Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.mft
File: m8b9PzLKRZTJYHVlmnCJsnrj_vM.mft (raw, json)
Hash identifier: 8b1lUFCC0kpRXjr2RXc59hfL3bLEwhYxnJhPTN8oIBc=
Subject key identifier: FD:5A:D5:27:1B:53:5D:B1:FD:FA:1E:D9:97:A7:87:D5:61:65:EC:18
Authority key identifier: 9B:C6:FD:3F:32:CA:45:94:C9:60:75:65:9A:70:89:B2:7A:E3:FE:F3
Certificate issuer: /CN=9bc6fd3f32ca4594c96075659a7089b27ae3fef3
Certificate serial: 019A4EF4AE66BEE17B34BFB74FD3AEB3A760
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m8b9PzLKRZTJYHVlmnCJsnrj_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.mft
Manifest number: 1221
Signing time: Tue 04 Nov 2025 13:00:49 +0000
Manifest this update: Tue 04 Nov 2025 13:00:49 +0000
Manifest next update: Wed 05 Nov 2025 13:00:49 +0000
Files and hashes: 1: 7kSoyCwS51Z99WFt9PFCATkixn8.roa (hash: YO8XFXWWJme9Ue9ZQYiu3rdgg2SuRg7amStm9PGC74I=)
2: A_x0lNCWfe35wqNn6JvNeRpzd_0.roa (hash: /J2aFcuVtqs0fxncL/uPU2qtngVaDUhWB5vaK8uf1CI=)
3: KpoJychajtxAMst2lNotjhOxrMI.roa (hash: X/JCLmAOExberdE56mUL9dRTSb/Mkf0OWMnUpBxfmmM=)
4: fwe15V3gbUwWh6q8fCfCPzZQDm8.roa (hash: z+s0N2irfFNbej65WJ0ONMjnTWiNWLahh/93F4XH3s4=)
5: m8b9PzLKRZTJYHVlmnCJsnrj_vM.crl (hash: JnTFoLImfV6cPzVg2VC6Iaobx2kjnWh/11qmCzRxrUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/m8b9PzLKRZTJYHVlmnCJsnrj_vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:ae:66:be:e1:7b:34:bf:b7:4f:d3:ae:b3:a7:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bc6fd3f32ca4594c96075659a7089b27ae3fef3
Validity
Not Before: Nov 4 13:00:49 2025 GMT
Not After : Nov 5 13:00:49 2025 GMT
Subject: CN=fd5ad5271b535db1fdfa1ed997a787d56165ec18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:26:36:2c:46:dc:4a:0e:25:b6:49:7e:f7:99:
32:62:cd:10:a5:02:f9:fb:ef:a0:47:04:55:ba:64:
ac:9a:d1:10:8d:b6:6e:08:41:cb:33:3f:b4:39:82:
99:c5:da:43:ee:6f:90:c6:ca:32:28:32:c1:40:2c:
f3:c5:04:ce:e0:79:37:c3:82:ee:cd:de:80:95:3c:
c7:a4:96:4d:d7:2b:d1:43:4d:8c:bc:8c:39:b2:9f:
54:74:0e:64:fa:3c:68:a0:d0:fa:33:43:f0:c0:58:
9b:59:ff:09:42:8f:ad:9c:c9:b4:d2:c3:5d:ad:c6:
11:4c:da:b0:45:88:df:0e:58:57:20:ff:a7:62:7f:
e2:66:d2:0b:70:3e:7c:19:25:19:cd:54:48:e2:dd:
ae:02:0c:ad:23:b4:2f:e7:67:aa:bd:d9:ad:a0:e1:
96:4f:e0:f5:6b:78:20:80:97:d7:7f:4a:c7:1f:3c:
09:6d:29:13:1a:f5:fa:d4:b0:fa:7e:7d:4b:58:dc:
7c:dc:49:34:a3:01:3e:85:bb:2c:5c:16:2a:4a:69:
60:60:49:57:9e:df:57:87:69:02:ca:34:f5:4f:18:
35:6e:0d:0c:de:84:60:01:89:fe:03:2e:73:33:00:
d3:56:f8:fb:29:67:5f:2d:20:2d:34:05:9a:32:a7:
fc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:5A:D5:27:1B:53:5D:B1:FD:FA:1E:D9:97:A7:87:D5:61:65:EC:18
X509v3 Authority Key Identifier:
keyid:9B:C6:FD:3F:32:CA:45:94:C9:60:75:65:9A:70:89:B2:7A:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m8b9PzLKRZTJYHVlmnCJsnrj_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:56:65:75:d6:41:d6:e4:a3:53:c0:a4:85:b8:45:48:c1:d6:
3d:73:2f:45:7f:45:f9:21:df:8f:25:cf:3b:6c:dc:a6:b9:15:
7e:74:3e:b1:a3:00:fb:2a:b1:9c:18:5e:86:07:62:59:94:e5:
a4:65:59:4f:9f:33:a4:71:92:bf:ea:83:85:71:65:3b:1c:0c:
ad:b6:ca:f5:51:4c:20:81:c6:14:1d:77:ad:5c:7f:bb:9e:80:
a4:43:f0:e5:23:71:aa:a2:1f:8b:76:e1:5c:71:80:c8:4e:56:
c1:b0:52:8b:e5:8a:e1:35:e0:00:fd:21:a5:32:52:c9:16:d3:
35:13:ba:3d:8d:b4:e6:3c:84:8d:3f:e1:56:44:8a:23:36:78:
ab:0c:26:56:45:7d:81:80:ca:fc:6c:9a:7f:a6:02:d9:3c:e8:
22:e3:58:95:ad:b7:9f:8d:50:2d:58:6f:4f:63:49:c8:be:20:
3a:90:c6:78:f6:a7:52:ed:17:cb:53:18:59:19:72:c2:18:37:
31:ff:ef:e7:17:bb:77:74:93:ca:a2:66:e3:1a:8c:f5:1f:cc:
86:18:ce:de:81:a9:de:98:6e:61:45:02:a1:83:49:96:0f:75:
fe:7a:5b:81:3b:1d:f8:19:2c:05:c4:a9:e2:78:07:48:19:56:
b1:8b:54:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9K5mvuF7NL+3T9Ous6dgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliYzZmZDNmMzJjYTQ1OTRjOTYwNzU2NTlhNzA4OWIyN2Fl
M2ZlZjMwHhcNMjUxMTA0MTMwMDQ5WhcNMjUxMTA1MTMwMDQ5WjAzMTEwLwYDVQQD
EyhmZDVhZDUyNzFiNTM1ZGIxZmRmYTFlZDk5N2E3ODdkNTYxNjVlYzE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iY2LEbcSg4ltkl+95kyYs0QpQL5
+++gRwRVumSsmtEQjbZuCEHLMz+0OYKZxdpD7m+QxsoyKDLBQCzzxQTO4Hk3w4Lu
zd6AlTzHpJZN1yvRQ02MvIw5sp9UdA5k+jxooND6M0PwwFibWf8JQo+tnMm00sNd
rcYRTNqwRYjfDlhXIP+nYn/iZtILcD58GSUZzVRI4t2uAgytI7Qv52eqvdmtoOGW
T+D1a3gggJfXf0rHHzwJbSkTGvX61LD6fn1LWNx83Ek0owE+hbssXBYqSmlgYElX
nt9Xh2kCyjT1Txg1bg0M3oRgAYn+Ay5zMwDTVvj7KWdfLSAtNAWaMqf8OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP1a1ScbU12x/foe2Zenh9VhZewYMB8GA1UdIwQY
MBaAFJvG/T8yykWUyWB1ZZpwibJ64/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbThiOVB6TEtSWlRKWUhWbG1uQ0pzbnJqX3ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9kYTI0NDctYjI1Mi00YjZhLWE4MmYt
ZGNiZTUzZGE3ODYwLzEvbThiOVB6TEtSWlRKWUhWbG1uQ0pzbnJqX3ZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9kYTI0NDctYjI1Mi00YjZhLWE4MmYtZGNiZTUzZGE3ODYw
LzEvbThiOVB6TEtSWlRKWUhWbG1uQ0pzbnJqX3ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnFZlddZB
1uSjU8CkhbhFSMHWPXMvRX9F+SHfjyXPO2zcprkVfnQ+saMA+yqxnBhehgdiWZTl
pGVZT58zpHGSv+qDhXFlOxwMrbbK9VFMIIHGFB13rVx/u56ApEPw5SNxqqIfi3bh
XHGAyE5WwbBSi+WK4TXgAP0hpTJSyRbTNRO6PY205jyEjT/hVkSKIzZ4qwwmVkV9
gYDK/Gyaf6YC2TzoIuNYla23n41QLVhvT2NJyL4gOpDGePanUu0Xy1MYWRlywhg3
Mf/v5xe7d3STyqJm4xqM9R/MhhjO3oGp3phuYUUCoYNJlg91/npbgTsd+BksBcSp
4ngHSBlWsYtU/w==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:31 2025 by rpki-client