Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
File: xVa8y9yfLkutwKBX6gj3x0gYix8.mft (raw, json)
Hash identifier: kg/I2HX/uJnOltdmTkvUbszTyjBxxeLUCGZtz9GtKjo=
Subject key identifier: B2:6D:CA:F8:78:89:5C:20:47:F6:15:65:90:6E:AE:DC:9E:F6:85:C6
Authority key identifier: C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
Certificate issuer: /CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Certificate serial: 019A228B14F290E1E7140E6821955405F453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
Manifest number: 12B4
Signing time: Sun 26 Oct 2025 22:02:11 +0000
Manifest this update: Sun 26 Oct 2025 22:02:11 +0000
Manifest next update: Mon 27 Oct 2025 22:02:11 +0000
Files and hashes: 1: 1ylHoCjP82H2cRlJcKOWxCiIA9s.roa (hash: c062Fjrkbud1S9wrUUG9+yQLXJvgcVhnwrbsUatXzgg=)
2: 6-BNn1ahWtft0g-GuZtIXl4l5Qo.roa (hash: mnVCxlV7vM9sKmc4seeqVJ1+v+wCWGn9k8XntKlO+8E=)
3: xVa8y9yfLkutwKBX6gj3x0gYix8.crl (hash: CFBsfFvMjtWm9uSSA+7f0vv0O6VIRE35kkDyA788y2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 22:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:8b:14:f2:90:e1:e7:14:0e:68:21:95:54:05:f4:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Validity
Not Before: Oct 26 22:02:11 2025 GMT
Not After : Oct 27 22:02:11 2025 GMT
Subject: CN=b26dcaf878895c2047f61565906eaedc9ef685c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:45:ee:04:fe:54:4f:6c:1b:64:52:c8:77:f2:
44:1f:21:ba:f6:24:75:fe:ac:8a:cd:d3:ed:53:00:
c7:c1:52:3e:06:38:03:b6:23:7b:f2:4f:ac:82:69:
81:ef:28:b9:65:ef:3c:fa:a0:c4:61:f6:d0:16:a4:
8a:e3:76:72:3b:50:97:f4:81:5c:f6:04:86:93:7e:
7e:d0:52:59:7d:ed:8b:36:0d:34:8a:92:8e:3a:1e:
5f:21:1e:a8:7d:3f:85:1c:40:f3:ec:b7:5e:20:de:
59:a9:f3:53:6d:3d:09:b5:fd:b6:65:bc:9d:15:1c:
24:8b:b7:4f:37:16:be:32:9e:e0:c7:af:15:91:47:
b1:12:fc:f8:c4:7c:23:50:2d:cd:47:d3:42:8f:7d:
df:68:1b:d7:4a:c3:c5:59:b3:7c:95:31:1a:8b:a9:
42:fc:51:20:1e:a8:0b:37:61:af:3a:aa:56:f0:2e:
62:5a:4e:e7:d3:54:ad:dc:f2:3f:b5:88:ec:96:a5:
e3:91:6c:5a:6f:d1:ed:57:db:40:27:2f:bb:15:31:
fb:1e:6a:9a:c4:4c:93:ea:c6:67:9d:29:cb:e2:02:
a2:67:b8:86:41:d7:72:76:fc:9b:04:a8:5d:93:f0:
02:bf:08:a7:00:3a:ea:58:37:f1:73:8e:fa:1e:e1:
f8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:6D:CA:F8:78:89:5C:20:47:F6:15:65:90:6E:AE:DC:9E:F6:85:C6
X509v3 Authority Key Identifier:
keyid:C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:06:1f:e3:42:ed:9a:48:76:47:e1:85:de:d9:26:39:7e:27:
73:90:ee:8c:cd:80:4d:c1:0c:7a:6e:47:63:96:b2:3e:bf:40:
da:ee:c2:bb:42:68:f8:24:2f:87:6b:c0:26:5c:39:2c:2a:1a:
fd:30:90:8d:31:b0:5b:7b:82:a8:cc:a5:7a:4f:0f:df:f4:e6:
41:e5:b2:d2:e0:73:30:b3:de:19:09:1c:db:f1:2b:45:e6:84:
37:b1:ba:98:b3:0e:8f:c1:06:94:26:65:04:eb:13:d4:87:db:
83:44:86:38:57:82:9d:df:9b:f0:f4:8c:e4:6d:00:62:dd:a1:
e5:b2:5f:3a:16:85:df:6a:b9:6e:36:a4:f7:49:35:a6:2c:82:
0e:f5:29:5c:cf:25:bf:fb:36:b7:a6:d3:bb:1e:55:0c:c6:28:
bf:b2:d2:98:35:89:5b:80:d6:20:68:11:d4:c1:85:61:56:5f:
8a:2f:df:fe:45:cf:67:c2:73:af:a4:41:e3:64:42:05:ea:3b:
9c:ff:5f:f0:d4:40:f4:10:7b:cd:49:a8:80:cf:15:33:42:57:
70:51:99:8d:13:65:af:46:fe:eb:33:eb:97:a9:38:b4:c5:d3:
31:b2:73:b6:fc:c1:ad:a5:06:df:2f:15:b0:37:b7:45:df:dc:
27:59:95:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoiixTykOHnFA5oIZVUBfRTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NTZiY2NiZGM5ZjJlNGJhZGMwYTA1N2VhMDhmN2M3NDgx
ODhiMWYwHhcNMjUxMDI2MjIwMjExWhcNMjUxMDI3MjIwMjExWjAzMTEwLwYDVQQD
EyhiMjZkY2FmODc4ODk1YzIwNDdmNjE1NjU5MDZlYWVkYzllZjY4NWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0XuBP5UT2wbZFLId/JEHyG69iR1
/qyKzdPtUwDHwVI+BjgDtiN78k+sgmmB7yi5Ze88+qDEYfbQFqSK43ZyO1CX9IFc
9gSGk35+0FJZfe2LNg00ipKOOh5fIR6ofT+FHEDz7LdeIN5ZqfNTbT0Jtf22Zbyd
FRwki7dPNxa+Mp7gx68VkUexEvz4xHwjUC3NR9NCj33faBvXSsPFWbN8lTEai6lC
/FEgHqgLN2GvOqpW8C5iWk7n01St3PI/tYjslqXjkWxab9HtV9tAJy+7FTH7Hmqa
xEyT6sZnnSnL4gKiZ7iGQddydvybBKhdk/ACvwinADrqWDfxc476HuH4xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJtyvh4iVwgR/YVZZBurtye9oXGMB8GA1UdIwQY
MBaAFMVWvMvcny5LrcCgV+oI98dIGIsfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFZhOHk5eWZMa3V0d0tCWDZnajN4MGdZaXg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS83ZGVmMTMtYzRjZC00NmE2LTgyNWYt
NDJlYTU1MTRlNzIyLzEveFZhOHk5eWZMa3V0d0tCWDZnajN4MGdZaXg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS83ZGVmMTMtYzRjZC00NmE2LTgyNWYtNDJlYTU1MTRlNzIy
LzEveFZhOHk5eWZMa3V0d0tCWDZnajN4MGdZaXg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAawYf40Lt
mkh2R+GF3tkmOX4nc5DujM2ATcEMem5HY5ayPr9A2u7Cu0Jo+CQvh2vAJlw5LCoa
/TCQjTGwW3uCqMylek8P3/TmQeWy0uBzMLPeGQkc2/ErReaEN7G6mLMOj8EGlCZl
BOsT1Ifbg0SGOFeCnd+b8PSM5G0AYt2h5bJfOhaF32q5bjak90k1piyCDvUpXM8l
v/s2t6bTux5VDMYov7LSmDWJW4DWIGgR1MGFYVZfii/f/kXPZ8Jzr6RB42RCBeo7
nP9f8NRA9BB7zUmogM8VM0JXcFGZjRNlr0b+6zPrl6k4tMXTMbJztvzBraUG3y8V
sDe3Rd/cJ1mVNA==
-----END CERTIFICATE-----
Generated at Mon Oct 27 05:49:05 2025 by rpki-client