Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
File: H6isN_lpUWlif3XgmJYzlt6WOMw.mft (raw, json)
Hash identifier: CAVcpmsQLy+WzLxvxaZzUN9vcrPA2GmOxaRPDdwFblY=
Subject key identifier: 8B:40:87:BA:4B:21:02:AE:ED:E5:88:F9:1F:E4:81:6A:50:90:53:4F
Authority key identifier: 1F:A8:AC:37:F9:69:51:69:62:7F:75:E0:98:96:33:96:DE:96:38:CC
Certificate issuer: /CN=1fa8ac37f9695169627f75e098963396de9638cc
Certificate serial: 019A4E86AB92FE9C83208E3C5010D7CE5D6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 11:00:39 +0000
Manifest this update: Tue 04 Nov 2025 11:00:39 +0000
Manifest next update: Wed 05 Nov 2025 11:00:39 +0000
Files and hashes: 1: EV_VJQ7znLLT_4jLuRQdPiIqgco.roa (hash: D3X5PT8yDu7pN/mU+PmRQS2ADQ706uf76HlBQmopR6o=)
2: H6isN_lpUWlif3XgmJYzlt6WOMw.crl (hash: LdDag9TbJt0ZpqypwLplWaQ+yM9EvODJVX+ZsU1MnAo=)
3: _A233dG0OsivwYkQExiSR967RqA.roa (hash: W1a0C5qkdasTQfph8n3hvMTYG6/PIGL4cSCJYs2ipZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:ab:92:fe:9c:83:20:8e:3c:50:10:d7:ce:5d:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fa8ac37f9695169627f75e098963396de9638cc
Validity
Not Before: Nov 4 11:00:39 2025 GMT
Not After : Nov 5 11:00:39 2025 GMT
Subject: CN=8b4087ba4b2102aeede588f91fe4816a5090534f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:28:56:22:44:c7:e5:6a:93:11:fb:8c:0e:5d:
38:bc:f6:6e:7d:45:50:6b:02:27:26:13:f3:f7:fc:
1a:0b:80:21:2a:90:76:61:65:ff:6b:08:24:73:ec:
1e:4c:33:8a:f0:3d:8b:d8:45:da:c5:2e:7b:34:44:
d0:4a:1b:c3:a5:1f:9b:83:79:76:16:52:bf:bd:5f:
e5:0f:fa:43:b7:3c:97:2d:d5:d9:41:3b:5c:f0:c4:
a8:a1:b4:cf:72:e0:91:b8:5b:1e:e0:e1:70:69:d4:
8e:2d:2f:58:9f:9c:28:dd:71:30:b3:09:eb:06:7d:
6c:23:81:5e:3d:02:03:4c:90:30:f5:2f:90:9e:e2:
44:1c:ec:da:39:fd:95:4f:f4:79:51:24:5c:79:a3:
a6:e4:be:b4:30:1a:d0:02:11:21:52:8d:a7:be:c3:
ab:c9:59:7d:27:61:8e:2a:59:1d:0b:9e:0c:d7:65:
a0:e7:0b:ca:ad:b0:79:16:3a:38:ec:b5:3d:19:bd:
63:14:ec:50:fd:cc:9a:94:cd:57:00:8a:93:13:b6:
14:cb:32:36:e8:f0:56:fc:b4:08:fe:45:2c:06:bd:
26:1f:4d:5a:bd:f2:1b:94:7c:0d:8a:2b:ee:ba:32:
48:a8:18:8f:f4:52:e6:b3:2c:b3:5d:68:ea:4a:66:
b0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:40:87:BA:4B:21:02:AE:ED:E5:88:F9:1F:E4:81:6A:50:90:53:4F
X509v3 Authority Key Identifier:
keyid:1F:A8:AC:37:F9:69:51:69:62:7F:75:E0:98:96:33:96:DE:96:38:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:64:62:54:a5:0e:bb:7c:57:0d:23:1a:38:83:0f:cf:72:0e:
d6:2e:35:31:63:3c:96:11:08:c7:34:34:ca:44:99:55:64:bf:
95:bb:0b:66:1c:4d:6f:e2:41:89:6d:de:da:eb:71:a3:07:ac:
cd:62:24:01:d6:62:e3:6e:2f:1d:65:54:3f:5d:42:35:e2:e8:
c9:b7:01:f9:c0:6b:50:2e:86:39:53:5d:c2:55:67:ca:54:1d:
18:03:03:15:48:a3:9a:7d:f6:00:5a:03:9f:8b:02:aa:a4:82:
64:aa:f3:1d:94:b8:d2:13:ed:80:f1:57:00:72:a9:41:05:90:
3f:53:09:b9:95:17:88:d6:28:21:ec:36:87:3e:77:a7:ba:19:
1c:86:fb:16:a6:ed:26:0c:fd:de:76:6e:d9:3c:c7:36:57:84:
da:04:52:8c:18:cc:f4:c9:49:ea:b1:a5:35:60:1e:4b:d6:8a:
7a:c8:57:07:27:ab:01:7b:25:cf:10:0b:02:7e:b7:4f:94:ab:
51:7b:ae:cd:b4:c0:c6:e7:b6:32:77:e4:e4:3b:d6:9b:29:be:
cc:0f:36:4c:1d:56:a9:c9:5b:0b:f0:c0:8c:68:88:b0:dd:1b:
49:24:af:ee:af:ae:42:1e:35:69:7f:b8:e8:7a:fb:be:5b:97:
43:54:a2:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOhquS/pyDII48UBDXzl1uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmYThhYzM3Zjk2OTUxNjk2MjdmNzVlMDk4OTYzMzk2ZGU5
NjM4Y2MwHhcNMjUxMTA0MTEwMDM5WhcNMjUxMTA1MTEwMDM5WjAzMTEwLwYDVQQD
Eyg4YjQwODdiYTRiMjEwMmFlZWRlNTg4ZjkxZmU0ODE2YTUwOTA1MzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqChWIkTH5WqTEfuMDl04vPZufUVQ
awInJhPz9/waC4AhKpB2YWX/awgkc+weTDOK8D2L2EXaxS57NETQShvDpR+bg3l2
FlK/vV/lD/pDtzyXLdXZQTtc8MSoobTPcuCRuFse4OFwadSOLS9Yn5wo3XEwswnr
Bn1sI4FePQIDTJAw9S+QnuJEHOzaOf2VT/R5USRceaOm5L60MBrQAhEhUo2nvsOr
yVl9J2GOKlkdC54M12Wg5wvKrbB5Fjo47LU9Gb1jFOxQ/cyalM1XAIqTE7YUyzI2
6PBW/LQI/kUsBr0mH01avfIblHwNiivuujJIqBiP9FLmsyyzXWjqSmawUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFItAh7pLIQKu7eWI+R/kgWpQkFNPMB8GA1UdIwQY
MBaAFB+orDf5aVFpYn914JiWM5beljjMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDZpc05fbHBVV2xpZjNYZ21KWXpsdDZXT013LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi81YmMxY2MtZDAyYy00OGVlLTk5MzUt
MDIzYjZjMDc5M2YxLzEvSDZpc05fbHBVV2xpZjNYZ21KWXpsdDZXT013Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi81YmMxY2MtZDAyYy00OGVlLTk5MzUtMDIzYjZjMDc5M2Yx
LzEvSDZpc05fbHBVV2xpZjNYZ21KWXpsdDZXT013LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArGRiVKUO
u3xXDSMaOIMPz3IO1i41MWM8lhEIxzQ0ykSZVWS/lbsLZhxNb+JBiW3e2utxowes
zWIkAdZi424vHWVUP11CNeLoybcB+cBrUC6GOVNdwlVnylQdGAMDFUijmn32AFoD
n4sCqqSCZKrzHZS40hPtgPFXAHKpQQWQP1MJuZUXiNYoIew2hz53p7oZHIb7Fqbt
Jgz93nZu2TzHNleE2gRSjBjM9MlJ6rGlNWAeS9aKeshXByerAXslzxALAn63T5Sr
UXuuzbTAxue2Mnfk5DvWmym+zA82TB1WqclbC/DAjGiIsN0bSSSv7q+uQh41aX+4
6Hr7vluXQ1SiRw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:09:43 2025 by rpki-client