Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft
File: T5nk6uSKAceB-q0R9tgakeozvf8.mft (raw, json)
Hash identifier: O0u/5qfQ3yT2JIfcZqa1OzSQ+IGGIUTNTfZ/tXS9vh4=
Subject key identifier: 23:9B:A2:D9:B7:62:F9:C3:94:42:4C:07:45:0F:D4:CE:B5:DF:AA:03
Authority key identifier: 4F:99:E4:EA:E4:8A:01:C7:81:FA:AD:11:F6:D8:1A:91:EA:33:BD:FF
Certificate issuer: /CN=4f99e4eae48a01c781faad11f6d81a91ea33bdff
Certificate serial: 019A54BF2D801300D9F13FC75BB44D3FFADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft
Manifest number: 1716
Signing time: Wed 05 Nov 2025 16:00:06 +0000
Manifest this update: Wed 05 Nov 2025 16:00:06 +0000
Manifest next update: Thu 06 Nov 2025 16:00:06 +0000
Files and hashes: 1: 1rrQNZWItDgfdECFOf22Jh7vi4k.roa (hash: oHl9vepG9gEfJ6vCHFkAvnbQr+mxDKJlGHdGdAeE9CA=)
2: 3RF21_ECpL5M_wnxKo1LaLxJwIk.roa (hash: DwVXHnFiU49l5hw1O5O7YFwPLdE2x6EWi17vCjDfMV4=)
3: OfliSFK47yOA2Tkix0wrkAH4x2c.roa (hash: B0Voqn9uU+7JqaJFZrNcBBKpjX2nZFFKEZ39gYCt+es=)
4: T5nk6uSKAceB-q0R9tgakeozvf8.crl (hash: 5nWd2xRAGoRiLBpvz256vjAH9NrvfyDiuZ1uf2jzyEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:bf:2d:80:13:00:d9:f1:3f:c7:5b:b4:4d:3f:fa:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f99e4eae48a01c781faad11f6d81a91ea33bdff
Validity
Not Before: Nov 5 16:00:06 2025 GMT
Not After : Nov 6 16:00:06 2025 GMT
Subject: CN=239ba2d9b762f9c394424c07450fd4ceb5dfaa03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:43:3e:c1:82:6e:31:19:68:75:fb:f6:ad:97:
fa:a4:28:19:d5:40:c0:0b:a0:1d:42:eb:0a:b8:68:
21:ae:2b:0c:e8:5a:88:87:07:57:6b:1a:63:37:4d:
a2:d9:64:79:d2:45:e9:30:d8:58:44:f8:0b:c2:8a:
ed:39:08:73:e4:c9:d2:e1:ea:72:17:2f:13:5a:e7:
c8:fb:14:e8:5a:02:84:f0:f7:a2:1f:c9:35:e8:3e:
c0:06:ae:b8:fa:fc:88:ec:ab:08:ed:73:dd:d4:61:
1b:d8:5b:3f:63:fb:74:fd:96:f3:b0:8b:f6:10:b0:
99:53:55:1a:1a:66:2a:98:27:c5:54:77:d3:ab:3f:
b0:2d:86:fe:5b:5f:3f:e6:f2:78:3a:a6:ec:c3:37:
2d:e7:8e:c4:3d:32:3a:df:a4:46:54:1c:20:22:36:
a6:0c:fe:b3:cb:71:c3:12:e9:09:56:1d:d9:06:81:
02:8b:e9:83:33:6f:2e:59:3a:33:95:d6:be:be:6d:
08:81:77:f5:8a:50:90:98:e7:32:65:18:e2:3f:c8:
f0:df:5d:28:7b:5b:60:9b:8e:dc:41:44:68:9a:94:
01:aa:05:d9:9b:b9:24:61:a3:a4:88:57:91:d5:8b:
e0:d9:90:f4:e2:b6:bd:a0:3a:25:95:20:c7:58:1a:
cd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:9B:A2:D9:B7:62:F9:C3:94:42:4C:07:45:0F:D4:CE:B5:DF:AA:03
X509v3 Authority Key Identifier:
keyid:4F:99:E4:EA:E4:8A:01:C7:81:FA:AD:11:F6:D8:1A:91:EA:33:BD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:68:7c:7f:6b:af:76:22:42:66:11:94:74:4c:53:fe:40:f6:
6c:15:d6:44:1b:14:5c:17:ab:53:d4:fe:93:41:d0:4c:11:2a:
1a:60:92:85:55:b8:28:19:54:8a:23:59:22:0f:15:ee:13:fe:
0f:56:f1:b6:6e:e8:c2:3b:0a:a7:7f:d8:38:a6:09:68:51:2d:
99:68:5e:41:df:07:0d:74:03:fc:bf:d1:fb:d7:cf:73:e3:db:
e5:41:aa:08:46:41:af:f9:c9:2e:a1:1e:0b:15:35:26:3e:ff:
ee:40:15:8b:04:14:b6:05:78:cc:2d:0d:10:e2:48:ab:09:da:
cf:4d:27:fe:39:4a:79:6d:15:c1:36:fd:20:74:40:3b:df:f7:
8b:ce:f4:c9:ac:4d:77:fb:44:0f:8c:db:72:a1:48:c6:0c:dc:
45:b2:35:19:6d:2d:7f:2f:26:da:32:40:dd:1b:8b:36:79:3c:
17:f4:82:0a:6f:bd:1c:a7:dc:f9:e0:ef:b8:d1:56:d3:b0:c5:
ef:f3:14:25:93:5c:c0:23:0f:31:06:60:76:03:bc:5e:f1:6b:
7a:1a:12:4a:3c:87:45:8d:b4:54:f9:6c:b5:eb:f4:b7:8e:82:
1a:4f:31:72:64:4b:19:8f:ca:34:b1:f8:62:ee:cb:fe:3e:02:
e9:49:e1:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpUvy2AEwDZ8T/HW7RNP/rcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOTllNGVhZTQ4YTAxYzc4MWZhYWQxMWY2ZDgxYTkxZWEz
M2JkZmYwHhcNMjUxMTA1MTYwMDA2WhcNMjUxMTA2MTYwMDA2WjAzMTEwLwYDVQQD
EygyMzliYTJkOWI3NjJmOWMzOTQ0MjRjMDc0NTBmZDRjZWI1ZGZhYTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkM+wYJuMRlodfv2rZf6pCgZ1UDA
C6AdQusKuGghrisM6FqIhwdXaxpjN02i2WR50kXpMNhYRPgLwortOQhz5MnS4epy
Fy8TWufI+xToWgKE8PeiH8k16D7ABq64+vyI7KsI7XPd1GEb2Fs/Y/t0/ZbzsIv2
ELCZU1UaGmYqmCfFVHfTqz+wLYb+W18/5vJ4Oqbswzct547EPTI636RGVBwgIjam
DP6zy3HDEukJVh3ZBoECi+mDM28uWTozlda+vm0IgXf1ilCQmOcyZRjiP8jw310o
e1tgm47cQURompQBqgXZm7kkYaOkiFeR1Yvg2ZD04ra9oDollSDHWBrNHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCObotm3YvnDlEJMB0UP1M6136oDMB8GA1UdIwQY
MBaAFE+Z5OrkigHHgfqtEfbYGpHqM73/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDVuazZ1U0tBY2VCLXEwUjl0Z2FrZW96dmY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8xOWQzMTMtNzc3Yi00MDQ0LWEyMzgt
OGI4ZjNmOGQ3MzAzLzEvVDVuazZ1U0tBY2VCLXEwUjl0Z2FrZW96dmY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8xOWQzMTMtNzc3Yi00MDQ0LWEyMzgtOGI4ZjNmOGQ3MzAz
LzEvVDVuazZ1U0tBY2VCLXEwUjl0Z2FrZW96dmY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAemh8f2uv
diJCZhGUdExT/kD2bBXWRBsUXBerU9T+k0HQTBEqGmCShVW4KBlUiiNZIg8V7hP+
D1bxtm7owjsKp3/YOKYJaFEtmWheQd8HDXQD/L/R+9fPc+Pb5UGqCEZBr/nJLqEe
CxU1Jj7/7kAViwQUtgV4zC0NEOJIqwnaz00n/jlKeW0VwTb9IHRAO9/3i870yaxN
d/tED4zbcqFIxgzcRbI1GW0tfy8m2jJA3RuLNnk8F/SCCm+9HKfc+eDvuNFW07DF
7/MUJZNcwCMPMQZgdgO8XvFrehoSSjyHRY20VPlstev0t46CGk8xcmRLGY/KNLH4
Yu7L/j4C6UnhqA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 20:06:08 2025 by rpki-client