Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
File: 1sHCRltPlz-0sMtmKKmLO1iJbUg.mft (raw, json)
Hash identifier: 0HCvxSARasj12/TLlZgEd9js9c8IwDBy/5bunejJcB0=
Subject key identifier: A0:0B:8B:6A:7F:9F:F3:EB:47:C2:1F:57:A3:F5:D1:0F:0D:FA:B8:F8
Authority key identifier: D6:C1:C2:46:5B:4F:97:3F:B4:B0:CB:66:28:A9:8B:3B:58:89:6D:48
Certificate issuer: /CN=d6c1c2465b4f973fb4b0cb6628a98b3b58896d48
Certificate serial: 019A2AB1206FD5B66A0AE3B1DC5E47B9BE1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
Manifest number: 16FC
Signing time: Tue 28 Oct 2025 12:00:42 +0000
Manifest this update: Tue 28 Oct 2025 12:00:42 +0000
Manifest next update: Wed 29 Oct 2025 12:00:42 +0000
Files and hashes: 1: 1sHCRltPlz-0sMtmKKmLO1iJbUg.crl (hash: cUM/PDtc2i2ypeO6+I0UtM9Ye/0dhnLm48mbRbnNoAc=)
2: 6LgX5MehzRAabFx-kl7-VX8WvGI.roa (hash: wiQ+g/d9+jLtiOR7pk9wrMApI0W1PUh3CexN4Wm3rM0=)
3: b4DuszRvCuY1HNLPnYT0Co3AUUg.roa (hash: Se60NV9pecSqSW5M0t+IF1TsZ0uCtpO4LnPo+ovkM6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:b1:20:6f:d5:b6:6a:0a:e3:b1:dc:5e:47:b9:be:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6c1c2465b4f973fb4b0cb6628a98b3b58896d48
Validity
Not Before: Oct 28 12:00:42 2025 GMT
Not After : Oct 29 12:00:42 2025 GMT
Subject: CN=a00b8b6a7f9ff3eb47c21f57a3f5d10f0dfab8f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:99:ab:35:23:5e:c4:6e:4f:a7:7d:25:3a:42:
b9:06:d1:ae:83:bb:29:78:3d:26:1b:95:da:86:a1:
cc:18:e9:5a:50:4c:f2:96:49:28:fa:ab:a8:32:30:
70:fc:30:77:74:d8:bf:88:83:dc:6f:e4:98:ce:6f:
fd:da:a9:b6:5b:c4:5f:41:3a:0f:12:49:b0:0d:cb:
49:d0:bc:ad:36:f4:84:ed:4b:0b:49:6b:6b:da:e9:
c2:fc:e6:9a:46:01:e1:9a:ac:b2:4a:b5:b1:a3:53:
57:f7:74:75:fd:a9:8d:39:04:e0:bc:8a:fd:a6:7d:
6f:d5:6a:fd:5f:a1:79:7e:32:a8:81:a6:bd:f6:b9:
e1:06:b3:7b:21:f4:11:4d:a4:62:44:7d:19:e8:35:
fe:a3:6f:d3:8e:30:b3:5e:a8:19:46:0c:a9:ba:ed:
fc:0b:64:c5:67:dc:ae:78:59:17:ca:4d:c6:4b:2a:
95:79:b9:68:cb:6e:2e:3e:b6:90:a8:91:5b:2a:6e:
4f:e0:28:27:b4:f8:bd:25:19:d3:16:75:a4:56:2f:
d9:0b:42:cb:64:9f:ca:15:57:85:ce:06:47:a5:18:
82:27:4d:af:1a:53:46:b6:02:59:aa:b2:ac:32:d2:
9a:e0:0b:ce:d7:a4:1e:3e:2d:72:d1:41:c6:9f:13:
90:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:0B:8B:6A:7F:9F:F3:EB:47:C2:1F:57:A3:F5:D1:0F:0D:FA:B8:F8
X509v3 Authority Key Identifier:
keyid:D6:C1:C2:46:5B:4F:97:3F:B4:B0:CB:66:28:A9:8B:3B:58:89:6D:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:2a:7c:bb:b8:3c:6f:2d:49:93:f4:d9:2b:e8:78:07:d1:9c:
3e:6a:77:19:42:3e:ad:ae:d1:bf:0c:c3:e3:12:7c:22:f4:dd:
3e:8e:8a:a8:49:a5:ba:d1:79:1f:24:c3:5f:e5:39:f5:23:1d:
2d:0f:ad:97:79:4e:31:e7:01:01:f1:3b:9a:58:a4:fe:13:05:
84:67:24:03:53:a5:bf:92:2e:8e:a4:86:a7:8d:5b:f4:da:b5:
bd:9c:1b:76:2c:20:16:55:d8:e3:de:0e:24:d4:86:56:26:c9:
31:72:59:3a:e5:92:1b:69:e3:2c:87:f4:e0:25:63:e3:5d:f3:
b0:4f:53:a4:b1:46:36:5b:53:b8:6d:e4:7b:1d:9b:a2:b3:71:
bc:f9:fa:6f:b3:88:09:ff:46:fb:6a:75:e0:f0:85:ad:10:f7:
39:ed:eb:0a:38:5a:63:e6:f1:52:3d:eb:0d:27:91:46:b2:0d:
d3:2a:8e:57:6f:82:2b:61:59:4e:f5:78:54:01:19:fc:b8:89:
96:99:4f:c1:a6:8c:6e:de:74:f4:a7:30:2d:1e:f0:30:1d:a0:
23:36:1f:27:bb:fd:a1:b0:2f:e6:6d:f3:f1:0d:95:a5:59:02:
9c:44:cb:43:c4:cd:1e:3c:c8:8c:38:0a:8d:a1:18:4d:e6:89:
8b:50:dd:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoqsSBv1bZqCuOx3F5Hub4fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2YzFjMjQ2NWI0Zjk3M2ZiNGIwY2I2NjI4YTk4YjNiNTg4
OTZkNDgwHhcNMjUxMDI4MTIwMDQyWhcNMjUxMDI5MTIwMDQyWjAzMTEwLwYDVQQD
EyhhMDBiOGI2YTdmOWZmM2ViNDdjMjFmNTdhM2Y1ZDEwZjBkZmFiOGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppmrNSNexG5Pp30lOkK5BtGug7sp
eD0mG5XahqHMGOlaUEzylkko+quoMjBw/DB3dNi/iIPcb+SYzm/92qm2W8RfQToP
EkmwDctJ0LytNvSE7UsLSWtr2unC/OaaRgHhmqyySrWxo1NX93R1/amNOQTgvIr9
pn1v1Wr9X6F5fjKogaa99rnhBrN7IfQRTaRiRH0Z6DX+o2/TjjCzXqgZRgypuu38
C2TFZ9yueFkXyk3GSyqVebloy24uPraQqJFbKm5P4CgntPi9JRnTFnWkVi/ZC0LL
ZJ/KFVeFzgZHpRiCJ02vGlNGtgJZqrKsMtKa4AvO16QePi1y0UHGnxOQPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKALi2p/n/PrR8IfV6P10Q8N+rj4MB8GA1UdIwQY
MBaAFNbBwkZbT5c/tLDLZiipiztYiW1IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXNIQ1JsdFBsei0wc010bUtLbUxPMWlKYlVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9kNzI1NzQtMjcyYS00MDlkLTlkM2Mt
ZTQ5YTllMDZjNzAwLzEvMXNIQ1JsdFBsei0wc010bUtLbUxPMWlKYlVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9kNzI1NzQtMjcyYS00MDlkLTlkM2MtZTQ5YTllMDZjNzAw
LzEvMXNIQ1JsdFBsei0wc010bUtLbUxPMWlKYlVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjyp8u7g8
by1Jk/TZK+h4B9GcPmp3GUI+ra7RvwzD4xJ8IvTdPo6KqEmlutF5HyTDX+U59SMd
LQ+tl3lOMecBAfE7mlik/hMFhGckA1Olv5IujqSGp41b9Nq1vZwbdiwgFlXY494O
JNSGVibJMXJZOuWSG2njLIf04CVj413zsE9TpLFGNltTuG3kex2borNxvPn6b7OI
Cf9G+2p14PCFrRD3Oe3rCjhaY+bxUj3rDSeRRrIN0yqOV2+CK2FZTvV4VAEZ/LiJ
lplPwaaMbt509KcwLR7wMB2gIzYfJ7v9obAv5m3z8Q2VpVkCnETLQ8TNHjzIjDgK
jaEYTeaJi1DdbA==
-----END CERTIFICATE-----
Generated at Tue Oct 28 13:39:56 2025 by rpki-client