Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
File: RMDyoqVgB-TEXMxx59oJKGEwWyA.mft (raw, json)
Hash identifier: Nx63YPR4vJZKmDNrqYMRIWKOD3EUJz8qKMkj8SKTAJ8=
Subject key identifier: ED:6D:C5:7D:DA:59:3A:C9:EA:2C:D2:1C:79:C9:1D:71:97:F2:3A:5C
Authority key identifier: 44:C0:F2:A2:A5:60:07:E4:C4:5C:CC:71:E7:DA:09:28:61:30:5B:20
Certificate issuer: /CN=44c0f2a2a56007e4c45ccc71e7da092861305b20
Certificate serial: 019A4F99254F21A6FFC7644F1E12FE45A3E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMDyoqVgB-TEXMxx59oJKGEwWyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 16:00:27 +0000
Manifest this update: Tue 04 Nov 2025 16:00:27 +0000
Manifest next update: Wed 05 Nov 2025 16:00:27 +0000
Files and hashes: 1: AaeTZJ_Mx4pF3TF16wEEVAdeKg4.roa (hash: uC6UcXyt2Kmfls1QdacCrz5Tf6o/T5Y+fDQ00/99ycM=)
2: RMDyoqVgB-TEXMxx59oJKGEwWyA.crl (hash: jJPdl6LgB/WcFy5gceDZcgU1lIg8JPAGc76pY0uTl3A=)
3: j-Ifej8p6sYfHH1KeQ_QH-keweY.roa (hash: iVB6o7qwOuA1Lj9sG4cTIYUNVhckFRweng10RlAwHI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RMDyoqVgB-TEXMxx59oJKGEwWyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:25:4f:21:a6:ff:c7:64:4f:1e:12:fe:45:a3:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c0f2a2a56007e4c45ccc71e7da092861305b20
Validity
Not Before: Nov 4 16:00:27 2025 GMT
Not After : Nov 5 16:00:27 2025 GMT
Subject: CN=ed6dc57dda593ac9ea2cd21c79c91d7197f23a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8c:29:e6:ad:15:b7:8c:82:0f:4d:2d:9a:60:
12:20:d9:da:a7:91:a2:11:2f:3f:1d:48:9e:33:8d:
4e:92:ab:67:db:f1:1f:7e:58:5c:74:7f:55:f6:90:
b8:ea:d2:a9:41:25:84:df:36:70:c3:50:f8:7f:18:
00:3a:f0:8a:f8:b1:17:34:0a:5e:7b:94:e9:d4:de:
7a:da:65:4d:f7:e6:34:7f:00:bf:4a:2f:c1:37:e6:
be:41:2f:79:ab:bd:d5:f4:36:08:a8:9f:5b:0b:d0:
3f:69:10:c1:b3:48:6c:3e:15:17:7d:d4:4d:09:ae:
06:e9:63:8c:ac:08:e6:b7:49:35:12:1e:72:8d:a1:
26:81:43:00:46:90:10:14:72:ee:85:33:be:39:0d:
7d:9b:a0:65:bb:a4:28:12:fd:7c:e9:52:30:ef:2c:
9e:07:19:7d:73:74:42:27:32:e4:78:d9:3a:14:15:
3e:1a:74:60:41:95:bc:40:05:3b:ac:f5:cc:71:43:
24:04:84:f7:e2:43:e5:cf:bf:d1:10:1b:f2:4b:ec:
70:66:9b:64:69:4d:6c:b9:67:21:3f:53:c7:de:e4:
d4:ac:35:ce:6c:4b:cb:88:ff:7c:da:2d:88:ef:26:
fb:71:cf:ab:c4:1f:02:db:f6:8a:86:89:16:15:12:
e2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:6D:C5:7D:DA:59:3A:C9:EA:2C:D2:1C:79:C9:1D:71:97:F2:3A:5C
X509v3 Authority Key Identifier:
keyid:44:C0:F2:A2:A5:60:07:E4:C4:5C:CC:71:E7:DA:09:28:61:30:5B:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMDyoqVgB-TEXMxx59oJKGEwWyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:d8:d3:c8:f1:77:88:d8:cd:5f:d2:6a:84:a4:3d:41:e9:62:
2a:77:91:09:c8:2a:da:e9:62:ac:38:6e:69:e0:a8:6f:ec:66:
e7:fb:82:5e:07:f9:3a:0a:f3:6e:48:46:6a:e7:6b:83:ed:ba:
c0:ab:11:2e:4c:2a:1c:c8:60:a9:1c:3d:89:b2:af:3d:0e:2b:
57:b6:2a:13:61:7d:28:12:67:9d:75:36:9f:8c:e5:f5:d0:7a:
6f:0c:9a:91:f7:05:92:61:ce:a5:3c:a0:3e:f1:e6:37:a4:31:
93:54:63:a7:b5:a2:56:ee:b3:61:59:37:fd:11:89:8b:de:c9:
c5:08:c1:65:02:97:dc:2f:11:06:b8:25:51:fb:7f:44:72:fb:
72:31:38:c9:e3:b6:46:dc:ac:97:8b:76:6b:95:a5:54:36:6a:
46:e0:f3:c1:50:43:0a:a2:33:60:42:d8:8b:da:39:5d:63:79:
02:d6:68:00:30:f7:61:72:1a:26:22:c0:4e:55:b3:e5:dd:31:
39:52:a9:c2:0a:9a:da:a2:45:d7:04:24:af:d8:76:a3:82:ac:
df:80:2a:f5:95:66:63:85:33:59:00:53:06:d1:fd:6e:46:e8:
27:94:57:62:aa:eb:2d:c8:1f:9f:51:34:56:ce:ed:36:5f:f3:
30:44:69:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmSVPIab/x2RPHhL+RaPmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0YzBmMmEyYTU2MDA3ZTRjNDVjY2M3MWU3ZGEwOTI4NjEz
MDViMjAwHhcNMjUxMTA0MTYwMDI3WhcNMjUxMTA1MTYwMDI3WjAzMTEwLwYDVQQD
EyhlZDZkYzU3ZGRhNTkzYWM5ZWEyY2QyMWM3OWM5MWQ3MTk3ZjIzYTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIwp5q0Vt4yCD00tmmASINnap5Gi
ES8/HUieM41Okqtn2/EfflhcdH9V9pC46tKpQSWE3zZww1D4fxgAOvCK+LEXNApe
e5Tp1N562mVN9+Y0fwC/Si/BN+a+QS95q73V9DYIqJ9bC9A/aRDBs0hsPhUXfdRN
Ca4G6WOMrAjmt0k1Eh5yjaEmgUMARpAQFHLuhTO+OQ19m6Blu6QoEv186VIw7yye
Bxl9c3RCJzLkeNk6FBU+GnRgQZW8QAU7rPXMcUMkBIT34kPlz7/REBvyS+xwZptk
aU1suWchP1PH3uTUrDXObEvLiP982i2I7yb7cc+rxB8C2/aKhokWFRLiNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO1txX3aWTrJ6izSHHnJHXGX8jpcMB8GA1UdIwQY
MBaAFETA8qKlYAfkxFzMcefaCShhMFsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUk1EeW9xVmdCLVRFWE14eDU5b0pLR0V3V3lBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9iODA1OGUtNGViYS00Y2M0LThjMWQt
OWM4NGYyZmRkOGYwLzEvUk1EeW9xVmdCLVRFWE14eDU5b0pLR0V3V3lBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9iODA1OGUtNGViYS00Y2M0LThjMWQtOWM4NGYyZmRkOGYw
LzEvUk1EeW9xVmdCLVRFWE14eDU5b0pLR0V3V3lBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUNjTyPF3
iNjNX9JqhKQ9QeliKneRCcgq2ulirDhuaeCob+xm5/uCXgf5OgrzbkhGaudrg+26
wKsRLkwqHMhgqRw9ibKvPQ4rV7YqE2F9KBJnnXU2n4zl9dB6bwyakfcFkmHOpTyg
PvHmN6Qxk1Rjp7WiVu6zYVk3/RGJi97JxQjBZQKX3C8RBrglUft/RHL7cjE4yeO2
Rtysl4t2a5WlVDZqRuDzwVBDCqIzYELYi9o5XWN5AtZoADD3YXIaJiLATlWz5d0x
OVKpwgqa2qJF1wQkr9h2o4Ks34Aq9ZVmY4UzWQBTBtH9bkboJ5RXYqrrLcgfn1E0
Vs7tNl/zMERpTg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:44:14 2025 by rpki-client