Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft
File: t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft (raw, json)
Hash identifier: S4ywWo1T1yvDNKpzQbgIw36PfTW/ey1l5ShXTzIJxNE=
Subject key identifier: 41:9E:70:B6:12:79:CE:23:4C:6B:46:14:0C:C0:7C:A3:FC:FD:2D:6F
Authority key identifier: B7:78:5A:30:D8:51:2D:0D:8A:B6:37:81:2B:79:FA:45:29:A1:EF:1B
Certificate issuer: /CN=b7785a30d8512d0d8ab637812b79fa4529a1ef1b
Certificate serial: 0199FB0ED90F8A7A61D97D6C89D38D18DDBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 06:01:18 +0000
Manifest this update: Sun 19 Oct 2025 06:01:18 +0000
Manifest next update: Mon 20 Oct 2025 06:01:18 +0000
Files and hashes: 1: 4tvYqBz30c-0SHwQf2CtT0VNBPQ.roa (hash: qCyQEU6OdMbxdWiqsxkcJvwc0b3lfRGI0KL0oWxXAXQ=)
2: 5BiiR8tyxMqnVkrCR-JVCe5thJE.roa (hash: Hg2Lr4BrUeLiGXPiTTswxDVsunI16iUbiaP/wD6FGp4=)
3: t3haMNhRLQ2KtjeBK3n6RSmh7xs.crl (hash: BtLUDboTw4rRi4VIicKnjtNahj6pdi/V6eszAVOXYTQ=)
4: zmgQ_aWhp6cEGx4y0seWn4Gsss4.roa (hash: /bqbphYKFU51MVxXzZqrdhuQ80/Caxadp1A0xOJ6vp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:d9:0f:8a:7a:61:d9:7d:6c:89:d3:8d:18:dd:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7785a30d8512d0d8ab637812b79fa4529a1ef1b
Validity
Not Before: Oct 19 06:01:18 2025 GMT
Not After : Oct 20 06:01:18 2025 GMT
Subject: CN=419e70b61279ce234c6b46140cc07ca3fcfd2d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b7:03:88:12:e6:1a:2b:44:46:a7:80:01:7d:
00:28:c3:2f:0c:cd:fa:96:de:07:93:61:36:62:16:
fa:bd:dc:10:ab:5f:78:f1:c9:5b:19:59:32:26:64:
cd:a3:b4:90:db:49:e8:2c:43:ab:57:ff:e2:cf:78:
32:ff:c0:38:b6:d2:f8:32:a8:8a:8d:56:54:90:66:
94:4c:4c:27:9f:2c:89:b4:02:ec:95:29:dd:b8:21:
58:fd:67:cd:a4:de:18:0e:99:35:45:25:5f:6f:94:
5c:5f:48:6f:31:7a:88:0f:c7:f3:c1:97:e5:2e:1d:
55:31:95:11:72:0c:06:91:24:39:e0:29:0b:26:30:
fb:c8:5d:4d:e3:e8:cf:ce:27:ec:46:22:fd:0a:fb:
a8:23:57:f0:e8:d6:21:04:bd:be:5d:84:b7:37:7d:
19:37:d9:ac:1b:2a:9f:1f:ed:a3:cb:97:d1:7f:14:
39:eb:32:84:f4:f1:ca:ed:81:ac:7b:d1:b1:3a:7e:
fd:55:27:6c:12:b6:df:0d:76:77:dd:a5:16:42:8f:
41:53:16:2e:b0:d5:0a:ba:63:24:56:c6:d2:fb:5d:
b9:fd:40:70:39:f6:6f:12:8a:e1:9a:e7:0e:68:8a:
bd:1b:0d:3e:bb:2f:dc:e8:c7:44:05:cb:ef:1a:be:
7a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:9E:70:B6:12:79:CE:23:4C:6B:46:14:0C:C0:7C:A3:FC:FD:2D:6F
X509v3 Authority Key Identifier:
keyid:B7:78:5A:30:D8:51:2D:0D:8A:B6:37:81:2B:79:FA:45:29:A1:EF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:c8:f0:43:4a:1b:7e:74:93:2b:a6:3d:51:47:e5:e2:5e:4b:
ef:66:87:82:2a:5f:d3:f2:63:89:b9:fe:54:25:0c:6a:ed:f6:
5a:59:e3:f6:7b:a9:81:1c:8b:00:5b:08:e7:31:42:9c:f2:f0:
92:2f:4b:3c:d3:cb:41:53:87:91:0a:09:5b:c6:a5:c1:52:97:
6a:70:e2:41:c5:3a:ca:b3:19:7a:cc:71:07:0c:18:72:29:05:
7a:e9:df:20:37:ac:ca:5a:5d:50:1d:cc:f1:e2:be:a6:3b:d6:
2e:d5:32:2b:94:5c:9f:b7:9b:34:7b:47:d6:52:20:3e:e3:3b:
d5:12:4e:0c:d9:98:60:e9:3d:27:5d:4f:17:a7:c4:92:d4:c5:
bf:fa:63:38:cd:c2:da:94:d5:21:a0:27:95:90:63:4d:ae:de:
e3:3a:10:61:da:ea:24:ef:bc:94:af:8e:fb:12:4b:9b:93:16:
ca:5c:23:a1:34:ce:fe:57:f6:ea:f5:c4:3e:5e:1e:77:07:a3:
94:c8:93:89:58:f3:d0:e9:df:91:85:ab:eb:ff:2b:4f:53:84:
33:c6:f4:9a:a6:eb:f3:9b:52:3f:6c:24:61:50:e7:49:2e:43:
97:53:11:bc:5a:4c:2f:71:16:23:37:9e:1f:59:98:60:af:61:
fc:8e:7f:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7DtkPinph2X1sidONGN28MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3Nzg1YTMwZDg1MTJkMGQ4YWI2Mzc4MTJiNzlmYTQ1Mjlh
MWVmMWIwHhcNMjUxMDE5MDYwMTE4WhcNMjUxMDIwMDYwMTE4WjAzMTEwLwYDVQQD
Eyg0MTllNzBiNjEyNzljZTIzNGM2YjQ2MTQwY2MwN2NhM2ZjZmQyZDZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbcDiBLmGitERqeAAX0AKMMvDM36
lt4Hk2E2Yhb6vdwQq1948clbGVkyJmTNo7SQ20noLEOrV//iz3gy/8A4ttL4MqiK
jVZUkGaUTEwnnyyJtALslSnduCFY/WfNpN4YDpk1RSVfb5RcX0hvMXqID8fzwZfl
Lh1VMZURcgwGkSQ54CkLJjD7yF1N4+jPzifsRiL9CvuoI1fw6NYhBL2+XYS3N30Z
N9msGyqfH+2jy5fRfxQ56zKE9PHK7YGse9GxOn79VSdsErbfDXZ33aUWQo9BUxYu
sNUKumMkVsbS+125/UBwOfZvEorhmucOaIq9Gw0+uy/c6MdEBcvvGr56bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGecLYSec4jTGtGFAzAfKP8/S1vMB8GA1UdIwQY
MBaAFLd4WjDYUS0NirY3gSt5+kUpoe8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDNoYU1OaFJMUTJLdGplQkszbjZSU21oN3hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy81NDMxN2QtMDk0ZS00ODIwLTk2NTEt
NjIxOWIzMjEyMmQwLzEvdDNoYU1OaFJMUTJLdGplQkszbjZSU21oN3hzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy81NDMxN2QtMDk0ZS00ODIwLTk2NTEtNjIxOWIzMjEyMmQw
LzEvdDNoYU1OaFJMUTJLdGplQkszbjZSU21oN3hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApcjwQ0ob
fnSTK6Y9UUfl4l5L72aHgipf0/Jjibn+VCUMau32Wlnj9nupgRyLAFsI5zFCnPLw
ki9LPNPLQVOHkQoJW8alwVKXanDiQcU6yrMZesxxBwwYcikFeunfIDesylpdUB3M
8eK+pjvWLtUyK5Rcn7ebNHtH1lIgPuM71RJODNmYYOk9J11PF6fEktTFv/pjOM3C
2pTVIaAnlZBjTa7e4zoQYdrqJO+8lK+O+xJLm5MWylwjoTTO/lf26vXEPl4edwej
lMiTiVjz0OnfkYWr6/8rT1OEM8b0mqbr85tSP2wkYVDnSS5Dl1MRvFpML3EWIzee
H1mYYK9h/I5/Yw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:48 2025 by rpki-client