Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
File: aNJK3cw9W3egmakHEiJSpHyPYxA.mft (raw, json)
Hash identifier: 5Xji8h67eCTJI4a+2QuqH3TbKTSFvJUaXJyP8iBpVvc=
Subject key identifier: FF:92:29:B5:A8:E8:21:03:E2:47:45:52:5A:95:D5:4A:E0:B4:1D:57
Authority key identifier: 68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
Certificate issuer: /CN=68d24addcc3d5b77a099a907122252a47c8f6310
Certificate serial: 019A2108E487355F2EE8C9682E2B9C08AEC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
Manifest number: 13EC
Signing time: Sun 26 Oct 2025 15:00:22 +0000
Manifest this update: Sun 26 Oct 2025 15:00:22 +0000
Manifest next update: Mon 27 Oct 2025 15:00:22 +0000
Files and hashes: 1: HZpeO8_57nt_M9qIXInad5VBRmg.roa (hash: nBZAN/bftccBXWEqjcSEhglUjfU5BncjTL3GeIrsER0=)
2: aNJK3cw9W3egmakHEiJSpHyPYxA.crl (hash: tPwMx1WU7tHEkHUIo7VmuXRfCSP7nICNTVbqIX2Ry/E=)
3: u3Gm6l2xEryYp2Hjv5EZHS-8JWs.roa (hash: pFBOXJ7Esc39OQ26JOyW4DMUlulYCetq6fGsY/MF+5Q=)
4: wco6lby84EFuFZVsD3YJ6jjZJjg.roa (hash: OvjwNT1Vaz0Q8soeoNZqB9D75gw6QRvYDSS5yJ4IFyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:08:e4:87:35:5f:2e:e8:c9:68:2e:2b:9c:08:ae:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d24addcc3d5b77a099a907122252a47c8f6310
Validity
Not Before: Oct 26 15:00:22 2025 GMT
Not After : Oct 27 15:00:22 2025 GMT
Subject: CN=ff9229b5a8e82103e24745525a95d54ae0b41d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:27:48:a5:98:3a:10:c5:a1:ce:4c:b5:26:af:
4b:8f:40:5b:34:ec:e1:0f:ab:82:e8:1f:66:70:7f:
9e:a3:96:83:5f:6e:92:1a:4b:07:fe:1d:63:19:6c:
7f:7d:47:09:d3:bf:c9:4f:17:98:e5:9c:bc:13:49:
a7:bc:70:5f:92:af:32:89:51:56:a4:ef:27:dc:12:
ce:76:ab:13:ab:7a:db:54:c9:ce:f0:29:f2:8f:35:
5c:ea:88:d4:4a:23:15:16:7f:14:51:f2:eb:4f:b1:
5a:0f:01:94:50:39:76:c5:0e:6c:e6:50:ea:f2:ba:
ec:2e:d4:c0:5e:5c:bb:2e:0f:04:99:80:98:96:aa:
70:73:24:c0:2f:4a:7c:75:16:ef:a5:b4:48:d9:92:
3d:f0:97:ed:d3:24:e3:08:04:c9:e8:d4:20:e9:b5:
38:e4:f7:5c:a1:e0:19:0f:15:63:e5:02:39:0b:09:
ee:f6:13:eb:da:c1:0c:c8:19:3f:fe:3b:de:ba:d2:
b6:71:14:39:55:96:f1:90:f6:b0:67:6a:bc:e8:94:
9b:d3:1e:85:bd:7a:c5:21:57:35:8d:fa:08:57:c6:
3a:ee:d1:88:0d:e5:bb:25:21:17:71:dd:5f:64:33:
14:93:c3:6b:2b:35:a4:f3:20:33:41:39:d5:e8:9e:
ce:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:92:29:B5:A8:E8:21:03:E2:47:45:52:5A:95:D5:4A:E0:B4:1D:57
X509v3 Authority Key Identifier:
keyid:68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:79:ee:70:c2:58:03:97:b0:45:25:40:0a:9e:04:03:6c:37:
e2:c3:b9:6a:99:f7:71:53:fb:77:91:8f:85:e7:96:91:3d:71:
31:e4:24:af:de:a1:1f:19:f9:81:d1:f1:d1:16:e8:68:31:f9:
24:95:b0:af:8a:76:9e:31:f3:52:34:02:72:87:67:d4:f4:b6:
7d:ff:54:42:85:38:9c:a6:6b:48:d2:00:6e:37:aa:29:d8:05:
89:41:07:9e:5b:a4:d1:36:4f:93:6c:e4:77:63:7b:ad:b0:37:
4d:fe:b6:05:04:5c:c8:e3:a1:5f:76:9a:bd:0f:63:70:8d:9e:
87:36:ce:04:c7:ab:6b:d6:11:2f:91:df:89:45:16:69:49:3c:
91:73:7a:d4:c7:af:8c:0a:8c:a5:20:68:a1:ae:d5:46:2b:2d:
4c:fe:2c:3f:7b:dc:48:af:21:74:15:ca:49:74:57:71:b7:2d:
e6:bf:7e:c3:ec:15:7b:b5:ce:c4:2c:1f:36:77:f0:38:2d:35:
ec:e4:9b:c4:28:42:1e:f1:b7:69:d4:72:fe:6d:7b:fb:35:44:
55:ce:06:da:db:76:e1:07:63:1d:73:5a:c0:81:de:32:c6:6b:
da:97:43:9d:8a:e4:6b:aa:34:02:f8:1b:80:b2:f3:94:27:8e:
97:7a:c3:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZohCOSHNV8u6MloLiucCK7IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZDI0YWRkY2MzZDViNzdhMDk5YTkwNzEyMjI1MmE0N2M4
ZjYzMTAwHhcNMjUxMDI2MTUwMDIyWhcNMjUxMDI3MTUwMDIyWjAzMTEwLwYDVQQD
EyhmZjkyMjliNWE4ZTgyMTAzZTI0NzQ1NTI1YTk1ZDU0YWUwYjQxZDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSdIpZg6EMWhzky1Jq9Lj0BbNOzh
D6uC6B9mcH+eo5aDX26SGksH/h1jGWx/fUcJ07/JTxeY5Zy8E0mnvHBfkq8yiVFW
pO8n3BLOdqsTq3rbVMnO8CnyjzVc6ojUSiMVFn8UUfLrT7FaDwGUUDl2xQ5s5lDq
8rrsLtTAXly7Lg8EmYCYlqpwcyTAL0p8dRbvpbRI2ZI98Jft0yTjCATJ6NQg6bU4
5PdcoeAZDxVj5QI5Cwnu9hPr2sEMyBk//jveutK2cRQ5VZbxkPawZ2q86JSb0x6F
vXrFIVc1jfoIV8Y67tGIDeW7JSEXcd1fZDMUk8NrKzWk8yAzQTnV6J7OOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+SKbWo6CED4kdFUlqV1UrgtB1XMB8GA1UdIwQY
MBaAFGjSSt3MPVt3oJmpBxIiUqR8j2MQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU5KSzNjdzlXM2VnbWFrSEVpSlNwSHlQWXhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi81MWE2NTUtMjczNS00OWVmLTgwZGYt
YjMxNmRiNTkzOGZmLzEvYU5KSzNjdzlXM2VnbWFrSEVpSlNwSHlQWXhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi81MWE2NTUtMjczNS00OWVmLTgwZGYtYjMxNmRiNTkzOGZm
LzEvYU5KSzNjdzlXM2VnbWFrSEVpSlNwSHlQWXhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcnnucMJY
A5ewRSVACp4EA2w34sO5apn3cVP7d5GPheeWkT1xMeQkr96hHxn5gdHx0RboaDH5
JJWwr4p2njHzUjQCcodn1PS2ff9UQoU4nKZrSNIAbjeqKdgFiUEHnluk0TZPk2zk
d2N7rbA3Tf62BQRcyOOhX3aavQ9jcI2ehzbOBMera9YRL5HfiUUWaUk8kXN61Mev
jAqMpSBooa7VRistTP4sP3vcSK8hdBXKSXRXcbct5r9+w+wVe7XOxCwfNnfwOC01
7OSbxChCHvG3adRy/m17+zVEVc4G2tt24QdjHXNawIHeMsZr2pdDnYrka6o0Avgb
gLLzlCeOl3rDhA==
-----END CERTIFICATE-----
Generated at Sun Oct 26 17:44:40 2025 by rpki-client