Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft
File: WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft (raw, json)
Hash identifier: kYplkrIrbZCcv+xDi1R1yZ537CS+aUdm0oWm8uXgyiw=
Subject key identifier: 1F:8A:10:A0:A4:BB:27:12:99:66:C1:26:D9:F7:9C:73:CC:A7:27:EB
Authority key identifier: 5A:05:32:E8:FD:A4:B2:7A:56:15:AE:BB:8D:7F:D0:FC:AF:A9:F6:10
Certificate issuer: /CN=5a0532e8fda4b27a5615aebb8d7fd0fcafa9f610
Certificate serial: 0199FBEB30EB08B6D4A016AC81371FC77EF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WgUy6P2ksnpWFa67jX_Q_K-p9hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 10:01:58 +0000
Manifest this update: Sun 19 Oct 2025 10:01:58 +0000
Manifest next update: Mon 20 Oct 2025 10:01:58 +0000
Files and hashes: 1: N5lzNY_ASHzrKxE2-cr-dO0MhXU.roa (hash: Kidqbnzk9/6YevJVEsmBoo0YD5crOzBmyny1x/qR6+w=)
2: WgUy6P2ksnpWFa67jX_Q_K-p9hA.crl (hash: BG1LndQFBqeGTC7itqMRLhqzvPUzqS4IKkhmWgp1dyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WgUy6P2ksnpWFa67jX_Q_K-p9hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:30:eb:08:b6:d4:a0:16:ac:81:37:1f:c7:7e:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a0532e8fda4b27a5615aebb8d7fd0fcafa9f610
Validity
Not Before: Oct 19 10:01:58 2025 GMT
Not After : Oct 20 10:01:58 2025 GMT
Subject: CN=1f8a10a0a4bb27129966c126d9f79c73cca727eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:14:2d:fa:bf:5a:27:8e:09:39:bd:58:68:6e:
0d:89:8c:e7:de:6f:0c:86:bc:8b:af:c5:c1:46:3f:
a9:d0:b5:0a:5f:d8:96:77:9f:2e:78:64:ec:2f:02:
2d:de:90:3e:74:7c:4c:d0:c4:9a:a0:45:26:22:c0:
c6:ba:61:72:5e:36:7a:58:fd:a7:1f:26:3e:65:98:
1a:7b:d4:19:4d:75:d4:36:ed:1f:7b:dd:83:c6:09:
bc:92:ba:50:16:82:81:53:4b:32:77:8b:bf:05:f5:
f4:e1:07:9b:5f:d3:41:a3:fb:e2:45:0e:36:21:69:
bd:88:61:c9:6a:ea:25:77:8b:a6:57:f4:5d:18:32:
9d:0e:8d:e2:26:3e:19:61:3d:12:04:2a:bf:b9:45:
b7:e5:48:fa:04:85:da:fd:04:b7:06:49:68:3e:b3:
19:03:b4:b4:cc:c5:6d:49:31:1f:4a:fd:fd:5b:1a:
6d:82:43:ff:dd:c5:02:01:3e:d1:4d:79:72:f4:c6:
e1:8b:2a:66:d1:6e:c4:2d:5f:a0:8c:a1:e9:be:9e:
fc:b7:f8:70:06:8f:d7:f5:d2:f3:6b:0e:a1:17:d0:
3a:45:3f:b1:16:38:66:c6:6a:70:ea:94:9f:40:9f:
b5:f2:f8:4e:90:48:3f:5d:6e:35:c8:b5:44:09:68:
cf:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:8A:10:A0:A4:BB:27:12:99:66:C1:26:D9:F7:9C:73:CC:A7:27:EB
X509v3 Authority Key Identifier:
keyid:5A:05:32:E8:FD:A4:B2:7A:56:15:AE:BB:8D:7F:D0:FC:AF:A9:F6:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgUy6P2ksnpWFa67jX_Q_K-p9hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:c4:f9:bb:97:2a:00:8f:61:6e:17:6f:4a:65:fd:48:48:b7:
d1:db:26:18:27:41:92:f4:41:c7:2d:d5:fe:8a:bc:33:a7:15:
ff:e0:a4:db:d1:a9:13:a6:37:a0:82:21:3e:ee:6f:5f:a1:68:
84:9c:4d:81:2c:6c:79:72:d2:5c:c5:62:b1:1b:36:7a:78:9a:
95:48:f4:51:b0:17:4e:54:b7:ee:58:36:b1:d5:b6:9d:29:87:
83:cb:89:5a:d6:67:a5:8d:81:1b:fe:7a:2e:0a:43:f8:3c:84:
db:87:fe:37:8c:1d:37:07:ee:d1:d8:6e:41:26:a1:2d:f8:0b:
4b:c2:48:d7:d1:b4:1c:b4:88:81:e7:c5:8b:42:0d:00:3c:75:
84:c7:6a:2b:12:d9:7e:45:83:29:ed:2f:86:cb:4d:14:5d:e4:
d4:b2:f1:37:89:45:40:d4:3b:d3:f8:5f:cc:56:1b:89:bb:73:
46:1d:db:c5:5b:4a:a2:a8:1b:f5:d8:13:67:fc:46:d1:72:b2:
0d:c5:5f:91:15:77:f5:11:75:63:6b:a7:29:79:c2:2e:54:b5:
7e:0e:38:36:a6:6c:ad:82:0e:9e:cc:5c:6b:87:61:83:3f:4d:
f3:73:b4:df:cf:af:a1:ad:fc:59:3f:c2:10:c5:d1:df:ed:a2:
23:30:a7:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76zDrCLbUoBasgTcfx374MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhMDUzMmU4ZmRhNGIyN2E1NjE1YWViYjhkN2ZkMGZjYWZh
OWY2MTAwHhcNMjUxMDE5MTAwMTU4WhcNMjUxMDIwMTAwMTU4WjAzMTEwLwYDVQQD
EygxZjhhMTBhMGE0YmIyNzEyOTk2NmMxMjZkOWY3OWM3M2NjYTcyN2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxQt+r9aJ44JOb1YaG4NiYzn3m8M
hryLr8XBRj+p0LUKX9iWd58ueGTsLwIt3pA+dHxM0MSaoEUmIsDGumFyXjZ6WP2n
HyY+ZZgae9QZTXXUNu0fe92Dxgm8krpQFoKBU0syd4u/BfX04QebX9NBo/viRQ42
IWm9iGHJauold4umV/RdGDKdDo3iJj4ZYT0SBCq/uUW35Uj6BIXa/QS3BkloPrMZ
A7S0zMVtSTEfSv39WxptgkP/3cUCAT7RTXly9Mbhiypm0W7ELV+gjKHpvp78t/hw
Bo/X9dLzaw6hF9A6RT+xFjhmxmpw6pSfQJ+18vhOkEg/XW41yLVECWjPVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB+KEKCkuycSmWbBJtn3nHPMpyfrMB8GA1UdIwQY
MBaAFFoFMuj9pLJ6VhWuu41/0PyvqfYQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2dVeTZQMmtzbnBXRmE2N2pYX1FfSy1wOWhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9iMjY2YmItMWEzZC00ZTQ5LTg1N2Mt
ZWYzODkxNGE4YWIwLzEvV2dVeTZQMmtzbnBXRmE2N2pYX1FfSy1wOWhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9iMjY2YmItMWEzZC00ZTQ5LTg1N2MtZWYzODkxNGE4YWIw
LzEvV2dVeTZQMmtzbnBXRmE2N2pYX1FfSy1wOWhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJMT5u5cq
AI9hbhdvSmX9SEi30dsmGCdBkvRBxy3V/oq8M6cV/+Ck29GpE6Y3oIIhPu5vX6Fo
hJxNgSxseXLSXMVisRs2enialUj0UbAXTlS37lg2sdW2nSmHg8uJWtZnpY2BG/56
LgpD+DyE24f+N4wdNwfu0dhuQSahLfgLS8JI19G0HLSIgefFi0INADx1hMdqKxLZ
fkWDKe0vhstNFF3k1LLxN4lFQNQ70/hfzFYbibtzRh3bxVtKoqgb9dgTZ/xG0XKy
DcVfkRV39RF1Y2unKXnCLlS1fg44NqZsrYIOnsxca4dhgz9N83O038+voa38WT/C
EMXR3+2iIzCnsw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:37:51 2025 by rpki-client