Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
File: _jsDhSYKxm8hxD9at4usaC6M5U8.mft (raw, json)
Hash identifier: p7a9VyZ1RFSuiwqR+spEbAyMj3Sm7dv0hNJW/+qDIO0=
Subject key identifier: 6E:62:06:0D:1E:E7:DA:95:78:90:48:72:87:94:A3:41:EB:25:88:78
Authority key identifier: FE:3B:03:85:26:0A:C6:6F:21:C4:3F:5A:B7:8B:AC:68:2E:8C:E5:4F
Certificate issuer: /CN=fe3b0385260ac66f21c43f5ab78bac682e8ce54f
Certificate serial: 019A2AE81B1A76115059FC4E20A6374D779D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
Manifest number: 16FA
Signing time: Tue 28 Oct 2025 13:00:45 +0000
Manifest this update: Tue 28 Oct 2025 13:00:45 +0000
Manifest next update: Wed 29 Oct 2025 13:00:45 +0000
Files and hashes: 1: Kvwz7Otgc_2cfxtWv-qyiSeDnkI.roa (hash: /Av0G+E+eRmfEHS46xLPNhTCJCoxta+3DzTycHIkaZ4=)
2: _jsDhSYKxm8hxD9at4usaC6M5U8.crl (hash: jtFKfHztFpqh+0u4A8J0x9zaTNn5sgyRiBWnNRcMBZg=)
3: jgkRdzS5JB9PWD_oFwdbOGdk6x4.roa (hash: pk7j7TBSzPnMDTNnJGvz2FoxttkV1MmZfvsZ3NtTMUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 13:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:e8:1b:1a:76:11:50:59:fc:4e:20:a6:37:4d:77:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe3b0385260ac66f21c43f5ab78bac682e8ce54f
Validity
Not Before: Oct 28 13:00:45 2025 GMT
Not After : Oct 29 13:00:45 2025 GMT
Subject: CN=6e62060d1ee7da95789048728794a341eb258878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:89:d7:e6:77:c1:15:74:5b:cd:f2:15:79:1a:
fc:2b:27:d9:12:ef:6a:bc:b8:25:a1:0e:39:15:bc:
01:e1:42:18:1d:da:01:b8:66:d4:8f:0e:19:54:7d:
1b:04:a8:cf:47:f7:5d:48:12:79:44:f0:aa:8c:b4:
de:79:5f:f3:62:f2:6b:dc:09:46:af:93:12:61:d0:
9f:2e:4a:b6:c3:7a:f0:f9:d5:0d:c6:84:53:fb:7a:
ed:2f:cd:50:77:e6:92:6c:86:4b:8e:cf:20:7b:80:
ce:88:1a:69:fe:77:60:bd:a5:65:57:98:36:61:00:
cc:5a:8f:64:f8:99:2f:d3:b8:0c:9f:c2:c7:36:bc:
4e:b4:8f:af:c3:0b:16:2b:7b:06:53:25:9f:fe:0d:
1d:fc:33:7f:75:0e:10:de:78:0d:13:90:3d:c4:4c:
ed:15:e5:d6:09:91:db:00:ae:00:af:6b:e0:5a:22:
c4:9d:39:44:0e:25:8c:f3:ca:3f:87:3f:f6:6e:32:
67:e5:7d:d1:4a:d8:75:a5:3a:30:e6:56:c1:06:b8:
8d:46:a2:10:6d:c2:bf:d2:63:02:f9:b9:b2:a1:25:
89:da:2b:88:8a:0e:1a:f3:68:52:c4:a0:93:25:99:
cf:dc:6d:f9:bc:56:20:b9:92:5f:ce:fe:08:73:1c:
1e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:62:06:0D:1E:E7:DA:95:78:90:48:72:87:94:A3:41:EB:25:88:78
X509v3 Authority Key Identifier:
keyid:FE:3B:03:85:26:0A:C6:6F:21:C4:3F:5A:B7:8B:AC:68:2E:8C:E5:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:f4:b5:ff:9a:7d:32:01:38:79:8a:be:f8:b6:28:cc:28:05:
f3:d2:87:05:8f:5a:98:59:fd:4c:79:00:97:26:24:9e:4b:97:
ad:f4:d7:76:f4:85:aa:10:8c:3e:56:ca:d2:1d:90:2b:02:df:
7e:6f:96:c8:31:0a:9b:71:b4:e5:23:c4:38:08:92:8d:b3:0e:
d9:8e:85:08:c4:08:f7:0d:a4:96:fb:f4:56:7d:75:83:ed:97:
2b:d4:9e:79:ae:44:b1:6c:13:a7:bb:45:5c:12:af:23:37:b2:
92:c0:3e:c2:51:6f:b6:8d:1c:de:b4:4f:c2:9c:10:19:9e:6b:
47:76:bb:14:c0:4e:55:32:95:aa:2c:72:02:0a:04:e0:70:c6:
8c:44:b0:e4:92:84:24:d4:74:83:35:8d:0b:b4:f9:79:bc:ca:
2a:ee:20:28:6e:48:fc:67:b7:ff:f6:a2:97:42:7c:f7:33:b2:
9c:27:1c:96:15:2d:1d:0e:fe:b8:3f:94:52:67:66:ff:ce:f2:
ec:c2:b4:22:7d:aa:6f:31:ad:1f:5d:09:9b:97:6d:87:f2:50:
f7:4c:1e:e4:e2:11:f8:ee:78:79:42:1c:38:64:e7:26:6c:0a:
8f:be:f9:da:da:eb:ac:77:14:94:7c:db:d7:7d:63:72:02:fc:
f4:48:b4:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoq6BsadhFQWfxOIKY3TXedMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlM2IwMzg1MjYwYWM2NmYyMWM0M2Y1YWI3OGJhYzY4MmU4
Y2U1NGYwHhcNMjUxMDI4MTMwMDQ1WhcNMjUxMDI5MTMwMDQ1WjAzMTEwLwYDVQQD
Eyg2ZTYyMDYwZDFlZTdkYTk1Nzg5MDQ4NzI4Nzk0YTM0MWViMjU4ODc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4nX5nfBFXRbzfIVeRr8KyfZEu9q
vLgloQ45FbwB4UIYHdoBuGbUjw4ZVH0bBKjPR/ddSBJ5RPCqjLTeeV/zYvJr3AlG
r5MSYdCfLkq2w3rw+dUNxoRT+3rtL81Qd+aSbIZLjs8ge4DOiBpp/ndgvaVlV5g2
YQDMWo9k+Jkv07gMn8LHNrxOtI+vwwsWK3sGUyWf/g0d/DN/dQ4Q3ngNE5A9xEzt
FeXWCZHbAK4Ar2vgWiLEnTlEDiWM88o/hz/2bjJn5X3RSth1pTow5lbBBriNRqIQ
bcK/0mMC+bmyoSWJ2iuIig4a82hSxKCTJZnP3G35vFYguZJfzv4IcxwehwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG5iBg0e59qVeJBIcoeUo0HrJYh4MB8GA1UdIwQY
MBaAFP47A4UmCsZvIcQ/WreLrGgujOVPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2pzRGhTWUt4bThoeEQ5YXQ0dXNhQzZNNVU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9hMmZmZDktNzQ1ZC00ZTdkLWIyYjIt
NzUwMzNmOGY3MjEwLzEvX2pzRGhTWUt4bThoeEQ5YXQ0dXNhQzZNNVU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9hMmZmZDktNzQ1ZC00ZTdkLWIyYjItNzUwMzNmOGY3MjEw
LzEvX2pzRGhTWUt4bThoeEQ5YXQ0dXNhQzZNNVU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmvS1/5p9
MgE4eYq++LYozCgF89KHBY9amFn9THkAlyYknkuXrfTXdvSFqhCMPlbK0h2QKwLf
fm+WyDEKm3G05SPEOAiSjbMO2Y6FCMQI9w2klvv0Vn11g+2XK9Seea5EsWwTp7tF
XBKvIzeyksA+wlFvto0c3rRPwpwQGZ5rR3a7FMBOVTKVqixyAgoE4HDGjESw5JKE
JNR0gzWNC7T5ebzKKu4gKG5I/Ge3//ail0J89zOynCcclhUtHQ7+uD+UUmdm/87y
7MK0In2qbzGtH10Jm5dth/JQ90we5OIR+O54eUIcOGTnJmwKj7752trrrHcUlHzb
131jcgL89Ei04g==
-----END CERTIFICATE-----
Generated at Tue Oct 28 17:21:04 2025 by rpki-client