Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
File: uRil9IFVJuHpJRDTZI69oM27wqw.mft (raw, json)
Hash identifier: JEMgm97vI/Q0As7qGj3DszYz0SNBtmTXi9uujoff0gg=
Subject key identifier: 50:8E:B6:F5:5C:C5:5B:AA:78:BB:24:04:ED:90:BD:35:14:B2:A2:BC
Authority key identifier: B9:18:A5:F4:81:55:26:E1:E9:25:10:D3:64:8E:BD:A0:CD:BB:C2:AC
Certificate issuer: /CN=b918a5f4815526e1e92510d3648ebda0cdbbc2ac
Certificate serial: 019A07121BB1623C9786C2BDA3E1144BEA3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
Manifest number: 08F3
Signing time: Tue 21 Oct 2025 14:00:18 +0000
Manifest this update: Tue 21 Oct 2025 14:00:18 +0000
Manifest next update: Wed 22 Oct 2025 14:00:18 +0000
Files and hashes: 1: NQ1K-9XIHqQJwtN4074dlf3XMz8.roa (hash: vM/pIxk1nyw8ZAVigG02xXVdjyCX5kUlIgX1S1etmX8=)
2: uRil9IFVJuHpJRDTZI69oM27wqw.crl (hash: ZHH0dIcQd/sNaRDYTLmhwExI2iR874jugTJhoL4JFMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 14:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:07:12:1b:b1:62:3c:97:86:c2:bd:a3:e1:14:4b:ea:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b918a5f4815526e1e92510d3648ebda0cdbbc2ac
Validity
Not Before: Oct 21 14:00:18 2025 GMT
Not After : Oct 22 14:00:18 2025 GMT
Subject: CN=508eb6f55cc55baa78bb2404ed90bd3514b2a2bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9f:78:3d:88:33:90:00:44:62:b3:df:6b:58:
d2:c0:f6:90:f6:47:86:0e:66:6c:cd:29:94:5c:93:
13:12:12:d1:d6:8b:f4:32:be:87:3e:9a:8e:11:51:
0f:59:cf:35:4c:c5:2e:a1:23:7f:be:21:6b:00:e9:
35:07:9a:d6:ae:3a:cb:16:17:4d:ee:31:e6:00:5c:
8e:7f:98:8c:e4:ba:89:a0:8f:e9:4d:3d:b2:5c:06:
de:6b:e7:68:71:d0:da:e3:1b:8b:d9:b5:71:03:0d:
e0:2d:ed:b7:ea:7f:65:85:0d:b8:7a:dd:72:8d:85:
3c:56:7b:15:c1:57:25:eb:48:67:fe:3f:cf:ab:78:
d6:05:8c:d9:4b:62:f8:15:b0:dd:32:d4:37:3c:da:
6f:a4:c1:09:4e:99:be:2e:13:83:1f:b2:d7:cb:bb:
dd:15:76:9b:42:5b:81:c8:97:1c:71:6a:a9:01:99:
14:a1:1d:91:3b:9b:c5:ca:cb:ff:6f:ff:a3:a7:73:
ae:6e:49:c7:41:46:71:84:e6:f7:68:91:b2:3b:5f:
cd:6b:13:c2:58:42:16:73:28:5c:05:13:12:40:2c:
52:95:57:85:11:45:36:05:17:57:20:73:9e:47:d3:
35:ed:4d:4d:ef:0b:1e:16:a5:ba:4b:32:5d:c4:ca:
07:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:8E:B6:F5:5C:C5:5B:AA:78:BB:24:04:ED:90:BD:35:14:B2:A2:BC
X509v3 Authority Key Identifier:
keyid:B9:18:A5:F4:81:55:26:E1:E9:25:10:D3:64:8E:BD:A0:CD:BB:C2:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:59:9b:dc:88:44:c4:3e:32:41:db:f6:1e:c2:69:4a:4d:bb:
a8:a6:00:35:1f:22:55:85:14:90:bb:d6:62:60:79:da:3c:26:
8e:6f:c4:b2:87:67:12:ca:b3:1f:fe:8f:7a:d8:cb:d8:6b:59:
3b:0f:f2:ea:e2:6a:39:42:b3:76:39:13:1f:7f:43:8c:2a:57:
cc:5b:52:ac:36:a0:34:5a:bd:08:82:df:88:27:fe:c4:e6:b5:
2b:51:45:18:d5:81:8a:5c:5b:3a:02:5f:8b:91:b8:6a:9c:b4:
2f:9e:ce:28:af:a3:63:dd:66:fd:43:9f:56:68:d7:df:2e:1f:
9b:c5:75:a7:68:46:66:36:20:24:cb:2d:47:e2:2f:80:d9:53:
b5:b4:34:0d:37:e8:04:8d:8e:c9:d3:46:e3:a0:35:57:19:7d:
34:b5:47:93:12:ce:99:92:e4:ea:db:fb:a6:86:56:32:72:cf:
11:b7:ec:5e:99:22:e5:68:5e:80:67:5e:bc:3b:6c:86:44:27:
80:8d:a4:d9:06:c2:76:17:6f:d6:d7:c2:ac:58:d8:66:77:7f:
b8:65:fb:6d:8f:41:c1:4d:a1:2a:3d:e5:a3:cb:cc:86:2b:90:
38:7d:e5:b5:80:b5:bd:99:f1:0b:c9:18:b2:eb:2b:8f:06:23:
14:6a:fe:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoHEhuxYjyXhsK9o+EUS+o7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MThhNWY0ODE1NTI2ZTFlOTI1MTBkMzY0OGViZGEwY2Ri
YmMyYWMwHhcNMjUxMDIxMTQwMDE4WhcNMjUxMDIyMTQwMDE4WjAzMTEwLwYDVQQD
Eyg1MDhlYjZmNTVjYzU1YmFhNzhiYjI0MDRlZDkwYmQzNTE0YjJhMmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAop94PYgzkABEYrPfa1jSwPaQ9keG
DmZszSmUXJMTEhLR1ov0Mr6HPpqOEVEPWc81TMUuoSN/viFrAOk1B5rWrjrLFhdN
7jHmAFyOf5iM5LqJoI/pTT2yXAbea+docdDa4xuL2bVxAw3gLe236n9lhQ24et1y
jYU8VnsVwVcl60hn/j/Pq3jWBYzZS2L4FbDdMtQ3PNpvpMEJTpm+LhODH7LXy7vd
FXabQluByJcccWqpAZkUoR2RO5vFysv/b/+jp3OubknHQUZxhOb3aJGyO1/NaxPC
WEIWcyhcBRMSQCxSlVeFEUU2BRdXIHOeR9M17U1N7wseFqW6SzJdxMoHfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFCOtvVcxVuqeLskBO2QvTUUsqK8MB8GA1UdIwQY
MBaAFLkYpfSBVSbh6SUQ02SOvaDNu8KsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVJpbDlJRlZKdUhwSlJEVFpJNjlvTTI3d3F3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8zYzI5M2EtMTU5MS00Njg1LTg3Njkt
YThmOTBkNDVlYTY3LzEvdVJpbDlJRlZKdUhwSlJEVFpJNjlvTTI3d3F3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC8zYzI5M2EtMTU5MS00Njg1LTg3NjktYThmOTBkNDVlYTY3
LzEvdVJpbDlJRlZKdUhwSlJEVFpJNjlvTTI3d3F3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJVmb3IhE
xD4yQdv2HsJpSk27qKYANR8iVYUUkLvWYmB52jwmjm/EsodnEsqzH/6PetjL2GtZ
Ow/y6uJqOUKzdjkTH39DjCpXzFtSrDagNFq9CILfiCf+xOa1K1FFGNWBilxbOgJf
i5G4apy0L57OKK+jY91m/UOfVmjX3y4fm8V1p2hGZjYgJMstR+IvgNlTtbQ0DTfo
BI2OydNG46A1Vxl9NLVHkxLOmZLk6tv7poZWMnLPEbfsXpki5WhegGdevDtshkQn
gI2k2QbCdhdv1tfCrFjYZnd/uGX7bY9BwU2hKj3lo8vMhiuQOH3ltYC1vZnxC8kY
susrjwYjFGr+4Q==
-----END CERTIFICATE-----
Generated at Tue Oct 21 22:59:21 2025 by rpki-client