Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
File: rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft (raw, json)
Hash identifier: VuxH8WSqzuAwSzn3UeCLQzKl5J8Kmnp0Mu9YCtCNSEQ=
Subject key identifier: B3:53:35:FD:52:53:64:16:FC:D5:00:BD:85:5E:8D:1F:54:AE:7B:E3
Authority key identifier: AC:C4:31:65:2C:DC:F5:21:C5:5B:C4:00:5C:0D:AE:32:CA:0A:3E:C6
Certificate issuer: /CN=acc431652cdcf521c55bc4005c0dae32ca0a3ec6
Certificate serial: 019A15E0EC1DCD018F44CD0CDB0C95E2F20F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
Manifest number: 16EF
Signing time: Fri 24 Oct 2025 11:00:53 +0000
Manifest this update: Fri 24 Oct 2025 11:00:53 +0000
Manifest next update: Sat 25 Oct 2025 11:00:53 +0000
Files and hashes: 1: KfdFKMsjdHv-q7t8wKVB68imJFI.roa (hash: /pY/O4QXO7BvEAN+9S1nVpoPg09znAHFBvFlWdPOJZg=)
2: bChpq7eC8HUZiOWdmJZzTGK-ZCk.roa (hash: Sf8LAE4WGl0MHG0bbn/YLP58QNfCYpZtLL1+SAh0T/A=)
3: rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl (hash: cyp2TB/Vw1VNAy1W9T2VNsuTvgJMtd7/1DDIG02mkYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:15:e0:ec:1d:cd:01:8f:44:cd:0c:db:0c:95:e2:f2:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc431652cdcf521c55bc4005c0dae32ca0a3ec6
Validity
Not Before: Oct 24 11:00:53 2025 GMT
Not After : Oct 25 11:00:53 2025 GMT
Subject: CN=b35335fd52536416fcd500bd855e8d1f54ae7be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d1:9d:90:c6:66:b3:2b:67:25:fa:c9:12:f6:
66:65:1c:3e:e5:e9:a1:a8:78:a2:c0:67:98:d1:15:
48:81:73:b6:d1:95:fd:75:e5:95:72:c7:3a:c6:88:
a3:17:f0:55:72:8e:9b:c9:62:79:87:f1:2b:58:9e:
5c:fa:0e:c5:02:20:05:b0:d4:07:fc:75:86:ad:5f:
ce:26:4a:67:60:f4:f3:1a:04:c3:72:c0:0f:bb:0e:
28:8d:18:b5:e5:61:c6:db:30:19:c0:f0:1f:15:b6:
22:0f:d1:03:1e:b0:29:86:c1:1f:1b:41:b3:ac:3a:
c4:b7:51:95:dc:c0:f6:ca:4c:e7:49:ae:a6:b5:16:
f7:5d:1c:45:c8:87:93:db:68:63:19:8d:45:0f:ad:
af:d2:3d:0d:03:37:af:12:f9:c0:54:68:70:e9:99:
65:eb:5d:81:5e:c8:f4:96:46:ab:45:d4:e7:0b:1c:
11:f4:ff:5a:2a:d8:e2:78:b4:e8:96:d0:2e:c3:eb:
7c:be:fb:6d:0b:ff:06:06:c5:f4:17:b6:c0:2f:ad:
5c:1f:b9:62:c7:85:01:24:2d:b8:1b:79:95:ad:99:
d7:01:a2:30:ca:5e:8c:7f:cc:dc:0c:4b:4d:9b:de:
26:26:53:03:9d:97:80:da:92:6b:ae:b1:1b:d0:f8:
c8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:53:35:FD:52:53:64:16:FC:D5:00:BD:85:5E:8D:1F:54:AE:7B:E3
X509v3 Authority Key Identifier:
keyid:AC:C4:31:65:2C:DC:F5:21:C5:5B:C4:00:5C:0D:AE:32:CA:0A:3E:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:73:e6:5d:97:6a:c2:a9:0c:cd:6d:08:fc:10:7b:b9:99:f1:
c6:12:b6:1e:4f:83:f0:31:cd:11:ab:c3:d8:b3:eb:9e:08:8b:
35:2b:30:7c:c4:2b:df:75:4e:dc:41:24:df:da:ee:e1:dd:4b:
7e:65:8e:81:2c:36:13:69:c7:b3:43:33:b1:47:49:d6:1c:5b:
3f:c7:7a:e5:2b:d4:f2:6e:08:e4:e4:d8:27:29:bd:ab:1a:bd:
7f:7c:c7:d3:f2:be:db:76:22:a0:95:03:58:64:c7:b7:ed:a4:
7a:48:ec:26:a8:eb:d4:06:65:54:c4:8a:35:d4:82:da:53:31:
ce:9c:c5:d3:40:bc:95:53:c6:46:58:57:dd:96:bd:b3:42:92:
1b:0d:43:3a:16:59:e5:eb:fb:82:d2:2a:c4:13:34:19:50:2e:
25:cb:a2:7e:4f:c4:8a:e8:c0:0f:e1:fd:25:a9:7c:0a:5b:a0:
52:1a:2e:09:11:7e:a1:64:ef:4b:1a:3f:14:15:52:a2:68:00:
3e:0a:4d:52:d3:68:b5:d2:ef:9e:88:c2:15:98:87:b7:32:f5:
4c:5a:2c:6c:96:43:56:d5:88:63:96:aa:c9:85:29:08:27:07:
ba:a1:6c:b0:4c:4b:a6:dc:d4:3a:57:41:c6:cc:22:5d:f6:e4:
f3:01:24:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoV4OwdzQGPRM0M2wyV4vIPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYzQzMTY1MmNkY2Y1MjFjNTViYzQwMDVjMGRhZTMyY2Ew
YTNlYzYwHhcNMjUxMDI0MTEwMDUzWhcNMjUxMDI1MTEwMDUzWjAzMTEwLwYDVQQD
EyhiMzUzMzVmZDUyNTM2NDE2ZmNkNTAwYmQ4NTVlOGQxZjU0YWU3YmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttGdkMZmsytnJfrJEvZmZRw+5emh
qHiiwGeY0RVIgXO20ZX9deWVcsc6xoijF/BVco6byWJ5h/ErWJ5c+g7FAiAFsNQH
/HWGrV/OJkpnYPTzGgTDcsAPuw4ojRi15WHG2zAZwPAfFbYiD9EDHrAphsEfG0Gz
rDrEt1GV3MD2ykznSa6mtRb3XRxFyIeT22hjGY1FD62v0j0NAzevEvnAVGhw6Zll
612BXsj0lkarRdTnCxwR9P9aKtjieLToltAuw+t8vvttC/8GBsX0F7bAL61cH7li
x4UBJC24G3mVrZnXAaIwyl6Mf8zcDEtNm94mJlMDnZeA2pJrrrEb0PjIrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLNTNf1SU2QW/NUAvYVejR9UrnvjMB8GA1UdIwQY
MBaAFKzEMWUs3PUhxVvEAFwNrjLKCj7GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvck1ReFpTemM5U0hGVzhRQVhBMnVNc29LUHNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9kOGQ2YmEtZWY5NS00ZGM1LWJlOTgt
NjcxYmVlMmJjYzA0LzEvck1ReFpTemM5U0hGVzhRQVhBMnVNc29LUHNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9kOGQ2YmEtZWY5NS00ZGM1LWJlOTgtNjcxYmVlMmJjYzA0
LzEvck1ReFpTemM5U0hGVzhRQVhBMnVNc29LUHNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm3PmXZdq
wqkMzW0I/BB7uZnxxhK2Hk+D8DHNEavD2LPrngiLNSswfMQr33VO3EEk39ru4d1L
fmWOgSw2E2nHs0MzsUdJ1hxbP8d65SvU8m4I5OTYJym9qxq9f3zH0/K+23YioJUD
WGTHt+2kekjsJqjr1AZlVMSKNdSC2lMxzpzF00C8lVPGRlhX3Za9s0KSGw1DOhZZ
5ev7gtIqxBM0GVAuJcuifk/EiujAD+H9Jal8ClugUhouCRF+oWTvSxo/FBVSomgA
PgpNUtNotdLvnojCFZiHtzL1TFosbJZDVtWIY5aqyYUpCCcHuqFssExLptzUOldB
xswiXfbk8wEk9w==
-----END CERTIFICATE-----
Generated at Fri Oct 24 12:14:37 2025 by rpki-client