Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
File: RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft (raw, json)
Hash identifier: otl+GMZzw0VyWv+MVYEyZHTIrOVOyK45KakOzr40O1M=
Subject key identifier: 18:AC:9C:12:2C:9C:6B:27:67:2E:DC:D6:9F:29:9A:33:86:FF:82:0E
Authority key identifier: 44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
Certificate issuer: /CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Certificate serial: 019A4F992B33D12A892FF6255DE7AE2C31D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
Manifest number: 0C84
Signing time: Tue 04 Nov 2025 16:00:29 +0000
Manifest this update: Tue 04 Nov 2025 16:00:29 +0000
Manifest next update: Wed 05 Nov 2025 16:00:29 +0000
Files and hashes: 1: 0qRVIHZKX4qGnjxAiU1aoisO8_I.roa (hash: lyCpmpSchMKVPytHVw70ZjOKFalrbZ7DXCdpS6ih0A8=)
2: RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl (hash: NoAfs/yY6q5sgMOFEx8HdsdLHLkMe0wQNdnY9WQ7AUI=)
3: XrZ7_VYsTjVO1Hdr6lTXBYRHdDM.roa (hash: /HTMnGOuDTUdEjSKAx29mQcK6o1vmtlFHqUYC092xGg=)
4: fNaHZKQWzTR0TatLxGJsV51nz-I.roa (hash: sE2fqms9057unxv9v3lOHD2WZe1GOPfgICxqGHioarI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:2b:33:d1:2a:89:2f:f6:25:5d:e7:ae:2c:31:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Validity
Not Before: Nov 4 16:00:29 2025 GMT
Not After : Nov 5 16:00:29 2025 GMT
Subject: CN=18ac9c122c9c6b27672edcd69f299a3386ff820e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4f:20:df:34:f7:ca:01:45:22:4d:d2:b4:d5:
f2:53:47:e1:6b:a7:4a:b9:d8:93:8c:54:dd:c1:fe:
4a:04:33:fb:a5:ab:eb:7b:81:ef:d0:14:cd:84:e6:
e4:eb:84:cf:a8:27:c0:d6:c9:0d:64:a2:ae:e5:d0:
97:9a:2a:d6:c8:a6:42:38:85:5b:ab:d8:46:47:d8:
ab:c5:7c:dc:f4:1a:8a:1f:ee:4a:be:fe:09:d4:45:
de:db:e4:0d:65:57:98:81:f8:11:ea:dd:ae:63:79:
7e:d9:87:79:5d:32:9c:ee:95:82:de:ed:78:42:a8:
c8:c7:5b:d6:c4:58:a4:ea:a0:5d:a0:be:e9:9f:31:
41:7e:5f:f3:af:b3:dd:a7:de:c7:35:bb:9e:e6:50:
4b:55:fb:1b:2f:5f:e6:a3:43:98:24:66:4d:bc:a4:
0f:64:09:68:5d:44:8a:13:64:8b:5c:d5:c4:45:de:
d1:44:2d:d3:b6:da:29:81:48:17:07:e5:e4:ec:a2:
fc:8e:dc:7d:0e:47:eb:e7:c7:dd:76:b0:25:27:45:
7f:29:15:63:f8:b7:0c:d5:51:90:e4:a7:a6:93:78:
b2:fe:5c:50:c7:28:97:f5:48:c3:f2:5e:c7:50:38:
c0:19:ba:e0:23:e3:02:e7:a9:fa:4b:de:49:b3:5b:
ea:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:AC:9C:12:2C:9C:6B:27:67:2E:DC:D6:9F:29:9A:33:86:FF:82:0E
X509v3 Authority Key Identifier:
keyid:44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:80:6f:66:fc:6a:96:95:26:58:ec:bb:38:3f:da:ed:54:b7:
c2:0f:d5:fc:46:e0:f2:e7:3f:92:3b:aa:7d:63:f6:97:fa:ac:
03:1c:67:9c:b7:4f:a4:f8:99:19:e0:23:62:13:53:f7:b6:ba:
26:be:e9:bc:60:d6:25:6d:e1:30:9b:9c:01:63:f9:2e:c9:7d:
77:19:ea:fc:5a:80:1a:c9:77:7e:59:e1:1e:59:62:68:d7:a3:
af:fd:81:01:a6:2b:80:5d:fc:17:ec:94:af:30:4a:d7:17:27:
6f:79:bc:3f:ba:2c:f6:2a:40:9a:6d:32:6a:b6:6b:0f:c6:b4:
d9:29:96:31:45:9e:ed:93:95:d3:a4:51:01:e3:0f:9b:bd:d3:
45:ef:22:e5:40:c6:97:a1:ea:01:db:7d:d6:fc:7d:47:22:a1:
b8:a9:13:f9:cb:a6:d4:26:f3:ce:38:86:b7:b4:7c:77:58:23:
a8:c5:a0:3f:a7:76:b4:49:a0:a9:f7:e1:9b:78:42:48:3f:95:
b5:51:47:8b:7d:8d:c1:96:42:1a:93:2d:6a:31:64:90:d5:86:
71:50:a5:2d:c7:b5:c8:b5:7e:43:6e:18:72:76:70:3d:52:e2:
e8:d9:3e:86:b4:e5:85:de:fc:0c:67:ff:97:3f:95:17:67:e4:
6f:c9:68:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmSsz0SqJL/YlXeeuLDHQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NzI4ZmIzMWM0ZWJkZmI5YmYxMjk3NDViOTFiZDJlMmVl
OGVmMzEwHhcNMjUxMTA0MTYwMDI5WhcNMjUxMTA1MTYwMDI5WjAzMTEwLwYDVQQD
EygxOGFjOWMxMjJjOWM2YjI3NjcyZWRjZDY5ZjI5OWEzMzg2ZmY4MjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq08g3zT3ygFFIk3StNXyU0fha6dK
udiTjFTdwf5KBDP7pavre4Hv0BTNhObk64TPqCfA1skNZKKu5dCXmirWyKZCOIVb
q9hGR9irxXzc9BqKH+5Kvv4J1EXe2+QNZVeYgfgR6t2uY3l+2Yd5XTKc7pWC3u14
QqjIx1vWxFik6qBdoL7pnzFBfl/zr7Pdp97HNbue5lBLVfsbL1/mo0OYJGZNvKQP
ZAloXUSKE2SLXNXERd7RRC3TttopgUgXB+Xk7KL8jtx9Dkfr58fddrAlJ0V/KRVj
+LcM1VGQ5Kemk3iy/lxQxyiX9UjD8l7HUDjAGbrgI+MC56n6S95Js1vqBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBisnBIsnGsnZy7c1p8pmjOG/4IOMB8GA1UdIwQY
MBaAFERyj7McTr37m/EpdFuRvS4u6O8xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkhLUHN4eE92ZnViOFNsMFc1RzlMaTdvN3pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zYWM3NjEtOWFkOC00NTEzLThhMzIt
MWY1NWQ5OTk5ZWViLzEvUkhLUHN4eE92ZnViOFNsMFc1RzlMaTdvN3pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8zYWM3NjEtOWFkOC00NTEzLThhMzItMWY1NWQ5OTk5ZWVi
LzEvUkhLUHN4eE92ZnViOFNsMFc1RzlMaTdvN3pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkYBvZvxq
lpUmWOy7OD/a7VS3wg/V/Ebg8uc/kjuqfWP2l/qsAxxnnLdPpPiZGeAjYhNT97a6
Jr7pvGDWJW3hMJucAWP5Lsl9dxnq/FqAGsl3flnhHlliaNejr/2BAaYrgF38F+yU
rzBK1xcnb3m8P7os9ipAmm0yarZrD8a02SmWMUWe7ZOV06RRAeMPm73TRe8i5UDG
l6HqAdt91vx9RyKhuKkT+cum1CbzzjiGt7R8d1gjqMWgP6d2tEmgqffhm3hCSD+V
tVFHi32NwZZCGpMtajFkkNWGcVClLce1yLV+Q24YcnZwPVLi6Nk+hrTlhd78DGf/
lz+VF2fkb8loPA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:37:26 2025 by rpki-client