Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
File: h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft (raw, json)
Hash identifier: MCBwmvATo7c0uD1+t/5skKOeL5+PD+Ey2dpxE60s45c=
Subject key identifier: 86:23:A6:CB:81:17:C5:94:A8:4F:1D:F2:17:88:16:CE:29:50:AE:95
Authority key identifier: 87:85:15:44:A6:42:7D:2C:8E:27:9E:4B:94:B9:2A:AF:00:09:ED:27
Certificate issuer: /CN=87851544a6427d2c8e279e4b94b92aaf0009ed27
Certificate serial: 019A1EAD2E12867254D980BDB0344FC7DC87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
Manifest number: 14AF
Signing time: Sun 26 Oct 2025 04:00:57 +0000
Manifest this update: Sun 26 Oct 2025 04:00:57 +0000
Manifest next update: Mon 27 Oct 2025 04:00:57 +0000
Files and hashes: 1: FsnHQCl3YIPQ-Kr--FXccxOvsak.roa (hash: 36hDdDotapDvjoXAZEUVlMvaerSFU32EL1uK11igVxs=)
2: h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl (hash: nNxHi9AKejisCmYpM+IipK56KD23SggT7WKn5/gtdw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:ad:2e:12:86:72:54:d9:80:bd:b0:34:4f:c7:dc:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87851544a6427d2c8e279e4b94b92aaf0009ed27
Validity
Not Before: Oct 26 04:00:57 2025 GMT
Not After : Oct 27 04:00:57 2025 GMT
Subject: CN=8623a6cb8117c594a84f1df2178816ce2950ae95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:13:96:66:5d:85:c6:74:11:0d:ed:21:41:32:
87:26:24:29:0d:8b:0f:be:de:55:98:52:c7:2a:22:
93:6a:f9:99:64:d2:e6:b8:cc:c3:8d:66:8a:c7:9b:
e1:33:18:a3:e7:15:f5:9d:21:69:f0:6c:95:dd:19:
67:f1:7f:a1:ea:a1:e0:5a:5d:f5:ae:ce:cb:3c:a1:
91:21:44:a9:0d:e9:33:09:cc:d9:d7:39:a5:5b:53:
ee:a3:05:a1:56:9e:2e:74:11:bb:10:4c:ca:63:bf:
60:f3:36:8c:af:1a:22:9f:80:49:e0:52:b0:90:81:
aa:82:b4:84:bf:b8:49:3a:d3:b7:a1:61:70:0e:db:
f5:9f:5e:38:9f:e3:19:aa:39:33:ca:ad:51:5e:60:
32:76:51:13:92:a1:d7:75:89:e7:13:69:4a:f5:d0:
65:38:2c:0c:b5:24:c8:14:30:6c:6d:42:05:8a:03:
68:ec:47:27:3e:d5:3d:44:1d:b5:0d:c3:51:10:30:
6c:bb:03:99:34:3f:0c:b3:2a:46:2c:58:d0:04:12:
d0:51:6d:f9:99:ab:7a:ac:94:b7:ae:84:1a:fa:6f:
91:e5:c8:78:49:33:8a:e8:fd:af:22:96:29:d9:e2:
1c:90:e6:4f:b9:26:3a:25:df:3c:71:6f:5d:03:7e:
44:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:23:A6:CB:81:17:C5:94:A8:4F:1D:F2:17:88:16:CE:29:50:AE:95
X509v3 Authority Key Identifier:
keyid:87:85:15:44:A6:42:7D:2C:8E:27:9E:4B:94:B9:2A:AF:00:09:ED:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:30:d4:96:08:b2:de:4d:eb:c4:bd:4d:cf:5d:24:93:1e:60:
88:45:e0:02:1a:34:e9:80:e1:f6:7e:06:27:4c:20:52:67:b1:
14:70:39:80:60:0e:b8:e7:ea:37:a1:a1:3f:d2:f3:9e:1b:4c:
2c:7a:87:a9:a0:31:f2:74:c3:24:d1:3d:e0:ca:75:b6:05:dc:
23:4a:e0:b2:ac:4b:bf:85:3a:fb:c8:11:8d:6a:a3:fc:ca:ef:
9a:ec:13:c5:3b:db:49:a4:27:de:9d:82:67:ca:42:22:3e:f4:
e7:33:80:b7:21:39:0e:ee:6d:bf:e9:40:63:0f:b1:07:1f:e5:
47:dc:1e:23:ea:64:a1:b7:cc:c0:31:83:dd:db:64:fc:1c:09:
cd:91:a3:1c:5b:09:5a:cf:21:54:95:30:50:85:c5:60:66:de:
17:ab:7c:5a:1b:8b:5b:2b:7b:44:b7:47:47:bd:d8:51:dc:7f:
b9:c1:78:12:fe:15:70:97:32:05:0c:29:1e:42:c2:65:74:08:
20:bf:b7:24:68:32:ec:ac:85:65:87:94:1f:d2:fc:45:73:be:
fd:9b:22:51:d6:1f:5d:33:07:c8:ad:70:a0:3d:ff:7f:52:b4:
04:fc:df:a8:91:4a:0e:98:92:b7:c6:68:d4:97:25:f3:57:c6:
d9:8f:2e:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoerS4ShnJU2YC9sDRPx9yHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3ODUxNTQ0YTY0MjdkMmM4ZTI3OWU0Yjk0YjkyYWFmMDAw
OWVkMjcwHhcNMjUxMDI2MDQwMDU3WhcNMjUxMDI3MDQwMDU3WjAzMTEwLwYDVQQD
Eyg4NjIzYTZjYjgxMTdjNTk0YTg0ZjFkZjIxNzg4MTZjZTI5NTBhZTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshOWZl2FxnQRDe0hQTKHJiQpDYsP
vt5VmFLHKiKTavmZZNLmuMzDjWaKx5vhMxij5xX1nSFp8GyV3Rln8X+h6qHgWl31
rs7LPKGRIUSpDekzCczZ1zmlW1PuowWhVp4udBG7EEzKY79g8zaMrxoin4BJ4FKw
kIGqgrSEv7hJOtO3oWFwDtv1n144n+MZqjkzyq1RXmAydlETkqHXdYnnE2lK9dBl
OCwMtSTIFDBsbUIFigNo7EcnPtU9RB21DcNREDBsuwOZND8MsypGLFjQBBLQUW35
mat6rJS3roQa+m+R5ch4STOK6P2vIpYp2eIckOZPuSY6Jd88cW9dA35EfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIYjpsuBF8WUqE8d8heIFs4pUK6VMB8GA1UdIwQY
MBaAFIeFFUSmQn0sjieeS5S5Kq8ACe0nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDRVVlJLWkNmU3lPSjU1TGxMa3Fyd0FKN1NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC80N2IxZmQtMzRiNi00MTk1LTg0OWYt
ODU0MzRmNjE2OWYxLzEvaDRVVlJLWkNmU3lPSjU1TGxMa3Fyd0FKN1NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC80N2IxZmQtMzRiNi00MTk1LTg0OWYtODU0MzRmNjE2OWYx
LzEvaDRVVlJLWkNmU3lPSjU1TGxMa3Fyd0FKN1NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlzDUlgiy
3k3rxL1Nz10kkx5giEXgAho06YDh9n4GJ0wgUmexFHA5gGAOuOfqN6GhP9LznhtM
LHqHqaAx8nTDJNE94Mp1tgXcI0rgsqxLv4U6+8gRjWqj/MrvmuwTxTvbSaQn3p2C
Z8pCIj705zOAtyE5Du5tv+lAYw+xBx/lR9weI+pkobfMwDGD3dtk/BwJzZGjHFsJ
Ws8hVJUwUIXFYGbeF6t8WhuLWyt7RLdHR73YUdx/ucF4Ev4VcJcyBQwpHkLCZXQI
IL+3JGgy7KyFZYeUH9L8RXO+/ZsiUdYfXTMHyK1woD3/f1K0BPzfqJFKDpiSt8Zo
1Jcl81fG2Y8ulQ==
-----END CERTIFICATE-----
Generated at Sun Oct 26 13:47:33 2025 by rpki-client