Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.mft
File: pvE9aAzkgFkb-LN93KD66zu-dE4.mft (raw, json)
Hash identifier: t/RpTHtZo+DoPWMDCBBAr0sOwGHGU1k0KG0jwBBWfKQ=
Subject key identifier: 12:D2:7F:62:39:43:8C:94:EF:9E:3A:43:84:87:3A:40:91:51:4B:01
Authority key identifier: A6:F1:3D:68:0C:E4:80:59:1B:F8:B3:7D:DC:A0:FA:EB:3B:BE:74:4E
Certificate issuer: /CN=a6f13d680ce480591bf8b37ddca0faeb3bbe744e
Certificate serial: 019A2108CD45AEDA60833A1B58E6F54AD3F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pvE9aAzkgFkb-LN93KD66zu-dE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.mft
Manifest number: 16FB
Signing time: Sun 26 Oct 2025 15:00:16 +0000
Manifest this update: Sun 26 Oct 2025 15:00:16 +0000
Manifest next update: Mon 27 Oct 2025 15:00:16 +0000
Files and hashes: 1: W8EH6cHJ1jqNd1-fbWQ4302NcPE.roa (hash: 0aNZYoUKp18HEp9H4MaKrqtXZZf4gT5hLWGwRtSFdxU=)
2: pvE9aAzkgFkb-LN93KD66zu-dE4.crl (hash: FThCxgSy9ons9aa/HM2O3NBjfy9fmxp4e+1Sghpnv+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pvE9aAzkgFkb-LN93KD66zu-dE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 15:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:08:cd:45:ae:da:60:83:3a:1b:58:e6:f5:4a:d3:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6f13d680ce480591bf8b37ddca0faeb3bbe744e
Validity
Not Before: Oct 26 15:00:16 2025 GMT
Not After : Oct 27 15:00:16 2025 GMT
Subject: CN=12d27f6239438c94ef9e3a4384873a4091514b01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b3:a8:75:d5:3a:39:c9:8a:fa:38:b1:af:95:
16:d4:e7:fc:e6:8e:99:95:15:77:7b:7d:25:2e:49:
c5:77:db:6e:c6:70:da:25:cb:8f:41:00:62:de:1b:
4b:99:b2:bc:fc:4b:78:46:ef:92:e0:3f:4d:70:d2:
09:14:f4:18:df:f4:f4:7e:d3:5e:1e:0b:f0:d3:e0:
99:b3:f4:b1:df:61:00:fb:05:ec:66:0a:24:65:91:
35:1b:31:82:17:69:32:77:6c:0a:7a:a6:7a:87:2f:
d6:2a:ab:0b:a2:7d:67:fc:15:66:5c:ea:65:3f:bd:
be:61:ee:b6:a7:39:f3:54:89:5d:c8:24:d1:6c:53:
af:09:22:1f:62:44:75:fa:09:22:8f:a5:91:12:fd:
a8:97:5c:cd:be:c0:44:9b:97:f8:3a:c2:17:ac:d6:
cb:23:48:41:53:28:5b:4a:5e:e1:13:36:b6:69:07:
2a:87:1e:a6:da:55:f8:84:25:d0:5a:9d:d4:d6:82:
22:23:3d:43:9e:47:12:a3:52:19:e3:a3:92:9c:67:
e8:19:57:3a:46:13:4a:5b:56:0e:e4:91:df:8e:e6:
43:3a:61:f0:04:2e:68:3f:c0:80:f1:b8:09:d8:cc:
95:91:16:22:74:20:90:54:51:37:22:b2:8e:83:cb:
35:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D2:7F:62:39:43:8C:94:EF:9E:3A:43:84:87:3A:40:91:51:4B:01
X509v3 Authority Key Identifier:
keyid:A6:F1:3D:68:0C:E4:80:59:1B:F8:B3:7D:DC:A0:FA:EB:3B:BE:74:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pvE9aAzkgFkb-LN93KD66zu-dE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:a6:5f:a3:59:c1:fc:3c:de:26:3f:74:d3:70:78:c2:72:33:
8c:a9:11:9f:66:e0:a6:ad:9a:27:55:b1:45:f7:2e:4e:9b:62:
24:97:b5:e5:a7:8d:99:44:4f:8b:57:9a:a8:a7:e2:88:45:11:
d8:40:a9:fe:cf:3e:12:d7:71:53:60:5f:f2:d2:70:83:ce:6e:
e9:05:1c:22:1a:17:7f:1c:42:1b:02:52:c2:a8:cf:36:80:bd:
f1:f2:8f:26:21:cf:e1:be:b3:3a:e5:a6:fc:3c:f6:12:c0:c1:
91:c9:b8:32:14:28:05:25:80:e0:a8:d4:35:5e:bf:11:00:6b:
3b:2a:79:f0:1c:48:11:76:2a:e0:9e:f6:64:e5:97:28:a4:2e:
33:f2:80:48:93:ec:13:c8:16:4d:87:a4:be:b4:fd:e8:48:b6:
34:f6:3f:e8:39:d7:b4:3e:ff:3a:f0:65:a7:97:55:f5:92:7c:
2c:e2:87:21:21:01:95:a4:73:bc:39:f4:93:e5:e4:56:4c:4c:
0d:70:b7:12:19:9b:d5:21:9a:51:4c:33:61:68:65:2a:24:42:
ae:6f:9d:b4:8b:23:f3:f4:81:09:ea:05:bd:78:ba:6b:53:32:
0d:51:0e:79:cd:3a:0e:6a:d0:ab:e0:34:e9:5f:ca:f9:ff:7a:
04:a3:1c:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZohCM1FrtpggzobWOb1StP1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2ZjEzZDY4MGNlNDgwNTkxYmY4YjM3ZGRjYTBmYWViM2Ji
ZTc0NGUwHhcNMjUxMDI2MTUwMDE2WhcNMjUxMDI3MTUwMDE2WjAzMTEwLwYDVQQD
EygxMmQyN2Y2MjM5NDM4Yzk0ZWY5ZTNhNDM4NDg3M2E0MDkxNTE0YjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7OoddU6OcmK+jixr5UW1Of85o6Z
lRV3e30lLknFd9tuxnDaJcuPQQBi3htLmbK8/Et4Ru+S4D9NcNIJFPQY3/T0ftNe
Hgvw0+CZs/Sx32EA+wXsZgokZZE1GzGCF2kyd2wKeqZ6hy/WKqsLon1n/BVmXOpl
P72+Ye62pznzVIldyCTRbFOvCSIfYkR1+gkij6WREv2ol1zNvsBEm5f4OsIXrNbL
I0hBUyhbSl7hEza2aQcqhx6m2lX4hCXQWp3U1oIiIz1DnkcSo1IZ46OSnGfoGVc6
RhNKW1YO5JHfjuZDOmHwBC5oP8CA8bgJ2MyVkRYidCCQVFE3IrKOg8s1mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBLSf2I5Q4yU7546Q4SHOkCRUUsBMB8GA1UdIwQY
MBaAFKbxPWgM5IBZG/izfdyg+us7vnROMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHZFOWFBemtnRmtiLUxOOTNLRDY2enUtZEU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ZDFiMDItYjBmOS00ZTBlLWE0NTct
MzBiZGI0OGRhNTIxLzEvcHZFOWFBemtnRmtiLUxOOTNLRDY2enUtZEU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy84ZDFiMDItYjBmOS00ZTBlLWE0NTctMzBiZGI0OGRhNTIx
LzEvcHZFOWFBemtnRmtiLUxOOTNLRDY2enUtZEU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUKZfo1nB
/DzeJj9003B4wnIzjKkRn2bgpq2aJ1WxRfcuTptiJJe15aeNmURPi1eaqKfiiEUR
2ECp/s8+EtdxU2Bf8tJwg85u6QUcIhoXfxxCGwJSwqjPNoC98fKPJiHP4b6zOuWm
/Dz2EsDBkcm4MhQoBSWA4KjUNV6/EQBrOyp58BxIEXYq4J72ZOWXKKQuM/KASJPs
E8gWTYekvrT96Ei2NPY/6DnXtD7/OvBlp5dV9ZJ8LOKHISEBlaRzvDn0k+XkVkxM
DXC3Ehmb1SGaUUwzYWhlKiRCrm+dtIsj8/SBCeoFvXi6a1MyDVEOec06DmrQq+A0
6V/K+f96BKMcCw==
-----END CERTIFICATE-----
Generated at Mon Oct 27 01:27:50 2025 by rpki-client