
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
File: 1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft (raw, json)
Hash identifier: Wutf1BqFkVAg+dJ2jdfuZ9xK2pymptro9pQWuxA24lE=
Subject key identifier: BF:FD:55:4B:15:7B:87:98:AF:33:13:04:4C:90:46:4B:D4:02:3F:BC
Authority key identifier: FA:63:0C:3D:23:C6:04:6C:2F:1A:7E:0C:8F:CC:BD:83:E2:0E:D4:C7
Certificate issuer: /CN=fa630c3d23c6046c2f1a7e0c8fccbd83e20ed4c7
Certificate serial: 019A559ADD3EBD45EF31AA050D1D53EFC33C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
Manifest number: 16A5
Signing time: Wed 05 Nov 2025 20:00:03 +0000
Manifest this update: Wed 05 Nov 2025 20:00:03 +0000
Manifest next update: Thu 06 Nov 2025 20:00:03 +0000
Files and hashes: 1: 1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.crl (hash: xcNFgLtcLKGWYYpAOBd2hqIdrEkAM3EYpOKeI7YjArE=)
2: 86fKM31DBBSwZ8M6qcIf6r_iQR4.roa (hash: EWjBxOajWLT9vZOY8gky8VpcjsYK4HfbzBG5oTI1lvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 20:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:9a:dd:3e:bd:45:ef:31:aa:05:0d:1d:53:ef:c3:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa630c3d23c6046c2f1a7e0c8fccbd83e20ed4c7
Validity
Not Before: Nov 5 20:00:03 2025 GMT
Not After : Nov 6 20:00:03 2025 GMT
Subject: CN=bffd554b157b8798af3313044c90464bd4023fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:9d:c9:15:96:2c:0b:6b:03:4e:9b:91:73:02:
f9:ca:fb:f8:28:ca:e0:e5:af:d0:3e:c6:0f:1a:2e:
49:b2:2a:98:33:e6:f4:ff:ee:2a:e6:1c:6a:25:36:
9f:b8:c4:85:c9:d6:e9:b0:c2:ac:ca:04:85:64:85:
8b:62:d0:4f:e2:f4:7b:6a:65:f7:30:51:9e:f4:75:
56:7a:41:7c:fd:b4:e4:19:ba:7e:e6:83:15:f3:fe:
62:98:94:b5:7a:22:b0:3e:48:a0:c8:4b:2a:d4:2a:
85:7f:e5:5c:69:58:82:8b:c5:f7:99:62:4c:7f:7d:
ae:ff:32:4b:48:41:aa:16:d8:2a:36:44:07:e1:02:
83:de:27:ec:a8:f1:fd:49:05:87:d9:b5:6c:d9:7d:
37:cd:cb:69:a4:83:5a:da:d6:ff:2b:b5:3c:b7:82:
2e:06:b6:dc:05:2f:1d:60:74:37:a0:e5:54:f8:6a:
37:68:8b:82:26:87:42:21:68:32:cd:2f:60:b3:76:
36:bd:c8:ef:f0:eb:5b:78:c1:0f:32:33:c2:29:07:
75:71:bc:c4:14:98:98:fe:2f:4b:bc:4d:bd:2a:04:
14:05:d9:ae:49:c5:7a:df:fe:4d:2a:c3:c9:4d:d3:
75:3c:f1:f0:30:28:3b:af:43:56:b0:ce:27:6b:62:
4c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:FD:55:4B:15:7B:87:98:AF:33:13:04:4C:90:46:4B:D4:02:3F:BC
X509v3 Authority Key Identifier:
keyid:FA:63:0C:3D:23:C6:04:6C:2F:1A:7E:0C:8F:CC:BD:83:E2:0E:D4:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:cf:fa:d8:5e:3f:fe:d6:78:24:8b:37:63:38:6a:22:25:cf:
b6:f9:00:eb:da:78:ca:98:02:f7:97:13:77:7e:0f:76:c8:db:
06:92:c8:46:e5:58:f9:42:82:e7:33:16:7c:f3:aa:b5:13:90:
97:c2:68:8f:1a:86:26:18:63:02:77:72:79:3e:8f:5f:2e:11:
76:4e:72:f7:26:64:10:72:72:5e:70:b3:98:7e:56:55:74:e9:
47:3a:7b:e2:a6:31:36:ee:4c:c2:63:81:45:bf:6e:f8:0c:42:
c9:4a:05:e2:dd:88:8e:02:bb:53:6c:d9:b6:e3:8e:53:77:09:
63:1f:24:92:57:5a:11:58:dc:ac:07:76:d7:1f:93:94:12:72:
ce:03:41:77:a7:ad:5d:77:50:a9:fd:8c:fe:ec:3e:43:17:66:
02:55:f0:11:32:d3:66:34:15:e8:4b:5b:17:12:30:9e:df:bf:
da:7d:d8:53:0a:dd:ad:2f:5a:16:d9:04:0e:c6:c9:21:4b:3c:
7e:ae:9d:d0:fd:77:65:33:a9:b8:7f:19:e0:f7:88:a5:1b:44:
2b:be:96:04:9d:36:7e:a7:d2:eb:b3:be:46:23:6a:11:a2:eb:
7d:f8:c2:24:31:12:db:10:5e:a8:6c:f8:ba:2e:f4:1d:06:27:
6c:b4:cd:ed
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZpVmt0+vUXvMaoFDR1T78M8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNjMwYzNkMjNjNjA0NmMyZjFhN2UwYzhmY2NiZDgzZTIw
ZWQ0YzcwHhcNMjUxMTA1MjAwMDAzWhcNMjUxMTA2MjAwMDAzWjAzMTEwLwYDVQQD
EyhiZmZkNTU0YjE1N2I4Nzk4YWYzMzEzMDQ0YzkwNDY0YmQ0MDIzZmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6J3JFZYsC2sDTpuRcwL5yvv4KMrg
5a/QPsYPGi5JsiqYM+b0/+4q5hxqJTafuMSFydbpsMKsygSFZIWLYtBP4vR7amX3
MFGe9HVWekF8/bTkGbp+5oMV8/5imJS1eiKwPkigyEsq1CqFf+VcaViCi8X3mWJM
f32u/zJLSEGqFtgqNkQH4QKD3ifsqPH9SQWH2bVs2X03zctppINa2tb/K7U8t4Iu
BrbcBS8dYHQ3oOVU+Go3aIuCJodCIWgyzS9gs3Y2vcjv8OtbeMEPMjPCKQd1cbzE
FJiY/i9LvE29KgQUBdmuScV63/5NKsPJTdN1PPHwMCg7r0NWsM4na2JMQwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFL/9VUsVe4eYrzMTBEyQRkvUAj+8MB8GA1UdIwQY
MBaAFPpjDD0jxgRsLxp+DI/MvYPiDtTHMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1tTU1QU1BHQkd3dkduNE1qOHk5Zy1JTzFNYy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMvNDlhZDk3LTIxZjEtNGNjOS1iNzc2
LThjYmVlNWEwMjdjMy8xLzEtbU1NUFNQR0JHd3ZHbjRNajh5OWctSU8xTWMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2JjLzQ5YWQ5Ny0yMWYxLTRjYzktYjc3Ni04Y2JlZTVhMDI3
YzMvMS8xLW1NTVBTUEdCR3d2R240TWo4eTlnLUlPMU1jLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfc/6
2F4//tZ4JIs3YzhqIiXPtvkA69p4ypgC95cTd34PdsjbBpLIRuVY+UKC5zMWfPOq
tROQl8JojxqGJhhjAndyeT6PXy4Rdk5y9yZkEHJyXnCzmH5WVXTpRzp74qYxNu5M
wmOBRb9u+AxCyUoF4t2IjgK7U2zZtuOOU3cJYx8kkldaEVjcrAd21x+TlBJyzgNB
d6etXXdQqf2M/uw+QxdmAlXwETLTZjQV6EtbFxIwnt+/2n3YUwrdrS9aFtkEDsbJ
IUs8fq6d0P13ZTOpuH8Z4PeIpRtEK76WBJ02fqfS67O+RiNqEaLrffjCJDES2xBe
qGz4ui70HQYnbLTN7Q==
-----END CERTIFICATE-----
Generated at Thu Nov 6 06:07:41 2025 by rpki-client