Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft
File: fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft (raw, json)
Hash identifier: +15CjhXHMh3/+XSPt61JZ9v8gOXYlbikj3fYh0dHtAU=
Subject key identifier: A4:0C:B9:54:67:76:AD:26:F7:A5:E2:4E:B3:8D:41:98:DE:09:82:E9
Authority key identifier: 7E:31:50:F8:C6:70:63:12:10:27:32:89:54:96:8D:08:D4:CF:32:9A
Certificate issuer: /CN=7e3150f8c67063121027328954968d08d4cf329a
Certificate serial: 019A5119560CC27816CF2500D55371A6A13A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft
Manifest number: 019F
Signing time: Tue 04 Nov 2025 23:00:06 +0000
Manifest this update: Tue 04 Nov 2025 23:00:06 +0000
Manifest next update: Wed 05 Nov 2025 23:00:06 +0000
Files and hashes: 1: B0G3sXZP-lhExtNpCnBC4YPOMgM.roa (hash: gLC/9yZUh8hacXl47LTUe+LM65gMVKVuxWQdb+HkSvE=)
2: btENirTzGa5hCRjGIIwG3_NDN14.roa (hash: Qc+DpFa+WQ/w1YZM6JMB5sciL2uYCIYPxJnwDj9/83A=)
3: fjFQ-MZwYxIQJzKJVJaNCNTPMpo.crl (hash: Y/5HG/lF0ln1QERNpMFSCfPpQienjl/9ZG4sJJy+QnQ=)
4: k6PVLlZxAI3X_AkJNP_B54WXdz0.roa (hash: NcuIcur7U+66dD6xSrLkgdloxOkqGgs1VvRkZcvsiE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:56:0c:c2:78:16:cf:25:00:d5:53:71:a6:a1:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e3150f8c67063121027328954968d08d4cf329a
Validity
Not Before: Nov 4 23:00:06 2025 GMT
Not After : Nov 5 23:00:06 2025 GMT
Subject: CN=a40cb9546776ad26f7a5e24eb38d4198de0982e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a3:21:be:7f:2f:75:af:14:d3:b4:9c:96:d0:
bf:a5:44:65:79:9d:a4:cd:5d:50:c0:3e:78:51:0c:
19:51:a2:9b:7e:03:7a:81:4a:0c:75:bf:9c:28:2f:
a1:23:90:99:25:f3:dd:56:c6:3a:e2:6e:a5:e3:19:
8c:c2:51:d1:69:25:f0:4e:b3:d5:6b:d7:c2:e7:ce:
fa:3f:33:a6:34:79:1c:2c:13:57:18:fb:85:69:61:
37:f9:66:ce:f4:77:62:b6:1e:2b:4f:77:68:ac:dc:
96:1a:47:61:7c:4d:cb:e8:6c:50:d1:8d:49:2c:b2:
5f:9f:33:88:30:f4:da:94:db:12:2a:e0:cc:27:34:
70:d8:c1:b3:95:05:05:b6:8b:8b:46:7f:8d:0a:42:
26:c7:84:6b:2a:fc:d0:30:bd:48:bd:2d:4a:38:64:
c9:47:36:66:0c:6d:de:41:cb:d5:44:e6:47:d4:e2:
f5:6e:26:cc:01:81:0f:01:02:97:22:6a:3a:32:66:
a8:2a:19:9d:e3:6f:71:8d:d9:70:80:e0:fb:81:45:
b4:9c:56:94:6b:d3:f3:9b:3f:66:cc:62:34:76:8c:
0f:03:16:82:fe:c3:9b:bc:2e:93:80:0e:c4:62:79:
54:8a:8b:0e:14:73:5c:80:ef:14:41:5e:07:ef:9e:
23:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:0C:B9:54:67:76:AD:26:F7:A5:E2:4E:B3:8D:41:98:DE:09:82:E9
X509v3 Authority Key Identifier:
keyid:7E:31:50:F8:C6:70:63:12:10:27:32:89:54:96:8D:08:D4:CF:32:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:4d:89:49:2c:12:90:0b:44:9d:23:11:1c:d2:5f:d2:b8:13:
0f:2b:4e:a1:d5:64:6f:41:c1:84:5b:6b:19:6d:9b:f2:4a:6c:
7f:8b:8d:a9:a4:47:0c:2c:fc:fb:a4:db:a2:3e:b3:f0:36:3e:
6b:ed:ac:97:34:44:a8:0f:ea:da:e9:45:8c:0d:b8:c7:8e:74:
44:53:ca:c0:4c:cf:a4:0a:78:43:80:08:46:26:dd:2f:46:11:
57:38:5f:ab:be:07:09:4c:52:8a:fc:aa:80:28:1e:71:ec:36:
51:38:85:30:d2:96:8f:f9:a5:90:98:88:a5:c8:6a:09:a4:c1:
b4:9c:9e:b3:97:ba:de:6b:9b:c5:c2:e2:33:5e:b2:b3:5b:2c:
30:21:84:8d:50:fd:74:10:23:31:66:bb:8c:e7:6e:5a:3c:af:
50:90:e0:e1:8f:bf:9c:77:e0:4e:17:09:7a:b5:47:f6:b1:d2:
46:16:02:a6:91:6f:89:55:28:4a:39:0f:14:70:da:c8:1a:f1:
6f:c7:be:d8:9d:34:2b:29:93:4c:77:76:e7:24:65:3b:db:8a:
5d:6b:e8:06:ff:89:f4:89:28:cf:fe:c6:ca:46:6c:ff:c3:f3:
e7:a7:4e:9c:8b:4d:51:2d:ce:22:e7:f8:02:be:2f:58:59:14:
52:f7:b8:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRGVYMwngWzyUA1VNxpqE6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMzE1MGY4YzY3MDYzMTIxMDI3MzI4OTU0OTY4ZDA4ZDRj
ZjMyOWEwHhcNMjUxMTA0MjMwMDA2WhcNMjUxMTA1MjMwMDA2WjAzMTEwLwYDVQQD
EyhhNDBjYjk1NDY3NzZhZDI2ZjdhNWUyNGViMzhkNDE5OGRlMDk4MmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2aMhvn8vda8U07ScltC/pURleZ2k
zV1QwD54UQwZUaKbfgN6gUoMdb+cKC+hI5CZJfPdVsY64m6l4xmMwlHRaSXwTrPV
a9fC5876PzOmNHkcLBNXGPuFaWE3+WbO9Hdith4rT3dorNyWGkdhfE3L6GxQ0Y1J
LLJfnzOIMPTalNsSKuDMJzRw2MGzlQUFtouLRn+NCkImx4RrKvzQML1IvS1KOGTJ
RzZmDG3eQcvVROZH1OL1bibMAYEPAQKXImo6MmaoKhmd429xjdlwgOD7gUW0nFaU
a9Pzmz9mzGI0dowPAxaC/sObvC6TgA7EYnlUiosOFHNcgO8UQV4H754j5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKQMuVRndq0m96XiTrONQZjeCYLpMB8GA1UdIwQY
MBaAFH4xUPjGcGMSECcyiVSWjQjUzzKaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmpGUS1NWndZeElRSnpLSlZKYU5DTlRQTXBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84YmNmZDctZjZkMy00MzJhLWI1ZjAt
OTM1ZTQxOGJkYmU3LzEvZmpGUS1NWndZeElRSnpLSlZKYU5DTlRQTXBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi84YmNmZDctZjZkMy00MzJhLWI1ZjAtOTM1ZTQxOGJkYmU3
LzEvZmpGUS1NWndZeElRSnpLSlZKYU5DTlRQTXBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAME2JSSwS
kAtEnSMRHNJf0rgTDytOodVkb0HBhFtrGW2b8kpsf4uNqaRHDCz8+6Tboj6z8DY+
a+2slzREqA/q2ulFjA24x450RFPKwEzPpAp4Q4AIRibdL0YRVzhfq74HCUxSivyq
gCgecew2UTiFMNKWj/mlkJiIpchqCaTBtJyes5e63mubxcLiM16ys1ssMCGEjVD9
dBAjMWa7jOduWjyvUJDg4Y+/nHfgThcJerVH9rHSRhYCppFviVUoSjkPFHDayBrx
b8e+2J00KymTTHd25yRlO9uKXWvoBv+J9Ikoz/7GykZs/8Pz56dOnItNUS3OIuf4
Ar4vWFkUUve48A==
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:29:05 2025 by rpki-client