Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft
File: y2r1L3gkVTrztsuqc686F4wcWRM.mft (raw, json)
Hash identifier: az15qbKf1ZJbdJixaT8C/+s8jcSSNq1Zg7CNmbt9pWA=
Subject key identifier: E1:E8:82:7F:88:D9:01:17:25:6F:93:56:C2:C6:18:FD:5A:BD:95:AB
Authority key identifier: CB:6A:F5:2F:78:24:55:3A:F3:B6:CB:AA:73:AF:3A:17:8C:1C:59:13
Certificate issuer: /CN=cb6af52f7824553af3b6cbaa73af3a178c1c5913
Certificate serial: 0199F844D30D27CDDF323800F176A2EA1C2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2r1L3gkVTrztsuqc686F4wcWRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft
Manifest number: AD
Signing time: Sat 18 Oct 2025 17:01:23 +0000
Manifest this update: Sat 18 Oct 2025 17:01:23 +0000
Manifest next update: Sun 19 Oct 2025 17:01:23 +0000
Files and hashes: 1: IjHqWxuNpJU8DaK_lff-VC_PVWQ.roa (hash: kBcWX1ntdL3bghAjxPsE3h6Q1xLnJksKwhAqQ4KHWmw=)
2: y2r1L3gkVTrztsuqc686F4wcWRM.crl (hash: eRVxFSvAiV1dVJ1eC1yQfFK318njQ0ur/9brlir0AIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2r1L3gkVTrztsuqc686F4wcWRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Oct 2025 16:28:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f8:44:d3:0d:27:cd:df:32:38:00:f1:76:a2:ea:1c:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb6af52f7824553af3b6cbaa73af3a178c1c5913
Validity
Not Before: Oct 18 17:01:23 2025 GMT
Not After : Oct 19 17:01:23 2025 GMT
Subject: CN=e1e8827f88d90117256f9356c2c618fd5abd95ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ed:62:4f:3d:f6:83:7b:f2:c0:45:a0:d3:4c:
4c:15:12:fb:ff:2c:be:22:55:ba:78:a2:9f:aa:81:
66:32:e8:91:3a:09:29:15:97:ac:c2:d9:66:4e:a5:
ac:58:5c:2a:88:4d:20:21:eb:3c:81:fc:fb:8f:54:
b1:89:cb:14:5b:4a:75:17:32:62:25:cf:b0:60:32:
2b:d1:6b:ae:72:46:41:ec:79:40:19:84:d9:3e:38:
86:83:44:a7:15:64:2f:12:6c:1d:dd:fb:b0:12:ee:
dc:79:94:06:3b:bb:97:14:e9:d9:ea:15:7f:c6:c5:
c8:a7:21:47:9d:99:1b:57:bc:5f:bf:00:ac:c9:5e:
fb:6d:09:51:69:20:b6:74:42:01:e6:b0:6d:64:1f:
ee:11:74:d9:ed:ff:25:97:58:bd:e5:73:b7:9a:10:
66:08:7e:9a:7e:c7:1f:19:de:38:cc:71:6c:0f:34:
c6:b1:34:a6:5a:33:f7:8a:ce:bc:88:16:b8:79:0c:
07:14:f8:fd:a9:22:a9:6b:bd:1f:7a:ee:dd:71:b2:
6b:cf:f2:0b:3f:10:a3:83:f0:87:a2:7d:33:a9:6c:
cc:91:07:03:ae:ea:bc:5e:46:0b:23:7c:65:e2:21:
9e:8e:4a:34:0d:49:d1:e6:8a:c0:3b:52:a7:85:20:
c0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E8:82:7F:88:D9:01:17:25:6F:93:56:C2:C6:18:FD:5A:BD:95:AB
X509v3 Authority Key Identifier:
keyid:CB:6A:F5:2F:78:24:55:3A:F3:B6:CB:AA:73:AF:3A:17:8C:1C:59:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2r1L3gkVTrztsuqc686F4wcWRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ba:66:89:68:e7:23:ac:29:c9:9c:0f:29:52:f9:b2:53:f4:
ce:25:0e:cb:ac:65:c2:22:e3:54:6b:89:b4:66:bd:8d:f9:0d:
2b:1c:19:85:d8:44:86:de:37:e2:5a:98:4c:0d:eb:8a:78:fc:
2a:40:2b:97:bc:db:c0:61:89:11:6b:f1:ac:3c:f8:87:94:ac:
44:48:2a:af:a5:a6:e3:24:f9:98:5f:a2:fd:5b:81:4f:ae:71:
0d:ee:c2:d4:85:c6:d6:d4:0e:bf:9b:73:d9:1e:cc:f4:2b:ff:
e2:d1:11:af:b4:33:d5:18:ae:3b:e8:81:2c:72:ed:2c:2b:c4:
00:b1:03:cd:a2:a4:a3:f7:61:88:0f:be:f9:11:27:fa:5c:5c:
d4:8b:39:f1:b7:84:f2:7a:fe:cc:28:bb:ee:72:49:18:3e:13:
9c:db:41:85:f3:7e:66:a0:9c:4b:35:21:36:17:ed:80:10:cd:
3c:b9:a7:01:51:9f:68:85:cf:92:ca:13:32:39:63:07:d6:0f:
79:66:29:12:b6:a0:b2:b6:1c:dd:e9:e9:3b:72:88:21:8a:2b:
5e:28:99:ae:02:9e:e6:6d:50:68:51:e1:c8:03:16:79:94:29:
a5:1b:c5:a2:69:22:a4:33:0f:34:5f:ce:7c:7d:dc:3b:48:bb:
e4:35:c0:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn4RNMNJ83fMjgA8Xai6hwqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiNmFmNTJmNzgyNDU1M2FmM2I2Y2JhYTczYWYzYTE3OGMx
YzU5MTMwHhcNMjUxMDE4MTcwMTIzWhcNMjUxMDE5MTcwMTIzWjAzMTEwLwYDVQQD
EyhlMWU4ODI3Zjg4ZDkwMTE3MjU2ZjkzNTZjMmM2MThmZDVhYmQ5NWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+1iTz32g3vywEWg00xMFRL7/yy+
IlW6eKKfqoFmMuiROgkpFZeswtlmTqWsWFwqiE0gIes8gfz7j1SxicsUW0p1FzJi
Jc+wYDIr0WuuckZB7HlAGYTZPjiGg0SnFWQvEmwd3fuwEu7ceZQGO7uXFOnZ6hV/
xsXIpyFHnZkbV7xfvwCsyV77bQlRaSC2dEIB5rBtZB/uEXTZ7f8ll1i95XO3mhBm
CH6afscfGd44zHFsDzTGsTSmWjP3is68iBa4eQwHFPj9qSKpa70feu7dcbJrz/IL
PxCjg/CHon0zqWzMkQcDruq8XkYLI3xl4iGejko0DUnR5orAO1KnhSDA1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOHogn+I2QEXJW+TVsLGGP1avZWrMB8GA1UdIwQY
MBaAFMtq9S94JFU687bLqnOvOheMHFkTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTJyMUwzZ2tWVHJ6dHN1cWM2ODZGNHdjV1JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNjlmNTAtMjc0MC00MjEzLTk2MTYt
MWQ0YWE3ODFiNGQ0LzEveTJyMUwzZ2tWVHJ6dHN1cWM2ODZGNHdjV1JNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9hNjlmNTAtMjc0MC00MjEzLTk2MTYtMWQ0YWE3ODFiNGQ0
LzEveTJyMUwzZ2tWVHJ6dHN1cWM2ODZGNHdjV1JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHrpmiWjn
I6wpyZwPKVL5slP0ziUOy6xlwiLjVGuJtGa9jfkNKxwZhdhEht434lqYTA3rinj8
KkArl7zbwGGJEWvxrDz4h5SsREgqr6Wm4yT5mF+i/VuBT65xDe7C1IXG1tQOv5tz
2R7M9Cv/4tERr7Qz1RiuO+iBLHLtLCvEALEDzaKko/dhiA+++REn+lxc1Is58beE
8nr+zCi77nJJGD4TnNtBhfN+ZqCcSzUhNhftgBDNPLmnAVGfaIXPksoTMjljB9YP
eWYpEragsrYc3enpO3KIIYorXiiZrgKe5m1QaFHhyAMWeZQppRvFomkipDMPNF/O
fH3cO0i75DXAZg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 02:12:13 2025 by rpki-client