Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
File: ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft (raw, json)
Hash identifier: g0xEmgVvwOoAQKgWu26C30YzzB/eEWRWt8fZnALZJjA=
Subject key identifier: 09:17:C5:AA:27:AD:58:E2:74:25:01:98:36:7F:BD:CD:43:D7:61:8D
Authority key identifier: 86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB
Certificate issuer: /CN=86df1259b3aa1de34d13d1d863178864d9d185cb
Certificate serial: 019A4DAA8C4CD6CC26FEEC7D7F9AE4D3DAD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
Manifest number: 15D2
Signing time: Tue 04 Nov 2025 07:00:13 +0000
Manifest this update: Tue 04 Nov 2025 07:00:13 +0000
Manifest next update: Wed 05 Nov 2025 07:00:13 +0000
Files and hashes: 1: KntY924djWUw2E5_6Dutq_ZZ4Zc.roa (hash: KalXmSDxooKoko/REjizBaBBm53fPU+cB759UZj4dk0=)
2: WeH1WlhYDBMKUix1j52cA9uy8vg.roa (hash: LDMrba3gzwSdDXVT+UZ/jMO8QMSCHSdMpFhiaPS/CDk=)
3: ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl (hash: dxSz3uQIb+7vqniqu07d4hyxyjvY2gRlIJb+UAlrpI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:8c:4c:d6:cc:26:fe:ec:7d:7f:9a:e4:d3:da:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86df1259b3aa1de34d13d1d863178864d9d185cb
Validity
Not Before: Nov 4 07:00:13 2025 GMT
Not After : Nov 5 07:00:13 2025 GMT
Subject: CN=0917c5aa27ad58e274250198367fbdcd43d7618d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f2:68:4b:9e:20:17:92:1f:8c:7f:4d:7c:de:
8c:33:c4:a7:ef:1f:36:27:c6:6b:7a:8e:dc:7a:d9:
6f:16:51:41:af:28:73:cb:26:49:c8:76:fa:0a:6f:
47:41:06:21:31:d3:af:ea:24:9b:d2:11:10:43:51:
6b:d0:ec:77:8a:2f:0c:5f:89:83:10:9a:49:5d:d8:
cd:41:1c:76:b2:35:81:9d:52:7e:46:f6:93:4c:77:
98:5c:f0:34:97:37:3d:2e:0f:00:1d:f0:a3:fb:5a:
67:ed:f4:8a:27:56:80:dd:b5:11:bc:4d:d3:62:5c:
0b:31:7c:bb:0d:13:ab:f2:c0:92:52:40:20:26:37:
e8:3f:fa:b5:25:62:ef:5c:b9:69:c7:0d:24:e2:8f:
b3:03:06:62:dc:bb:b6:8f:08:d4:42:13:1a:39:c8:
b8:5d:4b:82:eb:d2:83:9b:40:5e:0a:ae:c7:15:28:
b5:7d:be:8b:1e:10:c6:35:3e:8a:cb:bf:6f:e0:b7:
79:a9:aa:e4:b9:46:4d:f9:b0:74:34:12:f3:48:dd:
82:c8:b8:07:5d:29:c9:91:f4:c9:d3:2e:27:82:a5:
d9:85:99:ae:0e:c2:d4:4f:06:8d:d8:98:1e:a6:c3:
70:19:ba:9c:9f:09:21:5b:a0:5a:6d:50:a6:92:5b:
64:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:17:C5:AA:27:AD:58:E2:74:25:01:98:36:7F:BD:CD:43:D7:61:8D
X509v3 Authority Key Identifier:
keyid:86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:7c:f3:72:bc:5f:bb:a0:70:83:e3:b2:91:84:67:85:d9:34:
b9:73:b0:ad:f7:8a:2a:68:a7:d1:ad:7e:2e:c0:46:d5:d0:c2:
fa:ac:77:17:7c:5e:38:24:22:9c:92:c8:03:43:e7:98:1a:2c:
a9:bd:a6:e7:cc:ab:d4:3e:2a:d1:56:07:69:33:26:d5:25:7f:
9c:b6:05:ec:63:ba:0c:e8:b7:db:e1:87:4d:c6:90:cd:f0:a2:
5a:a2:ca:11:44:67:81:65:c2:24:19:0f:85:5d:8f:96:f9:5b:
f5:d9:ef:d7:0c:63:02:5d:be:de:19:0b:13:fa:e4:4e:01:f1:
75:b5:2c:63:8c:f6:4c:f5:15:bd:bb:90:83:25:70:6e:a3:56:
97:c9:98:e5:23:c2:ba:b7:f6:64:56:a0:47:1e:4f:0e:9c:bc:
89:b2:a0:e0:df:1b:03:42:95:e4:ab:f3:ea:3f:3d:a8:13:65:
30:d5:fc:47:41:5b:b4:2e:a4:f6:32:f3:d9:1f:18:ab:ae:4e:
a3:72:b3:12:b3:80:c3:26:e5:c0:e5:78:0c:bb:44:f2:34:d7:
8f:ee:1a:e6:44:1d:39:51:25:fb:b2:33:fa:6f:8a:66:e1:7c:
ae:9f:8a:d0:43:20:f8:6d:81:49:27:c5:e6:31:68:0e:9b:57:
1e:5b:24:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNqoxM1swm/ux9f5rk09rYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZGYxMjU5YjNhYTFkZTM0ZDEzZDFkODYzMTc4ODY0ZDlk
MTg1Y2IwHhcNMjUxMTA0MDcwMDEzWhcNMjUxMTA1MDcwMDEzWjAzMTEwLwYDVQQD
EygwOTE3YzVhYTI3YWQ1OGUyNzQyNTAxOTgzNjdmYmRjZDQzZDc2MThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/JoS54gF5IfjH9NfN6MM8Sn7x82
J8Zreo7cetlvFlFBryhzyyZJyHb6Cm9HQQYhMdOv6iSb0hEQQ1Fr0Ox3ii8MX4mD
EJpJXdjNQRx2sjWBnVJ+RvaTTHeYXPA0lzc9Lg8AHfCj+1pn7fSKJ1aA3bURvE3T
YlwLMXy7DROr8sCSUkAgJjfoP/q1JWLvXLlpxw0k4o+zAwZi3Lu2jwjUQhMaOci4
XUuC69KDm0BeCq7HFSi1fb6LHhDGNT6Ky79v4Ld5qarkuUZN+bB0NBLzSN2CyLgH
XSnJkfTJ0y4ngqXZhZmuDsLUTwaN2JgepsNwGbqcnwkhW6BabVCmkltkIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAkXxaonrVjidCUBmDZ/vc1D12GNMB8GA1UdIwQY
MBaAFIbfElmzqh3jTRPR2GMXiGTZ0YXLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHQ4U1diT3FIZU5ORTlIWVl4ZUlaTm5SaGNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9kMDFhOTEtYTNhYi00ZTA4LTk1NjQt
YTUxYWEyM2E4ZmRkLzEvaHQ4U1diT3FIZU5ORTlIWVl4ZUlaTm5SaGNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9kMDFhOTEtYTNhYi00ZTA4LTk1NjQtYTUxYWEyM2E4ZmRk
LzEvaHQ4U1diT3FIZU5ORTlIWVl4ZUlaTm5SaGNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0nzzcrxf
u6Bwg+OykYRnhdk0uXOwrfeKKmin0a1+LsBG1dDC+qx3F3xeOCQinJLIA0PnmBos
qb2m58yr1D4q0VYHaTMm1SV/nLYF7GO6DOi32+GHTcaQzfCiWqLKEURngWXCJBkP
hV2Plvlb9dnv1wxjAl2+3hkLE/rkTgHxdbUsY4z2TPUVvbuQgyVwbqNWl8mY5SPC
urf2ZFagRx5PDpy8ibKg4N8bA0KV5Kvz6j89qBNlMNX8R0FbtC6k9jLz2R8Yq65O
o3KzErOAwyblwOV4DLtE8jTXj+4a5kQdOVEl+7Iz+m+KZuF8rp+K0EMg+G2BSSfF
5jFoDptXHlskEA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 09:23:39 2025 by rpki-client