Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft
File: FumqrOUCeVhbXFpdjuhWEGhsJsA.mft (raw, json)
Hash identifier: 8T8LioTuDNCGnzN0cWyi4O7SyC1DybC94M6cMy2rsJg=
Subject key identifier: 36:AE:B5:5F:CC:C1:62:CA:F7:C0:D4:D8:B1:A9:08:A0:4A:70:7E:BE
Authority key identifier: 16:E9:AA:AC:E5:02:79:58:5B:5C:5A:5D:8E:E8:56:10:68:6C:26:C0
Certificate issuer: /CN=16e9aaace50279585b5c5a5d8ee85610686c26c0
Certificate serial: 019A2AE79EFF5B868CB9B75010B681F30A24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FumqrOUCeVhbXFpdjuhWEGhsJsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft
Manifest number: 16F9
Signing time: Tue 28 Oct 2025 13:00:13 +0000
Manifest this update: Tue 28 Oct 2025 13:00:13 +0000
Manifest next update: Wed 29 Oct 2025 13:00:13 +0000
Files and hashes: 1: FumqrOUCeVhbXFpdjuhWEGhsJsA.crl (hash: IjhocPSU/6l9hpE503O4xNz/+ry2NjvSD+A0lRV9ats=)
2: XHC_hDAqYlIYXrUHwPjCSmuap-w.roa (hash: QCdmiPzQ+fM9D3JEIMjhnM6hVdihEFRjXxcysEmoq04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FumqrOUCeVhbXFpdjuhWEGhsJsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 13:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:e7:9e:ff:5b:86:8c:b9:b7:50:10:b6:81:f3:0a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16e9aaace50279585b5c5a5d8ee85610686c26c0
Validity
Not Before: Oct 28 13:00:13 2025 GMT
Not After : Oct 29 13:00:13 2025 GMT
Subject: CN=36aeb55fccc162caf7c0d4d8b1a908a04a707ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:73:d4:32:74:9e:a2:ef:54:ed:bd:2f:f5:e7:
0c:af:05:3b:ff:4d:65:da:63:17:d3:7a:73:be:22:
ef:73:bc:a3:82:b4:97:81:06:f5:24:5a:2f:c2:2c:
8d:e9:8e:a4:25:9d:93:5b:b2:30:d2:df:bb:10:ef:
85:cc:d7:b2:41:95:33:f3:db:97:a7:16:c1:37:ea:
51:e2:6e:2f:71:f5:04:5d:1e:a8:b2:28:a1:90:4d:
53:5d:a1:c5:67:ea:c9:5a:5c:0f:08:db:9b:88:66:
99:e7:ab:7f:60:28:89:2a:00:a5:50:2a:60:a8:27:
31:fb:99:84:63:92:60:18:c0:4d:44:4c:da:6c:bf:
a8:ec:62:6b:db:c1:f6:05:09:62:25:4e:8d:b9:c5:
b4:d5:05:c1:2a:79:7f:8e:91:b1:76:8f:ac:a4:4c:
f2:fc:42:3b:d5:18:a1:7a:41:ce:0d:22:ab:b2:c8:
66:43:2f:92:fd:0c:0c:b7:86:c1:28:69:7f:66:37:
85:d7:4d:89:49:95:ff:50:87:c2:36:b0:1a:8a:f0:
2d:37:47:ba:e5:f2:d9:27:d9:ec:21:f0:f9:95:f2:
3a:fb:7c:cf:d1:bd:26:5b:78:ae:7f:a0:33:0c:23:
be:e5:15:23:85:f0:73:f5:8a:02:fa:06:4c:18:0d:
d7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:AE:B5:5F:CC:C1:62:CA:F7:C0:D4:D8:B1:A9:08:A0:4A:70:7E:BE
X509v3 Authority Key Identifier:
keyid:16:E9:AA:AC:E5:02:79:58:5B:5C:5A:5D:8E:E8:56:10:68:6C:26:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FumqrOUCeVhbXFpdjuhWEGhsJsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:67:a2:db:56:59:eb:65:ed:04:ad:71:fa:cb:0d:4a:33:cd:
4b:fe:01:91:10:85:6b:c7:92:b4:6b:2d:df:ac:c1:c0:ff:3c:
9b:a4:d1:39:72:9d:c8:56:df:68:25:8f:d6:eb:e9:a5:c4:5a:
87:c5:2f:b0:84:ea:3d:88:c1:6c:bd:71:f4:a7:13:ce:70:30:
6f:4f:09:27:ba:89:8d:fa:03:1a:24:32:16:b9:25:45:63:c2:
2d:75:0c:d9:b3:b0:8d:6e:be:77:8e:a3:f2:6c:f7:f7:69:b5:
b9:75:10:89:8d:5e:46:d7:6d:dd:bd:1a:e4:ac:4d:0f:98:42:
0b:8d:a3:bb:a8:36:3c:b4:53:73:dc:d6:41:cf:35:7d:bd:90:
dd:d5:66:d6:52:fe:e4:07:54:2e:4d:f0:45:76:12:ae:e0:02:
56:fa:2e:dd:d7:3d:1a:a3:93:f8:3d:e5:d4:c0:ea:da:a7:78:
0d:79:6d:e8:b6:99:81:4b:58:95:ae:ae:77:54:16:69:98:27:
12:bc:c0:f8:7a:93:70:0b:a7:31:60:3c:05:f6:c1:43:5a:93:
06:24:63:55:c7:ee:36:aa:b2:c6:1f:ee:77:d8:a5:ed:b8:f6:
cb:cb:82:a5:8f:ea:64:93:70:af:bc:cc:0b:df:ce:a1:f7:8f:
d9:8d:34:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoq557/W4aMubdQELaB8wokMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2ZTlhYWFjZTUwMjc5NTg1YjVjNWE1ZDhlZTg1NjEwNjg2
YzI2YzAwHhcNMjUxMDI4MTMwMDEzWhcNMjUxMDI5MTMwMDEzWjAzMTEwLwYDVQQD
EygzNmFlYjU1ZmNjYzE2MmNhZjdjMGQ0ZDhiMWE5MDhhMDRhNzA3ZWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHPUMnSeou9U7b0v9ecMrwU7/01l
2mMX03pzviLvc7yjgrSXgQb1JFovwiyN6Y6kJZ2TW7Iw0t+7EO+FzNeyQZUz89uX
pxbBN+pR4m4vcfUEXR6osiihkE1TXaHFZ+rJWlwPCNubiGaZ56t/YCiJKgClUCpg
qCcx+5mEY5JgGMBNREzabL+o7GJr28H2BQliJU6NucW01QXBKnl/jpGxdo+spEzy
/EI71RihekHODSKrsshmQy+S/QwMt4bBKGl/ZjeF102JSZX/UIfCNrAaivAtN0e6
5fLZJ9nsIfD5lfI6+3zP0b0mW3iuf6AzDCO+5RUjhfBz9YoC+gZMGA3XYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDautV/MwWLK98DU2LGpCKBKcH6+MB8GA1UdIwQY
MBaAFBbpqqzlAnlYW1xaXY7oVhBobCbAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnVtcXJPVUNlVmhiWEZwZGp1aFdFR2hzSnNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lMmRmMGUtN2JmZS00NGE5LWJmODYt
ZjllZjk3NDIwNzY0LzEvRnVtcXJPVUNlVmhiWEZwZGp1aFdFR2hzSnNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9lMmRmMGUtN2JmZS00NGE5LWJmODYtZjllZjk3NDIwNzY0
LzEvRnVtcXJPVUNlVmhiWEZwZGp1aFdFR2hzSnNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiGei21ZZ
62XtBK1x+ssNSjPNS/4BkRCFa8eStGst36zBwP88m6TROXKdyFbfaCWP1uvppcRa
h8UvsITqPYjBbL1x9KcTznAwb08JJ7qJjfoDGiQyFrklRWPCLXUM2bOwjW6+d46j
8mz392m1uXUQiY1eRtdt3b0a5KxND5hCC42ju6g2PLRTc9zWQc81fb2Q3dVm1lL+
5AdULk3wRXYSruACVvou3dc9GqOT+D3l1MDq2qd4DXlt6LaZgUtYla6ud1QWaZgn
ErzA+HqTcAunMWA8BfbBQ1qTBiRjVcfuNqqyxh/ud9il7bj2y8uCpY/qZJNwr7zM
C9/OofeP2Y00Vg==
-----END CERTIFICATE-----
Generated at Tue Oct 28 21:09:09 2025 by rpki-client