Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
File: u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft (raw, json)
Hash identifier: 4dlZpCNBV7stt9CERlXYD4nN/pH46R8EPS9cRRroNPw=
Subject key identifier: 4F:3F:9A:5B:19:E0:E5:D4:E9:EB:8A:1D:0C:08:33:46:4E:F2:7D:A8
Authority key identifier: BB:E0:26:EF:26:92:09:09:D9:31:EA:4D:AC:9D:93:90:48:6B:41:53
Certificate issuer: /CN=bbe026ef26920909d931ea4dac9d9390486b4153
Certificate serial: 019A4D3D5B4CAB49F6C23C34306A3FF4E09E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
Manifest number: 15E8
Signing time: Tue 04 Nov 2025 05:00:57 +0000
Manifest this update: Tue 04 Nov 2025 05:00:57 +0000
Manifest next update: Wed 05 Nov 2025 05:00:57 +0000
Files and hashes: 1: dwPtZ0dw8XTxu-Q4XyALaYmwsrA.roa (hash: JYJf04rqGTREcvlrGWDW0Zya9cc0gj5IVi8xJQh0opk=)
2: u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl (hash: zDYU+k4fheSsBcyUyGJjOT7tn2SSRMTYBy8nPGQUAHk=)
3: uB-4YlNuT93bQpmxAKztWNH51Lk.roa (hash: LpguRr5dSEGY8OOONKW8ORg02cUPgVyvd4FQIDkFbFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:5b:4c:ab:49:f6:c2:3c:34:30:6a:3f:f4:e0:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbe026ef26920909d931ea4dac9d9390486b4153
Validity
Not Before: Nov 4 05:00:57 2025 GMT
Not After : Nov 5 05:00:57 2025 GMT
Subject: CN=4f3f9a5b19e0e5d4e9eb8a1d0c0833464ef27da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:92:3c:18:cd:5e:c9:72:2b:36:f1:68:85:27:
3c:15:80:11:6b:93:4b:9c:56:f7:10:39:e0:c2:0e:
18:4e:4c:f5:76:bd:4b:e5:4e:66:d0:fb:85:b1:91:
e1:ca:ef:e4:a5:d7:7e:90:d0:12:a0:f3:b2:ff:1f:
a0:ba:da:fa:af:9c:75:6f:18:2b:b5:d7:90:75:f9:
6f:b7:a1:9f:f9:da:7a:f0:a8:6f:0f:f4:3b:4c:18:
75:7a:bc:57:10:65:16:0c:21:38:1f:e0:35:ef:5b:
fa:43:64:c3:23:a6:ff:2f:07:93:8d:04:1b:10:c0:
9d:59:f4:d0:c5:b8:45:d6:fa:0e:00:db:bd:72:7c:
71:ff:dd:1e:8a:7b:fe:46:ad:0f:80:d6:9f:4d:94:
c3:cb:bc:41:3f:32:35:3a:ab:d7:f2:7e:40:b6:e7:
13:3f:c2:9e:02:7c:9b:f2:b2:ae:ab:4e:d8:09:18:
ef:f0:9e:72:cd:52:5e:1c:18:41:f9:7b:c1:12:b0:
c7:05:3f:88:e6:44:6c:4c:c4:53:33:3b:8c:bc:25:
76:50:8e:59:64:d0:3b:59:3e:9f:bb:4d:6b:d3:df:
3e:e2:62:95:dd:81:77:7c:d8:e9:69:45:27:8a:6f:
bb:7f:64:aa:1c:e6:bb:72:96:a6:e0:e5:94:8d:48:
fe:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:3F:9A:5B:19:E0:E5:D4:E9:EB:8A:1D:0C:08:33:46:4E:F2:7D:A8
X509v3 Authority Key Identifier:
keyid:BB:E0:26:EF:26:92:09:09:D9:31:EA:4D:AC:9D:93:90:48:6B:41:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:51:d8:1d:7b:6a:02:47:47:ec:08:46:47:7b:07:8e:99:8e:
88:b4:f1:80:87:00:4e:62:7c:1f:4b:b1:3f:ac:2b:72:16:a3:
66:d7:99:ec:8f:f8:83:fe:fe:27:64:79:91:7f:32:1d:df:cd:
ac:3f:83:ea:3e:71:0c:91:51:88:df:98:97:6f:8e:f3:31:4a:
33:c0:2b:8f:2f:94:f9:2f:b0:7b:39:ee:87:a9:99:06:3f:3d:
22:aa:56:07:c8:04:88:91:ef:a7:e1:7e:e9:f4:af:bc:53:14:
90:ab:ed:f6:b0:ab:60:a0:76:dc:19:df:68:50:29:37:5b:aa:
44:37:fe:91:a2:fb:be:da:a6:9c:d5:9a:12:3c:b6:79:af:27:
6e:16:59:d9:d3:18:ed:3d:dd:12:b4:10:ab:c2:d9:c3:d8:37:
68:2f:f7:30:ae:8f:51:d2:85:80:c7:76:e1:42:6b:04:55:11:
e6:20:24:80:c8:4a:46:01:ec:62:7d:f1:90:79:fb:d1:7c:ee:
ed:2b:46:54:0a:21:b1:49:5a:53:6b:e1:58:11:98:d6:d0:00:
63:2a:ac:00:72:91:99:f4:23:e5:d6:3a:08:7e:ff:ff:e8:a0:
6d:83:bd:5b:a8:81:0b:01:be:ac:7b:e3:12:d8:f0:dc:ac:ad:
fb:d5:2d:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPVtMq0n2wjw0MGo/9OCeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZTAyNmVmMjY5MjA5MDlkOTMxZWE0ZGFjOWQ5MzkwNDg2
YjQxNTMwHhcNMjUxMTA0MDUwMDU3WhcNMjUxMTA1MDUwMDU3WjAzMTEwLwYDVQQD
Eyg0ZjNmOWE1YjE5ZTBlNWQ0ZTllYjhhMWQwYzA4MzM0NjRlZjI3ZGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ZI8GM1eyXIrNvFohSc8FYARa5NL
nFb3EDngwg4YTkz1dr1L5U5m0PuFsZHhyu/kpdd+kNASoPOy/x+gutr6r5x1bxgr
tdeQdflvt6Gf+dp68KhvD/Q7TBh1erxXEGUWDCE4H+A171v6Q2TDI6b/LweTjQQb
EMCdWfTQxbhF1voOANu9cnxx/90einv+Rq0PgNafTZTDy7xBPzI1OqvX8n5AtucT
P8KeAnyb8rKuq07YCRjv8J5yzVJeHBhB+XvBErDHBT+I5kRsTMRTMzuMvCV2UI5Z
ZNA7WT6fu01r098+4mKV3YF3fNjpaUUnim+7f2SqHOa7cpam4OWUjUj+9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE8/mlsZ4OXU6euKHQwIM0ZO8n2oMB8GA1UdIwQY
MBaAFLvgJu8mkgkJ2THqTaydk5BIa0FTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdS1BbTd5YVNDUW5aTWVwTnJKMlRrRWhyUVZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9iNzNhZGQtZWEwZi00YzIyLTk4MGUt
MDU5YmFiMDE1Y2MzLzEvdS1BbTd5YVNDUW5aTWVwTnJKMlRrRWhyUVZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9iNzNhZGQtZWEwZi00YzIyLTk4MGUtMDU5YmFiMDE1Y2Mz
LzEvdS1BbTd5YVNDUW5aTWVwTnJKMlRrRWhyUVZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAVHYHXtq
AkdH7AhGR3sHjpmOiLTxgIcATmJ8H0uxP6wrchajZteZ7I/4g/7+J2R5kX8yHd/N
rD+D6j5xDJFRiN+Yl2+O8zFKM8Arjy+U+S+weznuh6mZBj89IqpWB8gEiJHvp+F+
6fSvvFMUkKvt9rCrYKB23BnfaFApN1uqRDf+kaL7vtqmnNWaEjy2ea8nbhZZ2dMY
7T3dErQQq8LZw9g3aC/3MK6PUdKFgMd24UJrBFUR5iAkgMhKRgHsYn3xkHn70Xzu
7StGVAohsUlaU2vhWBGY1tAAYyqsAHKRmfQj5dY6CH7//+igbYO9W6iBCwG+rHvj
Etjw3Kyt+9UtuQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:26 2025 by rpki-client