Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.mft
File: R88nFPKduANS6fMJ6i6MUoyUa9k.mft (raw, json)
Hash identifier: 92iF7JL09yeU86obTPEedh69yEvX99wb5RAu2x0Nylo=
Subject key identifier: 9C:D2:3A:16:D9:42:2C:7F:48:E2:DB:CD:1E:10:5D:F1:AB:61:DF:D8
Authority key identifier: 47:CF:27:14:F2:9D:B8:03:52:E9:F3:09:EA:2E:8C:52:8C:94:6B:D9
Certificate issuer: /CN=47cf2714f29db80352e9f309ea2e8c528c946bd9
Certificate serial: 0199FC5837F7441B78EB1E3C324920334A1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R88nFPKduANS6fMJ6i6MUoyUa9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.mft
Manifest number: 16A3
Signing time: Sun 19 Oct 2025 12:01:03 +0000
Manifest this update: Sun 19 Oct 2025 12:01:03 +0000
Manifest next update: Mon 20 Oct 2025 12:01:03 +0000
Files and hashes: 1: R88nFPKduANS6fMJ6i6MUoyUa9k.crl (hash: jX80hzb7GQxY2llujrW3+ET6qQ++HvSQDFznqgXdiZA=)
2: jHbOO-v3l--J7LgIxP9_M8wQbrA.roa (hash: FeF1DOYHjXY3CVPpoNeujItbqTAw7Wp1ChNuqHrFnss=)
3: zmA_4zxXMcTORxmCgPEyljXw27c.roa (hash: 566gwzLgN6mZch94CNNtXeQSmmj7Ao7jmOLhB0MgKkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/R88nFPKduANS6fMJ6i6MUoyUa9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:37:f7:44:1b:78:eb:1e:3c:32:49:20:33:4a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47cf2714f29db80352e9f309ea2e8c528c946bd9
Validity
Not Before: Oct 19 12:01:03 2025 GMT
Not After : Oct 20 12:01:03 2025 GMT
Subject: CN=9cd23a16d9422c7f48e2dbcd1e105df1ab61dfd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ee:99:7d:c1:26:ac:ce:0b:7a:6f:c0:84:78:
40:a4:be:6e:cf:41:60:f3:1c:54:f0:11:2d:65:3f:
be:33:58:f2:39:e8:9a:e2:73:fa:42:5e:e2:17:95:
cd:8d:be:40:40:b0:2e:a4:b5:cf:39:3d:d9:d6:ea:
c9:dd:11:d3:51:6d:25:69:38:50:4b:c4:4c:7f:1c:
da:04:4e:93:e4:b8:f3:55:be:f9:b7:2c:1a:82:8a:
f4:e3:5a:d5:f0:0d:b8:53:1d:5b:d1:49:7b:54:12:
12:7a:57:11:b1:57:b0:d7:2f:4e:69:0a:9d:4c:2a:
be:19:da:ed:98:e4:2c:ea:bd:c6:6d:6d:93:f9:ee:
53:ef:84:90:36:e8:e5:45:b1:b3:f9:64:74:33:eb:
0d:0b:e6:6d:29:c2:fe:df:c8:89:d8:be:31:2b:46:
78:ff:45:93:1f:d8:c0:4a:2d:00:f7:63:97:64:53:
fe:11:c7:bb:1d:61:eb:58:b7:20:c8:d6:6e:0e:a8:
3b:64:d5:72:e1:ee:3d:9f:66:84:f8:4f:31:41:74:
f4:6d:e6:9a:7e:57:55:4a:7b:e7:66:15:6c:59:5f:
ca:4d:9c:5e:8e:7f:34:9f:3e:7c:d2:1a:67:86:f2:
c9:bd:d4:cf:18:d5:ab:26:2c:61:2b:4f:27:fb:33:
7c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D2:3A:16:D9:42:2C:7F:48:E2:DB:CD:1E:10:5D:F1:AB:61:DF:D8
X509v3 Authority Key Identifier:
keyid:47:CF:27:14:F2:9D:B8:03:52:E9:F3:09:EA:2E:8C:52:8C:94:6B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R88nFPKduANS6fMJ6i6MUoyUa9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:c2:9e:e3:b6:52:bd:3e:aa:90:fd:12:ea:7f:d9:12:79:ff:
06:26:e2:a0:dd:8d:a1:cf:42:42:62:84:8e:da:5c:b2:4e:2c:
45:2f:f8:62:02:41:e8:f7:20:27:3d:56:ac:6e:0c:02:d8:e3:
89:b8:d1:5d:08:29:1b:81:00:f7:1f:7e:0c:0f:be:ff:e3:bf:
9b:29:02:9a:bd:d9:08:08:82:31:25:14:ad:b6:35:cd:94:0c:
a2:11:5b:5a:d8:39:4d:7d:a5:52:2d:81:d0:fb:f3:b1:a1:94:
f5:4f:78:19:86:c8:ae:49:db:0e:13:dc:d2:a5:8e:0b:96:83:
25:40:d7:62:7d:7d:0f:9a:4f:d1:b3:72:c2:2c:e7:67:e1:ff:
79:8e:fd:c9:98:fc:e9:4b:f4:1a:47:32:08:95:d0:4f:b6:00:
9d:92:a4:87:e0:f6:ca:58:bb:64:0e:31:ec:2f:3b:3f:b5:be:
63:ab:b6:19:81:20:92:99:2f:94:e2:6c:25:b1:51:00:23:4c:
a0:1d:4e:9c:2f:36:51:55:f8:53:02:bd:f3:6d:25:47:08:9c:
4a:c6:07:b4:81:04:b2:fd:92:8f:22:27:9e:47:c0:3a:97:34:
98:a2:53:a3:af:f7:42:5a:cc:51:3d:a0:f8:54:25:2c:71:1f:
93:22:52:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WDf3RBt46x48MkkgM0odMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3Y2YyNzE0ZjI5ZGI4MDM1MmU5ZjMwOWVhMmU4YzUyOGM5
NDZiZDkwHhcNMjUxMDE5MTIwMTAzWhcNMjUxMDIwMTIwMTAzWjAzMTEwLwYDVQQD
Eyg5Y2QyM2ExNmQ5NDIyYzdmNDhlMmRiY2QxZTEwNWRmMWFiNjFkZmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuu6ZfcEmrM4Lem/AhHhApL5uz0Fg
8xxU8BEtZT++M1jyOeia4nP6Ql7iF5XNjb5AQLAupLXPOT3Z1urJ3RHTUW0laThQ
S8RMfxzaBE6T5LjzVb75tywagor041rV8A24Ux1b0Ul7VBISelcRsVew1y9OaQqd
TCq+GdrtmOQs6r3GbW2T+e5T74SQNujlRbGz+WR0M+sNC+ZtKcL+38iJ2L4xK0Z4
/0WTH9jASi0A92OXZFP+Ece7HWHrWLcgyNZuDqg7ZNVy4e49n2aE+E8xQXT0beaa
fldVSnvnZhVsWV/KTZxejn80nz580hpnhvLJvdTPGNWrJixhK08n+zN8hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJzSOhbZQix/SOLbzR4QXfGrYd/YMB8GA1UdIwQY
MBaAFEfPJxTynbgDUunzCeoujFKMlGvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjg4bkZQS2R1QU5TNmZNSjZpNk1Vb3lVYTlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yYjE5MmYtNmNlZS00N2ZhLTgzOTUt
NThhZGY3OGQ4Mjc4LzEvUjg4bkZQS2R1QU5TNmZNSjZpNk1Vb3lVYTlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8yYjE5MmYtNmNlZS00N2ZhLTgzOTUtNThhZGY3OGQ4Mjc4
LzEvUjg4bkZQS2R1QU5TNmZNSjZpNk1Vb3lVYTlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMMKe47ZS
vT6qkP0S6n/ZEnn/BibioN2Noc9CQmKEjtpcsk4sRS/4YgJB6PcgJz1WrG4MAtjj
ibjRXQgpG4EA9x9+DA++/+O/mykCmr3ZCAiCMSUUrbY1zZQMohFbWtg5TX2lUi2B
0PvzsaGU9U94GYbIrknbDhPc0qWOC5aDJUDXYn19D5pP0bNywiznZ+H/eY79yZj8
6Uv0GkcyCJXQT7YAnZKkh+D2yli7ZA4x7C87P7W+Y6u2GYEgkpkvlOJsJbFRACNM
oB1OnC82UVX4UwK9820lRwicSsYHtIEEsv2SjyInnkfAOpc0mKJTo6/3QlrMUT2g
+FQlLHEfkyJSDg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:29 2025 by rpki-client