Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.mft
File: f-DnWTVOg8wZMgOBEJ3iLaDxpwA.mft (raw, json)
Hash identifier: X+GDgy3uLzDIl9ecloke+u21G9I3ZeYF2HZo2oVMKLk=
Subject key identifier: E7:23:12:85:EB:B7:58:25:29:CA:16:81:03:12:70:21:91:57:D9:64
Authority key identifier: 7F:E0:E7:59:35:4E:83:CC:19:32:03:81:10:9D:E2:2D:A0:F1:A7:00
Certificate issuer: /CN=7fe0e759354e83cc19320381109de22da0f1a700
Certificate serial: 019A21E479E95F82E8F32FFF182C4C367012
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.mft
Manifest number: 16FB
Signing time: Sun 26 Oct 2025 19:00:12 +0000
Manifest this update: Sun 26 Oct 2025 19:00:12 +0000
Manifest next update: Mon 27 Oct 2025 19:00:12 +0000
Files and hashes: 1: J0_szuc94cDOPgNJ0yLN783Wnvs.roa (hash: 9y3mjauYNrbe3lUEgqyehF1KTbocvn7jwNFB7RZHERI=)
2: J1Y1sr_zchu3Z4XMLqO-OvK8UPY.roa (hash: wEQuNZ06+AXloUeRMR6QwQxwPhXa3MGT1uIFt5gyxuw=)
3: f-DnWTVOg8wZMgOBEJ3iLaDxpwA.crl (hash: 4CbKSL8WM0pXvmx1uUUSgPd0HcuBdv8hRka1otZrnrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:e4:79:e9:5f:82:e8:f3:2f:ff:18:2c:4c:36:70:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fe0e759354e83cc19320381109de22da0f1a700
Validity
Not Before: Oct 26 19:00:12 2025 GMT
Not After : Oct 27 19:00:12 2025 GMT
Subject: CN=e7231285ebb7582529ca1681031270219157d964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0b:e9:ed:a5:8e:f5:5c:82:7a:57:01:09:c9:
d7:27:71:20:18:a6:83:fc:83:4a:de:31:96:d8:ee:
5a:93:0b:b7:97:e9:57:96:f6:27:77:96:94:79:26:
48:fa:7f:2f:76:6c:d6:31:a8:0f:ad:c0:7a:0c:b8:
b8:a0:27:66:58:95:d9:8a:20:1a:ba:88:8c:48:bb:
02:9e:7a:b3:d9:9f:95:55:d5:a2:10:93:5e:0e:b3:
c1:0a:db:f7:96:56:6f:04:19:5f:13:d6:1a:6c:3f:
6f:39:ba:87:1c:44:15:31:5f:3e:d7:4c:dc:89:9a:
91:39:3f:31:e3:67:ac:ae:c0:bb:a2:94:5d:ca:49:
29:a3:29:ea:f3:38:de:f0:9e:58:ce:61:ac:a6:83:
c0:7d:62:49:81:84:d2:95:52:10:f5:a0:ed:a0:d3:
51:98:65:a2:d3:5b:e9:81:bd:0c:2b:43:54:73:d2:
3e:92:08:ef:b9:d5:90:bc:41:f3:16:bc:bd:51:69:
7c:2e:c9:cc:7f:97:eb:da:af:4c:4a:c2:9a:0c:e9:
6c:24:fb:2d:b8:2a:a2:0f:de:24:e5:28:93:cc:1b:
17:c6:26:ec:2a:ce:fe:09:48:b4:a2:92:e2:ee:37:
c3:00:7a:39:7e:02:fa:4b:30:20:53:7e:6e:c7:67:
70:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:23:12:85:EB:B7:58:25:29:CA:16:81:03:12:70:21:91:57:D9:64
X509v3 Authority Key Identifier:
keyid:7F:E0:E7:59:35:4E:83:CC:19:32:03:81:10:9D:E2:2D:A0:F1:A7:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:55:e9:68:39:f5:4d:7a:e3:05:60:9b:d7:05:15:17:ea:53:
5b:09:27:ca:bf:81:27:10:95:e3:0e:01:36:d3:7c:84:85:e2:
fb:02:d7:ac:95:93:3c:50:f9:43:57:90:29:1b:36:52:3d:ad:
86:67:5c:43:af:88:69:de:aa:d9:80:e1:16:0e:d5:a4:24:f7:
66:ba:47:f9:f9:e8:a5:06:98:3e:90:ee:74:c7:ba:67:5d:ef:
4d:92:35:9b:3a:bf:c3:eb:67:30:6f:cb:ad:c3:f3:1f:8c:13:
86:43:c8:7e:e2:73:88:3a:3a:98:c6:46:b5:a3:5a:85:36:0f:
04:d2:5f:14:8c:5e:15:cd:ee:23:93:f1:ce:aa:39:55:96:73:
e9:c9:35:8b:71:84:2c:84:f1:58:0a:5f:9a:c6:36:b7:e6:07:
cc:01:32:de:67:34:d0:04:a3:20:2d:89:ef:e6:2f:27:71:6e:
ee:98:04:d2:92:5a:9f:b2:a6:35:be:6f:df:85:e6:24:e1:7d:
1b:e0:88:ae:b9:aa:05:ed:1f:5c:62:c6:2a:7e:22:19:63:93:
55:ae:be:1b:3e:18:71:f6:a3:9e:c7:ed:8e:2e:8e:27:ee:18:
ab:69:c6:19:a4:dd:c7:5c:2e:99:6a:f6:24:f2:6d:a8:f2:76:
36:ad:23:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoh5HnpX4Lo8y//GCxMNnASMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmZTBlNzU5MzU0ZTgzY2MxOTMyMDM4MTEwOWRlMjJkYTBm
MWE3MDAwHhcNMjUxMDI2MTkwMDEyWhcNMjUxMDI3MTkwMDEyWjAzMTEwLwYDVQQD
EyhlNzIzMTI4NWViYjc1ODI1MjljYTE2ODEwMzEyNzAyMTkxNTdkOTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswvp7aWO9VyCelcBCcnXJ3EgGKaD
/INK3jGW2O5akwu3l+lXlvYnd5aUeSZI+n8vdmzWMagPrcB6DLi4oCdmWJXZiiAa
uoiMSLsCnnqz2Z+VVdWiEJNeDrPBCtv3llZvBBlfE9YabD9vObqHHEQVMV8+10zc
iZqROT8x42esrsC7opRdykkpoynq8zje8J5YzmGspoPAfWJJgYTSlVIQ9aDtoNNR
mGWi01vpgb0MK0NUc9I+kgjvudWQvEHzFry9UWl8LsnMf5fr2q9MSsKaDOlsJPst
uCqiD94k5SiTzBsXxibsKs7+CUi0opLi7jfDAHo5fgL6SzAgU35ux2dwewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOcjEoXrt1glKcoWgQMScCGRV9lkMB8GA1UdIwQY
MBaAFH/g51k1ToPMGTIDgRCd4i2g8acAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZi1EbldUVk9nOHdaTWdPQkVKM2lMYUR4cHdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8wYzcyNDMtMWZmYi00OWQyLWI1YzEt
YjQwMmU4YTFkOTM0LzEvZi1EbldUVk9nOHdaTWdPQkVKM2lMYUR4cHdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8wYzcyNDMtMWZmYi00OWQyLWI1YzEtYjQwMmU4YTFkOTM0
LzEvZi1EbldUVk9nOHdaTWdPQkVKM2lMYUR4cHdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoVXpaDn1
TXrjBWCb1wUVF+pTWwknyr+BJxCV4w4BNtN8hIXi+wLXrJWTPFD5Q1eQKRs2Uj2t
hmdcQ6+Iad6q2YDhFg7VpCT3ZrpH+fnopQaYPpDudMe6Z13vTZI1mzq/w+tnMG/L
rcPzH4wThkPIfuJziDo6mMZGtaNahTYPBNJfFIxeFc3uI5Pxzqo5VZZz6ck1i3GE
LITxWApfmsY2t+YHzAEy3mc00ASjIC2J7+YvJ3Fu7pgE0pJan7KmNb5v34XmJOF9
G+CIrrmqBe0fXGLGKn4iGWOTVa6+Gz4Ycfajnsftji6OJ+4Yq2nGGaTdx1wumWr2
JPJtqPJ2Nq0jOA==
-----END CERTIFICATE-----
Generated at Sun Oct 26 20:30:59 2025 by rpki-client