Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.mft
File: tDycG90eFSiKuTDUAFGzZTywnno.mft (raw, json)
Hash identifier: ZQZcVujYxCzAoyE7zqn6vpzal7QJWf3kuT70XHfqUA8=
Subject key identifier: 20:DD:62:D3:3A:5C:37:1A:0A:5A:A5:58:C0:67:BE:10:BF:C9:C9:C7
Authority key identifier: B4:3C:9C:1B:DD:1E:15:28:8A:B9:30:D4:00:51:B3:65:3C:B0:9E:7A
Certificate issuer: /CN=b43c9c1bdd1e15288ab930d40051b3653cb09e7a
Certificate serial: 019A1B3E54774BA2DEE291B48F39830392CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDycG90eFSiKuTDUAFGzZTywnno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.mft
Manifest number: 16F2
Signing time: Sat 25 Oct 2025 12:01:00 +0000
Manifest this update: Sat 25 Oct 2025 12:01:00 +0000
Manifest next update: Sun 26 Oct 2025 12:01:00 +0000
Files and hashes: 1: tDycG90eFSiKuTDUAFGzZTywnno.crl (hash: meg8EjB0otco64hCPrEr6LgJZm0nGrSYWFJbM3lg7gA=)
2: yUpCnFh46Tqx7sCXg4QHc_cNe3o.roa (hash: cp+PmQthE9hblxpquCO9Uz9at9P5Zu4kvGvMw6tU+Ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDycG90eFSiKuTDUAFGzZTywnno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 08:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:3e:54:77:4b:a2:de:e2:91:b4:8f:39:83:03:92:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43c9c1bdd1e15288ab930d40051b3653cb09e7a
Validity
Not Before: Oct 25 12:01:00 2025 GMT
Not After : Oct 26 12:01:00 2025 GMT
Subject: CN=20dd62d33a5c371a0a5aa558c067be10bfc9c9c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5e:84:01:4e:cb:59:c5:9e:c3:d4:6d:6b:0c:
ec:bb:40:78:35:f7:13:98:66:6a:a3:65:39:9d:10:
32:a9:be:dd:4d:b3:ed:a1:d1:bc:bc:e7:5a:78:6b:
e8:e0:ba:b1:f9:bd:55:ac:25:b8:d8:81:b3:83:e4:
c2:34:82:4f:78:d0:26:dc:d5:4c:de:6c:6d:08:52:
18:0e:c6:cc:36:0e:13:23:0f:ba:b2:49:f1:c4:dd:
eb:f7:12:d6:3e:e3:10:a6:dc:04:ad:46:ef:4d:3d:
c7:15:29:53:f3:3d:52:ea:d1:a0:d1:88:0b:9a:89:
f6:84:e5:82:be:eb:f5:6f:3e:ac:dc:aa:e6:f7:73:
d0:68:46:f5:73:8c:2d:7c:8f:c1:3c:89:9a:fd:40:
22:8f:9c:68:6f:be:4e:3d:8e:1d:cf:52:51:10:c2:
67:0e:da:6c:b1:74:46:5d:52:2a:fb:bc:6b:e8:78:
25:c7:1c:38:81:44:5f:38:9f:ec:d9:2a:3e:61:29:
41:1b:7e:7a:d4:ba:c0:d3:93:30:4a:f9:1d:df:0c:
2d:a9:d8:2b:74:b8:f2:06:14:a3:42:54:6c:d8:d0:
b7:d4:0a:98:80:e9:af:b2:2e:17:f5:a7:4c:d1:3d:
98:58:a6:81:a4:e6:a3:77:3e:60:65:d2:4a:1b:f9:
1f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:DD:62:D3:3A:5C:37:1A:0A:5A:A5:58:C0:67:BE:10:BF:C9:C9:C7
X509v3 Authority Key Identifier:
keyid:B4:3C:9C:1B:DD:1E:15:28:8A:B9:30:D4:00:51:B3:65:3C:B0:9E:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDycG90eFSiKuTDUAFGzZTywnno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:2e:70:9f:69:02:05:8e:e6:24:41:12:ac:cb:e6:d9:ab:16:
88:1c:65:8f:50:73:89:80:1c:6d:38:f4:b4:fc:06:1c:f1:33:
e9:c6:0d:56:14:34:c0:b1:6f:37:10:fb:89:60:d3:68:74:7e:
9f:13:40:0d:b9:01:f1:01:b6:27:88:96:66:c6:64:14:85:12:
f6:a6:3d:47:07:9a:43:dc:68:37:be:e4:a6:be:fe:09:09:73:
b7:8d:0e:6f:c3:70:ba:d8:9f:be:b6:ab:28:a3:9c:b1:fe:9d:
ea:30:99:7d:67:33:b1:09:8e:74:ce:c5:a9:a6:96:5c:11:39:
46:0f:d5:ed:ef:50:e3:b8:3b:1e:c6:9b:89:b9:6f:2b:54:a2:
19:1c:49:65:17:bc:7e:af:a8:a2:12:a9:ed:95:16:aa:f9:46:
5d:a8:54:a9:58:ea:7f:02:27:d6:18:38:f4:5b:a4:e8:02:15:
bd:41:f0:53:e6:52:4c:59:e1:c7:df:8f:a4:c3:86:3d:a8:73:
c2:c5:3c:71:5a:9d:12:7f:8b:8d:24:d8:6a:6e:86:05:b4:f6:
08:b3:5a:09:e3:9d:fa:12:26:67:c2:9e:ca:2e:e7:c2:0b:1e:
51:bb:cf:10:dc:ac:4c:6e:43:73:35:2c:19:94:dd:4f:8d:c5:
93:9f:f0:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZobPlR3S6Le4pG0jzmDA5LMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0M2M5YzFiZGQxZTE1Mjg4YWI5MzBkNDAwNTFiMzY1M2Ni
MDllN2EwHhcNMjUxMDI1MTIwMTAwWhcNMjUxMDI2MTIwMTAwWjAzMTEwLwYDVQQD
EygyMGRkNjJkMzNhNWMzNzFhMGE1YWE1NThjMDY3YmUxMGJmYzljOWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsV6EAU7LWcWew9Rtawzsu0B4NfcT
mGZqo2U5nRAyqb7dTbPtodG8vOdaeGvo4Lqx+b1VrCW42IGzg+TCNIJPeNAm3NVM
3mxtCFIYDsbMNg4TIw+6sknxxN3r9xLWPuMQptwErUbvTT3HFSlT8z1S6tGg0YgL
mon2hOWCvuv1bz6s3Krm93PQaEb1c4wtfI/BPIma/UAij5xob75OPY4dz1JREMJn
DtpssXRGXVIq+7xr6Hglxxw4gURfOJ/s2So+YSlBG3561LrA05MwSvkd3wwtqdgr
dLjyBhSjQlRs2NC31AqYgOmvsi4X9adM0T2YWKaBpOajdz5gZdJKG/kfjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCDdYtM6XDcaClqlWMBnvhC/ycnHMB8GA1UdIwQY
MBaAFLQ8nBvdHhUoirkw1ABRs2U8sJ56MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdER5Y0c5MGVGU2lLdVREVUFGR3paVHl3bm5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8wM2I3OWEtMzBlZC00ZDI2LTg1ODUt
OWM1ZDM1MTUyNmIzLzEvdER5Y0c5MGVGU2lLdVREVUFGR3paVHl3bm5vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC8wM2I3OWEtMzBlZC00ZDI2LTg1ODUtOWM1ZDM1MTUyNmIz
LzEvdER5Y0c5MGVGU2lLdVREVUFGR3paVHl3bm5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkC5wn2kC
BY7mJEESrMvm2asWiBxlj1BziYAcbTj0tPwGHPEz6cYNVhQ0wLFvNxD7iWDTaHR+
nxNADbkB8QG2J4iWZsZkFIUS9qY9RweaQ9xoN77kpr7+CQlzt40Ob8Nwutifvrar
KKOcsf6d6jCZfWczsQmOdM7FqaaWXBE5Rg/V7e9Q47g7HsabiblvK1SiGRxJZRe8
fq+oohKp7ZUWqvlGXahUqVjqfwIn1hg49Fuk6AIVvUHwU+ZSTFnhx9+PpMOGPahz
wsU8cVqdEn+LjSTYam6GBbT2CLNaCeOd+hImZ8Keyi7nwgseUbvPENysTG5DczUs
GZTdT43Fk5/wZA==
-----END CERTIFICATE-----
Generated at Sat Oct 25 13:39:00 2025 by rpki-client