Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
File: kwHqBZY8l1byjuLpi488xHncn1g.mft (raw, json)
Hash identifier: u6deWHREEuhgLIXK8cjIf/H5sSH1XsJ8qHO7iBh3Ako=
Subject key identifier: 16:A5:30:33:14:1A:F1:1D:2C:AB:55:26:0D:75:ED:AE:84:58:65:93
Authority key identifier: 93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58
Certificate issuer: /CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58
Certificate serial: 019A4D3D40C0B307663208C07C7A4918538E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 05:00:51 +0000
Manifest this update: Tue 04 Nov 2025 05:00:51 +0000
Manifest next update: Wed 05 Nov 2025 05:00:51 +0000
Files and hashes: 1: TVR9Wcx95L9uIbI7vmRK3_ppXuA.roa (hash: FBGg+DHw7jOc497O265+HPovAlPdSEs0qwJnAdItW6I=)
2: UvYnHc7rFlBw3j4tqyHKN3v104E.roa (hash: 6QDgTXlr47CFI8bSc1FSdC5Ii7Qu4oH4gM2ZxRc6gQc=)
3: bdOSuRKRee1uOsbVObRylNDB0a0.roa (hash: gjO8qJZwFaEvDikQnhsOULa/ARdOkiQLGR4fYx/iUVY=)
4: kwHqBZY8l1byjuLpi488xHncn1g.crl (hash: PIpKLnXu4enRRWiia+QkdaBB+CU5hJF+v19Izj5Fmjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:40:c0:b3:07:66:32:08:c0:7c:7a:49:18:53:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58
Validity
Not Before: Nov 4 05:00:51 2025 GMT
Not After : Nov 5 05:00:51 2025 GMT
Subject: CN=16a53033141af11d2cab55260d75edae84586593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c4:41:1e:ff:b3:0e:4f:72:19:47:58:a1:9d:
98:15:1a:c8:6a:c0:52:07:73:4f:96:2e:d2:66:01:
92:3d:00:f5:14:74:67:dc:fc:b7:cc:84:63:9c:2f:
a1:9d:51:b2:42:d1:2e:7e:1d:23:3b:14:86:52:95:
c6:cc:72:2b:82:f1:ee:dc:6d:bc:75:39:6b:b8:10:
38:5f:3f:7a:50:d9:07:77:01:92:e1:f3:00:72:b9:
f8:b9:e3:a1:4d:54:ed:d3:f1:b5:fe:4c:00:00:27:
cc:68:68:11:00:28:82:b8:6e:25:9e:d2:73:35:83:
5b:b2:68:0d:28:5c:e2:1f:ca:4b:a7:c2:7e:0c:7f:
5f:36:c1:5e:f6:d5:56:f0:f0:a3:f0:fd:9c:9f:37:
8f:d3:c4:78:a0:bc:97:20:d0:32:d4:75:6d:1c:3b:
8c:9e:11:7b:d6:e0:e4:db:e3:2b:9e:2d:28:91:44:
0f:b3:45:dd:a4:05:eb:f8:a1:03:43:ca:42:fa:31:
4f:c6:41:01:0f:76:6f:75:d8:77:a0:f1:6b:aa:3d:
1a:6e:95:a6:81:a7:4b:87:57:18:0d:54:13:73:6b:
53:1e:a9:ea:7e:4e:c4:d9:11:91:e8:99:92:6b:8c:
8a:17:b2:6d:d4:62:55:23:d8:06:df:76:9d:22:6f:
69:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A5:30:33:14:1A:F1:1D:2C:AB:55:26:0D:75:ED:AE:84:58:65:93
X509v3 Authority Key Identifier:
keyid:93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:16:f7:71:24:fd:03:54:23:66:7e:9b:0c:e3:d2:85:6a:74:
6d:f5:ac:8a:d7:38:5e:b6:41:30:7f:5e:9c:7b:8d:1f:db:d5:
fd:7b:d3:6d:90:93:be:07:d6:b5:3b:12:0e:d2:18:9e:12:df:
e7:79:9f:8b:f8:08:96:8c:b1:f4:ac:08:4c:e5:63:db:18:3d:
ff:3c:33:95:40:ab:f3:af:25:e1:b2:65:95:39:33:7c:e9:9d:
03:e1:e9:03:f9:23:e8:d3:9f:73:c1:bd:3f:2e:58:9e:e9:22:
97:9d:da:68:c2:c8:2f:32:a1:fe:c1:7a:37:86:3c:e7:66:11:
71:de:7f:9e:02:66:82:24:21:20:d8:1b:69:2c:bb:34:07:0a:
3a:93:fe:54:3a:ea:0e:7b:67:f8:31:05:70:c1:02:20:7b:a2:
0c:f1:41:38:4e:a5:48:29:31:c9:a8:27:90:1f:ab:15:81:92:
28:5b:59:6d:63:1e:e4:46:bb:ed:0c:22:60:98:30:c0:14:48:
26:6b:91:1c:89:fc:64:a5:97:ca:fa:94:15:60:fb:fe:b4:6e:
15:b7:c2:bd:2b:d4:fa:d8:48:93:a0:fd:dd:ab:ea:df:20:25:
9a:1a:0c:0c:45:68:5e:02:7c:af:dc:b3:9f:c1:82:a8:9a:7b:
6c:25:3d:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPUDAswdmMgjAfHpJGFOOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMDFlYTA1OTYzYzk3NTZmMjhlZTJlOThiOGYzY2M0Nzlk
YzlmNTgwHhcNMjUxMTA0MDUwMDUxWhcNMjUxMTA1MDUwMDUxWjAzMTEwLwYDVQQD
EygxNmE1MzAzMzE0MWFmMTFkMmNhYjU1MjYwZDc1ZWRhZTg0NTg2NTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8RBHv+zDk9yGUdYoZ2YFRrIasBS
B3NPli7SZgGSPQD1FHRn3Py3zIRjnC+hnVGyQtEufh0jOxSGUpXGzHIrgvHu3G28
dTlruBA4Xz96UNkHdwGS4fMAcrn4ueOhTVTt0/G1/kwAACfMaGgRACiCuG4lntJz
NYNbsmgNKFziH8pLp8J+DH9fNsFe9tVW8PCj8P2cnzeP08R4oLyXINAy1HVtHDuM
nhF71uDk2+Mrni0okUQPs0XdpAXr+KEDQ8pC+jFPxkEBD3Zvddh3oPFrqj0abpWm
gadLh1cYDVQTc2tTHqnqfk7E2RGR6JmSa4yKF7Jt1GJVI9gG33adIm9p3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBalMDMUGvEdLKtVJg117a6EWGWTMB8GA1UdIwQY
MBaAFJMB6gWWPJdW8o7i6YuPPMR53J9YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3dIcUJaWThsMWJ5anVMcGk0ODh4SG5jbjFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9lYmY2Y2ItYTc3OS00NjRmLThiZWUt
OGYwOGUwMjcyZGY4LzEva3dIcUJaWThsMWJ5anVMcGk0ODh4SG5jbjFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9lYmY2Y2ItYTc3OS00NjRmLThiZWUtOGYwOGUwMjcyZGY4
LzEva3dIcUJaWThsMWJ5anVMcGk0ODh4SG5jbjFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgRb3cST9
A1QjZn6bDOPShWp0bfWsitc4XrZBMH9enHuNH9vV/XvTbZCTvgfWtTsSDtIYnhLf
53mfi/gIloyx9KwITOVj2xg9/zwzlUCr868l4bJllTkzfOmdA+HpA/kj6NOfc8G9
Py5Ynukil53aaMLILzKh/sF6N4Y852YRcd5/ngJmgiQhINgbaSy7NAcKOpP+VDrq
Dntn+DEFcMECIHuiDPFBOE6lSCkxyagnkB+rFYGSKFtZbWMe5Ea77QwiYJgwwBRI
JmuRHIn8ZKWXyvqUFWD7/rRuFbfCvSvU+thIk6D93avq3yAlmhoMDEVoXgJ8r9yz
n8GCqJp7bCU9vQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:04 2025 by rpki-client