Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
File: 3pDUMpPP6_h-fqsrDVU_0hpulkE.mft (raw, json)
Hash identifier: bN8Vynt2ZPTievfbjJZn2nClFJXQlJ1DDzbqzrgCVLE=
Subject key identifier: 10:2A:79:C5:3B:62:02:E4:ED:16:6D:3B:DC:1C:9E:FE:DB:CD:36:8B
Authority key identifier: DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41
Certificate issuer: /CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
Certificate serial: 019A161772379AFC707F0552AC1610B802C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
Manifest number: 16F8
Signing time: Fri 24 Oct 2025 12:00:26 +0000
Manifest this update: Fri 24 Oct 2025 12:00:26 +0000
Manifest next update: Sat 25 Oct 2025 12:00:26 +0000
Files and hashes: 1: 1-r8ngTnAMIWnigi3kZKRlPxzAEg.roa (hash: 4upInjfh8BMDhZW1GMRFLRcUKFy4sgss61UjVbuCcN4=)
2: 3bHFI98fNrO-AI7iYMdoY6Cy4Ec.roa (hash: jNavEGcWKNfNKB84/MmKoUJXT5oHj4PAQhOkM5ErTv4=)
3: 3pDUMpPP6_h-fqsrDVU_0hpulkE.crl (hash: wQIyIJbPeh5SY9iv6HlVG7UVKsNLigudQyEegbZgw+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 12:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:16:17:72:37:9a:fc:70:7f:05:52:ac:16:10:b8:02:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
Validity
Not Before: Oct 24 12:00:26 2025 GMT
Not After : Oct 25 12:00:26 2025 GMT
Subject: CN=102a79c53b6202e4ed166d3bdc1c9efedbcd368b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:af:db:9f:ab:63:7c:54:9b:48:9d:c4:67:8d:
9d:d8:7a:77:48:7f:48:1e:bd:88:40:87:46:21:f6:
6f:54:4a:1a:ec:ca:3c:c3:cf:99:c7:42:9c:97:dc:
3a:47:a5:e9:a3:0f:e3:9a:14:a6:39:47:47:5b:8a:
ee:8a:27:8e:3d:24:3c:30:7e:41:a6:fc:2d:40:23:
b8:40:29:b1:0f:5f:e1:92:80:f1:c6:9d:32:37:ab:
8c:4b:b4:8e:d4:bf:c4:ef:de:a8:e9:87:82:22:7a:
50:67:45:94:7d:10:28:ab:67:cd:5e:78:ef:0f:de:
37:c0:ae:93:ca:5d:89:b4:80:91:a5:89:b0:a9:42:
22:8e:41:ff:98:49:6c:47:d4:aa:ce:ee:f8:ef:78:
7a:a7:7b:fb:f0:5e:14:96:53:a0:c9:f0:53:53:fe:
ca:40:9a:ce:ea:b7:17:88:24:f4:b4:fe:67:7d:e7:
c2:32:75:36:65:4d:8a:9a:fe:1f:37:23:da:f8:6c:
89:07:6a:68:39:bb:6a:ff:70:fb:31:13:b2:01:e1:
2d:ff:e5:8a:42:fe:dd:fa:3f:16:33:0e:22:58:4b:
37:f1:54:a0:aa:5d:18:a1:6b:b2:6e:a6:46:ce:8d:
78:04:58:cf:3e:29:5a:bc:1e:4c:b8:91:95:5b:40:
3e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:2A:79:C5:3B:62:02:E4:ED:16:6D:3B:DC:1C:9E:FE:DB:CD:36:8B
X509v3 Authority Key Identifier:
keyid:DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:b8:cf:c4:94:6a:da:be:e6:04:82:f3:bf:e9:28:88:7b:be:
92:33:65:9a:6f:df:14:ee:2b:b7:d7:c5:32:f0:61:5b:65:f8:
fd:92:f0:43:86:c6:1a:9c:a6:df:08:04:0b:27:ad:4c:de:82:
36:ff:16:54:1d:ec:3f:b0:97:b9:e8:5a:c1:c3:d2:4b:88:4d:
37:6f:d2:19:8a:20:99:c2:77:ab:70:6c:05:a2:2c:ec:34:bd:
38:58:7e:43:b4:0b:3a:fe:fa:86:4d:4c:ca:aa:69:56:2d:55:
69:f6:ec:8c:57:7c:9c:97:47:fc:0e:11:43:ea:87:25:27:41:
7b:53:f5:aa:6e:fc:48:5e:53:ed:25:70:f2:14:31:d9:ae:9a:
60:46:34:f9:e2:91:c2:f1:ec:af:29:c7:6b:f9:32:38:6c:20:
88:7e:d1:fb:d8:14:77:0c:44:12:9b:72:14:32:aa:f4:79:a1:
11:65:53:80:c6:b2:0a:f2:b6:92:a2:97:fe:eb:20:8e:55:66:
1c:92:75:ed:51:ad:b2:54:64:f0:1f:8f:6b:1d:83:5f:11:85:
b3:43:f0:f3:cf:e1:9b:c2:d0:14:05:4f:eb:55:51:b6:5a:91:
b0:1a:2f:66:d7:86:99:d2:4c:b5:61:02:71:f8:24:9b:02:0e:
d0:18:54:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoWF3I3mvxwfwVSrBYQuALEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlOTBkNDMyOTNjZmViZjg3ZTdlYWIyYjBkNTUzZmQyMWE2
ZTk2NDEwHhcNMjUxMDI0MTIwMDI2WhcNMjUxMDI1MTIwMDI2WjAzMTEwLwYDVQQD
EygxMDJhNzljNTNiNjIwMmU0ZWQxNjZkM2JkYzFjOWVmZWRiY2QzNjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxq/bn6tjfFSbSJ3EZ42d2Hp3SH9I
Hr2IQIdGIfZvVEoa7Mo8w8+Zx0Kcl9w6R6Xpow/jmhSmOUdHW4ruiieOPSQ8MH5B
pvwtQCO4QCmxD1/hkoDxxp0yN6uMS7SO1L/E796o6YeCInpQZ0WUfRAoq2fNXnjv
D943wK6Tyl2JtICRpYmwqUIijkH/mElsR9Sqzu7473h6p3v78F4UllOgyfBTU/7K
QJrO6rcXiCT0tP5nfefCMnU2ZU2Kmv4fNyPa+GyJB2poObtq/3D7MROyAeEt/+WK
Qv7d+j8WMw4iWEs38VSgql0YoWuybqZGzo14BFjPPilavB5MuJGVW0A+cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBAqecU7YgLk7RZtO9wcnv7bzTaLMB8GA1UdIwQY
MBaAFN6Q1DKTz+v4fn6rKw1VP9IabpZBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3BEVU1wUFA2X2gtZnFzckRWVV8waHB1bGtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82NDdlYmEtZDY2Ni00OWM3LWEwODkt
NTNlZGM2MjZiMjg3LzEvM3BEVU1wUFA2X2gtZnFzckRWVV8waHB1bGtFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi82NDdlYmEtZDY2Ni00OWM3LWEwODktNTNlZGM2MjZiMjg3
LzEvM3BEVU1wUFA2X2gtZnFzckRWVV8waHB1bGtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK7jPxJRq
2r7mBILzv+koiHu+kjNlmm/fFO4rt9fFMvBhW2X4/ZLwQ4bGGpym3wgECyetTN6C
Nv8WVB3sP7CXuehawcPSS4hNN2/SGYogmcJ3q3BsBaIs7DS9OFh+Q7QLOv76hk1M
yqppVi1VafbsjFd8nJdH/A4RQ+qHJSdBe1P1qm78SF5T7SVw8hQx2a6aYEY0+eKR
wvHsrynHa/kyOGwgiH7R+9gUdwxEEptyFDKq9HmhEWVTgMayCvK2kqKX/usgjlVm
HJJ17VGtslRk8B+Pax2DXxGFs0Pw88/hm8LQFAVP61VRtlqRsBovZteGmdJMtWEC
cfgkmwIO0BhUMQ==
-----END CERTIFICATE-----
Generated at Fri Oct 24 20:47:21 2025 by rpki-client