Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
File: TDn4uP66ttIJokmB45n9YEMuHMk.mft (raw, json)
Hash identifier: jb3p0ISr5VFoibUS5J4+PEn8uTZIyXqtqxgqnvneVsg=
Subject key identifier: AC:5A:22:6C:02:D9:5F:43:47:4F:4F:A0:83:31:18:E7:6A:A9:B7:5A
Authority key identifier: 4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9
Certificate issuer: /CN=4c39f8b8febab6d209a24981e399fd60432e1cc9
Certificate serial: 019A1B3E23E0471EFEBA015F7E4E20904239
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
Manifest number: 0B5E
Signing time: Sat 25 Oct 2025 12:00:48 +0000
Manifest this update: Sat 25 Oct 2025 12:00:48 +0000
Manifest next update: Sun 26 Oct 2025 12:00:48 +0000
Files and hashes: 1: BGPcLkk4F9FLxsMbGn-M_F2CXto.roa (hash: PqbiTHE+O2cRLL+2/Q85oltHntGJN/X4GOAuPJ95eug=)
2: TDn4uP66ttIJokmB45n9YEMuHMk.crl (hash: +99a6pDn3yG55nY6wRSmi1P4WERDdTY837K1EO3h21U=)
3: nGObtVTwcFKea1knaujpvqhbims.roa (hash: l9jwJiOaQQcxbUJC1OWeTnOmsW+JZFElguXsrGzJSD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 11:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:3e:23:e0:47:1e:fe:ba:01:5f:7e:4e:20:90:42:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c39f8b8febab6d209a24981e399fd60432e1cc9
Validity
Not Before: Oct 25 12:00:48 2025 GMT
Not After : Oct 26 12:00:48 2025 GMT
Subject: CN=ac5a226c02d95f43474f4fa0833118e76aa9b75a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:49:55:84:dd:b6:55:8b:af:32:4b:16:a0:38:
5a:c4:b7:52:6c:64:80:1d:fb:81:c0:33:57:01:12:
36:ea:2f:c5:df:45:56:f7:e1:75:02:e1:fc:a8:1f:
1c:f8:b4:c3:26:b0:9f:15:c2:bb:c0:5b:37:c8:d5:
16:57:b7:55:6c:a0:40:80:f8:62:e8:24:c8:71:29:
da:5b:2c:26:3d:32:32:a0:31:69:7e:be:ff:d1:e0:
31:14:a8:07:f8:ba:79:20:23:33:01:f4:ef:a2:f2:
9f:e0:04:cb:d2:4f:d7:de:e1:a0:7e:0a:a6:1f:28:
d1:3a:77:de:30:50:ab:54:c2:d7:b3:14:0e:31:cb:
fd:bb:46:18:64:88:43:17:7a:9d:6d:3e:c0:83:fc:
db:e2:4a:89:77:2e:17:3f:d1:f2:4e:a8:cd:69:bb:
74:79:55:1b:a9:27:03:5a:1b:9d:fe:5b:a1:01:1b:
57:4b:26:1c:96:b0:4d:38:fb:f8:06:62:d2:30:f5:
7a:25:98:73:9d:17:2c:63:c7:bd:fc:31:b2:92:2a:
b5:e4:ba:9a:c9:2c:71:03:e0:09:21:da:88:9c:9d:
23:8b:13:a3:85:9e:90:e1:76:76:b7:b1:1f:b7:d2:
dd:9b:6f:2a:81:d7:c5:35:95:97:fc:74:0c:69:9f:
ee:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:5A:22:6C:02:D9:5F:43:47:4F:4F:A0:83:31:18:E7:6A:A9:B7:5A
X509v3 Authority Key Identifier:
keyid:4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:43:54:37:aa:05:94:a8:a2:78:12:0a:07:d6:12:84:29:21:
82:85:79:b0:c0:8c:1c:c2:95:f6:40:4d:93:2f:80:21:59:e4:
43:4e:04:5d:05:ff:39:53:b1:07:e0:e8:82:cc:f3:92:28:77:
f3:a2:99:7e:12:0d:8c:ec:ca:7d:0f:90:ed:d9:3d:9b:74:55:
df:8f:16:62:37:6e:75:66:1b:3a:aa:4a:8d:fa:97:0f:69:43:
3e:f9:57:20:7b:49:4a:0c:1f:2f:91:27:c4:4e:ff:79:dc:e8:
f0:19:b0:e6:06:89:3a:70:d9:5c:3b:45:49:7d:67:7e:b3:ca:
f8:03:30:5d:2a:cd:c3:f1:a5:26:e3:4e:68:55:07:c5:1d:64:
a9:ea:b8:ce:87:4e:48:cd:21:b0:41:80:95:4d:a3:3d:4f:18:
36:05:e5:65:6c:ba:33:e2:f2:43:e5:19:a1:31:75:98:ca:ae:
0f:0e:b0:d8:7b:75:ca:ad:ea:0d:68:70:01:45:ad:57:05:6f:
09:81:b9:c2:20:26:50:3e:08:e1:4e:b5:e1:f7:12:19:b3:7e:
75:b2:6c:9b:e4:4b:ad:2c:ee:4d:49:41:e9:62:0e:ef:41:88:
fd:6f:92:c1:f5:e5:94:d8:5e:59:91:e6:33:49:00:32:be:da:
2a:c0:a7:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZobPiPgRx7+ugFffk4gkEI5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMzlmOGI4ZmViYWI2ZDIwOWEyNDk4MWUzOTlmZDYwNDMy
ZTFjYzkwHhcNMjUxMDI1MTIwMDQ4WhcNMjUxMDI2MTIwMDQ4WjAzMTEwLwYDVQQD
EyhhYzVhMjI2YzAyZDk1ZjQzNDc0ZjRmYTA4MzMxMThlNzZhYTliNzVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0lVhN22VYuvMksWoDhaxLdSbGSA
HfuBwDNXARI26i/F30VW9+F1AuH8qB8c+LTDJrCfFcK7wFs3yNUWV7dVbKBAgPhi
6CTIcSnaWywmPTIyoDFpfr7/0eAxFKgH+Lp5ICMzAfTvovKf4ATL0k/X3uGgfgqm
HyjROnfeMFCrVMLXsxQOMcv9u0YYZIhDF3qdbT7Ag/zb4kqJdy4XP9HyTqjNabt0
eVUbqScDWhud/luhARtXSyYclrBNOPv4BmLSMPV6JZhznRcsY8e9/DGykiq15Lqa
ySxxA+AJIdqInJ0jixOjhZ6Q4XZ2t7Eft9Ldm28qgdfFNZWX/HQMaZ/ukQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKxaImwC2V9DR09PoIMxGOdqqbdaMB8GA1UdIwQY
MBaAFEw5+Lj+urbSCaJJgeOZ/WBDLhzJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVERuNHVQNjZ0dElKb2ttQjQ1bjlZRU11SE1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi84NGJiZTMtNGM2MS00MDMzLWI5YWYt
OTMyMGZlMTNlNWZlLzEvVERuNHVQNjZ0dElKb2ttQjQ1bjlZRU11SE1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi84NGJiZTMtNGM2MS00MDMzLWI5YWYtOTMyMGZlMTNlNWZl
LzEvVERuNHVQNjZ0dElKb2ttQjQ1bjlZRU11SE1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl0NUN6oF
lKiieBIKB9YShCkhgoV5sMCMHMKV9kBNky+AIVnkQ04EXQX/OVOxB+Dogszzkih3
86KZfhINjOzKfQ+Q7dk9m3RV348WYjdudWYbOqpKjfqXD2lDPvlXIHtJSgwfL5En
xE7/edzo8Bmw5gaJOnDZXDtFSX1nfrPK+AMwXSrNw/GlJuNOaFUHxR1kqeq4zodO
SM0hsEGAlU2jPU8YNgXlZWy6M+LyQ+UZoTF1mMquDw6w2Ht1yq3qDWhwAUWtVwVv
CYG5wiAmUD4I4U614fcSGbN+dbJsm+RLrSzuTUlB6WIO70GI/W+SwfXllNheWZHm
M0kAMr7aKsCnLA==
-----END CERTIFICATE-----
Generated at Sat Oct 25 19:59:40 2025 by rpki-client