Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft
File: XYbEfabZB5NHtg8E7VxVV_6YPrg.mft (raw, json)
Hash identifier: hS7FKRicQWWx/YC8cjGRa9XAoHKN/B3gHDa+eJVCw3Y=
Subject key identifier: B4:3F:04:1E:92:2A:4B:B2:A9:4B:DB:9F:F7:68:D4:BE:9F:79:18:1C
Authority key identifier: 5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8
Certificate issuer: /CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8
Certificate serial: 019A54519F6A71C0B31E9318E047DDFFF24E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft
Manifest number: 07D9
Signing time: Wed 05 Nov 2025 14:00:26 +0000
Manifest this update: Wed 05 Nov 2025 14:00:26 +0000
Manifest next update: Thu 06 Nov 2025 14:00:26 +0000
Files and hashes: 1: 2P1yuhNiwzpuhAGqzfrj2lRnpyw.roa (hash: v8vqWZlajCWSPPZWElULKYnskyo39/+jmGLteoM9Mq8=)
2: XYbEfabZB5NHtg8E7VxVV_6YPrg.crl (hash: 3swO2BdAyUcmTSyz9G3HbQ0TcShEJPIsYmYSf8sftsk=)
3: YxZAW7xYuuoItNSxZUB_Jyv54M8.roa (hash: ZHkpmuH04xDfiHb0nZigSHP0TijTWcHxuOKkj3BJQR4=)
4: i6uCG0Q2AD4SRLu8l3KF_dDGZzk.roa (hash: jFpYwIwpWfR9hcM4AjV3+9gVDn6oo25N3yT8niBuGDs=)
5: wJUlaRUICcG98jFoJrBOPCJA9K0.roa (hash: C8JFs0EQ+NjuY81C+W4nNxPlVGGKOiRDa/0xgVpCyR4=)
6: yM87hDn48G9pC2uXeNqB6MxDyyY.roa (hash: m4eQad2ewLgQnWmXHQewt9Vc5wlc0Xqlxo4fhTztW/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:51:9f:6a:71:c0:b3:1e:93:18:e0:47:dd:ff:f2:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8
Validity
Not Before: Nov 5 14:00:26 2025 GMT
Not After : Nov 6 14:00:26 2025 GMT
Subject: CN=b43f041e922a4bb2a94bdb9ff768d4be9f79181c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:57:52:26:97:ab:be:56:36:1d:ae:6b:08:1b:
bb:18:10:c7:d0:09:01:d8:f9:1f:f4:39:c6:a7:c9:
d3:74:69:cd:68:f4:36:97:ac:43:52:f0:88:cb:22:
ef:1a:20:76:f2:f1:73:b2:87:19:70:a0:b0:29:4c:
2f:e8:6b:da:4c:c4:29:20:2e:01:0c:bd:3a:5f:25:
ad:0c:f4:1c:af:aa:54:13:2e:b7:38:c9:07:e9:e4:
09:d5:1c:7b:11:ed:33:87:de:7e:4f:43:dc:36:9a:
fd:f9:a1:4e:b4:83:10:86:21:36:22:d2:be:f9:b4:
3c:5a:5d:ea:24:e6:19:20:49:b1:00:b4:5d:49:08:
d4:71:0f:86:38:5a:af:be:7e:9c:bb:9b:40:14:4d:
0b:fb:3f:50:87:1a:9f:35:b6:20:ed:7a:b6:1c:d5:
98:0a:f8:82:78:f9:11:a6:74:9b:bf:56:53:5d:42:
ba:27:3c:23:47:9f:e0:2d:a1:cf:02:55:5e:c3:ff:
5d:b9:8e:82:3b:e5:0d:68:3b:c0:7d:28:72:91:dd:
1c:83:59:52:16:95:36:4a:cb:1a:bd:1f:39:3c:09:
26:67:91:68:44:48:04:ad:08:12:fd:8d:5c:10:4c:
53:bd:2d:d8:da:16:ac:d7:97:36:48:af:f2:7e:48:
90:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:3F:04:1E:92:2A:4B:B2:A9:4B:DB:9F:F7:68:D4:BE:9F:79:18:1C
X509v3 Authority Key Identifier:
keyid:5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:b3:5b:de:a6:41:05:d0:02:95:0f:e1:40:f6:57:13:c5:bf:
f6:4a:5c:cb:b8:7b:04:f3:2d:63:97:b3:46:d9:15:16:c0:2f:
b3:0e:ae:65:f4:44:a9:fc:d1:66:26:77:05:2e:da:18:fa:e1:
c1:8c:63:4a:10:bc:9e:13:12:ea:86:eb:1b:b7:c4:c6:2d:fc:
ae:6e:65:a1:22:87:df:a4:c3:df:83:1c:14:16:ef:3a:f5:22:
0a:9e:41:04:89:e8:e1:74:9d:37:a8:c4:75:1c:3a:f1:d1:4d:
6e:2d:70:91:8e:a0:99:60:96:4a:68:cb:b2:87:26:de:4e:1b:
8e:e5:38:23:27:85:b6:b0:c8:b4:d5:57:89:eb:c4:10:2c:2c:
81:6e:92:5d:df:05:5e:f4:35:f9:3b:92:a0:9a:d4:99:00:a5:
a1:98:73:9c:7c:82:cb:89:3d:d4:70:b0:ec:35:88:f3:15:05:
31:28:ef:19:02:7a:fb:30:fe:ee:ae:88:4e:d6:10:76:30:b0:
80:67:76:d7:2d:a6:c3:f7:b3:de:60:44:16:d5:26:1e:56:0c:
cc:8b:a9:91:d9:61:01:90:c8:55:e7:a8:9f:9e:d2:13:9a:2e:
92:8f:12:5f:15:b9:7a:1f:76:8b:d2:45:ff:6f:65:25:31:2a:
41:c6:7f:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpUUZ9qccCzHpMY4Efd//JOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkODZjNDdkYTZkOTA3OTM0N2I2MGYwNGVkNWM1NTU3ZmU5
ODNlYjgwHhcNMjUxMTA1MTQwMDI2WhcNMjUxMTA2MTQwMDI2WjAzMTEwLwYDVQQD
EyhiNDNmMDQxZTkyMmE0YmIyYTk0YmRiOWZmNzY4ZDRiZTlmNzkxODFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmldSJpervlY2Ha5rCBu7GBDH0AkB
2Pkf9DnGp8nTdGnNaPQ2l6xDUvCIyyLvGiB28vFzsocZcKCwKUwv6GvaTMQpIC4B
DL06XyWtDPQcr6pUEy63OMkH6eQJ1Rx7Ee0zh95+T0PcNpr9+aFOtIMQhiE2ItK+
+bQ8Wl3qJOYZIEmxALRdSQjUcQ+GOFqvvn6cu5tAFE0L+z9QhxqfNbYg7Xq2HNWY
CviCePkRpnSbv1ZTXUK6JzwjR5/gLaHPAlVew/9duY6CO+UNaDvAfShykd0cg1lS
FpU2SssavR85PAkmZ5FoREgErQgS/Y1cEExTvS3Y2has15c2SK/yfkiQKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQ/BB6SKkuyqUvbn/do1L6feRgcMB8GA1UdIwQY
MBaAFF2GxH2m2QeTR7YPBO1cVVf+mD64MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFliRWZhYlpCNU5IdGc4RTdWeFZWXzZZUHJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9kZjY2YTAtYzk1OC00ZTVjLWE2ZGYt
ZmM2MzI4NDFiYTNlLzEvWFliRWZhYlpCNU5IdGc4RTdWeFZWXzZZUHJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9kZjY2YTAtYzk1OC00ZTVjLWE2ZGYtZmM2MzI4NDFiYTNl
LzEvWFliRWZhYlpCNU5IdGc4RTdWeFZWXzZZUHJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANLNb3qZB
BdAClQ/hQPZXE8W/9kpcy7h7BPMtY5ezRtkVFsAvsw6uZfREqfzRZiZ3BS7aGPrh
wYxjShC8nhMS6obrG7fExi38rm5loSKH36TD34McFBbvOvUiCp5BBIno4XSdN6jE
dRw68dFNbi1wkY6gmWCWSmjLsocm3k4bjuU4IyeFtrDItNVXievEECwsgW6SXd8F
XvQ1+TuSoJrUmQCloZhznHyCy4k91HCw7DWI8xUFMSjvGQJ6+zD+7q6ITtYQdjCw
gGd21y2mw/ez3mBEFtUmHlYMzIupkdlhAZDIVeeon57SE5ouko8SXxW5eh92i9JF
/29lJTEqQcZ/fw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 19:44:22 2025 by rpki-client