc4ZWZk
LzEvXzl2NzIyNlhYZHlvOXQyV2pEZW4xVllPYVIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd4cDkPhU
XHYEktrVRuR4Gbo7972eY43Yhkvqv4Oj0BB5Nb/ECHFkRI6uOeL5rhcOV4iutvXO
Fm8bw2dU6LYOHgzeCRtWGNelsyn1cHxrE6CkUHUQVWM1P86y/ZxK5EdVgnIrZsCr
pUUqY77AQVuU8BKt1AGkiNJx/G3rzeiHoBBcEom9x8SLdWM+giwK3HOn/wDQWTpa
6ZkM9pO3Xyqq+3zSaDFtejfrXQwM0WEib7jUwxSrl31sKolKg9IPWCFUO6Lyh88o
Zw2jDRB47SgDR0WpoJMApauRyZJfB4/Nts3kB/l9FMiJFGMNWsyEKc6FpXotz1Ee
KNQjUfj3u6Q3dw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:46 2025 by rpki-client