Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft
File: nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft (raw, json)
Hash identifier: 0T1NIljdS+MNt8CcuVnhZT/fAxWfhllIubMPXPtbUNU=
Subject key identifier: 26:B0:5A:89:3C:6D:86:85:5C:55:4D:4C:4D:59:09:AC:BB:5A:0E:C5
Authority key identifier: 9C:8A:18:76:FD:DC:2B:63:74:8B:45:7B:77:0B:79:A7:E6:6E:79:3C
Certificate issuer: /CN=9c8a1876fddc2b63748b457b770b79a7e66e793c
Certificate serial: 019A006C4D0D7BD3999640DA7240C0B90E1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nIoYdv3cK2N0i0V7dwt5p-ZueTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 07:01:28 +0000
Manifest this update: Mon 20 Oct 2025 07:01:28 +0000
Manifest next update: Tue 21 Oct 2025 07:01:28 +0000
Files and hashes: 1: MPwSmw7TKMOSUXcFrOOlFixZc2g.roa (hash: QP+dxlkmxIyI9F9hcSk4trG33k+WqitL0NMMPJjf69Q=)
2: O_fqEW14QhPRGqjQoVa9vmGmVmM.roa (hash: V1ztdeLVNvewuDYhom6BXL6CS05sk8OmHCsK+DDqUrE=)
3: nIoYdv3cK2N0i0V7dwt5p-ZueTw.crl (hash: Kbv7y0ZBjfOXYBCfYxbPSdzyY48ONczxi2RBHqNTPuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nIoYdv3cK2N0i0V7dwt5p-ZueTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:4d:0d:7b:d3:99:96:40:da:72:40:c0:b9:0e:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c8a1876fddc2b63748b457b770b79a7e66e793c
Validity
Not Before: Oct 20 07:01:28 2025 GMT
Not After : Oct 21 07:01:28 2025 GMT
Subject: CN=26b05a893c6d86855c554d4c4d5909acbb5a0ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:23:64:40:66:d1:fb:fc:91:30:67:99:98:76:
21:f0:41:5c:ba:ba:b1:c7:a2:2d:40:c7:a3:d0:25:
c5:e6:ef:84:95:21:3b:ce:3b:94:58:88:21:f2:5b:
d4:2f:ac:b3:7e:31:9e:cc:71:61:52:66:4a:5c:64:
0d:f0:b4:d7:4d:a0:d1:4f:a6:f0:43:11:1d:9f:61:
1f:05:18:9c:15:19:7a:de:b0:54:b9:e5:a9:2d:bb:
63:e6:f9:27:8b:99:56:5d:9e:a6:1f:cd:3f:5b:5e:
62:44:00:fc:a6:96:10:8a:80:fd:e1:a0:3f:a4:67:
b0:ee:1c:9e:ec:c5:74:b4:09:fd:67:fd:65:2f:59:
98:7a:3a:9a:2e:1e:36:4a:fb:f2:0e:a1:87:66:10:
72:70:ae:98:4d:3c:c3:24:20:d4:aa:2d:6f:25:27:
33:f5:12:45:32:f0:f3:fb:d2:a0:e0:26:27:c5:87:
f4:8b:fc:e3:46:26:f9:09:7e:31:10:ab:f4:19:a7:
e4:31:3a:e6:c3:c0:37:11:c5:33:92:d6:c8:31:85:
01:7e:87:98:34:38:ba:f7:f5:fa:5e:1e:00:61:9e:
78:52:7d:77:d3:21:65:02:e3:78:24:80:a1:de:77:
24:2d:a3:f7:eb:c5:0f:c6:04:08:13:ae:a0:d4:cd:
de:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B0:5A:89:3C:6D:86:85:5C:55:4D:4C:4D:59:09:AC:BB:5A:0E:C5
X509v3 Authority Key Identifier:
keyid:9C:8A:18:76:FD:DC:2B:63:74:8B:45:7B:77:0B:79:A7:E6:6E:79:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nIoYdv3cK2N0i0V7dwt5p-ZueTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:84:b6:8a:f3:27:5a:f1:29:5e:f1:83:17:85:7b:4e:1c:34:
b9:e3:56:d6:c0:b3:94:d0:4d:61:0b:4c:70:31:67:ea:04:88:
be:18:41:3d:55:8d:63:dc:19:c6:43:76:60:13:78:ca:3c:71:
80:06:a6:bf:75:16:33:ea:01:51:3f:f6:28:f3:66:82:8b:55:
be:18:7a:8b:3d:e6:5f:fe:db:3e:86:f6:57:5b:26:0d:d5:73:
14:59:ef:a4:f8:7a:2b:35:77:11:ad:62:df:00:04:72:79:96:
3b:ba:b0:86:35:3b:df:93:99:99:11:af:47:12:e0:f7:6a:66:
18:07:72:ad:ae:53:43:1b:f2:b3:fa:65:22:b7:e9:86:9f:8c:
ad:a2:b7:d4:7d:0c:5f:6f:6c:4d:30:5a:d8:f1:46:73:e9:31:
57:e2:4d:54:bc:69:0f:14:75:71:68:e5:e6:c5:14:55:9a:8b:
3b:09:58:29:68:b3:d1:58:29:a8:e5:ed:3a:6a:e1:32:41:a6:
74:80:80:66:54:b3:61:cc:75:56:ae:d3:c1:8f:f6:03:01:b9:
70:af:fa:15:65:84:e9:88:55:14:bb:4c:7c:55:f6:e1:ff:47:
64:a9:8e:87:ba:35:c8:db:e5:67:f1:32:12:a0:7d:a0:f2:c1:
f7:fd:91:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoAbE0Ne9OZlkDackDAuQ4bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljOGExODc2ZmRkYzJiNjM3NDhiNDU3Yjc3MGI3OWE3ZTY2
ZTc5M2MwHhcNMjUxMDIwMDcwMTI4WhcNMjUxMDIxMDcwMTI4WjAzMTEwLwYDVQQD
EygyNmIwNWE4OTNjNmQ4Njg1NWM1NTRkNGM0ZDU5MDlhY2JiNWEwZWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiNkQGbR+/yRMGeZmHYh8EFcurqx
x6ItQMej0CXF5u+ElSE7zjuUWIgh8lvUL6yzfjGezHFhUmZKXGQN8LTXTaDRT6bw
QxEdn2EfBRicFRl63rBUueWpLbtj5vkni5lWXZ6mH80/W15iRAD8ppYQioD94aA/
pGew7hye7MV0tAn9Z/1lL1mYejqaLh42SvvyDqGHZhBycK6YTTzDJCDUqi1vJScz
9RJFMvDz+9Kg4CYnxYf0i/zjRib5CX4xEKv0GafkMTrmw8A3EcUzktbIMYUBfoeY
NDi69/X6Xh4AYZ54Un130yFlAuN4JICh3nckLaP368UPxgQIE66g1M3eYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCawWok8bYaFXFVNTE1ZCay7Wg7FMB8GA1UdIwQY
MBaAFJyKGHb93CtjdItFe3cLeafmbnk8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbklvWWR2M2NLMk4waTBWN2R3dDVwLVp1ZVR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy85ZWE2OGYtNzQzZC00N2RhLWI3MWMt
NzA5ZmJlODRjZGZiLzEvbklvWWR2M2NLMk4waTBWN2R3dDVwLVp1ZVR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy85ZWE2OGYtNzQzZC00N2RhLWI3MWMtNzA5ZmJlODRjZGZi
LzEvbklvWWR2M2NLMk4waTBWN2R3dDVwLVp1ZVR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF4S2ivMn
WvEpXvGDF4V7Thw0ueNW1sCzlNBNYQtMcDFn6gSIvhhBPVWNY9wZxkN2YBN4yjxx
gAamv3UWM+oBUT/2KPNmgotVvhh6iz3mX/7bPob2V1smDdVzFFnvpPh6KzV3Ea1i
3wAEcnmWO7qwhjU735OZmRGvRxLg92pmGAdyra5TQxvys/plIrfphp+MraK31H0M
X29sTTBa2PFGc+kxV+JNVLxpDxR1cWjl5sUUVZqLOwlYKWiz0VgpqOXtOmrhMkGm
dICAZlSzYcx1Vq7TwY/2AwG5cK/6FWWE6YhVFLtMfFX24f9HZKmOh7o1yNvlZ/Ey
EqB9oPLB9/2RIw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:26:50 2025 by rpki-client