Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
File: XW8uSaMejfnFqgiq8kC1yDK5y5M.mft (raw, json)
Hash identifier: /q9ejHj9ncuAzbjKtpJNyK8zJ566sU3VBK9u4Klm3sk=
Subject key identifier: 1E:05:3F:49:9B:15:76:86:F2:10:F1:A1:43:FC:F3:9E:0F:F2:14:78
Authority key identifier: 5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93
Certificate issuer: /CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93
Certificate serial: 019A1EADA643DDBA5B8E5CD14536501B3F0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
Manifest number: 16F4
Signing time: Sun 26 Oct 2025 04:01:27 +0000
Manifest this update: Sun 26 Oct 2025 04:01:27 +0000
Manifest next update: Mon 27 Oct 2025 04:01:27 +0000
Files and hashes: 1: XW8uSaMejfnFqgiq8kC1yDK5y5M.crl (hash: zJm+CAv5Em+b0h2U+O6SoWGoDZwA+VdPFhczGSUjWN0=)
2: xHeFV7LDVFZB_AXsHUMISj0MMpM.roa (hash: zr19PczTacMTyJWF70Jrv9gJyDfg+hRdchb2JoAvSkU=)
3: xd68Uzc7_M44plAufbmV8mthICI.roa (hash: n4Lxnlhf3i7uy3oySy0zpwQYnbK5dqfAn++RkVBCL/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:ad:a6:43:dd:ba:5b:8e:5c:d1:45:36:50:1b:3f:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93
Validity
Not Before: Oct 26 04:01:27 2025 GMT
Not After : Oct 27 04:01:27 2025 GMT
Subject: CN=1e053f499b157686f210f1a143fcf39e0ff21478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ff:04:fe:b7:a7:cb:ff:5c:0f:dd:01:1e:3c:
7b:7e:8b:c4:5b:c9:f0:c2:94:00:90:c1:fc:86:ff:
48:07:72:d0:32:13:12:57:d9:28:a6:f1:c5:24:3b:
59:ba:ce:e6:80:01:a6:6b:7b:68:e8:5f:01:34:1d:
bf:2b:01:9a:f9:9e:1a:e6:ba:12:79:68:f8:a6:d6:
b7:dc:c2:a8:c5:a7:38:b5:69:25:07:df:c8:e1:99:
ae:ea:b6:d4:98:e8:15:6a:df:05:35:5e:c3:db:02:
d7:00:d2:15:5a:35:d0:22:72:f2:be:ab:bb:77:b5:
ee:96:e5:06:48:19:14:04:d3:ef:9f:12:73:b7:ae:
e2:d1:37:55:ed:93:4a:2b:ad:64:12:74:c7:15:2c:
f3:fc:02:d8:41:22:61:37:81:33:5f:43:3e:6f:3d:
4f:a3:61:c9:7d:f5:79:0d:61:4f:f4:25:4a:ee:6e:
dd:be:40:8c:1d:31:6a:eb:8e:29:f3:e9:91:31:d8:
6f:d2:40:44:ae:b9:7c:d3:8e:84:da:bb:c7:1d:66:
81:5e:1b:81:7c:c5:46:04:f9:35:3b:21:e2:9e:a6:
bc:bc:54:4d:5f:cd:fe:79:4c:7e:41:03:d4:a8:ac:
b1:4f:5f:fc:73:52:b1:fd:43:0b:eb:b8:df:18:8f:
2f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:05:3F:49:9B:15:76:86:F2:10:F1:A1:43:FC:F3:9E:0F:F2:14:78
X509v3 Authority Key Identifier:
keyid:5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:c4:78:8e:d4:66:42:f2:d1:7f:35:ce:e1:20:da:a4:4a:84:
5c:3e:a8:0f:24:38:0e:07:30:7e:65:e9:8b:ab:54:0b:c8:42:
a4:c5:41:7c:c7:89:79:ab:8f:8c:a7:6f:a1:6a:63:ea:0a:18:
57:ec:97:b1:af:c7:06:b6:9e:62:f6:02:70:ff:47:c3:86:7c:
d9:c1:da:4b:cd:53:4f:c3:d0:51:9a:f7:f6:1a:1d:1b:89:09:
b0:48:32:03:1c:3f:b5:8b:b8:aa:77:e2:36:ff:4d:21:b5:1a:
8b:59:42:73:86:b6:f2:09:6c:1c:38:46:49:57:e9:d4:09:68:
9e:64:87:cf:2d:46:4c:13:ee:a0:6e:dc:b2:6f:aa:b4:5d:fc:
64:17:d0:46:d7:76:4c:6f:e9:a0:75:fb:78:15:9c:ac:bb:7d:
8e:20:a6:b5:e9:c6:88:9f:22:70:b5:6c:78:1f:42:7c:58:80:
5c:0e:9c:ee:70:0a:ae:b1:ec:e8:a5:8a:23:81:5a:07:aa:55:
1a:14:4c:fc:fe:dc:90:13:7f:d4:bf:90:05:e2:8b:32:dc:3b:
0c:a3:58:68:37:de:05:b0:9d:95:bd:31:57:3e:81:ce:f1:1b:
1d:de:8c:df:43:dd:a4:e8:d1:c7:33:e3:97:e8:6e:dd:b5:be:
2c:56:4c:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoeraZD3bpbjlzRRTZQGz8LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkNmYyZTQ5YTMxZThkZjljNWFhMDhhYWYyNDBiNWM4MzJi
OWNiOTMwHhcNMjUxMDI2MDQwMTI3WhcNMjUxMDI3MDQwMTI3WjAzMTEwLwYDVQQD
EygxZTA1M2Y0OTliMTU3Njg2ZjIxMGYxYTE0M2ZjZjM5ZTBmZjIxNDc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7v8E/reny/9cD90BHjx7fovEW8nw
wpQAkMH8hv9IB3LQMhMSV9kopvHFJDtZus7mgAGma3to6F8BNB2/KwGa+Z4a5roS
eWj4pta33MKoxac4tWklB9/I4Zmu6rbUmOgVat8FNV7D2wLXANIVWjXQInLyvqu7
d7XuluUGSBkUBNPvnxJzt67i0TdV7ZNKK61kEnTHFSzz/ALYQSJhN4EzX0M+bz1P
o2HJffV5DWFP9CVK7m7dvkCMHTFq644p8+mRMdhv0kBErrl8046E2rvHHWaBXhuB
fMVGBPk1OyHinqa8vFRNX83+eUx+QQPUqKyxT1/8c1Kx/UML67jfGI8vwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB4FP0mbFXaG8hDxoUP8854P8hR4MB8GA1UdIwQY
MBaAFF1vLkmjHo35xaoIqvJAtcgyucuTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFc4dVNhTWVqZm5GcWdpcThrQzF5REs1eTVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi81NTIxZjctMmY3MS00YmY5LWExNDgt
MmU5ZGUyNTJkMWY2LzEvWFc4dVNhTWVqZm5GcWdpcThrQzF5REs1eTVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi81NTIxZjctMmY3MS00YmY5LWExNDgtMmU5ZGUyNTJkMWY2
LzEvWFc4dVNhTWVqZm5GcWdpcThrQzF5REs1eTVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmcR4jtRm
QvLRfzXO4SDapEqEXD6oDyQ4DgcwfmXpi6tUC8hCpMVBfMeJeauPjKdvoWpj6goY
V+yXsa/HBraeYvYCcP9Hw4Z82cHaS81TT8PQUZr39hodG4kJsEgyAxw/tYu4qnfi
Nv9NIbUai1lCc4a28glsHDhGSVfp1AlonmSHzy1GTBPuoG7csm+qtF38ZBfQRtd2
TG/poHX7eBWcrLt9jiCmtenGiJ8icLVseB9CfFiAXA6c7nAKrrHs6KWKI4FaB6pV
GhRM/P7ckBN/1L+QBeKLMtw7DKNYaDfeBbCdlb0xVz6BzvEbHd6M30PdpOjRxzPj
l+hu3bW+LFZMDg==
-----END CERTIFICATE-----
Generated at Sun Oct 26 12:35:03 2025 by rpki-client