Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.mft
File: FczgYdJAjZqPayuUFi0fdPrD3Kw.mft (raw, json)
Hash identifier: QSZrGxY9s/mNbAXu9pvHQyM2pHuz1cBIej3CeWXGuZY=
Subject key identifier: B8:AA:BB:87:83:AA:CD:BD:3E:3D:10:45:C6:7C:44:72:FD:49:A2:38
Authority key identifier: 15:CC:E0:61:D2:40:8D:9A:8F:6B:2B:94:16:2D:1F:74:FA:C3:DC:AC
Certificate issuer: /CN=15cce061d2408d9a8f6b2b94162d1f74fac3dcac
Certificate serial: 019A7301208810E3BF1D6C6C9B9DC0423F5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FczgYdJAjZqPayuUFi0fdPrD3Kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.mft
Manifest number: 1043
Signing time: Tue 11 Nov 2025 13:00:44 +0000
Manifest this update: Tue 11 Nov 2025 13:00:44 +0000
Manifest next update: Wed 12 Nov 2025 13:00:44 +0000
Files and hashes: 1: AHAoAS0NTz8rAfdAi1-FKZQiZzo.roa (hash: UPpJLytuKjP0PEtk9/ACh8gURBOrfTZUj6sBll9GGNE=)
2: FczgYdJAjZqPayuUFi0fdPrD3Kw.crl (hash: KegZCfBgz9JuTs2rJuWEYvZGgsiefafO+W7No5rEpUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FczgYdJAjZqPayuUFi0fdPrD3Kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:20:88:10:e3:bf:1d:6c:6c:9b:9d:c0:42:3f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15cce061d2408d9a8f6b2b94162d1f74fac3dcac
Validity
Not Before: Nov 11 13:00:44 2025 GMT
Not After : Nov 12 13:00:44 2025 GMT
Subject: CN=b8aabb8783aacdbd3e3d1045c67c4472fd49a238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:02:4e:a0:99:2d:21:08:7d:23:44:01:c4:2a:
9b:73:3a:ec:31:a4:fb:b5:6b:96:c0:6d:6c:c7:ef:
59:1b:61:0d:f3:e3:fe:a8:40:13:86:69:53:eb:e0:
b5:25:cd:b2:75:55:dc:6e:85:d4:35:fb:e7:aa:bd:
da:fa:0c:16:51:8f:f1:9f:55:ab:8f:21:e5:87:6f:
e1:11:3e:20:70:3d:5e:56:90:7c:5b:a4:88:11:84:
12:fc:86:9e:ed:16:49:f3:ce:78:0f:c7:24:4d:47:
ce:fb:b7:ad:28:66:45:36:96:58:de:af:db:07:eb:
49:46:9c:a4:33:af:49:cd:0f:c3:97:42:e2:39:bb:
ec:00:ce:f4:ed:ac:4e:22:06:a3:24:7a:b3:c4:2e:
5b:9e:d4:06:0d:61:94:7c:91:c7:7c:06:a3:ab:a0:
dc:82:63:52:e7:1c:47:c3:f5:c4:d1:fc:02:77:32:
e5:28:97:d0:2b:ff:20:07:6e:ef:27:c3:19:ed:e2:
32:54:44:a5:ae:6e:d6:35:7d:f6:92:3b:3c:5e:e1:
1c:ef:64:16:63:ab:ea:8d:cb:20:c7:bf:0d:23:1e:
cd:06:73:3b:2f:4a:8a:f3:5d:a3:c8:87:5c:00:a5:
6a:09:49:bc:1d:1e:b5:9d:65:db:df:4b:4e:96:0b:
6d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:AA:BB:87:83:AA:CD:BD:3E:3D:10:45:C6:7C:44:72:FD:49:A2:38
X509v3 Authority Key Identifier:
keyid:15:CC:E0:61:D2:40:8D:9A:8F:6B:2B:94:16:2D:1F:74:FA:C3:DC:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FczgYdJAjZqPayuUFi0fdPrD3Kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:dc:b9:a6:32:da:50:8b:42:2e:66:aa:52:85:e2:8e:48:7d:
34:26:43:ba:73:1f:7f:46:65:ef:f5:22:c6:9b:6e:6d:f8:41:
f7:c1:46:7b:9f:7e:1c:fc:be:f8:4b:51:ab:b3:51:13:33:d0:
08:8c:e0:de:07:ba:fb:78:5e:9e:14:bf:8c:f5:a8:23:6f:74:
ae:d9:0b:0e:51:6f:9d:56:d2:ce:c0:4e:56:e2:a7:fd:3f:29:
a3:89:cf:b2:66:ae:94:07:73:8f:b6:47:e6:2a:ab:d6:30:e9:
d8:a2:8b:72:fb:bc:8f:0d:ee:ad:4a:bd:03:83:01:17:fe:b9:
cf:32:8d:1b:fb:6c:18:fd:8e:0a:2a:e2:cc:69:24:9c:be:ae:
f1:ab:d1:bb:9f:a7:48:d2:19:0e:c5:f3:93:9d:43:00:69:73:
88:48:9c:70:07:29:c1:21:b9:cd:72:3a:36:dd:7f:e0:24:f7:
39:be:b8:43:50:bc:67:4d:f5:85:3f:b2:f3:d4:19:85:b0:f2:
8d:7e:5b:eb:8e:75:c5:23:76:5e:8a:d4:0b:31:1f:df:a7:91:
43:e6:a8:29:8c:2e:03:19:c5:f3:33:66:4e:bf:b0:53:5c:46:
5b:d8:62:34:2c:54:7f:50:16:e9:7b:3b:c9:7a:26:b8:05:78:
6d:f8:15:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzASCIEOO/HWxsm53AQj9dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1Y2NlMDYxZDI0MDhkOWE4ZjZiMmI5NDE2MmQxZjc0ZmFj
M2RjYWMwHhcNMjUxMTExMTMwMDQ0WhcNMjUxMTEyMTMwMDQ0WjAzMTEwLwYDVQQD
EyhiOGFhYmI4NzgzYWFjZGJkM2UzZDEwNDVjNjdjNDQ3MmZkNDlhMjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4AJOoJktIQh9I0QBxCqbczrsMaT7
tWuWwG1sx+9ZG2EN8+P+qEAThmlT6+C1Jc2ydVXcboXUNfvnqr3a+gwWUY/xn1Wr
jyHlh2/hET4gcD1eVpB8W6SIEYQS/Iae7RZJ8854D8ckTUfO+7etKGZFNpZY3q/b
B+tJRpykM69JzQ/Dl0LiObvsAM707axOIgajJHqzxC5bntQGDWGUfJHHfAajq6Dc
gmNS5xxHw/XE0fwCdzLlKJfQK/8gB27vJ8MZ7eIyVESlrm7WNX32kjs8XuEc72QW
Y6vqjcsgx78NIx7NBnM7L0qK812jyIdcAKVqCUm8HR61nWXb30tOlgttkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLiqu4eDqs29Pj0QRcZ8RHL9SaI4MB8GA1UdIwQY
MBaAFBXM4GHSQI2aj2srlBYtH3T6w9ysMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmN6Z1lkSkFqWnFQYXl1VUZpMGZkUHJEM0t3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS85YWY4N2MtZTI3Mi00Zjg0LTkxNDMt
NjY4MmY3ODI3ZGYwLzEvRmN6Z1lkSkFqWnFQYXl1VUZpMGZkUHJEM0t3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS85YWY4N2MtZTI3Mi00Zjg0LTkxNDMtNjY4MmY3ODI3ZGYw
LzEvRmN6Z1lkSkFqWnFQYXl1VUZpMGZkUHJEM0t3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhNy5pjLa
UItCLmaqUoXijkh9NCZDunMff0Zl7/UixptubfhB98FGe59+HPy++EtRq7NREzPQ
CIzg3ge6+3henhS/jPWoI290rtkLDlFvnVbSzsBOVuKn/T8po4nPsmaulAdzj7ZH
5iqr1jDp2KKLcvu8jw3urUq9A4MBF/65zzKNG/tsGP2OCirizGkknL6u8avRu5+n
SNIZDsXzk51DAGlziEiccAcpwSG5zXI6Nt1/4CT3Ob64Q1C8Z031hT+y89QZhbDy
jX5b6451xSN2XorUCzEf36eRQ+aoKYwuAxnF8zNmTr+wU1xGW9hiNCxUf1AW6Xs7
yXomuAV4bfgVJA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:48 2025 by rpki-client