Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/w7OWKu5OiuTGzNiXnlOYAuoOTOc.mft
File: w7OWKu5OiuTGzNiXnlOYAuoOTOc.mft (raw, json)
Hash identifier: EEtwAh1L/17b1PXReExr85EgG5CY2uhkl+e90qEkTFg=
Subject key identifier: F4:4E:B5:2B:B9:AE:A9:9D:08:F3:8C:30:FE:04:64:07:8F:97:1D:78
Authority key identifier: C3:B3:96:2A:EE:4E:8A:E4:C6:CC:D8:97:9E:53:98:02:EA:0E:4C:E7
Certificate issuer: /CN=c3b3962aee4e8ae4c6ccd8979e539802ea0e4ce7
Certificate serial: 019A725C671E8476761C18856D1D39F724EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w7OWKu5OiuTGzNiXnlOYAuoOTOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/w7OWKu5OiuTGzNiXnlOYAuoOTOc.mft
Manifest number: 0CFC
Signing time: Tue 11 Nov 2025 10:00:49 +0000
Manifest this update: Tue 11 Nov 2025 10:00:49 +0000
Manifest next update: Wed 12 Nov 2025 10:00:49 +0000
Files and hashes: 1: fZsTaHsMiRTOQx_qTx-PLjSdXVE.roa (hash: 7tvMPnX4kI566+vmNqApn9A48bhDZNJ8LvI46Pf6Yd0=)
2: w7OWKu5OiuTGzNiXnlOYAuoOTOc.crl (hash: vHGWxEgFsmZRFV6U9NOhervxwYtwJdOd3tJ7VaCk91Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/w7OWKu5OiuTGzNiXnlOYAuoOTOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/w7OWKu5OiuTGzNiXnlOYAuoOTOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/w7OWKu5OiuTGzNiXnlOYAuoOTOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:67:1e:84:76:76:1c:18:85:6d:1d:39:f7:24:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3b3962aee4e8ae4c6ccd8979e539802ea0e4ce7
Validity
Not Before: Nov 11 10:00:49 2025 GMT
Not After : Nov 12 10:00:49 2025 GMT
Subject: CN=f44eb52bb9aea99d08f38c30fe0464078f971d78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:29:4a:07:c8:b4:3f:1a:41:56:08:97:bf:40:
3e:f3:80:8a:44:7b:3d:d5:82:07:93:9d:94:40:e9:
60:79:34:ef:4e:8b:f2:bb:69:fd:a4:04:f9:b4:ed:
9d:97:cd:f6:e8:7a:74:11:ce:41:85:03:6e:cc:ba:
50:88:a1:83:96:ce:0e:83:b1:55:0c:0d:7f:a0:cf:
e7:b1:16:4b:8f:88:f4:5d:12:0a:5d:28:2e:ab:a9:
96:bf:3b:6e:34:c3:22:b9:a5:53:17:d0:98:24:3b:
ad:f3:07:fb:cc:3d:65:5b:20:be:a4:e9:b6:d8:e6:
17:1d:54:52:1d:f9:23:dc:da:56:47:65:ce:a3:9c:
39:16:1f:5b:b9:09:25:e4:3f:4e:a8:30:31:2d:f6:
c4:fa:5c:74:ee:7d:6b:b1:40:9c:88:76:46:21:3c:
3a:64:09:ca:91:f1:c0:4a:d8:b8:2e:eb:71:8b:c7:
38:8e:4c:4a:06:03:cb:cb:cb:d1:91:7a:37:bc:a3:
1e:76:88:b6:af:02:35:91:bf:79:6c:06:36:64:2b:
bd:52:b5:ce:c6:93:a9:61:71:75:2c:cf:b3:60:5c:
5f:a4:be:87:04:e0:1d:fa:c7:d8:6e:62:73:54:67:
f1:8e:25:76:95:3d:0c:d6:da:cb:81:ef:f2:0d:69:
7e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:4E:B5:2B:B9:AE:A9:9D:08:F3:8C:30:FE:04:64:07:8F:97:1D:78
X509v3 Authority Key Identifier:
keyid:C3:B3:96:2A:EE:4E:8A:E4:C6:CC:D8:97:9E:53:98:02:EA:0E:4C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7OWKu5OiuTGzNiXnlOYAuoOTOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/w7OWKu5OiuTGzNiXnlOYAuoOTOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/w7OWKu5OiuTGzNiXnlOYAuoOTOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:43:ae:07:2d:d2:57:dc:df:42:d2:7e:e2:6d:f2:3f:c2:58:
4b:dc:9f:ae:15:74:9c:73:e2:bc:05:72:55:22:00:33:21:fd:
dd:65:a0:d6:62:83:e1:c0:b1:73:5b:f7:d4:f5:ea:36:be:0c:
02:8f:8a:27:14:94:cb:14:54:37:8b:66:b7:7b:a8:01:f1:58:
6e:13:90:9c:45:bd:ae:5a:92:c6:16:31:eb:cd:f9:30:d3:04:
ee:19:29:9a:3e:a6:ef:87:51:9b:92:47:07:95:b3:7f:bf:27:
5c:92:83:25:e4:2b:04:8b:f1:bd:65:6e:33:47:5b:da:52:19:
0d:84:5c:7d:8f:57:dc:e2:6c:e7:a9:1b:4b:e3:d0:0a:8b:a7:
2a:52:23:cd:c6:5e:5e:0e:e6:60:dd:7f:b0:63:f1:72:7c:5c:
a4:02:0f:5c:b0:1b:d5:cb:4d:8c:57:eb:ac:fc:b6:31:a9:1e:
82:5a:f1:73:85:d2:ef:f0:b5:85:c6:03:f2:69:95:2b:c5:09:
cb:a3:08:51:07:ce:9d:0b:c1:bb:5b:bc:f4:17:1b:e0:c9:49:
4b:d4:3a:6f:a2:75:91:f0:71:90:18:ee:aa:fc:73:cc:48:8d:
39:b2:58:8b:e8:e8:de:8d:51:6b:38:d5:9a:c5:24:2b:61:3e:
b5:43:06:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXGcehHZ2HBiFbR059yTqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYjM5NjJhZWU0ZThhZTRjNmNjZDg5NzllNTM5ODAyZWEw
ZTRjZTcwHhcNMjUxMTExMTAwMDQ5WhcNMjUxMTEyMTAwMDQ5WjAzMTEwLwYDVQQD
EyhmNDRlYjUyYmI5YWVhOTlkMDhmMzhjMzBmZTA0NjQwNzhmOTcxZDc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ClKB8i0PxpBVgiXv0A+84CKRHs9
1YIHk52UQOlgeTTvTovyu2n9pAT5tO2dl8326Hp0Ec5BhQNuzLpQiKGDls4Og7FV
DA1/oM/nsRZLj4j0XRIKXSguq6mWvztuNMMiuaVTF9CYJDut8wf7zD1lWyC+pOm2
2OYXHVRSHfkj3NpWR2XOo5w5Fh9buQkl5D9OqDAxLfbE+lx07n1rsUCciHZGITw6
ZAnKkfHASti4Lutxi8c4jkxKBgPLy8vRkXo3vKMedoi2rwI1kb95bAY2ZCu9UrXO
xpOpYXF1LM+zYFxfpL6HBOAd+sfYbmJzVGfxjiV2lT0M1trLge/yDWl+6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPROtSu5rqmdCPOMMP4EZAePlx14MB8GA1UdIwQY
MBaAFMOzliruTorkxszYl55TmALqDkznMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzdPV0t1NU9pdVRHek5pWG5sT1lBdW9PVE9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8yNjQ1YTctNTMyYy00ZmExLWJjZGQt
ZWE1ZGFkOGI0NzY1LzEvdzdPV0t1NU9pdVRHek5pWG5sT1lBdW9PVE9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8yNjQ1YTctNTMyYy00ZmExLWJjZGQtZWE1ZGFkOGI0NzY1
LzEvdzdPV0t1NU9pdVRHek5pWG5sT1lBdW9PVE9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN0OuBy3S
V9zfQtJ+4m3yP8JYS9yfrhV0nHPivAVyVSIAMyH93WWg1mKD4cCxc1v31PXqNr4M
Ao+KJxSUyxRUN4tmt3uoAfFYbhOQnEW9rlqSxhYx6835MNME7hkpmj6m74dRm5JH
B5Wzf78nXJKDJeQrBIvxvWVuM0db2lIZDYRcfY9X3OJs56kbS+PQCounKlIjzcZe
Xg7mYN1/sGPxcnxcpAIPXLAb1ctNjFfrrPy2Makeglrxc4XS7/C1hcYD8mmVK8UJ
y6MIUQfOnQvBu1u89Bcb4MlJS9Q6b6J1kfBxkBjuqvxzzEiNObJYi+jo3o1RazjV
msUkK2E+tUMGPw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:30 2025 by rpki-client