Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
File: XRKbBGDPnuBQDuiAos-hpSTk3wA.mft (raw, json)
Hash identifier: zJQRPGC/XYrVcBDXMI32Y31N64GKPyPJCHP6qHcsCwg=
Subject key identifier: 82:3D:2E:25:9C:13:7C:20:21:D2:F2:2F:22:A5:C5:56:EA:D6:FD:C5
Authority key identifier: 5D:12:9B:04:60:CF:9E:E0:50:0E:E8:80:A2:CF:A1:A5:24:E4:DF:00
Certificate issuer: /CN=5d129b0460cf9ee0500ee880a2cfa1a524e4df00
Certificate serial: 019A236536493EC63E4D51203776B23EDD66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
Manifest number: 16F7
Signing time: Mon 27 Oct 2025 02:00:26 +0000
Manifest this update: Mon 27 Oct 2025 02:00:26 +0000
Manifest next update: Tue 28 Oct 2025 02:00:26 +0000
Files and hashes: 1: XRKbBGDPnuBQDuiAos-hpSTk3wA.crl (hash: MarqwMC69TtUDbZAnBbkO7rymL2uu8qYHET9ao+MoKA=)
2: er13LyaEEpybrKtiNYKCEMG-QS8.roa (hash: aEnyWiHyU9gmwh/2jnL5BvTsMw/v/0bYu8DgEkcY+S0=)
3: oUkdx3aM2sWDa8gVcmp9BXY3y6Y.roa (hash: cnOYmJAa+uOx0J484NL29cWeGahwzJ9b+N/udhFQRhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:65:36:49:3e:c6:3e:4d:51:20:37:76:b2:3e:dd:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d129b0460cf9ee0500ee880a2cfa1a524e4df00
Validity
Not Before: Oct 27 02:00:26 2025 GMT
Not After : Oct 28 02:00:26 2025 GMT
Subject: CN=823d2e259c137c2021d2f22f22a5c556ead6fdc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c6:60:d0:eb:66:00:2c:d9:0c:5c:d9:d6:bc:
de:69:85:22:15:28:b8:f3:1b:c5:f4:27:2c:95:25:
9e:a2:96:33:2e:78:44:2f:7e:d7:7a:06:a4:b3:30:
62:a1:72:f5:48:5a:8d:d6:fe:af:08:b7:4f:cf:c2:
10:6c:1f:aa:2b:40:f9:ed:07:42:b1:01:0e:a5:ab:
e9:1a:6f:2a:c4:27:3c:92:f1:a9:5f:83:eb:72:4c:
85:4d:9c:e6:be:db:55:ba:5d:75:6a:58:f3:e8:c6:
95:4c:71:73:1c:d4:30:a1:bb:35:b7:42:b2:35:3e:
f3:a0:0a:26:37:f4:63:1a:cf:89:02:3b:23:49:ed:
c6:03:ab:39:20:75:93:ca:6b:3e:b8:40:fd:db:60:
c3:d9:65:1e:6f:25:19:1e:23:4a:3f:cd:75:01:82:
29:72:09:bc:bc:62:20:ba:91:6a:7e:6b:97:64:17:
98:59:18:a2:cf:9a:b9:fd:e3:fc:8f:13:30:1c:b3:
20:aa:10:56:30:8b:56:0a:12:fe:70:ad:29:72:c3:
d8:7e:6b:85:85:c8:f5:08:42:41:fb:25:94:7a:c0:
d7:3f:09:8d:c8:80:fd:b8:a4:1c:4f:8b:25:ed:c7:
3a:9f:55:9e:9b:b9:1d:af:a6:27:b7:e9:65:d9:5c:
cb:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:3D:2E:25:9C:13:7C:20:21:D2:F2:2F:22:A5:C5:56:EA:D6:FD:C5
X509v3 Authority Key Identifier:
keyid:5D:12:9B:04:60:CF:9E:E0:50:0E:E8:80:A2:CF:A1:A5:24:E4:DF:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:9c:66:cd:c8:68:91:9b:7a:17:c3:2d:8a:f0:07:eb:af:00:
e5:69:b5:99:ce:98:54:80:b2:2c:47:7c:e7:38:2e:17:ad:bf:
2d:a0:4a:4d:79:0e:9b:50:b9:d4:6d:48:d0:09:29:be:bf:8a:
99:52:c4:0b:04:89:02:38:88:c9:7a:ec:30:87:4b:4b:be:63:
2a:a4:3a:03:ff:24:82:d3:f0:fe:b4:39:87:e0:4d:7e:fa:96:
0d:41:5a:b1:da:f5:1c:96:a1:f1:5c:ee:54:4c:f8:07:0b:7a:
8c:d7:aa:b6:de:2f:b6:fd:17:5a:9b:0d:49:cf:4c:20:82:ac:
63:fd:12:42:8d:c7:b0:54:10:a7:de:4a:78:8e:d0:44:d0:11:
41:5c:d1:09:84:8d:fc:20:6a:10:27:ec:d8:23:9c:11:27:75:
9f:5e:6b:25:ab:cb:e0:d8:21:11:6b:bc:66:b8:6a:a4:2a:52:
5e:05:a9:5d:5c:56:93:ed:6f:44:dd:ca:f6:84:ab:89:2f:e7:
74:a6:02:94:25:41:b5:c8:22:60:88:aa:ec:00:c0:21:2f:18:
4b:cd:84:a3:a7:7d:6d:87:ee:87:a7:77:d8:16:15:c4:26:12:
3a:99:1f:8d:e5:ad:0c:d7:a5:e3:f6:c8:1d:66:b1:21:65:2f:
75:2f:e9:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZojZTZJPsY+TVEgN3ayPt1mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkMTI5YjA0NjBjZjllZTA1MDBlZTg4MGEyY2ZhMWE1MjRl
NGRmMDAwHhcNMjUxMDI3MDIwMDI2WhcNMjUxMDI4MDIwMDI2WjAzMTEwLwYDVQQD
Eyg4MjNkMmUyNTljMTM3YzIwMjFkMmYyMmYyMmE1YzU1NmVhZDZmZGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sZg0OtmACzZDFzZ1rzeaYUiFSi4
8xvF9CcslSWeopYzLnhEL37XegakszBioXL1SFqN1v6vCLdPz8IQbB+qK0D57QdC
sQEOpavpGm8qxCc8kvGpX4PrckyFTZzmvttVul11aljz6MaVTHFzHNQwobs1t0Ky
NT7zoAomN/RjGs+JAjsjSe3GA6s5IHWTyms+uED922DD2WUebyUZHiNKP811AYIp
cgm8vGIgupFqfmuXZBeYWRiiz5q5/eP8jxMwHLMgqhBWMItWChL+cK0pcsPYfmuF
hcj1CEJB+yWUesDXPwmNyID9uKQcT4sl7cc6n1Wem7kdr6Ynt+ll2VzLyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFII9LiWcE3wgIdLyLyKlxVbq1v3FMB8GA1UdIwQY
MBaAFF0SmwRgz57gUA7ogKLPoaUk5N8AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFJLYkJHRFBudUJRRHVpQW9zLWhwU1RrM3dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi84NTU3ZTAtMzY4ZC00ZDhlLTk3NDEt
YTg3N2RkNTFiYzQ5LzEvWFJLYkJHRFBudUJRRHVpQW9zLWhwU1RrM3dBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi84NTU3ZTAtMzY4ZC00ZDhlLTk3NDEtYTg3N2RkNTFiYzQ5
LzEvWFJLYkJHRFBudUJRRHVpQW9zLWhwU1RrM3dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACZxmzcho
kZt6F8MtivAH668A5Wm1mc6YVICyLEd85zguF62/LaBKTXkOm1C51G1I0Akpvr+K
mVLECwSJAjiIyXrsMIdLS75jKqQ6A/8kgtPw/rQ5h+BNfvqWDUFasdr1HJah8Vzu
VEz4Bwt6jNeqtt4vtv0XWpsNSc9MIIKsY/0SQo3HsFQQp95KeI7QRNARQVzRCYSN
/CBqECfs2COcESd1n15rJavL4NghEWu8ZrhqpCpSXgWpXVxWk+1vRN3K9oSriS/n
dKYClCVBtcgiYIiq7ADAIS8YS82Eo6d9bYfuh6d32BYVxCYSOpkfjeWtDNel4/bI
HWaxIWUvdS/prg==
-----END CERTIFICATE-----
Generated at Mon Oct 27 12:12:30 2025 by rpki-client