Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.mft
File: vK-LpZ96PF0A_grUVk2AUk33-pA.mft (raw, json)
Hash identifier: vrNWesfwVDS1phCfBymkLPrhJNC/sfbUSkseS3oW5nM=
Subject key identifier: FC:FD:25:E7:98:A5:D3:B1:01:E1:AD:91:66:67:77:7F:FD:19:D2:8A
Authority key identifier: BC:AF:8B:A5:9F:7A:3C:5D:00:FE:0A:D4:56:4D:80:52:4D:F7:FA:90
Certificate issuer: /CN=bcaf8ba59f7a3c5d00fe0ad4564d80524df7fa90
Certificate serial: 019A269CE4D27DB4CE8F1B1B25EEC1178FE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vK-LpZ96PF0A_grUVk2AUk33-pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.mft
Manifest number: 16F5
Signing time: Mon 27 Oct 2025 17:00:06 +0000
Manifest this update: Mon 27 Oct 2025 17:00:06 +0000
Manifest next update: Tue 28 Oct 2025 17:00:06 +0000
Files and hashes: 1: A27u4uaTW6Wfn1YJN7sriqWyvlY.roa (hash: eRUT0mnKKp1D1eZhZRZxpjyCM3yHa+jgOt2PMVH/I+o=)
2: vK-LpZ96PF0A_grUVk2AUk33-pA.crl (hash: cca5r3yZ+OMGeMETrFNWNv8El0hAjjWBVnvP0yx0ZY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vK-LpZ96PF0A_grUVk2AUk33-pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:9c:e4:d2:7d:b4:ce:8f:1b:1b:25:ee:c1:17:8f:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcaf8ba59f7a3c5d00fe0ad4564d80524df7fa90
Validity
Not Before: Oct 27 17:00:06 2025 GMT
Not After : Oct 28 17:00:06 2025 GMT
Subject: CN=fcfd25e798a5d3b101e1ad916667777ffd19d28a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5f:88:34:be:c3:d8:88:3a:ec:4c:0a:4e:47:
57:31:5b:97:8c:16:07:26:7f:12:34:d4:af:6d:39:
02:88:2e:bd:c0:61:4e:df:30:15:ad:b1:fd:68:d1:
70:4e:6a:cb:f1:ed:d0:dd:8a:12:15:af:58:83:33:
9a:cf:cf:9b:e2:80:cf:b9:32:f9:3f:9f:b8:24:f9:
d2:7b:3e:d5:7e:12:17:d1:48:5e:e3:cc:4f:1a:1e:
99:00:fe:ce:be:f7:2b:8f:08:f5:bd:0d:c2:3c:ad:
f8:6c:8f:fc:4d:5d:f9:b0:dd:57:b5:de:b4:ed:32:
73:66:28:a5:de:a2:f8:43:86:dd:5c:af:00:cd:ea:
cc:04:0d:15:c2:43:bc:82:35:a2:31:20:61:91:1b:
30:2a:81:59:23:d6:72:02:52:96:fa:5b:cc:42:60:
ef:f5:05:64:bd:50:93:5b:87:60:b1:a7:1f:16:59:
d7:29:de:de:38:9e:12:08:b3:9d:ac:0a:ee:82:80:
8e:a8:36:cf:30:19:e0:8d:c6:b9:76:b0:ee:3f:b2:
e2:4d:c8:08:05:3d:c1:a4:e3:2c:55:3e:dc:c8:45:
5b:e3:79:02:de:94:6a:f4:ef:4f:99:66:d1:fd:43:
1e:ec:19:32:a2:09:7f:a9:7c:2f:cb:16:fc:35:5f:
85:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:FD:25:E7:98:A5:D3:B1:01:E1:AD:91:66:67:77:7F:FD:19:D2:8A
X509v3 Authority Key Identifier:
keyid:BC:AF:8B:A5:9F:7A:3C:5D:00:FE:0A:D4:56:4D:80:52:4D:F7:FA:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vK-LpZ96PF0A_grUVk2AUk33-pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:05:19:5e:3d:17:41:a6:ca:e8:d5:bf:b9:76:7f:c4:10:90:
21:ef:a9:c3:5d:c7:30:8f:64:a2:e7:2e:37:ce:7b:00:41:23:
b6:bd:e5:94:22:a9:cf:f2:94:95:93:15:3f:78:5c:44:d0:f9:
3d:3b:3e:b6:95:c4:52:72:7a:90:c4:b7:c9:0b:41:35:39:63:
60:f6:4c:33:14:85:28:10:d6:f0:79:5c:62:4f:ea:c5:f3:22:
8c:fe:4b:3c:4c:30:b6:ae:a3:94:c6:82:ae:73:89:7b:c9:5f:
19:3e:a0:b9:97:33:6e:70:27:91:33:f9:53:a9:b4:9b:29:22:
f1:08:ee:bb:25:df:b9:e8:d3:44:75:25:c3:12:53:66:8c:98:
93:03:f9:5f:c6:5a:47:e8:c9:e6:4f:f0:d1:74:4e:53:b3:6b:
ee:fb:ba:da:07:eb:65:d3:fb:0e:64:fc:90:0c:29:23:6d:a5:
64:05:e5:df:c1:bc:1c:f3:24:ee:60:80:41:9d:26:f1:6e:e6:
93:e5:fd:a4:69:79:38:08:35:43:b7:a5:98:35:55:d7:b4:7a:
83:b2:12:28:10:12:05:01:73:03:bf:b6:2d:b5:05:be:3a:b7:
a4:80:10:62:92:20:76:e7:13:dd:4d:8c:a2:ca:b0:c7:d2:79:
dd:2b:ea:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZomnOTSfbTOjxsbJe7BF4/nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjYWY4YmE1OWY3YTNjNWQwMGZlMGFkNDU2NGQ4MDUyNGRm
N2ZhOTAwHhcNMjUxMDI3MTcwMDA2WhcNMjUxMDI4MTcwMDA2WjAzMTEwLwYDVQQD
EyhmY2ZkMjVlNzk4YTVkM2IxMDFlMWFkOTE2NjY3Nzc3ZmZkMTlkMjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyl+INL7D2Ig67EwKTkdXMVuXjBYH
Jn8SNNSvbTkCiC69wGFO3zAVrbH9aNFwTmrL8e3Q3YoSFa9YgzOaz8+b4oDPuTL5
P5+4JPnSez7VfhIX0Uhe48xPGh6ZAP7Ovvcrjwj1vQ3CPK34bI/8TV35sN1Xtd60
7TJzZiil3qL4Q4bdXK8AzerMBA0VwkO8gjWiMSBhkRswKoFZI9ZyAlKW+lvMQmDv
9QVkvVCTW4dgsacfFlnXKd7eOJ4SCLOdrArugoCOqDbPMBngjca5drDuP7LiTcgI
BT3BpOMsVT7cyEVb43kC3pRq9O9PmWbR/UMe7Bkyogl/qXwvyxb8NV+FvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPz9JeeYpdOxAeGtkWZnd3/9GdKKMB8GA1UdIwQY
MBaAFLyvi6WfejxdAP4K1FZNgFJN9/qQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkstTHBaOTZQRjBBX2dyVVZrMkFVazMzLXBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9kMDdlOWUtMTMyYS00OGUyLTk1Mzgt
OTAyYWVjNDQwNDY0LzEvdkstTHBaOTZQRjBBX2dyVVZrMkFVazMzLXBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9kMDdlOWUtMTMyYS00OGUyLTk1MzgtOTAyYWVjNDQwNDY0
LzEvdkstTHBaOTZQRjBBX2dyVVZrMkFVazMzLXBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtQUZXj0X
QabK6NW/uXZ/xBCQIe+pw13HMI9koucuN857AEEjtr3llCKpz/KUlZMVP3hcRND5
PTs+tpXEUnJ6kMS3yQtBNTljYPZMMxSFKBDW8HlcYk/qxfMijP5LPEwwtq6jlMaC
rnOJe8lfGT6guZczbnAnkTP5U6m0myki8QjuuyXfuejTRHUlwxJTZoyYkwP5X8Za
R+jJ5k/w0XROU7Nr7vu62gfrZdP7DmT8kAwpI22lZAXl38G8HPMk7mCAQZ0m8W7m
k+X9pGl5OAg1Q7elmDVV17R6g7ISKBASBQFzA7+2LbUFvjq3pIAQYpIgducT3U2M
osqwx9J53SvqYw==
-----END CERTIFICATE-----
Generated at Mon Oct 27 19:21:20 2025 by rpki-client