Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
File: U8vRR3BEoDQEx_xDlhwsg7unW7w.mft (raw, json)
Hash identifier: cfFquXS6wxlNYdCzfKnPfUctT1lqv3OVG8j6XxIn3W8=
Subject key identifier: 20:58:22:BC:93:3B:E1:D9:9D:54:20:85:61:41:A8:D2:1E:8F:EC:40
Authority key identifier: 53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC
Certificate issuer: /CN=53cbd1477044a03404c7fc43961c2c83bba75bbc
Certificate serial: 019A7338507916807E841950E5EA98B4FDAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
Manifest number: 0F4E
Signing time: Tue 11 Nov 2025 14:01:01 +0000
Manifest this update: Tue 11 Nov 2025 14:01:01 +0000
Manifest next update: Wed 12 Nov 2025 14:01:01 +0000
Files and hashes: 1: B2DVcbdBAKRHBDsOlZrrOVepTcQ.roa (hash: qvvp5nQI7KpPFAu+iSrl9WmgfsagnJRM0T+yv2PLO1U=)
2: MyfnN7_GeDEIFOv2Po3D--A0qr4.roa (hash: Q+ck4wNBk8gHUXF8i3xSK2P0e3p9/YGq6s+8125aWKo=)
3: U8vRR3BEoDQEx_xDlhwsg7unW7w.crl (hash: RrXgf+GTjek5CfdemRq/nOlKgjB49bpZVkxMJDsU8g8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:50:79:16:80:7e:84:19:50:e5:ea:98:b4:fd:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53cbd1477044a03404c7fc43961c2c83bba75bbc
Validity
Not Before: Nov 11 14:01:01 2025 GMT
Not After : Nov 12 14:01:01 2025 GMT
Subject: CN=205822bc933be1d99d5420856141a8d21e8fec40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:04:54:f2:f7:ad:66:36:fa:3b:08:b7:a2:79:
2d:77:3f:2e:03:cc:a8:7e:ad:a2:e0:b2:ec:9b:79:
cc:80:25:17:7e:03:2b:a0:db:d6:bf:27:d7:52:31:
ae:f4:90:49:c2:e1:f8:67:e3:89:e4:89:ae:1d:4c:
b5:f9:10:55:be:92:a0:17:6a:c4:38:0a:ae:67:d7:
f2:5f:60:59:f3:8a:31:9e:1c:98:00:10:d6:ea:9c:
6a:5f:42:00:3d:ff:ad:5f:0f:90:82:c2:29:ed:65:
49:93:c5:c6:9a:c4:c2:41:c1:52:11:68:50:5f:69:
eb:eb:ab:d1:12:f1:68:a5:37:af:37:00:19:6d:e4:
9b:bf:b3:6a:ef:d2:ab:4f:e1:64:0d:e0:52:fa:fd:
f7:9a:30:58:a0:68:0b:e4:cf:c1:be:ad:cd:46:e2:
a5:7f:78:5c:91:c5:dd:6b:ae:0a:47:e2:91:d7:b6:
6c:8c:6a:6b:9c:e1:3e:75:82:91:a2:31:d4:c5:e7:
38:59:16:41:23:6a:6f:16:37:6e:d5:fe:7d:41:e1:
4d:05:27:a4:56:c9:31:d1:78:fc:a7:39:bb:5d:56:
2a:c3:83:68:1c:a1:00:31:38:fa:54:1c:21:61:79:
d2:92:4d:ca:dc:6c:10:4e:1c:dc:85:73:0e:e9:b3:
e6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:58:22:BC:93:3B:E1:D9:9D:54:20:85:61:41:A8:D2:1E:8F:EC:40
X509v3 Authority Key Identifier:
keyid:53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:ed:e7:80:99:3b:a0:ca:f1:f9:68:ac:95:57:b4:c3:d1:af:
c6:4a:a0:15:36:e3:23:a7:89:9e:ef:cc:9b:9e:29:f1:15:9e:
22:59:57:ae:85:81:19:ec:cc:94:44:de:bd:2c:2b:e5:1c:83:
10:f3:cb:06:f0:30:b4:41:4f:d0:69:02:56:7a:94:cc:55:35:
b9:ed:02:fb:51:6e:58:15:a8:c6:e8:44:7f:bf:4a:65:85:03:
0b:7b:ce:35:cf:f3:bc:bc:40:71:b7:d4:65:0d:dc:03:38:02:
13:c3:1d:39:0c:09:fe:85:33:31:e7:f4:3d:6a:4f:03:3e:c8:
28:36:4b:f0:73:33:93:86:93:c5:53:fe:b9:b9:85:63:c6:bd:
06:60:dd:78:0d:ba:c6:82:a2:47:2a:e1:65:93:12:ad:f0:7c:
2c:ad:09:03:97:43:e7:bc:3d:50:a5:b2:88:a2:f7:70:b1:c2:
90:47:4e:01:ef:b3:a0:b7:aa:ca:db:3f:95:48:fd:22:83:62:
f4:fb:38:b4:d0:24:53:b8:76:d2:fe:d4:7e:da:59:ff:b6:d6:
94:16:81:02:5c:66:2a:4e:a1:5f:96:4c:89:91:54:af:f1:91:
92:a5:71:95:39:fc:e7:b0:a3:ac:e3:a1:db:76:c1:ee:58:2b:
84:82:f6:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzOFB5FoB+hBlQ5eqYtP2sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzY2JkMTQ3NzA0NGEwMzQwNGM3ZmM0Mzk2MWMyYzgzYmJh
NzViYmMwHhcNMjUxMTExMTQwMTAxWhcNMjUxMTEyMTQwMTAxWjAzMTEwLwYDVQQD
EygyMDU4MjJiYzkzM2JlMWQ5OWQ1NDIwODU2MTQxYThkMjFlOGZlYzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgRU8vetZjb6Owi3onktdz8uA8yo
fq2i4LLsm3nMgCUXfgMroNvWvyfXUjGu9JBJwuH4Z+OJ5ImuHUy1+RBVvpKgF2rE
OAquZ9fyX2BZ84oxnhyYABDW6pxqX0IAPf+tXw+QgsIp7WVJk8XGmsTCQcFSEWhQ
X2nr66vREvFopTevNwAZbeSbv7Nq79KrT+FkDeBS+v33mjBYoGgL5M/Bvq3NRuKl
f3hckcXda64KR+KR17ZsjGprnOE+dYKRojHUxec4WRZBI2pvFjdu1f59QeFNBSek
Vskx0Xj8pzm7XVYqw4NoHKEAMTj6VBwhYXnSkk3K3GwQThzchXMO6bPm4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCBYIryTO+HZnVQghWFBqNIej+xAMB8GA1UdIwQY
MBaAFFPL0UdwRKA0BMf8Q5YcLIO7p1u8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTh2UlIzQkVvRFFFeF94RGxod3NnN3VuVzd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kY2U0NGEtNGE5MC00M2VhLWIxZmIt
YTJkMTE2NTYwYWNhLzEvVTh2UlIzQkVvRFFFeF94RGxod3NnN3VuVzd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9kY2U0NGEtNGE5MC00M2VhLWIxZmItYTJkMTE2NTYwYWNh
LzEvVTh2UlIzQkVvRFFFeF94RGxod3NnN3VuVzd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwe3ngJk7
oMrx+WislVe0w9GvxkqgFTbjI6eJnu/Mm54p8RWeIllXroWBGezMlETevSwr5RyD
EPPLBvAwtEFP0GkCVnqUzFU1ue0C+1FuWBWoxuhEf79KZYUDC3vONc/zvLxAcbfU
ZQ3cAzgCE8MdOQwJ/oUzMef0PWpPAz7IKDZL8HMzk4aTxVP+ubmFY8a9BmDdeA26
xoKiRyrhZZMSrfB8LK0JA5dD57w9UKWyiKL3cLHCkEdOAe+zoLeqyts/lUj9IoNi
9Ps4tNAkU7h20v7UftpZ/7bWlBaBAlxmKk6hX5ZMiZFUr/GRkqVxlTn857CjrOOh
23bB7lgrhIL27Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 16:55:52 2025 by rpki-client