Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft
File: FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft (raw, json)
Hash identifier: YKf5cHsL+16gDDX8ikRwXZjgYefFIHX6+TAlqv23udQ=
Subject key identifier: 3B:F9:8B:B8:72:6A:4B:32:82:B3:B5:94:95:D4:7F:9F:AA:55:0E:33
Authority key identifier: 16:44:E6:C5:0C:B6:92:DF:B6:40:F6:F8:8E:22:8A:2D:9B:06:C6:79
Certificate issuer: /CN=1644e6c50cb692dfb640f6f88e228a2d9b06c679
Certificate serial: 019A4E4FBB7929A55D55C723ECBFF3246F95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FkTmxQy2kt-2QPb4jiKKLZsGxnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 10:00:39 +0000
Manifest this update: Tue 04 Nov 2025 10:00:39 +0000
Manifest next update: Wed 05 Nov 2025 10:00:39 +0000
Files and hashes: 1: FkTmxQy2kt-2QPb4jiKKLZsGxnk.crl (hash: lCCClBc6VkuFZNicWkesW+4SDilvO4YnXn69zSnmIOU=)
2: rXJZFmG2fExX2PgdhmMI1znr1Ys.roa (hash: jLirKW8uoxxjWyg59lIt3L6simlxOfJjoRXDdsPT8aQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FkTmxQy2kt-2QPb4jiKKLZsGxnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:bb:79:29:a5:5d:55:c7:23:ec:bf:f3:24:6f:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1644e6c50cb692dfb640f6f88e228a2d9b06c679
Validity
Not Before: Nov 4 10:00:39 2025 GMT
Not After : Nov 5 10:00:39 2025 GMT
Subject: CN=3bf98bb8726a4b3282b3b59495d47f9faa550e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7d:d6:d0:ef:c2:b6:ec:85:a9:8d:cf:18:ee:
1c:4a:bb:b5:99:13:ca:6c:f5:89:da:25:f5:60:46:
6a:56:78:33:fd:22:b9:59:11:81:52:23:b0:6a:b0:
bd:03:ef:ab:c0:d0:73:7d:e5:62:80:65:20:9d:4e:
e5:de:30:8a:80:d3:19:52:d5:99:d3:e4:9e:aa:cc:
03:7a:c9:5c:44:66:b3:c1:40:79:e1:20:85:c0:13:
a9:4b:cf:96:f4:e8:9b:2b:e8:b8:8d:e4:fc:db:34:
9d:f5:49:4e:f3:83:83:b9:d5:d2:ef:5e:dc:e2:e2:
be:60:b2:9a:c9:fc:e2:fc:c6:5c:40:cc:69:ca:3a:
93:22:16:7b:03:82:20:71:eb:9f:c5:f8:7b:8c:15:
37:63:3a:84:83:fe:ad:4a:0c:e9:3c:2f:e1:b6:5f:
b0:d1:73:b0:ba:f6:c4:09:1e:8b:84:b2:aa:7d:26:
9e:db:9f:42:5a:91:ed:a5:f1:52:21:8f:16:e4:0e:
a4:04:28:17:84:6f:13:de:60:0d:be:23:19:e2:e6:
09:6a:f5:72:c4:c5:38:78:12:94:c0:59:bc:7a:4e:
f3:98:c9:71:2c:50:7b:aa:2d:59:66:a7:73:3d:3a:
b5:f4:18:f7:1a:45:25:06:55:c6:eb:4e:4e:98:d1:
5e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F9:8B:B8:72:6A:4B:32:82:B3:B5:94:95:D4:7F:9F:AA:55:0E:33
X509v3 Authority Key Identifier:
keyid:16:44:E6:C5:0C:B6:92:DF:B6:40:F6:F8:8E:22:8A:2D:9B:06:C6:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FkTmxQy2kt-2QPb4jiKKLZsGxnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:9d:8c:c0:8a:f0:3f:f8:0f:0d:3f:f2:4c:bd:a1:a7:3d:9d:
3a:d3:fb:81:83:a3:33:39:1a:14:06:41:8c:a2:53:f5:43:4d:
14:ce:35:13:bb:3d:ed:a1:c1:57:e8:96:74:3a:1f:2b:aa:d5:
d6:6f:ad:9d:da:ca:54:af:3c:89:86:db:b6:d0:01:17:fe:e6:
ee:67:66:6b:a7:3b:26:20:9f:ba:12:6a:c2:2f:e9:e5:25:c0:
f8:ae:70:c5:74:cd:79:52:4b:68:c1:f3:58:fd:25:01:a5:4f:
79:0b:cf:c9:17:8f:ce:b4:2f:9d:91:d5:87:1e:df:13:92:61:
ad:ba:67:23:76:9f:86:f8:04:4f:d7:62:69:16:47:5b:b8:15:
7c:09:18:34:c1:3b:bd:fc:b0:50:f9:9a:fb:e3:20:bd:78:21:
3b:15:7a:38:b2:31:aa:b2:52:98:ba:28:32:f9:51:d7:5f:39:
79:08:81:8e:5e:a6:f1:ec:a5:33:2f:33:a7:1a:b6:4d:12:cb:
74:f4:ff:49:a8:6b:e7:c5:21:6b:53:f3:bf:1d:ce:6c:b9:1d:
9b:55:5f:d4:8b:13:f2:0d:1b:9b:ed:bc:60:df:6c:65:91:66:
21:16:17:d0:e7:2d:39:0f:2b:00:70:d9:69:15:49:d5:0f:d8:
ca:f7:ee:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT7t5KaVdVccj7L/zJG+VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NDRlNmM1MGNiNjkyZGZiNjQwZjZmODhlMjI4YTJkOWIw
NmM2NzkwHhcNMjUxMTA0MTAwMDM5WhcNMjUxMTA1MTAwMDM5WjAzMTEwLwYDVQQD
EygzYmY5OGJiODcyNmE0YjMyODJiM2I1OTQ5NWQ0N2Y5ZmFhNTUwZTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzH3W0O/CtuyFqY3PGO4cSru1mRPK
bPWJ2iX1YEZqVngz/SK5WRGBUiOwarC9A++rwNBzfeVigGUgnU7l3jCKgNMZUtWZ
0+SeqswDeslcRGazwUB54SCFwBOpS8+W9OibK+i4jeT82zSd9UlO84ODudXS717c
4uK+YLKayfzi/MZcQMxpyjqTIhZ7A4Igceufxfh7jBU3YzqEg/6tSgzpPC/htl+w
0XOwuvbECR6LhLKqfSae259CWpHtpfFSIY8W5A6kBCgXhG8T3mANviMZ4uYJavVy
xMU4eBKUwFm8ek7zmMlxLFB7qi1ZZqdzPTq19Bj3GkUlBlXG605OmNFe/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDv5i7hyaksygrO1lJXUf5+qVQ4zMB8GA1UdIwQY
MBaAFBZE5sUMtpLftkD2+I4iii2bBsZ5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmtUbXhReTJrdC0yUVBiNGppS0tMWnNHeG5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9kMmUxNGUtZjkwMC00YWIwLTkzZmQt
ZmRlYmYxMjViNDhlLzEvRmtUbXhReTJrdC0yUVBiNGppS0tMWnNHeG5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9kMmUxNGUtZjkwMC00YWIwLTkzZmQtZmRlYmYxMjViNDhl
LzEvRmtUbXhReTJrdC0yUVBiNGppS0tMWnNHeG5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFJ2MwIrw
P/gPDT/yTL2hpz2dOtP7gYOjMzkaFAZBjKJT9UNNFM41E7s97aHBV+iWdDofK6rV
1m+tndrKVK88iYbbttABF/7m7mdma6c7JiCfuhJqwi/p5SXA+K5wxXTNeVJLaMHz
WP0lAaVPeQvPyRePzrQvnZHVhx7fE5JhrbpnI3afhvgET9diaRZHW7gVfAkYNME7
vfywUPma++MgvXghOxV6OLIxqrJSmLooMvlR1185eQiBjl6m8eylMy8zpxq2TRLL
dPT/Sahr58Uha1Pzvx3ObLkdm1Vf1IsT8g0bm+28YN9sZZFmIRYX0OctOQ8rAHDZ
aRVJ1Q/YyvfuXw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:30 2025 by rpki-client