Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.mft
File: K5rePBkSeLKqitdnQu673v5yheY.mft (raw, json)
Hash identifier: 91v2pLDckAWTen59mGWE2+/nkKYd4kaf5THwhjdcUrs=
Subject key identifier: 57:A5:59:AA:6B:07:D1:6D:B4:8A:B8:CD:8D:2F:4B:9A:C9:57:C2:20
Authority key identifier: 2B:9A:DE:3C:19:12:78:B2:AA:8A:D7:67:42:EE:BB:DE:FE:72:85:E6
Certificate issuer: /CN=2b9ade3c191278b2aa8ad76742eebbdefe7285e6
Certificate serial: 019A26668239DD5EFF1EF72F2F05290794DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5rePBkSeLKqitdnQu673v5yheY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.mft
Manifest number: 16F8
Signing time: Mon 27 Oct 2025 16:00:43 +0000
Manifest this update: Mon 27 Oct 2025 16:00:43 +0000
Manifest next update: Tue 28 Oct 2025 16:00:43 +0000
Files and hashes: 1: K5rePBkSeLKqitdnQu673v5yheY.crl (hash: nvQ9j5dSYDgf2166s3JT1X5XBn29d4NZjwNu9E+ouaE=)
2: qG28szwgzKPw-jxxXZAb6g2XGqU.roa (hash: izxZJRDh1PNPhAdwizTZ+zNrbkp/H2QNfLC0QfnH8sI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5rePBkSeLKqitdnQu673v5yheY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 16:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:66:82:39:dd:5e:ff:1e:f7:2f:2f:05:29:07:94:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b9ade3c191278b2aa8ad76742eebbdefe7285e6
Validity
Not Before: Oct 27 16:00:43 2025 GMT
Not After : Oct 28 16:00:43 2025 GMT
Subject: CN=57a559aa6b07d16db48ab8cd8d2f4b9ac957c220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:15:b4:a8:4f:19:66:9c:79:d7:4c:85:2f:1c:
f6:c6:29:5f:1a:d8:b1:68:4f:7b:69:07:51:15:93:
e3:de:37:7c:21:3d:2e:b9:a4:8c:33:f1:4b:0f:82:
5d:12:3d:c3:a5:91:9f:9c:9f:98:d4:d6:73:68:1e:
6e:20:a9:34:7b:a1:74:d2:54:d3:a3:be:09:d3:81:
b0:28:09:52:6c:df:a3:54:02:f9:60:71:82:07:20:
58:65:05:da:8f:f1:cd:9a:d1:dd:b8:3d:42:2d:fe:
f6:f6:c8:fb:be:e7:7f:8b:5f:b5:87:0e:5d:91:8f:
2c:38:31:12:9d:c9:04:9f:de:fb:4e:6d:f5:ba:1e:
6d:09:34:57:20:b0:c5:fa:a8:4e:4f:1a:07:d2:42:
9e:a7:a3:3c:1e:3b:dd:ef:20:41:3a:1a:09:6f:aa:
55:32:45:c3:90:3d:28:de:d3:c7:24:05:b6:e8:0c:
e8:66:e1:ac:15:0a:30:d2:86:ea:f0:9a:3e:3a:df:
f3:e3:80:70:49:8c:03:d5:05:c4:c4:22:35:69:b4:
09:8c:ba:cb:d1:e9:75:aa:15:91:82:96:e1:7c:77:
15:2f:f7:60:1b:28:90:eb:76:91:ed:f1:9b:66:51:
03:c5:b6:5b:a9:68:39:4f:8a:b0:b8:4e:16:fc:60:
b7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A5:59:AA:6B:07:D1:6D:B4:8A:B8:CD:8D:2F:4B:9A:C9:57:C2:20
X509v3 Authority Key Identifier:
keyid:2B:9A:DE:3C:19:12:78:B2:AA:8A:D7:67:42:EE:BB:DE:FE:72:85:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5rePBkSeLKqitdnQu673v5yheY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:fb:b6:c7:aa:aa:b4:c3:15:fc:ff:65:3b:ee:0d:1d:93:42:
8f:35:44:81:74:32:57:f6:0a:d2:16:a4:bc:08:d4:d7:7a:18:
1d:67:84:c6:89:f4:a4:1f:0e:92:44:a6:76:2b:19:a4:b0:98:
d9:08:79:ca:d2:ec:ed:d5:f3:25:82:50:37:af:8c:6b:a8:c6:
a0:a9:09:9f:ac:ac:ae:8d:f1:c7:f4:c0:94:5c:2e:c1:f8:2e:
ae:15:a4:4b:9c:a4:f1:e2:39:ee:ed:55:07:ee:f0:fb:c1:8f:
c9:28:a9:63:5b:3d:7e:f8:ca:69:8d:97:48:d2:42:80:b6:2e:
0d:79:e9:30:91:f7:3b:96:58:ff:7a:99:7f:c1:e0:22:a9:ae:
21:ed:96:24:ad:3a:31:e2:03:b6:9f:4e:e9:b0:1b:a6:ae:d0:
2b:b7:4f:6d:43:f9:8f:a9:8c:6a:1d:ea:9a:82:d9:15:32:8b:
15:f4:21:c6:ca:76:f9:22:98:74:47:ad:03:9e:c6:a2:61:0f:
da:25:e5:10:2b:13:77:4b:b7:c3:44:06:26:1a:af:c9:54:7c:
aa:23:4a:dd:c9:10:7c:10:d4:9b:ce:61:80:0e:1b:39:8d:37:
52:92:2b:a9:93:c0:25:2e:0a:8a:f0:39:3b:8f:28:ae:1b:91:
31:90:7c:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZomZoI53V7/HvcvLwUpB5TdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiOWFkZTNjMTkxMjc4YjJhYThhZDc2NzQyZWViYmRlZmU3
Mjg1ZTYwHhcNMjUxMDI3MTYwMDQzWhcNMjUxMDI4MTYwMDQzWjAzMTEwLwYDVQQD
Eyg1N2E1NTlhYTZiMDdkMTZkYjQ4YWI4Y2Q4ZDJmNGI5YWM5NTdjMjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hW0qE8ZZpx510yFLxz2xilfGtix
aE97aQdRFZPj3jd8IT0uuaSMM/FLD4JdEj3DpZGfnJ+Y1NZzaB5uIKk0e6F00lTT
o74J04GwKAlSbN+jVAL5YHGCByBYZQXaj/HNmtHduD1CLf729sj7vud/i1+1hw5d
kY8sODESnckEn977Tm31uh5tCTRXILDF+qhOTxoH0kKep6M8Hjvd7yBBOhoJb6pV
MkXDkD0o3tPHJAW26AzoZuGsFQow0obq8Jo+Ot/z44BwSYwD1QXExCI1abQJjLrL
0el1qhWRgpbhfHcVL/dgGyiQ63aR7fGbZlEDxbZbqWg5T4qwuE4W/GC3IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFelWaprB9FttIq4zY0vS5rJV8IgMB8GA1UdIwQY
MBaAFCua3jwZEniyqorXZ0Luu97+coXmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzVyZVBCa1NlTEtxaXRkblF1NjczdjV5aGVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8wZTQyZTgtNzQ2Yy00YTNhLThkNjMt
Y2MwNTNmNmExZWU2LzEvSzVyZVBCa1NlTEtxaXRkblF1NjczdjV5aGVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi8wZTQyZTgtNzQ2Yy00YTNhLThkNjMtY2MwNTNmNmExZWU2
LzEvSzVyZVBCa1NlTEtxaXRkblF1NjczdjV5aGVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ/u2x6qq
tMMV/P9lO+4NHZNCjzVEgXQyV/YK0hakvAjU13oYHWeExon0pB8OkkSmdisZpLCY
2Qh5ytLs7dXzJYJQN6+Ma6jGoKkJn6ysro3xx/TAlFwuwfgurhWkS5yk8eI57u1V
B+7w+8GPySipY1s9fvjKaY2XSNJCgLYuDXnpMJH3O5ZY/3qZf8HgIqmuIe2WJK06
MeIDtp9O6bAbpq7QK7dPbUP5j6mMah3qmoLZFTKLFfQhxsp2+SKYdEetA57GomEP
2iXlECsTd0u3w0QGJhqvyVR8qiNK3ckQfBDUm85hgA4bOY03UpIrqZPAJS4KivA5
O48orhuRMZB8Bw==
-----END CERTIFICATE-----
Generated at Tue Oct 28 02:22:04 2025 by rpki-client