Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
File: U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft (raw, json)
Hash identifier: +Hx7N/wW+jY97oQjX93Kpa/Qg4xGUpokI3mMglBjGSU=
Subject key identifier: A1:FA:8D:8C:7D:B4:AA:72:02:DC:7D:86:7D:7D:45:0D:4B:B9:9C:5C
Authority key identifier: 53:70:07:31:C5:AD:C7:0B:CB:71:3E:57:A5:1A:40:3E:64:ED:91:C8
Certificate issuer: /CN=53700731c5adc70bcb713e57a51a403e64ed91c8
Certificate serial: 019A50E424190209E56CCD5E5FD3833D72FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
Manifest number: 0266
Signing time: Tue 04 Nov 2025 22:01:59 +0000
Manifest this update: Tue 04 Nov 2025 22:01:59 +0000
Manifest next update: Wed 05 Nov 2025 22:01:59 +0000
Files and hashes: 1: U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl (hash: rlf7C3nGlFdxZBTvWYy9WRceQRKHSZ+Ta0zqndu0t4E=)
2: d_MgrBI_XqLm3vPMbVfOHRCRjlM.roa (hash: 8wS5nxJpvzUto4TBQuuJYHRS4iSYHZpu3buUsV2eb9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e4:24:19:02:09:e5:6c:cd:5e:5f:d3:83:3d:72:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53700731c5adc70bcb713e57a51a403e64ed91c8
Validity
Not Before: Nov 4 22:01:59 2025 GMT
Not After : Nov 5 22:01:59 2025 GMT
Subject: CN=a1fa8d8c7db4aa7202dc7d867d7d450d4bb99c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:26:2c:9f:54:15:cf:f7:f2:06:72:e1:f3:46:
1c:a0:d3:e9:cf:9d:f4:f8:d4:15:1b:00:23:4a:fe:
20:31:58:c2:0e:63:f1:de:2f:0d:10:8d:39:d2:8f:
94:7f:3b:7e:36:23:05:5b:b8:3e:b2:21:05:c3:f2:
ae:18:0e:60:93:d3:e8:b5:f0:dc:fd:8b:31:67:df:
cc:bb:1d:47:2b:bb:20:db:f8:25:29:cc:83:2b:94:
d7:32:10:32:66:f9:88:31:fd:ee:e3:bc:56:b7:5d:
e8:94:76:4f:27:7f:72:38:ad:41:12:dc:3f:77:03:
98:18:87:da:6d:2a:6e:a7:9f:98:5d:77:dc:b6:86:
b7:7d:d4:f2:e7:eb:b2:58:cb:e6:5c:f0:77:0f:7b:
d6:a1:fc:ac:79:4f:20:6b:d3:6e:8c:b8:e3:95:36:
9f:f1:ba:06:1b:01:50:03:e9:99:33:3d:82:bd:09:
64:2a:83:42:a9:c3:ce:ec:0c:ec:5e:58:84:e4:a6:
c8:e6:1b:96:e2:08:b1:40:ed:0a:ec:02:f6:6b:ec:
0b:b2:2c:ea:b0:9d:f2:48:43:60:02:59:39:86:32:
d4:26:3e:5e:50:15:70:a3:4c:21:4e:dc:ce:c9:74:
d1:15:d4:13:51:b6:cf:2c:df:89:68:de:d8:b6:c4:
77:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:FA:8D:8C:7D:B4:AA:72:02:DC:7D:86:7D:7D:45:0D:4B:B9:9C:5C
X509v3 Authority Key Identifier:
keyid:53:70:07:31:C5:AD:C7:0B:CB:71:3E:57:A5:1A:40:3E:64:ED:91:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:e7:ff:8f:cd:d7:c1:dc:8d:89:74:a1:60:be:6d:e0:2b:a9:
87:5c:22:b4:e6:0c:c7:d2:eb:4f:5f:e6:1d:c5:cd:04:a4:f8:
c8:4d:eb:8d:fd:07:76:6a:b4:64:09:0b:5f:22:c3:1f:09:2b:
a6:96:31:ae:60:f0:d4:0e:f2:74:9c:fd:48:fa:8a:86:ae:6a:
4b:b3:3d:b5:1a:3a:a1:df:ee:d4:5f:72:26:b0:52:d6:20:b0:
32:a4:23:93:1a:6d:13:87:d4:49:7d:ca:fd:c8:9f:ab:6e:e9:
ad:bb:07:07:01:99:b1:a0:70:37:86:6c:41:37:ce:48:19:e7:
8c:01:7b:c4:c7:7c:85:e5:e7:21:03:57:fd:aa:e8:a1:41:c7:
12:58:bb:7f:83:ba:62:2d:bf:ca:00:ca:78:97:86:7a:bb:c0:
e5:bb:a5:d1:77:96:34:ad:35:f6:d1:14:b4:4c:b0:bb:70:91:
c6:10:da:ce:41:79:dd:4d:70:c8:38:56:cb:ea:84:59:17:11:
1a:eb:2f:2a:1f:06:92:c3:ab:1a:d2:5b:b9:1a:73:74:70:7e:
ae:22:02:68:9d:1d:01:f2:8a:b6:56:05:4b:6a:ed:d2:93:72:
3e:fc:a9:ef:01:76:5e:c6:44:a0:a3:8d:7b:3c:9d:6e:75:30:
2f:b6:c8:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ5CQZAgnlbM1eX9ODPXL7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNzAwNzMxYzVhZGM3MGJjYjcxM2U1N2E1MWE0MDNlNjRl
ZDkxYzgwHhcNMjUxMTA0MjIwMTU5WhcNMjUxMTA1MjIwMTU5WjAzMTEwLwYDVQQD
EyhhMWZhOGQ4YzdkYjRhYTcyMDJkYzdkODY3ZDdkNDUwZDRiYjk5YzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryYsn1QVz/fyBnLh80YcoNPpz530
+NQVGwAjSv4gMVjCDmPx3i8NEI050o+Ufzt+NiMFW7g+siEFw/KuGA5gk9PotfDc
/YsxZ9/Mux1HK7sg2/glKcyDK5TXMhAyZvmIMf3u47xWt13olHZPJ39yOK1BEtw/
dwOYGIfabSpup5+YXXfctoa3fdTy5+uyWMvmXPB3D3vWofyseU8ga9NujLjjlTaf
8boGGwFQA+mZMz2CvQlkKoNCqcPO7AzsXliE5KbI5huW4gixQO0K7AL2a+wLsizq
sJ3ySENgAlk5hjLUJj5eUBVwo0whTtzOyXTRFdQTUbbPLN+JaN7YtsR3rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKH6jYx9tKpyAtx9hn19RQ1LuZxcMB8GA1UdIwQY
MBaAFFNwBzHFrccLy3E+V6UaQD5k7ZHIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTNBSE1jV3R4d3ZMY1Q1WHBScEFQbVR0a2NnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC84M2NmNzMtYjdjZS00NDQwLWE0YWQt
N2M1MjNiNThkZWNmLzEvVTNBSE1jV3R4d3ZMY1Q1WHBScEFQbVR0a2NnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC84M2NmNzMtYjdjZS00NDQwLWE0YWQtN2M1MjNiNThkZWNm
LzEvVTNBSE1jV3R4d3ZMY1Q1WHBScEFQbVR0a2NnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAouf/j83X
wdyNiXShYL5t4Cuph1witOYMx9LrT1/mHcXNBKT4yE3rjf0Hdmq0ZAkLXyLDHwkr
ppYxrmDw1A7ydJz9SPqKhq5qS7M9tRo6od/u1F9yJrBS1iCwMqQjkxptE4fUSX3K
/cifq27prbsHBwGZsaBwN4ZsQTfOSBnnjAF7xMd8heXnIQNX/arooUHHEli7f4O6
Yi2/ygDKeJeGervA5bul0XeWNK019tEUtEywu3CRxhDazkF53U1wyDhWy+qEWRcR
GusvKh8GksOrGtJbuRpzdHB+riICaJ0dAfKKtlYFS2rt0pNyPvyp7wF2XsZEoKON
ezydbnUwL7bIUQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 02:20:02 2025 by rpki-client