Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
File: 1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft (raw, json)
Hash identifier: ++TFXX2guBwzLVNx9Kkco8ulih2/+E6ivir5y3fLbDQ=
Subject key identifier: BC:9F:9E:03:FE:B2:69:09:A4:66:D4:C3:B0:2F:22:2B:65:DB:EA:B0
Authority key identifier: FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
Certificate issuer: /CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Certificate serial: 019A4FD09DE8FFD33736BB1B5D1C75F8F956
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
Manifest number: 1731
Signing time: Tue 04 Nov 2025 17:01:03 +0000
Manifest this update: Tue 04 Nov 2025 17:01:03 +0000
Manifest next update: Wed 05 Nov 2025 17:01:03 +0000
Files and hashes: 1: 0PRh-Ryf5Bbnr0lOh4NNRU5Dvtk.roa (hash: jgK2NNDoTbWiQ7uIBzHm15T4lQ1IK4iXj6RZrP5o0x4=)
2: 1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl (hash: 2kI+7l0GzXPFp08cLfCkwDB2cBIDoJFr0qVlQt15ZS4=)
3: 2LNh2IK4jZn1zUGBoSeuOCdHsXI.roa (hash: oJ1ixo11Dgt3gqct0Oh6zVb2kz2NqX0+yoE97/FL8Fc=)
4: BG1cqZ9YVyNJo6yn7aRCRKFwi1E.roa (hash: iWMwZkGfB/SrRzVNIRiDbpY7F5RfXCU+vPN0FbVq8Zo=)
5: UhdjQtj-FfDyuU6V5WnFSOKYjmk.roa (hash: QbBqfb3nWseUxtS3InHqu29EzpheC2v8vhkaoLoZ0FY=)
6: X3rPCUQOCzHRW1aOB1JMsXT6ETw.roa (hash: Mnw7vSeAR5wWc2r0nd1dxOLcS1XganxG0iGji5vuiZQ=)
7: dkGowCxyAk57tMP-82kGQeDdynY.roa (hash: Vdu4x0hDwdG5RaDwCyJZJseIjrU0RN3jHw1tXALp/yQ=)
8: eV94BXe8LtEfrEreyIQkc6VGevg.roa (hash: n/7ce91I2ejVxdCN2rHxzeGGcgk6A9ogkMPQOK3FmSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:9d:e8:ff:d3:37:36:bb:1b:5d:1c:75:f8:f9:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Validity
Not Before: Nov 4 17:01:03 2025 GMT
Not After : Nov 5 17:01:03 2025 GMT
Subject: CN=bc9f9e03feb26909a466d4c3b02f222b65dbeab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:94:f3:29:75:cb:ac:c5:aa:cd:53:9b:a6:63:
4a:89:68:50:ee:9e:6f:47:af:e0:44:75:3d:c7:56:
6b:47:8d:6e:14:82:7d:78:c7:3c:74:d4:13:ec:a1:
f4:ea:bb:58:11:9a:db:65:00:9a:cf:c5:b2:37:49:
55:34:69:cb:0a:e8:67:32:71:64:65:3a:0f:7e:2d:
46:43:37:1b:cb:59:6a:12:9a:03:b6:e0:c3:9a:77:
bf:30:e7:3e:cc:1a:b0:56:2b:4b:7b:4b:ef:9c:8e:
d0:6c:0e:f9:cf:24:f5:24:17:9d:9c:56:c2:ac:24:
4d:cb:d9:65:15:8d:82:ab:93:77:7f:76:13:7e:8b:
0a:40:c4:17:ec:ce:4a:cc:a0:be:ba:16:f6:31:f0:
2f:fd:c3:9d:15:6e:02:b6:96:18:36:ca:0e:1b:3a:
26:9f:68:ed:ce:ab:0b:64:96:90:14:58:bf:a6:0f:
b3:d9:eb:d8:f8:96:fc:de:98:df:8a:77:45:1d:95:
3c:0b:c9:cc:16:ee:69:8e:82:e9:c9:11:4b:65:75:
67:76:ad:5d:a2:87:8d:60:de:14:8f:6c:22:9e:d9:
bd:c3:d5:29:a8:d0:cd:96:40:32:d1:df:ac:ed:5d:
2e:96:10:3e:26:7b:80:b8:fd:7c:ee:60:18:65:bb:
e0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:9F:9E:03:FE:B2:69:09:A4:66:D4:C3:B0:2F:22:2B:65:DB:EA:B0
X509v3 Authority Key Identifier:
keyid:FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:4e:ad:21:e9:a3:1d:a5:f8:bc:53:1f:91:38:ea:16:71:67:
95:02:23:11:54:7e:1c:ea:ff:db:d7:ec:7f:be:b7:9a:2d:6b:
97:59:e4:e3:8f:51:50:95:8f:f1:f1:07:ce:e3:b3:b9:44:d6:
04:eb:63:73:08:43:c8:ee:8b:1e:e3:96:b5:29:71:fb:1c:82:
15:e4:0b:ac:32:b6:8e:2a:27:f1:75:18:af:f7:ee:a4:06:d6:
87:c3:2c:93:14:74:d7:43:f1:c9:9f:13:90:3a:b4:e8:48:e5:
e8:41:c3:20:59:4e:fd:91:7b:02:b2:40:b3:b4:41:db:c4:c7:
56:64:e2:14:f0:7e:42:79:5f:5f:29:3d:46:56:92:0d:17:3d:
14:c8:03:82:e8:2d:26:b1:a7:62:9f:65:c6:97:cf:cb:cd:7f:
27:71:4e:15:9b:79:09:b2:08:4e:c8:32:7e:10:4e:6a:77:9e:
37:d0:b8:b2:7a:c2:2f:bc:24:aa:3b:f1:4a:80:76:31:65:3e:
3b:06:4e:2d:48:26:15:7b:00:a9:1b:00:37:a0:c2:5e:51:53:
d8:26:6f:ee:40:f9:72:0b:d0:b1:ca:15:aa:f7:5d:24:b8:43:
b7:d5:21:94:c7:24:cf:d2:20:06:ec:ac:01:fb:11:0f:cd:91:
71:6d:51:54
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZpP0J3o/9M3NrsbXRx1+PlWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMDYxYTM5ZjBhMDM3OTIzMTEzZDZiOGJiOWI1YmRhYjVi
MmY0NjYwHhcNMjUxMTA0MTcwMTAzWhcNMjUxMTA1MTcwMTAzWjAzMTEwLwYDVQQD
EyhiYzlmOWUwM2ZlYjI2OTA5YTQ2NmQ0YzNiMDJmMjIyYjY1ZGJlYWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JTzKXXLrMWqzVObpmNKiWhQ7p5v
R6/gRHU9x1ZrR41uFIJ9eMc8dNQT7KH06rtYEZrbZQCaz8WyN0lVNGnLCuhnMnFk
ZToPfi1GQzcby1lqEpoDtuDDmne/MOc+zBqwVitLe0vvnI7QbA75zyT1JBednFbC
rCRNy9llFY2Cq5N3f3YTfosKQMQX7M5KzKC+uhb2MfAv/cOdFW4CtpYYNsoOGzom
n2jtzqsLZJaQFFi/pg+z2evY+Jb83pjfindFHZU8C8nMFu5pjoLpyRFLZXVndq1d
ooeNYN4Uj2wintm9w9UpqNDNlkAy0d+s7V0ulhA+JnuAuP187mAYZbvgPQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLyfngP+smkJpGbUw7AvIitl2+qwMB8GA1UdIwQY
MBaAFPsGGjnwoDeSMRPWuLubW9q1svRmMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS13WWFPZkNnTjVJeEU5YTR1NXRiMnJXeTlHWS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjMvYTMyOTRiLWQ0NzgtNGRiZC1hYWU1
LWZkMTY3YWQ5MmE5ZC8xLzEtd1lhT2ZDZ041SXhFOWE0dTV0YjJyV3k5R1kubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2YzL2EzMjk0Yi1kNDc4LTRkYmQtYWFlNS1mZDE2N2FkOTJh
OWQvMS8xLXdZYU9mQ2dONUl4RTlhNHU1dGIycld5OUdZLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPk6t
IemjHaX4vFMfkTjqFnFnlQIjEVR+HOr/29fsf763mi1rl1nk449RUJWP8fEHzuOz
uUTWBOtjcwhDyO6LHuOWtSlx+xyCFeQLrDK2jion8XUYr/fupAbWh8MskxR010Px
yZ8TkDq06Ejl6EHDIFlO/ZF7ArJAs7RB28THVmTiFPB+QnlfXyk9RlaSDRc9FMgD
gugtJrGnYp9lxpfPy81/J3FOFZt5CbIITsgyfhBOaneeN9C4snrCL7wkqjvxSoB2
MWU+OwZOLUgmFXsAqRsAN6DCXlFT2CZv7kD5cgvQscoVqvddJLhDt9UhlMckz9Ig
BuysAfsRD82RcW1RVA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 19:54:49 2025 by rpki-client