Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.mft
File: _h0Y2aIic226wjERC4jerI2wM20.mft (raw, json)
Hash identifier: j9Br3+Mx/kDqivhFVJqgrXo2kn90b32Qb5ji/0xwKm0=
Subject key identifier: 10:D0:FB:3B:17:72:C6:74:7B:B7:8E:D0:45:49:03:AC:3C:53:93:F0
Authority key identifier: FE:1D:18:D9:A2:22:73:6D:BA:C2:31:11:0B:88:DE:AC:8D:B0:33:6D
Certificate issuer: /CN=fe1d18d9a222736dbac231110b88deac8db0336d
Certificate serial: 019A21096AA3A6B0F44A75E238CCABD52FEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.mft
Manifest number: 16F8
Signing time: Sun 26 Oct 2025 15:00:56 +0000
Manifest this update: Sun 26 Oct 2025 15:00:56 +0000
Manifest next update: Mon 27 Oct 2025 15:00:56 +0000
Files and hashes: 1: EZTTi0DeKjOt5n50pGmAFCowsBg.roa (hash: E6d6xhT95nfb0o31mLYa+7IwZxSu5Vcz/JzrKKV4/Tw=)
2: _h0Y2aIic226wjERC4jerI2wM20.crl (hash: 5/ylLbuZVBGCMvjtmV9fxF9TyPTh8FuW9M+GEp8ZM3k=)
3: _j56SkoPwjvw5J3-yiHS-OHaGdg.roa (hash: 8LANgZZ7cUUufNrH/hblrmKv7SFmglJPoUVHRC20Sgc=)
4: nphj8rzOnLWDJ-Ev9uLxCzuPoh0.roa (hash: HyT5REdDkPYj/vcE9InpMXDrNrWM+FwGj433uROaITI=)
5: rrJ9oJTEKjWY36H_-ybxMrxa8AU.roa (hash: VOnvk/Pca3s41OyosIHhlUhIPKuz7htec6edKpEFyTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.mft
rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:09:6a:a3:a6:b0:f4:4a:75:e2:38:cc:ab:d5:2f:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe1d18d9a222736dbac231110b88deac8db0336d
Validity
Not Before: Oct 26 15:00:56 2025 GMT
Not After : Oct 27 15:00:56 2025 GMT
Subject: CN=10d0fb3b1772c6747bb78ed0454903ac3c5393f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f1:1a:a8:ed:c3:f1:30:02:40:c6:e7:d7:5a:
18:33:e0:9a:7f:25:90:c7:29:0b:4b:79:95:6b:32:
ec:c9:7f:b2:24:a5:53:2a:92:14:f6:c8:01:30:d3:
66:ab:67:ee:28:51:02:48:94:a1:52:bd:b0:45:b0:
b0:56:ac:50:1c:ea:4d:4e:49:1e:d3:10:83:2e:8e:
e4:57:7f:84:7a:19:17:2f:b1:55:6f:6f:6a:60:93:
a2:41:c4:c8:a0:cb:c3:aa:c3:16:0a:d2:b5:91:77:
5a:63:a9:e5:8c:75:9c:d4:66:cb:dd:ca:3b:fe:4b:
33:ef:ec:31:3a:39:e5:d8:a2:84:1f:6c:7d:cf:dc:
1d:15:fe:36:9f:68:02:7e:3d:5b:b6:2b:ce:1a:4e:
c6:e4:79:6f:45:f5:8e:16:c6:5a:eb:cf:a7:7b:0b:
27:6a:a6:d9:e6:2a:06:ad:59:f4:7a:8e:f5:9d:a6:
db:ca:d3:dd:62:29:dc:3e:33:78:8e:2b:93:ba:05:
86:18:1e:51:54:e8:a5:61:13:7f:bb:23:89:1f:51:
3f:03:f0:ed:d9:6c:5b:80:39:bc:88:e8:0e:30:82:
60:ce:1e:94:b7:74:17:d7:8c:44:ad:e2:09:3b:6b:
61:4c:14:0b:63:90:75:4a:53:8c:c5:ec:1a:26:f3:
64:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D0:FB:3B:17:72:C6:74:7B:B7:8E:D0:45:49:03:AC:3C:53:93:F0
X509v3 Authority Key Identifier:
keyid:FE:1D:18:D9:A2:22:73:6D:BA:C2:31:11:0B:88:DE:AC:8D:B0:33:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:df:63:ba:e0:94:d1:a6:0c:3e:1b:2c:55:b2:ea:f2:b4:20:
7c:1d:a1:77:7f:cb:3a:4d:30:44:c1:a5:68:07:ad:96:ed:a9:
58:cd:11:b6:53:5f:22:a2:e3:15:a3:1f:05:a9:e6:8e:a0:4e:
58:ab:41:4b:f6:52:36:00:42:17:71:d6:bb:3d:05:35:ef:dc:
44:00:81:93:59:2c:07:2a:f7:b5:e3:49:7e:e0:1d:30:17:38:
87:38:52:b3:e3:ea:0e:ba:52:c3:70:4f:db:5f:86:f7:d4:b3:
94:cb:32:7b:04:40:d2:ca:50:7e:7a:2c:21:7c:a8:c7:c8:e0:
55:c7:2e:52:bb:36:2c:6f:5e:b6:44:23:f8:5d:18:5a:f4:74:
97:df:5f:b3:ab:cb:8c:61:0d:a3:89:d9:21:90:79:fe:49:d0:
65:7d:88:3d:a7:b4:d4:54:03:8c:47:20:6a:35:62:a3:34:16:
80:4b:60:d8:49:03:ff:71:1a:e5:ea:dc:32:78:8b:00:04:70:
33:f0:8e:ea:ad:24:47:c6:59:2b:e1:db:8a:00:2d:65:e0:0d:
6a:57:e6:41:c6:d4:5b:47:c5:e0:67:ca:35:cd:d6:88:06:c9:
4c:8b:2f:dd:ad:05:76:33:d2:35:8c:4e:83:9c:f8:a7:13:ba:
e1:67:bb:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:48:38 2025 by rpki-client