Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft
File: S8hY5QhWNUaEpdBKPsw1klgNVI0.mft (raw, json)
Hash identifier: 24VwdVaHy4NWeS8jy5rQ2JCUPW2WzUehpKvJ0+cARIk=
Subject key identifier: 2F:67:A6:68:15:5A:1A:E6:7C:3A:1C:B1:79:86:82:47:69:2B:B6:50
Authority key identifier: 4B:C8:58:E5:08:56:35:46:84:A5:D0:4A:3E:CC:35:92:58:0D:54:8D
Certificate issuer: /CN=4bc858e50856354684a5d04a3ecc3592580d548d
Certificate serial: 019A19F4394AD311AB12008AAC237DD77533
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S8hY5QhWNUaEpdBKPsw1klgNVI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft
Manifest number: 09AF
Signing time: Sat 25 Oct 2025 06:00:27 +0000
Manifest this update: Sat 25 Oct 2025 06:00:27 +0000
Manifest next update: Sun 26 Oct 2025 06:00:27 +0000
Files and hashes: 1: 1kPYBeHFqZcRahwRlHXvuPvT0zI.roa (hash: qhycFEi6FwqVVERso5+P+dTV24QXX6z3cT56YMpxbXU=)
2: S8hY5QhWNUaEpdBKPsw1klgNVI0.crl (hash: X30moa62+LaS9hg9N50zPTxn9JzKTBZtraPfRYCRp/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S8hY5QhWNUaEpdBKPsw1klgNVI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:19:f4:39:4a:d3:11:ab:12:00:8a:ac:23:7d:d7:75:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bc858e50856354684a5d04a3ecc3592580d548d
Validity
Not Before: Oct 25 06:00:27 2025 GMT
Not After : Oct 26 06:00:27 2025 GMT
Subject: CN=2f67a668155a1ae67c3a1cb179868247692bb650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:55:a6:9a:69:1b:97:35:7f:a3:8e:c4:b8:13:
ed:e3:c0:dc:04:f9:5a:66:2d:45:32:72:69:c5:cf:
ed:2c:7a:2c:82:ce:1e:1e:63:1d:fd:40:66:7d:b9:
80:d6:c5:e4:c3:1c:24:b0:93:ee:cf:2e:c5:29:e8:
83:36:4d:c8:3d:b6:ff:d0:7a:e9:b0:bd:3e:4f:95:
8a:9a:c9:be:3f:98:1a:27:12:cb:e7:a4:67:ef:0a:
9d:18:2c:5a:3a:0f:e0:28:c5:e1:ca:c8:1f:f0:b8:
a0:56:27:fb:95:7b:ba:3f:80:b3:1f:28:b5:c1:a1:
45:73:81:b0:0f:72:08:2b:d4:be:67:02:27:f5:d3:
99:35:b8:aa:e0:3c:bb:67:67:65:71:38:43:cf:2d:
a2:4a:57:a5:e9:8c:bb:14:7f:96:eb:c0:fe:37:76:
35:22:3b:1d:d7:38:ba:f4:da:e9:f0:1b:8e:64:26:
7e:9a:2d:e9:10:46:bd:3f:f0:cd:43:db:05:85:94:
5a:dc:29:01:70:e9:2e:da:96:44:ae:48:8f:24:dc:
fb:66:b4:e5:3d:8b:c0:50:78:c0:a8:26:9d:e1:fa:
fd:f2:9c:f2:ec:c2:17:94:d9:2b:b5:95:5d:55:10:
24:28:ce:3f:0b:a2:70:ee:a9:ae:d7:54:5f:54:e0:
0a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:67:A6:68:15:5A:1A:E6:7C:3A:1C:B1:79:86:82:47:69:2B:B6:50
X509v3 Authority Key Identifier:
keyid:4B:C8:58:E5:08:56:35:46:84:A5:D0:4A:3E:CC:35:92:58:0D:54:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S8hY5QhWNUaEpdBKPsw1klgNVI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:83:f4:33:b9:4c:40:28:0e:ce:20:6f:cb:08:1a:51:39:69:
8d:0f:11:0a:3d:25:e2:2a:5f:3d:2b:00:7f:a1:72:fd:27:d3:
d9:35:c5:30:b3:fd:9d:d6:5c:9b:68:c3:72:0d:65:7e:82:14:
1c:c9:b4:fa:d8:94:c4:99:82:e2:07:bb:11:b3:dd:e5:02:7f:
c8:4f:09:85:dc:f4:7c:46:91:52:b4:a8:e3:54:d9:39:68:95:
b7:43:fc:4a:4e:80:2a:ac:b2:0f:5f:d6:39:a8:ca:6b:38:9b:
ca:9d:84:d7:ee:9e:fb:78:b4:ba:22:fa:67:d0:09:bb:15:8e:
0e:f4:92:30:a4:fe:a7:f0:91:c6:d1:8c:75:d0:50:f5:78:8c:
9d:f0:10:42:78:71:74:91:dc:fc:c2:ef:7d:f1:da:9d:4f:b4:
fa:86:fd:e1:72:b9:3a:c8:9b:2f:57:00:ca:11:f9:9b:21:c9:
5c:9b:f2:8f:e6:76:86:23:df:9a:f9:df:8d:61:74:40:30:f7:
f2:85:ca:83:1b:8f:5d:e6:01:02:47:1e:86:fa:05:1f:2c:4a:
b5:bf:b0:97:1a:82:d6:7f:a9:da:40:2b:f4:df:cd:d9:5f:f6:
9e:17:84:70:cd:5a:f1:fa:59:7a:7e:14:eb:d9:6d:fb:ae:4b:
92:fc:e6:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoZ9DlK0xGrEgCKrCN913UzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiYzg1OGU1MDg1NjM1NDY4NGE1ZDA0YTNlY2MzNTkyNTgw
ZDU0OGQwHhcNMjUxMDI1MDYwMDI3WhcNMjUxMDI2MDYwMDI3WjAzMTEwLwYDVQQD
EygyZjY3YTY2ODE1NWExYWU2N2MzYTFjYjE3OTg2ODI0NzY5MmJiNjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lWmmmkblzV/o47EuBPt48DcBPla
Zi1FMnJpxc/tLHosgs4eHmMd/UBmfbmA1sXkwxwksJPuzy7FKeiDNk3IPbb/0Hrp
sL0+T5WKmsm+P5gaJxLL56Rn7wqdGCxaOg/gKMXhysgf8LigVif7lXu6P4CzHyi1
waFFc4GwD3IIK9S+ZwIn9dOZNbiq4Dy7Z2dlcThDzy2iSlel6Yy7FH+W68D+N3Y1
Ijsd1zi69Nrp8BuOZCZ+mi3pEEa9P/DNQ9sFhZRa3CkBcOku2pZErkiPJNz7ZrTl
PYvAUHjAqCad4fr98pzy7MIXlNkrtZVdVRAkKM4/C6Jw7qmu11RfVOAKBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC9npmgVWhrmfDocsXmGgkdpK7ZQMB8GA1UdIwQY
MBaAFEvIWOUIVjVGhKXQSj7MNZJYDVSNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzhoWTVRaFdOVWFFcGRCS1BzdzFrbGdOVkkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yNjc5NjYtZjAzOS00MTc0LTgxMGQt
M2Y0ZWY4MWEyZTUzLzEvUzhoWTVRaFdOVWFFcGRCS1BzdzFrbGdOVkkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8yNjc5NjYtZjAzOS00MTc0LTgxMGQtM2Y0ZWY4MWEyZTUz
LzEvUzhoWTVRaFdOVWFFcGRCS1BzdzFrbGdOVkkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGIP0M7lM
QCgOziBvywgaUTlpjQ8RCj0l4ipfPSsAf6Fy/SfT2TXFMLP9ndZcm2jDcg1lfoIU
HMm0+tiUxJmC4ge7EbPd5QJ/yE8Jhdz0fEaRUrSo41TZOWiVt0P8Sk6AKqyyD1/W
OajKazibyp2E1+6e+3i0uiL6Z9AJuxWODvSSMKT+p/CRxtGMddBQ9XiMnfAQQnhx
dJHc/MLvffHanU+0+ob94XK5OsibL1cAyhH5myHJXJvyj+Z2hiPfmvnfjWF0QDD3
8oXKgxuPXeYBAkcehvoFHyxKtb+wlxqC1n+p2kAr9N/N2V/2nheEcM1a8fpZen4U
69lt+65Lkvzmew==
-----END CERTIFICATE-----
Generated at Sat Oct 25 09:32:11 2025 by rpki-client