Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft
File: rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft (raw, json)
Hash identifier: R4Sis5DiQkZXooqKEsc+BgJ0DXsPAhEfIFlFkP7qrYs=
Subject key identifier: 33:80:2F:56:85:FC:49:CF:25:28:AC:5D:06:00:76:EB:DC:9D:E9:B6
Authority key identifier: AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE
Certificate issuer: /CN=acf910f36291c3c224ddb596d956543197f163de
Certificate serial: 019A0B5E55DBFEC948153772771FB6C02024
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft
Manifest number: 16AB
Signing time: Wed 22 Oct 2025 10:02:02 +0000
Manifest this update: Wed 22 Oct 2025 10:02:02 +0000
Manifest next update: Thu 23 Oct 2025 10:02:02 +0000
Files and hashes: 1: 8eCmueBEOSsAwO1CHji1gE-_3LI.roa (hash: l5xAz+doohGBqrtfOFmej8JqC0mnQVYKQDeIBm1ToAM=)
2: DtvFUItZKqyAuC0qVO7xK12HQO0.roa (hash: z+RXHMTUA/r+jPrvwbj//4T8rVTRPjeJiPQfneeOdNs=)
3: J5Nzje0wm67y5K6t3cH8za4h1d0.roa (hash: qpAZrfLDKqU9NwWz286x02NAvGgP6kk6hcqmLvVKz8c=)
4: klr8zXHLn6mli5IxFQr4R9FyMV0.roa (hash: I+JofOB+oo9ML4ISV8ODtPvO84Ef+x27qR0wwlNvvJ8=)
5: q0Eds_oIDCgE88gdpI6r4kp33h8.roa (hash: sqISDzfU6JYm1UcY8Gcz5wDK5BeEeTVU67gC4Pg+KUk=)
6: rPkQ82KRw8Ik3bWW2VZUMZfxY94.crl (hash: HmG6N2H1gTtDSPdyUl7qN8+o1OWb4da3GdME6UQZ2Rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft
rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:5e:55:db:fe:c9:48:15:37:72:77:1f:b6:c0:20:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acf910f36291c3c224ddb596d956543197f163de
Validity
Not Before: Oct 22 10:02:02 2025 GMT
Not After : Oct 23 10:02:02 2025 GMT
Subject: CN=33802f5685fc49cf2528ac5d060076ebdc9de9b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:be:a7:bd:74:6a:41:98:b0:c2:f5:25:05:ea:
d0:4d:94:3b:6a:ea:83:15:78:68:ec:06:e0:8e:46:
3f:53:ea:31:bb:d8:98:c5:50:2a:74:7a:b5:3b:67:
a4:b3:fd:fe:30:e1:50:ce:d4:ac:5f:7a:ea:32:18:
4b:c2:b5:ad:f1:c9:63:ff:9c:6d:d3:46:f8:80:e9:
73:09:2f:33:41:71:31:2f:d0:a1:76:64:20:c9:f3:
1b:63:ee:aa:4b:2a:64:b0:ca:d7:47:62:3a:b6:59:
d0:23:7b:4d:0e:0d:23:8d:1d:f2:f5:09:2c:98:cf:
8d:28:15:e4:96:07:71:93:a7:56:42:3e:08:ca:df:
d1:27:7d:e0:14:da:47:61:1e:16:40:73:20:bc:54:
6b:61:b4:60:e1:5e:2f:24:17:d7:23:b9:d3:b3:75:
85:e6:47:b3:42:6c:c1:63:ac:62:89:36:85:b8:bf:
6d:f9:f0:c4:b2:fb:44:62:29:f4:b6:28:27:77:6a:
43:9d:7a:69:ec:a6:6d:c7:0f:5a:a3:24:a3:e2:88:
58:8e:b7:90:53:13:a1:e5:13:51:6d:d7:e8:65:6b:
bf:a4:f1:ae:5f:8c:ed:b0:1f:0b:92:42:4e:8b:2f:
66:a2:92:42:e4:ea:ef:ca:b8:aa:d7:ef:ad:e0:1c:
8e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:80:2F:56:85:FC:49:CF:25:28:AC:5D:06:00:76:EB:DC:9D:E9:B6
X509v3 Authority Key Identifier:
keyid:AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:b6:f0:6b:ec:47:e5:55:5f:f7:f8:f7:d5:7f:e1:ae:3a:70:
4f:36:63:0b:87:63:06:95:9a:45:ef:67:a2:e0:9c:9b:a1:ae:
3e:e4:72:96:5d:08:98:75:18:1f:9b:1c:89:4a:72:8b:e8:8f:
ef:2e:61:1b:38:de:de:df:57:0e:d1:cc:98:40:84:93:98:c1:
53:d6:9a:88:63:ab:7c:fa:68:7d:6b:58:e8:99:08:22:67:49:
53:eb:26:ad:99:01:43:18:c2:a2:e1:a4:5a:27:be:fb:34:f9:
f2:b4:ca:e4:f3:6c:1a:7a:35:07:d2:81:d3:ec:7b:59:b9:c3:
42:bc:6d:97:6a:ce:00:75:3a:2e:ff:7c:b6:55:f5:f9:d0:39:
dd:0f:a3:ab:63:29:7d:7b:d0:d2:da:c8:54:39:b9:00:7e:80:
75:a7:76:9d:19:35:79:35:39:42:04:73:14:90:d2:c6:fa:8e:
79:6b:c3:c6:d6:0e:3f:4e:b1:de:98:42:90:7c:de:d9:7d:56:
d2:f0:a2:2b:8c:b9:57:4b:dd:69:91:28:7e:18:5f:1b:d1:8c:
bf:fa:77:b8:92:dc:1b:29:b4:1f:5d:c9:16:ca:d1:34:0c:69:
f6:03:e6:d7:14:02:f0:19:da:51:75:c2:92:85:bf:80:6e:36:
01:b7:2a:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoLXlXb/slIFTdydx+2wCAkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZjkxMGYzNjI5MWMzYzIyNGRkYjU5NmQ5NTY1NDMxOTdm
MTYzZGUwHhcNMjUxMDIyMTAwMjAyWhcNMjUxMDIzMTAwMjAyWjAzMTEwLwYDVQQD
EygzMzgwMmY1Njg1ZmM0OWNmMjUyOGFjNWQwNjAwNzZlYmRjOWRlOWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAur6nvXRqQZiwwvUlBerQTZQ7auqD
FXho7AbgjkY/U+oxu9iYxVAqdHq1O2eks/3+MOFQztSsX3rqMhhLwrWt8clj/5xt
00b4gOlzCS8zQXExL9ChdmQgyfMbY+6qSypksMrXR2I6tlnQI3tNDg0jjR3y9Qks
mM+NKBXklgdxk6dWQj4Iyt/RJ33gFNpHYR4WQHMgvFRrYbRg4V4vJBfXI7nTs3WF
5kezQmzBY6xiiTaFuL9t+fDEsvtEYin0tignd2pDnXpp7KZtxw9aoySj4ohYjreQ
UxOh5RNRbdfoZWu/pPGuX4ztsB8LkkJOiy9mopJC5Orvyriq1++t4ByO3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDOAL1aF/EnPJSisXQYAduvcnem2MB8GA1UdIwQY
MBaAFKz5EPNikcPCJN21ltlWVDGX8WPeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclBrUTgyS1J3OElrM2JXVzJWWlVNWmZ4WTk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8xZjVlMDctMzJiNi00MTE0LThiMGQt
ZDNiNThmNjk4MTQ4LzEvclBrUTgyS1J3OElrM2JXVzJWWlVNWmZ4WTk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8xZjVlMDctMzJiNi00MTE0LThiMGQtZDNiNThmNjk4MTQ4
LzEvclBrUTgyS1J3OElrM2JXVzJWWlVNWmZ4WTk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALLbwa+xH
5VVf9/j31X/hrjpwTzZjC4djBpWaRe9nouCcm6GuPuRyll0ImHUYH5sciUpyi+iP
7y5hGzje3t9XDtHMmECEk5jBU9aaiGOrfPpofWtY6JkIImdJU+smrZkBQxjCouGk
Wie++zT58rTK5PNsGno1B9KB0+x7WbnDQrxtl2rOAHU6Lv98tlX1+dA53Q+jq2Mp
fXvQ0trIVDm5AH6Adad2nRk1eTU5QgRzFJDSxvqOeWvDxtYOP06x3phCkHze2X1W
0vCiK4y5V0vdaZEofhhfG9GMv/p3uJLcGym0H13JFsrRNAxp9gPm1xQC8BnaUXXC
koW/gG42AbcqpQ==
-----END CERTIFICATE-----
Generated at Wed Oct 22 14:57:06 2025 by rpki-client