Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
File: U5jsPBWxT9itkTy7lWV9jqgufiU.mft (raw, json)
Hash identifier: TtUaSrN+OCgSCw809XgsJjbVIvjS4mftOmchQNNfEXg=
Subject key identifier: 2E:7B:80:2B:B5:28:24:A5:E1:C6:F0:09:CC:FE:99:5B:90:68:CD:4A
Authority key identifier: 53:98:EC:3C:15:B1:4F:D8:AD:91:3C:BB:95:65:7D:8E:A8:2E:7E:25
Certificate issuer: /CN=5398ec3c15b14fd8ad913cbb95657d8ea82e7e25
Certificate serial: 019A24AF1B2B99E2AE6EB755730B9F41D861
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
Manifest number: 03DB
Signing time: Mon 27 Oct 2025 08:00:46 +0000
Manifest this update: Mon 27 Oct 2025 08:00:46 +0000
Manifest next update: Tue 28 Oct 2025 08:00:46 +0000
Files and hashes: 1: LAK6jIQJ-CvGfB4yxJULpqtylrQ.roa (hash: uXlGTrWCI9dg7wgunXV3n5CZ4+wMJTA2Di51uX3OXFA=)
2: U5jsPBWxT9itkTy7lWV9jqgufiU.crl (hash: Rkxc9uqu24FrNCrSKA9uMMt/PIn+qSFPVXyKenv955Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:af:1b:2b:99:e2:ae:6e:b7:55:73:0b:9f:41:d8:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5398ec3c15b14fd8ad913cbb95657d8ea82e7e25
Validity
Not Before: Oct 27 08:00:46 2025 GMT
Not After : Oct 28 08:00:46 2025 GMT
Subject: CN=2e7b802bb52824a5e1c6f009ccfe995b9068cd4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ec:98:69:2d:96:7e:6f:10:c4:e2:bb:47:7f:
8f:ea:bb:7a:38:a3:73:eb:91:b1:3f:3b:fb:5c:bc:
2c:19:68:82:72:d7:38:9c:63:97:3e:01:64:02:da:
da:0d:c6:df:63:b7:d7:d7:23:aa:13:41:ad:a7:c2:
62:7d:43:e0:31:21:f1:ca:e4:d1:30:a9:e6:01:de:
40:c3:91:fd:7c:35:6f:56:01:cc:0d:fa:23:49:29:
1f:0d:a0:16:1e:e3:45:ca:3c:bb:a8:b6:7c:f6:b3:
2e:31:b2:be:3c:22:b4:08:14:0f:3c:93:7f:ac:d5:
47:7a:f7:ba:6c:82:ed:cc:64:4d:89:7a:27:1d:f6:
9c:7a:0f:a4:cb:c4:08:6f:e4:69:c3:83:5a:3d:3a:
b0:14:3a:c5:c9:1b:0c:ec:48:29:ab:5f:98:08:4c:
a5:51:a6:12:72:e2:52:d4:7f:d5:75:06:05:41:b4:
a1:08:60:ed:ac:38:25:be:d6:0d:c7:b6:90:3e:b9:
06:ca:af:14:28:3b:59:97:d7:4b:4e:db:b3:6c:08:
be:47:38:4e:61:19:86:6a:06:01:c5:cb:eb:d7:14:
e0:69:dc:fa:fb:6b:e5:7b:3c:7a:63:95:02:01:61:
67:80:62:89:35:0f:bd:1a:89:d4:8f:10:b7:01:1a:
1e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:7B:80:2B:B5:28:24:A5:E1:C6:F0:09:CC:FE:99:5B:90:68:CD:4A
X509v3 Authority Key Identifier:
keyid:53:98:EC:3C:15:B1:4F:D8:AD:91:3C:BB:95:65:7D:8E:A8:2E:7E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:2e:57:f2:43:58:4a:33:37:12:1f:5d:5e:ba:16:38:c3:be:
8c:29:2e:f0:5a:34:60:9e:cd:64:1f:0f:bd:39:fd:6b:b8:43:
0f:be:d4:06:b5:6f:19:05:3b:48:ab:47:d2:4d:e9:3a:8e:97:
be:ac:a0:48:b0:e3:6c:f8:b0:02:d1:33:14:eb:3a:f9:38:86:
4a:ee:e5:e8:58:23:7d:04:7d:63:f4:a3:59:31:b8:17:12:58:
58:13:4c:57:af:97:24:00:50:1d:53:31:18:1d:d0:5e:fc:88:
c8:7c:a6:12:35:31:d0:0f:10:3c:87:d0:3c:0c:2c:97:5e:cd:
7e:3a:00:95:6d:3e:f6:b0:fa:20:0f:d7:2a:6a:7e:61:c0:04:
4d:69:ad:91:99:b3:51:20:5f:ca:c5:4e:be:6f:e9:eb:45:43:
b9:8f:31:24:b2:8b:07:db:fb:01:d3:62:08:23:d0:c6:a9:d1:
2e:a3:9e:ee:8d:23:fa:ff:83:71:64:f5:34:4c:13:b9:1a:3b:
2f:00:ed:af:5c:77:2c:43:6c:a8:e4:3a:6d:8b:5d:12:1f:e8:
d7:78:0a:33:0e:c7:09:08:e6:49:65:3e:50:70:53:f3:f0:e6:
87:bc:6b:7b:0b:e9:55:ba:02:b9:b0:bf:02:b8:6d:fe:73:81:
14:5b:3c:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZokrxsrmeKubrdVcwufQdhhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzOThlYzNjMTViMTRmZDhhZDkxM2NiYjk1NjU3ZDhlYTgy
ZTdlMjUwHhcNMjUxMDI3MDgwMDQ2WhcNMjUxMDI4MDgwMDQ2WjAzMTEwLwYDVQQD
EygyZTdiODAyYmI1MjgyNGE1ZTFjNmYwMDljY2ZlOTk1YjkwNjhjZDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuyYaS2Wfm8QxOK7R3+P6rt6OKNz
65GxPzv7XLwsGWiCctc4nGOXPgFkAtraDcbfY7fX1yOqE0Gtp8JifUPgMSHxyuTR
MKnmAd5Aw5H9fDVvVgHMDfojSSkfDaAWHuNFyjy7qLZ89rMuMbK+PCK0CBQPPJN/
rNVHeve6bILtzGRNiXonHfaceg+ky8QIb+Rpw4NaPTqwFDrFyRsM7Egpq1+YCEyl
UaYScuJS1H/VdQYFQbShCGDtrDglvtYNx7aQPrkGyq8UKDtZl9dLTtuzbAi+RzhO
YRmGagYBxcvr1xTgadz6+2vlezx6Y5UCAWFngGKJNQ+9GonUjxC3ARoelwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC57gCu1KCSl4cbwCcz+mVuQaM1KMB8GA1UdIwQY
MBaAFFOY7DwVsU/YrZE8u5VlfY6oLn4lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTVqc1BCV3hUOWl0a1R5N2xXVjlqcWd1ZmlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi84OGU4ZjQtNzRhZi00YjcyLWJlY2Mt
ZjU3NjczODE2N2UxLzEvVTVqc1BCV3hUOWl0a1R5N2xXVjlqcWd1ZmlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi84OGU4ZjQtNzRhZi00YjcyLWJlY2MtZjU3NjczODE2N2Ux
LzEvVTVqc1BCV3hUOWl0a1R5N2xXVjlqcWd1ZmlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbi5X8kNY
SjM3Eh9dXroWOMO+jCku8Fo0YJ7NZB8PvTn9a7hDD77UBrVvGQU7SKtH0k3pOo6X
vqygSLDjbPiwAtEzFOs6+TiGSu7l6FgjfQR9Y/SjWTG4FxJYWBNMV6+XJABQHVMx
GB3QXvyIyHymEjUx0A8QPIfQPAwsl17NfjoAlW0+9rD6IA/XKmp+YcAETWmtkZmz
USBfysVOvm/p60VDuY8xJLKLB9v7AdNiCCPQxqnRLqOe7o0j+v+DcWT1NEwTuRo7
LwDtr1x3LENsqOQ6bYtdEh/o13gKMw7HCQjmSWU+UHBT8/Dmh7xrewvpVboCubC/
Arht/nOBFFs8RA==
-----END CERTIFICATE-----
Generated at Mon Oct 27 12:45:35 2025 by rpki-client