Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
File: yE1hzRftkuVLszl_HlprOQSsbwU.mft (raw, json)
Hash identifier: CzbhZeram/caDIfIvqOYCw4Nxj/pi/d2iOBm6hhvMe0=
Subject key identifier: 29:6B:61:46:8D:59:E8:3D:3E:98:FD:C8:A1:59:D4:E5:E4:DA:26:0D
Authority key identifier: C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05
Certificate issuer: /CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05
Certificate serial: 019A24AF1A58D62CCA3F9D229A9EB138B99E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
Manifest number: 1702
Signing time: Mon 27 Oct 2025 08:00:46 +0000
Manifest this update: Mon 27 Oct 2025 08:00:46 +0000
Manifest next update: Tue 28 Oct 2025 08:00:46 +0000
Files and hashes: 1: 7lgq0ctAzIlTDcpOLaQGdaGThZk.roa (hash: e5z2Mfd4VCKCw2JmNleVEdAAScHXO8Xd9p2GShP5Y6E=)
2: L_lziZvf0rcW2nhVL69U2cxHt5E.roa (hash: pANePALmK/hOXRwbvUEA/qtpc0qlGhfdWdBBREZqc1k=)
3: YtSu06eBvsaI_VOFmqz1IslXnNc.roa (hash: 0dn7VD8ICYAbfWAEObXxBVJEjbsCWfJ8U7nwROGAGsU=)
4: ckan5dvz7J1ZSK30Drxlo4PWhMs.roa (hash: F1BRb89WpgPtx0JUztwDXeDnh4+IrOFx75odNR04usQ=)
5: dLz_hs_QORbsBLSIa-GqwYxnFoY.roa (hash: +fTN+O03RfwmbM+R0hQdMI6NFyRIvlQwmN4JSANhNh0=)
6: flXkvhrZJ0ZeBKtpmmtVGzFsQKI.roa (hash: Y9UGCFlpeU/Vq7d3cJo997/pq2lWNIQ3AFJn/rIco44=)
7: ikN4SSSIJdpATfbTuF1aqPVQm8w.roa (hash: gunzQ7zSHNaZSvXp8QC6wdbsRU0gF2fXQubVjTHi9K8=)
8: nBGnunXHIlzfqmh1yvjBYc2bnwI.roa (hash: AE0YoKWgcnhxm5wM19OntmREG6LsPgDjKTOjRjiZyzs=)
9: yE1hzRftkuVLszl_HlprOQSsbwU.crl (hash: A8u28D5nrUPGMgzxDcijweIcQsbgoAnzQxsj7HwvjPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:af:1a:58:d6:2c:ca:3f:9d:22:9a:9e:b1:38:b9:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05
Validity
Not Before: Oct 27 08:00:46 2025 GMT
Not After : Oct 28 08:00:46 2025 GMT
Subject: CN=296b61468d59e83d3e98fdc8a159d4e5e4da260d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4a:e8:d1:0f:2f:b2:ca:18:eb:c3:a2:be:eb:
7a:4f:4d:fc:5d:28:fe:5c:6c:4e:91:11:75:68:0e:
7f:b2:42:b2:9e:bd:dc:a3:1d:97:f2:d6:bb:06:2c:
70:c8:d9:1f:69:e0:6e:6f:fa:60:f8:58:35:2b:93:
5a:a1:ef:52:60:64:d1:4a:62:f9:7c:06:32:ea:9d:
57:a5:d5:66:13:ad:d6:7d:ca:2f:c7:fb:e3:7c:1f:
4b:69:59:67:e1:9b:29:67:35:64:d2:56:15:40:09:
3b:22:5c:63:8d:e2:27:d4:3c:ec:9b:0b:fd:b9:d4:
65:91:ea:46:6a:08:c6:54:27:b4:98:0b:2b:7f:e1:
ae:9e:cf:4e:3e:d7:3c:dc:dc:f9:96:f3:4a:b3:7a:
74:a5:bd:84:5e:e0:1d:79:65:49:48:e9:81:7d:33:
ee:6d:7d:d1:9b:8c:be:30:0a:70:be:eb:eb:6c:40:
10:0d:05:09:de:4e:07:85:c8:f7:8e:5c:c9:6f:8e:
1e:0e:35:a1:55:f6:e5:4f:f4:0e:76:37:c2:00:29:
3c:6f:bc:27:0d:5c:12:29:a5:27:aa:98:4f:c5:71:
92:98:b0:cb:6b:b7:94:67:91:e1:9b:09:ff:7a:5a:
25:97:4e:e0:f7:8f:b4:75:f9:12:9c:f2:76:0e:1b:
b9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:6B:61:46:8D:59:E8:3D:3E:98:FD:C8:A1:59:D4:E5:E4:DA:26:0D
X509v3 Authority Key Identifier:
keyid:C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:21:8c:53:2c:dc:a2:21:88:9d:5b:e0:3f:30:f1:f6:8f:b3:
0a:b8:d9:a6:7e:d3:3f:fe:b8:7c:4e:40:0f:2b:85:c8:a6:b4:
b5:db:e2:f7:96:58:9d:54:fc:ae:33:3c:77:93:15:e4:2b:65:
6b:fa:f7:d4:db:81:43:89:80:38:9c:2e:25:ae:95:f5:7e:05:
70:71:b3:a2:9d:ca:fc:24:55:78:44:ef:8a:b8:76:57:27:db:
9c:84:f6:4f:f0:f5:59:76:c0:83:5e:a6:71:c7:fb:da:cd:e8:
31:82:f9:48:71:e4:1b:84:89:7f:14:fa:e7:b0:ab:73:a5:92:
4f:b2:df:3d:2f:eb:4c:73:7d:6f:eb:fd:6e:0d:b3:58:88:c7:
69:c2:6e:1f:b6:22:79:e6:3b:8c:6e:a9:c0:ce:d9:a8:14:4e:
fa:24:18:c2:f0:34:bf:2f:40:58:7f:df:d1:69:15:bc:42:b9:
a4:23:6a:8d:cd:85:f5:8d:83:eb:d6:ec:1d:88:a9:11:db:e9:
8c:72:a7:3b:16:a7:04:b7:85:3a:7b:db:4d:dd:31:7e:d3:4e:
0f:f3:d2:85:46:50:0a:aa:83:0e:74:8d:39:c3:e3:5a:c6:b4:
43:cd:14:bd:e9:64:ef:12:6a:ae:10:25:34:40:61:8a:a8:ef:
bf:fd:7e:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZokrxpY1izKP50imp6xOLmeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NGQ2MWNkMTdlZDkyZTU0YmIzMzk3ZjFlNWE2YjM5MDRh
YzZmMDUwHhcNMjUxMDI3MDgwMDQ2WhcNMjUxMDI4MDgwMDQ2WjAzMTEwLwYDVQQD
EygyOTZiNjE0NjhkNTllODNkM2U5OGZkYzhhMTU5ZDRlNWU0ZGEyNjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkro0Q8vssoY68Oivut6T038XSj+
XGxOkRF1aA5/skKynr3cox2X8ta7BixwyNkfaeBub/pg+Fg1K5Naoe9SYGTRSmL5
fAYy6p1XpdVmE63Wfcovx/vjfB9LaVln4ZspZzVk0lYVQAk7IlxjjeIn1Dzsmwv9
udRlkepGagjGVCe0mAsrf+Guns9OPtc83Nz5lvNKs3p0pb2EXuAdeWVJSOmBfTPu
bX3Rm4y+MApwvuvrbEAQDQUJ3k4Hhcj3jlzJb44eDjWhVfblT/QOdjfCACk8b7wn
DVwSKaUnqphPxXGSmLDLa7eUZ5Hhmwn/eloll07g94+0dfkSnPJ2Dhu57wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFClrYUaNWeg9Ppj9yKFZ1OXk2iYNMB8GA1UdIwQY
MBaAFMhNYc0X7ZLlS7M5fx5aazkErG8FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUUxaHpSZnRrdVZMc3psX0hscHJPUVNzYndVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS84OGVhZTgtNGI4Ni00Mzg5LWFhZGIt
YzI1Nzc5MmRhZGM0LzEveUUxaHpSZnRrdVZMc3psX0hscHJPUVNzYndVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS84OGVhZTgtNGI4Ni00Mzg5LWFhZGItYzI1Nzc5MmRhZGM0
LzEveUUxaHpSZnRrdVZMc3psX0hscHJPUVNzYndVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlCGMUyzc
oiGInVvgPzDx9o+zCrjZpn7TP/64fE5ADyuFyKa0tdvi95ZYnVT8rjM8d5MV5Ctl
a/r31NuBQ4mAOJwuJa6V9X4FcHGzop3K/CRVeETvirh2VyfbnIT2T/D1WXbAg16m
ccf72s3oMYL5SHHkG4SJfxT657Crc6WST7LfPS/rTHN9b+v9bg2zWIjHacJuH7Yi
eeY7jG6pwM7ZqBRO+iQYwvA0vy9AWH/f0WkVvEK5pCNqjc2F9Y2D69bsHYipEdvp
jHKnOxanBLeFOnvbTd0xftNOD/PShUZQCqqDDnSNOcPjWsa0Q80Uvelk7xJqrhAl
NEBhiqjvv/1+NA==
-----END CERTIFICATE-----
Generated at Mon Oct 27 14:31:13 2025 by rpki-client