Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft
File: RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft (raw, json)
Hash identifier: V/UwuxtP4HiGVL44J8yTDaau7aa1bdqdqRuTiQb7xNw=
Subject key identifier: FA:29:B6:B7:25:65:CF:FF:C6:FF:07:9E:35:05:C6:10:8C:BE:97:4B
Authority key identifier: 47:26:94:D8:A3:99:A3:A6:6F:44:2E:C7:22:95:C7:54:AC:BB:AD:41
Certificate issuer: /CN=472694d8a399a3a66f442ec72295c754acbbad41
Certificate serial: 019A53E3FEACE803D9A468CD419D57D568D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft
Manifest number: 15E8
Signing time: Wed 05 Nov 2025 12:00:42 +0000
Manifest this update: Wed 05 Nov 2025 12:00:42 +0000
Manifest next update: Thu 06 Nov 2025 12:00:42 +0000
Files and hashes: 1: HDxSohX-IDNPW8pjacRSI1H_PKk.roa (hash: LmMZXQdXNsqjvcfV+qIzu55UsIszcW5rLny8ykXmqHQ=)
2: RyaU2KOZo6ZvRC7HIpXHVKy7rUE.crl (hash: gY8btdQBgWQs80HAIh18HODRo6kPaxhFXTEN3/nX/SQ=)
3: ZTfX1eIYwu2teEKHLHrabIZkJWw.roa (hash: XbM05VStZazqLzFaHm9tyYba1eH2G3CcfziDsh45rsc=)
4: cOeYrSQu-ObbQyfYQeLjcuYaLQ0.roa (hash: GdluFLbgNrS7xoyapuqIK4cx1yZ3FPC1FpSx8lT9u+Y=)
5: jCdWeScDFXpWXYVASAbWW6Vizq0.roa (hash: 0snKT5LdHK0wV53UVPxEtQMU5HqJbqkJ3jy1nr8IbbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e3:fe:ac:e8:03:d9:a4:68:cd:41:9d:57:d5:68:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=472694d8a399a3a66f442ec72295c754acbbad41
Validity
Not Before: Nov 5 12:00:42 2025 GMT
Not After : Nov 6 12:00:42 2025 GMT
Subject: CN=fa29b6b72565cfffc6ff079e3505c6108cbe974b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:20:80:3b:21:53:c0:04:71:7a:b3:31:c8:b1:
7f:cc:6a:eb:ea:1e:45:84:81:83:7f:12:11:6a:52:
14:5e:fc:2d:a4:91:e7:19:14:9c:54:88:b2:9b:bc:
c3:d6:da:47:8e:27:14:d3:7a:a1:e7:a3:82:3b:01:
3b:ae:b9:a4:dd:cd:92:0f:92:28:5f:db:00:be:7c:
f7:7a:0a:ec:f4:a1:e6:19:4a:75:52:f2:f2:a0:62:
98:ff:66:c4:80:60:a0:2a:87:8a:d4:61:ac:ad:fc:
3e:cf:40:62:8e:f1:a2:3c:4d:a7:8b:87:81:f7:9a:
20:20:74:5e:42:69:04:ef:18:05:ad:c4:d2:6f:77:
a9:75:79:12:8a:b2:e2:1e:fa:1c:50:80:a0:df:b6:
91:02:24:f3:f8:0e:4c:2a:e7:d0:3a:62:b0:0c:c3:
bf:7c:9e:3b:46:fa:4f:0a:06:3e:ca:42:3e:e4:92:
9e:1c:30:8b:15:f4:3e:14:1a:97:a5:f9:a3:61:92:
b7:9e:77:66:b6:75:e8:5c:6d:69:0d:16:ab:93:f0:
2a:2c:dc:9d:c0:2e:46:a9:4f:c7:3a:9b:8b:6c:cf:
0e:b3:16:61:87:1e:37:ad:be:64:07:7f:95:af:2e:
dd:ae:57:c9:d6:fd:37:5b:f7:e2:c5:fd:7d:0d:cf:
1b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:29:B6:B7:25:65:CF:FF:C6:FF:07:9E:35:05:C6:10:8C:BE:97:4B
X509v3 Authority Key Identifier:
keyid:47:26:94:D8:A3:99:A3:A6:6F:44:2E:C7:22:95:C7:54:AC:BB:AD:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:3b:05:e6:4a:a0:a0:db:83:94:9c:cb:69:49:2c:2a:90:01:
90:4a:a3:75:e5:9f:94:fd:9d:14:40:05:00:91:14:20:44:02:
1d:29:13:c1:72:f4:61:1f:90:62:75:ef:8f:ed:b3:9d:6c:44:
d7:aa:d2:81:33:5b:64:b5:70:d3:c4:7d:46:4b:6f:2b:82:ef:
f8:d0:8a:6a:44:b0:69:5c:f9:23:d3:3f:65:cc:df:0a:93:8e:
0c:21:db:ff:27:a6:f3:c1:f8:bb:7c:41:50:5b:87:d5:14:b6:
ec:8c:03:7f:7d:3e:95:91:61:44:e3:a9:51:7b:52:70:ed:1c:
95:25:13:94:e1:22:b1:2c:31:84:55:16:d0:e3:be:a1:e6:87:
7f:36:d5:be:15:fa:36:33:25:a4:85:f1:8e:e6:a5:97:9c:d9:
be:75:0b:de:ed:ea:9e:17:5e:20:06:46:5f:e2:96:38:37:3b:
2c:36:bf:6c:96:63:ea:7c:18:86:ae:d8:73:27:bc:f0:7d:b1:
61:c4:fd:25:6b:b2:7c:e0:e0:c2:66:7a:7e:11:b6:d5:c0:52:
98:89:75:2c:7f:62:6a:97:b0:b2:b3:9a:36:2b:3c:22:2b:f4:
53:5c:d7:58:ff:af:64:e4:0f:e5:44:7a:dc:61:f8:20:88:2f:
f3:4a:88:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpT4/6s6APZpGjNQZ1X1WjQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MjY5NGQ4YTM5OWEzYTY2ZjQ0MmVjNzIyOTVjNzU0YWNi
YmFkNDEwHhcNMjUxMTA1MTIwMDQyWhcNMjUxMTA2MTIwMDQyWjAzMTEwLwYDVQQD
EyhmYTI5YjZiNzI1NjVjZmZmYzZmZjA3OWUzNTA1YzYxMDhjYmU5NzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiCAOyFTwARxerMxyLF/zGrr6h5F
hIGDfxIRalIUXvwtpJHnGRScVIiym7zD1tpHjicU03qh56OCOwE7rrmk3c2SD5Io
X9sAvnz3egrs9KHmGUp1UvLyoGKY/2bEgGCgKoeK1GGsrfw+z0BijvGiPE2ni4eB
95ogIHReQmkE7xgFrcTSb3epdXkSirLiHvocUICg37aRAiTz+A5MKufQOmKwDMO/
fJ47RvpPCgY+ykI+5JKeHDCLFfQ+FBqXpfmjYZK3nndmtnXoXG1pDRark/AqLNyd
wC5GqU/HOpuLbM8OsxZhhx43rb5kB3+Vry7drlfJ1v03W/fixf19Dc8bqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPoptrclZc//xv8HnjUFxhCMvpdLMB8GA1UdIwQY
MBaAFEcmlNijmaOmb0QuxyKVx1Ssu61BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnlhVTJLT1pvNlp2UkM3SElwWEhWS3k3clVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9kZGMyNmUtMzFkYS00M2RkLWI0ZDEt
MDYzYTA4ODFhNmQyLzEvUnlhVTJLT1pvNlp2UkM3SElwWEhWS3k3clVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9kZGMyNmUtMzFkYS00M2RkLWI0ZDEtMDYzYTA4ODFhNmQy
LzEvUnlhVTJLT1pvNlp2UkM3SElwWEhWS3k3clVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEzsF5kqg
oNuDlJzLaUksKpABkEqjdeWflP2dFEAFAJEUIEQCHSkTwXL0YR+QYnXvj+2znWxE
16rSgTNbZLVw08R9RktvK4Lv+NCKakSwaVz5I9M/ZczfCpOODCHb/yem88H4u3xB
UFuH1RS27IwDf30+lZFhROOpUXtScO0clSUTlOEisSwxhFUW0OO+oeaHfzbVvhX6
NjMlpIXxjuall5zZvnUL3u3qnhdeIAZGX+KWODc7LDa/bJZj6nwYhq7Ycye88H2x
YcT9JWuyfODgwmZ6fhG21cBSmIl1LH9iapewsrOaNis8Iiv0U1zXWP+vZOQP5UR6
3GH4IIgv80qINw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 20:47:48 2025 by rpki-client