Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
File: H6isN_lpUWlif3XgmJYzlt6WOMw.mft (raw, json)
Hash identifier: y4qi3Z6m/5OhZWj56u2xjLicF7DsaqcukL+qd7AyA4Q=
Subject key identifier: F8:8A:20:47:19:AA:0A:E9:BC:ED:61:67:E3:6C:19:31:32:0A:C6:A1
Authority key identifier: 1F:A8:AC:37:F9:69:51:69:62:7F:75:E0:98:96:33:96:DE:96:38:CC
Certificate issuer: /CN=1fa8ac37f9695169627f75e098963396de9638cc
Certificate serial: 019A7149D824F4B703CC9D1615B7B5BD9C72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 05:00:56 +0000
Manifest this update: Tue 11 Nov 2025 05:00:56 +0000
Manifest next update: Wed 12 Nov 2025 05:00:56 +0000
Files and hashes: 1: EV_VJQ7znLLT_4jLuRQdPiIqgco.roa (hash: D3X5PT8yDu7pN/mU+PmRQS2ADQ706uf76HlBQmopR6o=)
2: H6isN_lpUWlif3XgmJYzlt6WOMw.crl (hash: 83UMYQybSJXRWUROW0tKyOb7sr75DRv6XOUre/pZRb4=)
3: _A233dG0OsivwYkQExiSR967RqA.roa (hash: W1a0C5qkdasTQfph8n3hvMTYG6/PIGL4cSCJYs2ipZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:d8:24:f4:b7:03:cc:9d:16:15:b7:b5:bd:9c:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fa8ac37f9695169627f75e098963396de9638cc
Validity
Not Before: Nov 11 05:00:56 2025 GMT
Not After : Nov 12 05:00:56 2025 GMT
Subject: CN=f88a204719aa0ae9bced6167e36c1931320ac6a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b7:5c:c1:b8:2b:44:4b:97:ff:14:ac:1d:18:
f6:73:f0:26:c1:52:1e:63:a2:3f:45:e3:9e:1f:3f:
ec:98:bd:6e:00:35:2a:b7:f8:8a:bd:d7:d9:c4:62:
9b:7f:b0:d3:e2:87:e4:ce:4c:f0:0d:2b:55:bc:ce:
d1:97:d6:98:49:24:4a:6d:19:4a:b8:ac:20:f3:11:
78:4a:22:1d:c9:d9:47:d8:bc:52:c7:1a:37:8d:88:
fd:71:7d:32:f0:ac:6a:7d:ff:47:de:34:93:e3:b2:
f6:35:03:ef:9a:ac:42:e0:ab:9a:91:b7:e7:72:76:
12:a4:d4:cb:af:4c:11:d6:02:8d:37:eb:76:fd:ce:
2c:fe:95:df:20:7d:c3:18:58:25:5d:f8:e5:90:27:
2f:55:b7:5e:26:86:b4:cd:20:b1:d2:7e:98:2f:b8:
b2:50:a6:bc:2d:54:fb:b4:31:7e:3c:cf:08:0c:5a:
00:66:f3:45:b2:95:5a:8f:9f:e0:2d:e5:ba:85:aa:
0b:04:c7:d9:54:de:ca:ba:32:b2:15:b7:b5:8c:74:
92:b7:87:b5:3e:00:67:a4:c9:29:be:b5:9d:ed:8d:
3f:fe:ce:8f:ff:8b:44:e5:db:35:e1:62:d2:b6:be:
62:8e:ad:e7:a8:0d:9e:16:91:aa:cd:95:60:3d:03:
84:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8A:20:47:19:AA:0A:E9:BC:ED:61:67:E3:6C:19:31:32:0A:C6:A1
X509v3 Authority Key Identifier:
keyid:1F:A8:AC:37:F9:69:51:69:62:7F:75:E0:98:96:33:96:DE:96:38:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:27:ce:b2:a0:45:50:67:82:c6:60:f9:20:43:7f:ef:ef:f0:
71:31:73:de:45:69:f0:fe:cf:8a:ae:16:b4:85:44:a1:3f:fa:
28:53:aa:f6:b1:fd:d8:29:e5:51:55:79:31:31:c0:8e:82:aa:
db:9b:af:12:47:df:b4:82:da:ce:0e:c2:2c:fb:85:82:3c:a7:
e3:80:c0:ad:c1:9a:5a:31:90:5f:78:ea:f9:e1:b7:ac:65:d4:
48:df:23:35:98:a6:f0:33:8c:70:24:d4:93:b8:d7:4e:d5:0f:
80:29:1e:e1:eb:f5:c0:f8:02:53:7d:f0:73:5e:bb:7a:67:95:
2c:dd:bf:ca:1c:ba:0d:7f:2c:c3:70:ba:c7:b6:5c:68:16:43:
f5:dd:dd:46:96:8f:80:82:f3:f5:42:03:1b:cb:32:19:f9:ce:
b0:80:80:2f:7d:d5:b1:22:35:60:91:36:64:ca:8c:a7:f6:8b:
a0:69:49:f2:34:35:92:56:58:24:4d:86:14:88:26:e1:3a:34:
ee:79:f9:24:e9:59:e1:0f:9d:46:11:03:55:d8:4f:1f:b6:6d:
bc:26:40:14:af:33:d2:34:7f:2f:bb:2d:f6:9b:08:7f:c6:d3:
21:7f:a9:66:59:d8:95:19:bd:66:b0:74:14:76:28:55:bf:0f:
21:1e:79:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSdgk9LcDzJ0WFbe1vZxyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmYThhYzM3Zjk2OTUxNjk2MjdmNzVlMDk4OTYzMzk2ZGU5
NjM4Y2MwHhcNMjUxMTExMDUwMDU2WhcNMjUxMTEyMDUwMDU2WjAzMTEwLwYDVQQD
EyhmODhhMjA0NzE5YWEwYWU5YmNlZDYxNjdlMzZjMTkzMTMyMGFjNmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7dcwbgrREuX/xSsHRj2c/AmwVIe
Y6I/ReOeHz/smL1uADUqt/iKvdfZxGKbf7DT4ofkzkzwDStVvM7Rl9aYSSRKbRlK
uKwg8xF4SiIdydlH2LxSxxo3jYj9cX0y8Kxqff9H3jST47L2NQPvmqxC4Kuakbfn
cnYSpNTLr0wR1gKNN+t2/c4s/pXfIH3DGFglXfjlkCcvVbdeJoa0zSCx0n6YL7iy
UKa8LVT7tDF+PM8IDFoAZvNFspVaj5/gLeW6haoLBMfZVN7KujKyFbe1jHSSt4e1
PgBnpMkpvrWd7Y0//s6P/4tE5ds14WLStr5ijq3nqA2eFpGqzZVgPQOEoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPiKIEcZqgrpvO1hZ+NsGTEyCsahMB8GA1UdIwQY
MBaAFB+orDf5aVFpYn914JiWM5beljjMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDZpc05fbHBVV2xpZjNYZ21KWXpsdDZXT013LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi81YmMxY2MtZDAyYy00OGVlLTk5MzUt
MDIzYjZjMDc5M2YxLzEvSDZpc05fbHBVV2xpZjNYZ21KWXpsdDZXT013Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi81YmMxY2MtZDAyYy00OGVlLTk5MzUtMDIzYjZjMDc5M2Yx
LzEvSDZpc05fbHBVV2xpZjNYZ21KWXpsdDZXT013LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzyfOsqBF
UGeCxmD5IEN/7+/wcTFz3kVp8P7Piq4WtIVEoT/6KFOq9rH92CnlUVV5MTHAjoKq
25uvEkfftILazg7CLPuFgjyn44DArcGaWjGQX3jq+eG3rGXUSN8jNZim8DOMcCTU
k7jXTtUPgCke4ev1wPgCU33wc167emeVLN2/yhy6DX8sw3C6x7ZcaBZD9d3dRpaP
gILz9UIDG8syGfnOsICAL33VsSI1YJE2ZMqMp/aLoGlJ8jQ1klZYJE2GFIgm4To0
7nn5JOlZ4Q+dRhEDVdhPH7ZtvCZAFK8z0jR/L7st9psIf8bTIX+pZlnYlRm9ZrB0
FHYoVb8PIR55BQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:14:23 2025 by rpki-client