Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
File: x9qC6HeTPZwslSyzdsk6qjN919I.mft (raw, json)
Hash identifier: R1freK8VaVFdK7Zweo+fcB37aKCkaMgsLcqgXcZWi90=
Subject key identifier: 14:F4:A8:FB:2D:43:9D:D6:7B:E0:80:33:23:75:63:5E:D0:49:0C:00
Authority key identifier: C7:DA:82:E8:77:93:3D:9C:2C:95:2C:B3:76:C9:3A:AA:33:7D:D7:D2
Certificate issuer: /CN=c7da82e877933d9c2c952cb376c93aaa337dd7d2
Certificate serial: 019A24E61744E69D1F973B45CFD6ABF2788E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
Manifest number: 16F8
Signing time: Mon 27 Oct 2025 09:00:50 +0000
Manifest this update: Mon 27 Oct 2025 09:00:50 +0000
Manifest next update: Tue 28 Oct 2025 09:00:50 +0000
Files and hashes: 1: cFEMcTrZnpJM6OI3sLSildoG7_o.roa (hash: 9byuaTVIbm1V06CyQEH6JUvAc6lfIjdANtz73++4OCM=)
2: x9qC6HeTPZwslSyzdsk6qjN919I.crl (hash: VaIheZNP3ED/LPA9Bix00UI3mpK3aCad63wmqPXpjPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 09:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:e6:17:44:e6:9d:1f:97:3b:45:cf:d6:ab:f2:78:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7da82e877933d9c2c952cb376c93aaa337dd7d2
Validity
Not Before: Oct 27 09:00:50 2025 GMT
Not After : Oct 28 09:00:50 2025 GMT
Subject: CN=14f4a8fb2d439dd67be080332375635ed0490c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c7:fc:97:72:d5:2a:9a:1c:6d:74:c1:69:f1:
26:11:ee:3f:5e:a7:27:4f:c0:e1:8e:16:74:fb:6e:
d7:75:dd:4e:40:c1:e9:4c:54:f6:8a:20:0d:27:c0:
6b:60:8c:d2:e5:76:60:59:d7:92:83:ac:f7:54:39:
91:5f:63:19:49:85:6d:0d:34:3c:b1:46:e0:5d:b1:
3c:de:da:d5:92:fb:a3:ad:eb:d8:9a:34:42:7d:4d:
f0:88:95:47:89:6c:5a:e1:c4:bb:dc:b4:ab:c5:fb:
24:47:26:7e:5c:40:e0:5d:8f:6e:c2:1c:71:ac:95:
f9:57:d4:7a:8e:95:6b:e7:8a:57:20:32:4e:ec:35:
4f:43:8c:cd:ea:8d:73:87:eb:b6:65:6e:70:85:32:
78:b0:fd:04:d4:75:bf:dd:ce:29:65:0b:8a:49:c7:
06:18:f2:dc:3c:c4:42:21:6b:c9:52:ff:36:55:7e:
fd:d8:29:7a:18:00:94:a2:ac:1f:65:e6:40:cc:47:
26:4a:ea:85:05:b2:ec:55:0c:ae:b4:27:df:58:f2:
84:d3:b5:fb:92:0a:fc:51:fe:bb:3e:99:c0:c9:15:
bc:84:09:f5:07:e9:6c:c9:50:70:39:cc:71:e1:32:
08:bf:48:d8:7f:11:9c:6b:c2:23:32:cc:cd:ad:a7:
d8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F4:A8:FB:2D:43:9D:D6:7B:E0:80:33:23:75:63:5E:D0:49:0C:00
X509v3 Authority Key Identifier:
keyid:C7:DA:82:E8:77:93:3D:9C:2C:95:2C:B3:76:C9:3A:AA:33:7D:D7:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:74:62:1d:66:7c:c6:9d:ce:0a:74:82:79:47:0c:d4:8d:78:
99:48:ce:16:94:ea:f5:1d:7a:70:ff:65:48:67:52:93:73:1f:
77:cc:fd:42:20:03:40:90:49:d8:80:88:f7:42:c4:ab:cd:15:
5e:3a:21:98:9d:7a:14:f8:7c:92:0f:9a:70:74:8a:99:ef:08:
d3:40:50:d7:1d:0a:38:82:1c:df:80:e4:ce:59:b2:ed:c9:c5:
92:84:1c:31:88:f5:e0:e1:6a:24:02:3c:78:52:09:64:3a:ec:
c4:10:73:05:0c:42:c0:7f:04:f1:3c:bb:5a:17:b1:98:bc:cd:
5c:34:98:aa:5c:56:0e:3c:cf:4b:ef:23:26:19:4c:4e:c4:b8:
60:f4:ff:d6:1e:c6:ba:c5:cc:25:88:e9:4d:19:ba:f7:c8:d4:
1e:63:40:a6:79:9b:2b:e7:ee:8c:48:19:84:e2:51:3e:e9:da:
98:52:b2:48:0b:97:45:ce:2a:88:76:2b:80:0c:75:47:2a:72:
be:4d:80:94:22:94:8e:8b:d7:80:86:3a:5a:13:11:f2:65:e9:
c1:9d:e9:45:f6:7b:b3:08:89:bb:b2:cc:51:63:a5:57:8d:16:
e9:cf:36:71:c1:22:c8:de:09:2e:dd:c3:97:4a:d0:4d:8b:78:
0a:ce:ee:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZok5hdE5p0flztFz9ar8niOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ZGE4MmU4Nzc5MzNkOWMyYzk1MmNiMzc2YzkzYWFhMzM3
ZGQ3ZDIwHhcNMjUxMDI3MDkwMDUwWhcNMjUxMDI4MDkwMDUwWjAzMTEwLwYDVQQD
EygxNGY0YThmYjJkNDM5ZGQ2N2JlMDgwMzMyMzc1NjM1ZWQwNDkwYzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMf8l3LVKpocbXTBafEmEe4/Xqcn
T8DhjhZ0+27Xdd1OQMHpTFT2iiANJ8BrYIzS5XZgWdeSg6z3VDmRX2MZSYVtDTQ8
sUbgXbE83trVkvujrevYmjRCfU3wiJVHiWxa4cS73LSrxfskRyZ+XEDgXY9uwhxx
rJX5V9R6jpVr54pXIDJO7DVPQ4zN6o1zh+u2ZW5whTJ4sP0E1HW/3c4pZQuKSccG
GPLcPMRCIWvJUv82VX792Cl6GACUoqwfZeZAzEcmSuqFBbLsVQyutCffWPKE07X7
kgr8Uf67PpnAyRW8hAn1B+lsyVBwOcxx4TIIv0jYfxGca8IjMszNrafYgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBT0qPstQ53We+CAMyN1Y17QSQwAMB8GA1UdIwQY
MBaAFMfaguh3kz2cLJUss3bJOqozfdfSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDlxQzZIZVRQWndzbFN5emRzazZxak45MTlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jYjUzN2QtZDdlZi00MDljLTgyM2Mt
ZWFlNGY2ZDMzY2E2LzEveDlxQzZIZVRQWndzbFN5emRzazZxak45MTlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9jYjUzN2QtZDdlZi00MDljLTgyM2MtZWFlNGY2ZDMzY2E2
LzEveDlxQzZIZVRQWndzbFN5emRzazZxak45MTlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk3RiHWZ8
xp3OCnSCeUcM1I14mUjOFpTq9R16cP9lSGdSk3Mfd8z9QiADQJBJ2ICI90LEq80V
XjohmJ16FPh8kg+acHSKme8I00BQ1x0KOIIc34Dkzlmy7cnFkoQcMYj14OFqJAI8
eFIJZDrsxBBzBQxCwH8E8Ty7WhexmLzNXDSYqlxWDjzPS+8jJhlMTsS4YPT/1h7G
usXMJYjpTRm698jUHmNApnmbK+fujEgZhOJRPunamFKySAuXRc4qiHYrgAx1Rypy
vk2AlCKUjovXgIY6WhMR8mXpwZ3pRfZ7swiJu7LMUWOlV40W6c82ccEiyN4JLt3D
l0rQTYt4Cs7unQ==
-----END CERTIFICATE-----
Generated at Mon Oct 27 18:07:47 2025 by rpki-client