Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4af7c1-50cb-479d-a377-007b447d4b39/1/wY3k8q-McFDm5w4IoVJXPt1C5ng.mft
File: wY3k8q-McFDm5w4IoVJXPt1C5ng.mft (raw, json)
Hash identifier: DbEQBvHfgK53QwCwxEv92Z63xk/7bsIc+7V5NvyCiCc=
Subject key identifier: 88:70:BE:E8:33:AD:72:3F:B6:BD:17:78:07:23:DC:4D:0A:C6:1E:AB
Authority key identifier: C1:8D:E4:F2:AF:8C:70:50:E6:E7:0E:08:A1:52:57:3E:DD:42:E6:78
Certificate issuer: /CN=c18de4f2af8c7050e6e70e08a152573edd42e678
Certificate serial: 019A72267866748CFBC42BE87286AA6CFECE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wY3k8q-McFDm5w4IoVJXPt1C5ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/4af7c1-50cb-479d-a377-007b447d4b39/1/wY3k8q-McFDm5w4IoVJXPt1C5ng.mft
Manifest number: 0A68
Signing time: Tue 11 Nov 2025 09:01:54 +0000
Manifest this update: Tue 11 Nov 2025 09:01:54 +0000
Manifest next update: Wed 12 Nov 2025 09:01:54 +0000
Files and hashes: 1: pFur-kbIHPtMOLrHz0LwLOKyGnk.roa (hash: CYiRhFaTrF8IsFJyFUUUj+3+nsfcKz+NgibdViBzD0s=)
2: wY3k8q-McFDm5w4IoVJXPt1C5ng.crl (hash: TDyQV2zAHC8zUQuSDL6W7PY8cFoePdFk5BpFqo3du00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/4af7c1-50cb-479d-a377-007b447d4b39/1/wY3k8q-McFDm5w4IoVJXPt1C5ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/4af7c1-50cb-479d-a377-007b447d4b39/1/wY3k8q-McFDm5w4IoVJXPt1C5ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/wY3k8q-McFDm5w4IoVJXPt1C5ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:78:66:74:8c:fb:c4:2b:e8:72:86:aa:6c:fe:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c18de4f2af8c7050e6e70e08a152573edd42e678
Validity
Not Before: Nov 11 09:01:54 2025 GMT
Not After : Nov 12 09:01:54 2025 GMT
Subject: CN=8870bee833ad723fb6bd17780723dc4d0ac61eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b9:d7:6c:54:6e:51:6f:af:09:60:e9:7c:c1:
9f:5d:2b:ba:bd:8c:8d:85:dd:44:fc:90:51:f9:1b:
9c:aa:d4:b3:9e:19:14:51:6a:8b:05:6b:42:d0:4f:
3e:bf:ef:e0:c7:71:bd:e9:f2:65:e3:5e:2e:9f:3a:
e9:da:ff:e8:82:6e:25:b8:06:35:9d:04:1a:48:4c:
6e:06:57:89:89:fe:05:76:cb:4d:d4:fd:df:58:fe:
c5:f1:7c:08:7e:ca:ed:08:d5:24:9e:3c:29:ba:25:
d5:5a:78:13:de:e4:e5:0c:c7:d9:95:6d:ce:49:11:
a3:5e:e2:d2:c7:b6:b8:99:71:49:29:f4:48:56:95:
f5:25:4d:e4:9b:de:9b:23:69:37:b4:95:b2:3c:cf:
d9:d5:e1:e5:51:85:93:45:50:11:bd:80:72:80:68:
e4:2d:bd:e9:e0:d7:90:39:1e:8b:a2:7a:2f:ff:4b:
b6:4f:c9:b2:6f:19:a1:5d:7a:2b:79:93:48:9f:f9:
a9:f8:36:db:c5:d4:7b:df:68:32:38:e5:ab:74:aa:
44:e0:5e:8b:92:76:6a:43:6a:f7:81:6f:3f:4f:ad:
ca:d0:c0:c6:7e:74:ae:dc:ce:ae:24:33:56:a3:a5:
f5:67:cb:14:3b:b8:11:2a:b5:45:97:1b:60:65:cc:
d8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:70:BE:E8:33:AD:72:3F:B6:BD:17:78:07:23:DC:4D:0A:C6:1E:AB
X509v3 Authority Key Identifier:
keyid:C1:8D:E4:F2:AF:8C:70:50:E6:E7:0E:08:A1:52:57:3E:DD:42:E6:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wY3k8q-McFDm5w4IoVJXPt1C5ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4af7c1-50cb-479d-a377-007b447d4b39/1/wY3k8q-McFDm5w4IoVJXPt1C5ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4af7c1-50cb-479d-a377-007b447d4b39/1/wY3k8q-McFDm5w4IoVJXPt1C5ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:bc:f1:8f:1f:38:a3:76:87:75:dd:45:5c:6c:bc:3f:75:09:
e6:df:dd:12:4b:09:b6:27:2a:98:73:bf:65:cf:fc:2e:9c:2c:
70:7c:64:1d:47:0c:38:75:42:90:04:83:46:16:32:e6:13:3f:
35:3e:9c:9b:40:f4:4a:64:a9:0b:cc:29:16:86:3a:2b:b5:1c:
f3:c6:5e:ef:0f:fa:e8:2c:2c:7d:64:1b:a7:86:b2:dc:2d:2e:
0e:58:3f:a9:ba:98:23:c1:b7:4c:e8:ea:e3:f2:31:7f:60:f5:
4a:25:2e:61:0a:87:72:24:bb:d8:9e:e1:ff:72:59:fd:a7:64:
d5:f5:e7:9a:c2:e6:64:f1:78:1d:1b:da:4e:f8:2e:db:cc:17:
e5:8a:ed:fc:3e:2e:33:69:8e:b7:3a:1b:74:4a:70:8a:70:3a:
a7:ba:b2:37:64:d2:b5:10:ed:2b:8f:75:8f:8c:b8:6f:29:06:
49:b0:4e:0c:82:84:e3:60:cc:c9:4d:52:5e:27:b2:cc:49:e6:
d6:0c:59:42:f6:91:fe:90:b4:de:97:d4:bd:e1:7e:ee:0b:e2:
7f:10:5d:d7:4d:38:bb:f8:59:46:8b:e1:86:d3:05:3d:fc:52:
cf:c4:eb:87:49:d3:6a:da:f8:a4:f2:29:73:62:b6:b3:ba:59:
4e:a3:4e:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJnhmdIz7xCvocoaqbP7OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxOGRlNGYyYWY4YzcwNTBlNmU3MGUwOGExNTI1NzNlZGQ0
MmU2NzgwHhcNMjUxMTExMDkwMTU0WhcNMjUxMTEyMDkwMTU0WjAzMTEwLwYDVQQD
Eyg4ODcwYmVlODMzYWQ3MjNmYjZiZDE3NzgwNzIzZGM0ZDBhYzYxZWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirnXbFRuUW+vCWDpfMGfXSu6vYyN
hd1E/JBR+RucqtSznhkUUWqLBWtC0E8+v+/gx3G96fJl414unzrp2v/ogm4luAY1
nQQaSExuBleJif4FdstN1P3fWP7F8XwIfsrtCNUknjwpuiXVWngT3uTlDMfZlW3O
SRGjXuLSx7a4mXFJKfRIVpX1JU3km96bI2k3tJWyPM/Z1eHlUYWTRVARvYBygGjk
Lb3p4NeQOR6Lonov/0u2T8mybxmhXXoreZNIn/mp+DbbxdR732gyOOWrdKpE4F6L
knZqQ2r3gW8/T63K0MDGfnSu3M6uJDNWo6X1Z8sUO7gRKrVFlxtgZczYWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIhwvugzrXI/tr0XeAcj3E0Kxh6rMB8GA1UdIwQY
MBaAFMGN5PKvjHBQ5ucOCKFSVz7dQuZ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1kzazhxLU1jRkRtNXc0SW9WSlhQdDFDNW5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni80YWY3YzEtNTBjYi00NzlkLWEzNzct
MDA3YjQ0N2Q0YjM5LzEvd1kzazhxLU1jRkRtNXc0SW9WSlhQdDFDNW5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni80YWY3YzEtNTBjYi00NzlkLWEzNzctMDA3YjQ0N2Q0YjM5
LzEvd1kzazhxLU1jRkRtNXc0SW9WSlhQdDFDNW5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAELzxjx84
o3aHdd1FXGy8P3UJ5t/dEksJticqmHO/Zc/8LpwscHxkHUcMOHVCkASDRhYy5hM/
NT6cm0D0SmSpC8wpFoY6K7Uc88Ze7w/66CwsfWQbp4ay3C0uDlg/qbqYI8G3TOjq
4/Ixf2D1SiUuYQqHciS72J7h/3JZ/adk1fXnmsLmZPF4HRvaTvgu28wX5Yrt/D4u
M2mOtzobdEpwinA6p7qyN2TStRDtK491j4y4bykGSbBODIKE42DMyU1SXieyzEnm
1gxZQvaR/pC03pfUveF+7gvifxBd1004u/hZRovhhtMFPfxSz8Trh0nTatr4pPIp
c2K2s7pZTqNO1g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:28 2025 by rpki-client