Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.mft
File: lvbqdo68ndwGj1aX39dcrt164Qg.mft (raw, json)
Hash identifier: RfXnWA5BYugvR/rg7sOuUGaKAMhBsUc73OdtSm3sRtQ=
Subject key identifier: A8:40:82:0E:66:7C:25:76:7F:9E:CB:BE:FE:99:76:8C:89:AC:00:63
Authority key identifier: 96:F6:EA:76:8E:BC:9D:DC:06:8F:56:97:DF:D7:5C:AE:DD:7A:E1:08
Certificate issuer: /CN=96f6ea768ebc9ddc068f5697dfd75caedd7ae108
Certificate serial: 019A24E5F253B6FB8FDCF251AB730CAADF70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvbqdo68ndwGj1aX39dcrt164Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.mft
Manifest number: 105E
Signing time: Mon 27 Oct 2025 09:00:40 +0000
Manifest this update: Mon 27 Oct 2025 09:00:40 +0000
Manifest next update: Tue 28 Oct 2025 09:00:40 +0000
Files and hashes: 1: hpkYZsr4ehkRhZoX0PY5vhGw4f0.roa (hash: yIy93XAXh8xhvhofZiP5cDUdE2rbmmhviH4jDOGAZ/g=)
2: lvbqdo68ndwGj1aX39dcrt164Qg.crl (hash: D+EbBaMu6z75+9dz1hNR2/u8LUNphELBku7HB4AFBFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvbqdo68ndwGj1aX39dcrt164Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 09:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:e5:f2:53:b6:fb:8f:dc:f2:51:ab:73:0c:aa:df:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f6ea768ebc9ddc068f5697dfd75caedd7ae108
Validity
Not Before: Oct 27 09:00:40 2025 GMT
Not After : Oct 28 09:00:40 2025 GMT
Subject: CN=a840820e667c25767f9ecbbefe99768c89ac0063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:00:4e:0b:d6:d1:17:69:44:7c:2a:a1:2e:09:
d9:bf:c2:fa:8e:0e:00:b7:76:7d:24:f7:98:7c:86:
2c:9d:b8:4a:29:ed:4b:d6:4a:42:6b:71:e9:24:19:
45:d0:6b:42:89:b2:82:4e:23:24:03:0d:4c:e5:6f:
3e:39:21:56:e1:7d:41:d4:1e:c5:62:31:74:d9:af:
25:bf:22:95:fb:c8:f6:8c:af:19:11:39:bd:89:66:
b5:d6:64:f4:e6:dc:1b:53:6c:b1:40:b8:bb:fa:0f:
15:c8:a8:1c:6e:c5:c9:ad:d5:7b:dc:c2:91:36:8e:
13:20:55:6f:f4:3e:3c:ad:5a:f9:8b:b3:a3:25:24:
f4:44:fc:0f:51:ea:0d:47:98:f8:9d:51:f2:39:cb:
d2:ed:df:7b:77:ab:80:fb:8e:00:62:60:06:d6:eb:
70:47:c8:64:83:ca:c0:81:7b:ad:c7:54:c1:c1:84:
fb:3b:9f:43:db:d3:dc:5a:6b:a8:99:11:4b:9a:cb:
ab:f5:4a:e8:b8:4d:a2:9e:77:20:ef:fe:f5:aa:2c:
d4:fd:8a:31:24:40:12:4d:85:17:9b:06:7c:d5:be:
09:57:9b:c4:af:e7:eb:c0:c9:5f:f7:62:35:c5:85:
38:7f:6a:15:2d:8d:27:50:27:41:8d:dc:44:bd:ec:
a5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:40:82:0E:66:7C:25:76:7F:9E:CB:BE:FE:99:76:8C:89:AC:00:63
X509v3 Authority Key Identifier:
keyid:96:F6:EA:76:8E:BC:9D:DC:06:8F:56:97:DF:D7:5C:AE:DD:7A:E1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvbqdo68ndwGj1aX39dcrt164Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:49:a6:6f:01:aa:6d:08:66:eb:d8:9f:b4:6d:52:9c:d3:2a:
df:89:a9:7e:fa:d9:a2:b4:a9:c5:8a:dd:05:4d:2c:a4:c9:a2:
9d:ea:21:da:6c:5d:48:ba:74:10:ed:be:3e:2a:24:5b:9d:ae:
83:e7:24:40:92:39:9e:75:19:82:c2:b7:4c:6c:4e:ea:60:bf:
e2:71:db:8f:05:6d:04:50:c6:82:9b:66:9e:17:9e:3e:86:f5:
d0:38:c8:e1:6d:bc:29:2c:90:b1:6f:cb:b4:78:d6:9d:79:a8:
62:93:48:ed:3b:8b:77:5c:0e:dc:13:10:c4:5a:01:e6:7c:20:
a3:ec:71:90:a2:2e:cf:b1:29:46:9a:90:7c:f8:91:ed:d1:3b:
dc:07:11:bf:7e:45:0b:12:79:30:23:50:c0:58:d6:5d:b0:93:
d4:74:31:dc:79:6f:96:1a:10:7c:10:b8:5c:de:7f:52:5b:d3:
45:8b:4d:ba:5f:d5:20:40:0c:db:06:51:3d:10:e8:b6:ac:40:
c9:7b:73:d2:f3:79:d2:48:ba:ec:7c:2a:be:c2:3e:48:56:2b:
cd:b8:e3:88:13:46:7b:38:72:2f:f8:60:4c:60:16:cc:2a:85:
23:0c:2e:ae:ef:ce:06:db:d8:1d:4f:8f:ff:ea:23:8f:40:9e:
6d:05:d0:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZok5fJTtvuP3PJRq3MMqt9wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2ZjZlYTc2OGViYzlkZGMwNjhmNTY5N2RmZDc1Y2FlZGQ3
YWUxMDgwHhcNMjUxMDI3MDkwMDQwWhcNMjUxMDI4MDkwMDQwWjAzMTEwLwYDVQQD
EyhhODQwODIwZTY2N2MyNTc2N2Y5ZWNiYmVmZTk5NzY4Yzg5YWMwMDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwBOC9bRF2lEfCqhLgnZv8L6jg4A
t3Z9JPeYfIYsnbhKKe1L1kpCa3HpJBlF0GtCibKCTiMkAw1M5W8+OSFW4X1B1B7F
YjF02a8lvyKV+8j2jK8ZETm9iWa11mT05twbU2yxQLi7+g8VyKgcbsXJrdV73MKR
No4TIFVv9D48rVr5i7OjJST0RPwPUeoNR5j4nVHyOcvS7d97d6uA+44AYmAG1utw
R8hkg8rAgXutx1TBwYT7O59D29PcWmuomRFLmsur9UrouE2inncg7/71qizU/Yox
JEASTYUXmwZ81b4JV5vEr+frwMlf92I1xYU4f2oVLY0nUCdBjdxEveylbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKhAgg5mfCV2f57Lvv6ZdoyJrABjMB8GA1UdIwQY
MBaAFJb26naOvJ3cBo9Wl9/XXK7deuEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHZicWRvNjhuZHdHajFhWDM5ZGNydDE2NFFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS83YmFhMWMtOGRhMS00ZjgwLWJhYmIt
YjRiZmMyOWU3MWEzLzEvbHZicWRvNjhuZHdHajFhWDM5ZGNydDE2NFFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS83YmFhMWMtOGRhMS00ZjgwLWJhYmItYjRiZmMyOWU3MWEz
LzEvbHZicWRvNjhuZHdHajFhWDM5ZGNydDE2NFFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKEmmbwGq
bQhm69iftG1SnNMq34mpfvrZorSpxYrdBU0spMmineoh2mxdSLp0EO2+PiokW52u
g+ckQJI5nnUZgsK3TGxO6mC/4nHbjwVtBFDGgptmnheePob10DjI4W28KSyQsW/L
tHjWnXmoYpNI7TuLd1wO3BMQxFoB5nwgo+xxkKIuz7EpRpqQfPiR7dE73AcRv35F
CxJ5MCNQwFjWXbCT1HQx3HlvlhoQfBC4XN5/UlvTRYtNul/VIEAM2wZRPRDotqxA
yXtz0vN50ki67HwqvsI+SFYrzbjjiBNGezhyL/hgTGAWzCqFIwwuru/OBtvYHU+P
/+ojj0CebQXQGw==
-----END CERTIFICATE-----
Generated at Mon Oct 27 17:32:51 2025 by rpki-client