Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
File: U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft (raw, json)
Hash identifier: T+Qwk7BppDSeeVD2FV3w504KZwb1UFBg/KYjVWvTRu4=
Subject key identifier: E6:C5:10:6A:F6:CE:3C:74:3E:9D:D5:91:5B:30:49:F9:D9:2D:FF:7A
Authority key identifier: 53:D9:C9:69:67:5A:27:D5:15:D8:FA:B2:C6:3C:DE:0E:D0:56:49:1E
Certificate issuer: /CN=53d9c969675a27d515d8fab2c63cde0ed056491e
Certificate serial: 0199FBEB38D27469B751CFB9927A0B2BE383
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 10:02:00 +0000
Manifest this update: Sun 19 Oct 2025 10:02:00 +0000
Manifest next update: Mon 20 Oct 2025 10:02:00 +0000
Files and hashes: 1: TlmA7hYGvfoGdT0G5jb2lRunL7s.roa (hash: XLYRe5/a61MKEsm2bcNZNSNX48Bi8mjwB8E7RRvBOJU=)
2: U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl (hash: JkLv/mQEhINVLsw+DF+M25Y+NEkybhuyqr8CqNK76Ik=)
3: iQrb3YXVfkwgIw7qc7FBYjy4iEQ.roa (hash: Hy+nfoOHW02E0Q66TaW00MBASxuELeKPRYnWR4M6QU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:38:d2:74:69:b7:51:cf:b9:92:7a:0b:2b:e3:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53d9c969675a27d515d8fab2c63cde0ed056491e
Validity
Not Before: Oct 19 10:02:00 2025 GMT
Not After : Oct 20 10:02:00 2025 GMT
Subject: CN=e6c5106af6ce3c743e9dd5915b3049f9d92dff7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:98:73:18:99:be:16:89:8a:a5:1e:bd:73:7f:
98:94:cc:bb:01:96:b2:6f:d5:99:80:c6:6b:05:57:
1d:e5:56:50:39:6e:5c:18:ae:e1:fc:bd:7f:3f:ce:
ce:ff:44:a1:9a:80:f2:f6:4b:88:62:09:6e:3f:9a:
9f:42:3b:d6:b9:9a:10:76:75:ea:1f:8e:95:a8:ac:
98:99:78:85:fc:4c:a0:b9:38:80:f7:6a:c7:85:22:
ac:53:ca:9f:4b:40:40:24:46:31:b3:64:3b:f9:8e:
a8:b2:e6:91:b5:92:d6:07:5b:2e:be:8f:72:db:ea:
66:8b:1e:de:e8:77:12:61:9b:e7:14:c7:15:38:db:
7d:42:c6:85:46:79:43:47:2d:71:74:5b:c2:f2:6a:
d9:8b:ce:b1:cf:e8:1e:12:b7:53:51:b4:ba:23:82:
12:c4:6e:09:f2:39:6b:d0:df:1d:65:19:30:9c:95:
ba:21:5d:3c:57:61:62:b0:fd:b9:08:5a:53:1f:35:
fc:10:e2:f9:72:06:41:f7:1c:18:4f:eb:3e:0b:8b:
5c:06:4a:7e:21:91:19:da:55:d3:c1:1a:45:ad:84:
e6:30:82:c8:b3:a7:9a:28:d2:65:a8:47:6b:88:5c:
43:8b:de:c5:d7:81:5e:35:82:d2:30:c7:a7:db:81:
e3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C5:10:6A:F6:CE:3C:74:3E:9D:D5:91:5B:30:49:F9:D9:2D:FF:7A
X509v3 Authority Key Identifier:
keyid:53:D9:C9:69:67:5A:27:D5:15:D8:FA:B2:C6:3C:DE:0E:D0:56:49:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:4b:30:03:05:7f:70:44:40:4e:5d:f1:38:83:ea:02:d9:99:
ff:2a:3d:28:11:b8:76:29:ed:a1:71:3a:73:94:2d:95:36:43:
c3:6c:f3:a0:b8:1e:ec:6c:b3:d4:48:8a:5c:c7:fc:70:83:25:
7b:92:fe:7d:ae:f4:63:0e:39:f1:af:9a:82:0c:30:fc:a8:13:
aa:de:79:41:ab:5e:4c:9f:aa:04:8a:c1:ed:73:b2:f8:7d:34:
c2:5f:33:df:b9:cd:05:1a:83:e6:f9:96:03:8b:41:8f:bd:e5:
74:cc:43:49:ab:1d:1f:bb:71:59:35:b6:ff:b8:80:5a:0c:f0:
2b:d1:df:7b:db:c7:71:38:bc:f3:4d:a1:74:9a:7d:99:71:dd:
1b:e0:8f:b2:6b:5b:eb:bd:b3:8b:5c:27:ef:7a:54:89:a8:5d:
49:6f:b8:f6:43:40:34:a4:ce:24:98:c1:ee:fa:ea:b0:89:96:
ed:c6:96:cc:4c:5b:52:49:1a:ce:8e:f5:ad:d9:19:8a:08:6d:
38:02:03:7e:68:10:74:17:6a:e5:ba:10:3b:7c:86:cc:f8:2b:
d4:d3:41:fd:a9:a3:2a:db:85:55:0c:25:17:c8:2d:52:79:da:
2c:0c:61:d4:16:0e:ff:f8:79:6e:12:82:3d:ef:4f:2d:e1:da:
32:66:99:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76zjSdGm3Uc+5knoLK+ODMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzZDljOTY5Njc1YTI3ZDUxNWQ4ZmFiMmM2M2NkZTBlZDA1
NjQ5MWUwHhcNMjUxMDE5MTAwMjAwWhcNMjUxMDIwMTAwMjAwWjAzMTEwLwYDVQQD
EyhlNmM1MTA2YWY2Y2UzYzc0M2U5ZGQ1OTE1YjMwNDlmOWQ5MmRmZjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5hzGJm+FomKpR69c3+YlMy7AZay
b9WZgMZrBVcd5VZQOW5cGK7h/L1/P87O/0ShmoDy9kuIYgluP5qfQjvWuZoQdnXq
H46VqKyYmXiF/EyguTiA92rHhSKsU8qfS0BAJEYxs2Q7+Y6osuaRtZLWB1suvo9y
2+pmix7e6HcSYZvnFMcVONt9QsaFRnlDRy1xdFvC8mrZi86xz+geErdTUbS6I4IS
xG4J8jlr0N8dZRkwnJW6IV08V2FisP25CFpTHzX8EOL5cgZB9xwYT+s+C4tcBkp+
IZEZ2lXTwRpFrYTmMILIs6eaKNJlqEdriFxDi97F14FeNYLSMMen24HjYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFObFEGr2zjx0Pp3VkVswSfnZLf96MB8GA1UdIwQY
MBaAFFPZyWlnWifVFdj6ssY83g7QVkkeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTluSmFXZGFKOVVWMlBxeXhqemVEdEJXU1I0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC85OTEwN2EtM2IxYi00YjVlLWFlMTUt
Zjk1YzYwYjQ2NmEwLzEvVTluSmFXZGFKOVVWMlBxeXhqemVEdEJXU1I0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC85OTEwN2EtM2IxYi00YjVlLWFlMTUtZjk1YzYwYjQ2NmEw
LzEvVTluSmFXZGFKOVVWMlBxeXhqemVEdEJXU1I0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA0swAwV/
cERATl3xOIPqAtmZ/yo9KBG4dintoXE6c5QtlTZDw2zzoLge7Gyz1EiKXMf8cIMl
e5L+fa70Yw458a+aggww/KgTqt55QateTJ+qBIrB7XOy+H00wl8z37nNBRqD5vmW
A4tBj73ldMxDSasdH7txWTW2/7iAWgzwK9Hfe9vHcTi8802hdJp9mXHdG+CPsmtb
672zi1wn73pUiahdSW+49kNANKTOJJjB7vrqsImW7caWzExbUkkazo71rdkZight
OAIDfmgQdBdq5boQO3yGzPgr1NNB/amjKtuFVQwlF8gtUnnaLAxh1BYO//h5bhKC
Pe9PLeHaMmaZZg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:37:50 2025 by rpki-client