Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft
File: p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft (raw, json)
Hash identifier: CzXPd/t7LHeWIoyps0YsJ/qROa1nD3QV9INltpZd3ac=
Subject key identifier: 08:A1:C1:74:5B:DE:C7:4C:AC:6B:73:60:DE:FE:F6:F5:A4:E3:0F:FE
Authority key identifier: A7:CA:9A:DA:44:52:4F:C5:36:FA:3E:CA:BF:75:8D:F2:64:07:C8:B1
Certificate issuer: /CN=a7ca9ada44524fc536fa3ecabf758df26407c8b1
Certificate serial: 019A4D7484E76808073E6162A486564633B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p8qa2kRST8U2-j7Kv3WN8mQHyLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft
Manifest number: 13DA
Signing time: Tue 04 Nov 2025 06:01:13 +0000
Manifest this update: Tue 04 Nov 2025 06:01:13 +0000
Manifest next update: Wed 05 Nov 2025 06:01:13 +0000
Files and hashes: 1: AGh_BXwDaFnqdr1rluMLMPMOrnM.roa (hash: L7VSHEAFfvwnZGbHuhPcAH6Mmh4M0FtFsSBsZ0VnfV0=)
2: p8qa2kRST8U2-j7Kv3WN8mQHyLE.crl (hash: eG7XuDEnJdif6XqMAykWEVyIUNA2TrgmVXgl4qLlmUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/p8qa2kRST8U2-j7Kv3WN8mQHyLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:84:e7:68:08:07:3e:61:62:a4:86:56:46:33:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7ca9ada44524fc536fa3ecabf758df26407c8b1
Validity
Not Before: Nov 4 06:01:13 2025 GMT
Not After : Nov 5 06:01:13 2025 GMT
Subject: CN=08a1c1745bdec74cac6b7360defef6f5a4e30ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3c:72:a6:a0:84:4b:6f:c6:07:bc:73:5a:4b:
cb:ae:17:2d:94:d8:79:23:3b:80:87:bf:63:2a:34:
7e:35:2e:8b:df:f5:91:85:dc:cf:07:c3:eb:00:60:
8f:5d:16:3f:cc:87:a2:f6:32:93:9f:c7:c8:ff:91:
7a:f6:be:a5:3a:7a:f8:c1:72:fb:72:03:91:48:18:
2e:91:45:aa:ba:b6:65:2c:15:d2:b6:41:f5:cc:a9:
b0:14:94:53:15:48:4d:db:68:25:d2:e1:75:85:b0:
48:ab:d7:87:7e:b9:ac:39:53:a9:6a:63:6c:26:1a:
fa:5f:eb:f6:98:a3:6d:c9:d1:19:68:d1:98:0e:f7:
15:04:c5:5b:96:31:0a:6b:c7:f6:19:ef:4b:94:c1:
e0:a7:ed:f8:38:ac:55:31:bd:d8:dc:43:06:97:06:
19:cd:22:df:21:95:65:60:58:89:d3:b4:1b:a8:e8:
dc:e8:35:7f:ec:f1:45:6b:f3:0c:95:2a:ef:89:45:
1d:99:69:67:9a:e7:41:8d:ec:b1:5c:b6:a8:9d:b6:
1e:6e:d9:a6:51:13:b7:19:97:a9:a8:79:04:6f:5d:
f5:89:af:b8:f5:60:7d:b5:3d:bb:9b:cb:ad:84:5f:
b4:e8:3d:30:95:1d:31:de:1f:02:ff:51:3c:28:0a:
40:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A1:C1:74:5B:DE:C7:4C:AC:6B:73:60:DE:FE:F6:F5:A4:E3:0F:FE
X509v3 Authority Key Identifier:
keyid:A7:CA:9A:DA:44:52:4F:C5:36:FA:3E:CA:BF:75:8D:F2:64:07:C8:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p8qa2kRST8U2-j7Kv3WN8mQHyLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:63:62:b8:56:d2:df:fa:55:11:e0:c3:df:8b:46:09:76:cc:
71:66:94:1d:aa:a8:7d:ec:3c:d8:c0:c0:a4:0b:30:25:3a:ad:
93:3f:d5:b8:39:b2:e1:b0:df:3d:29:69:00:56:b8:37:c3:53:
38:c7:e2:e3:17:6c:48:fb:c1:df:a7:5c:3a:bd:84:70:34:d6:
fb:2a:18:69:41:bd:6f:95:22:1e:72:19:16:07:90:09:84:c1:
6c:b1:75:1f:c0:e5:7c:d1:f9:d7:c0:18:11:f9:09:64:40:fd:
ea:30:f0:63:44:a6:38:d2:7d:aa:cf:73:2e:f8:bf:a8:2e:03:
5a:16:5f:33:bf:f0:73:90:19:ca:91:fa:dc:d2:de:21:d1:74:
5c:3a:be:ce:5b:a4:01:42:1c:83:ec:94:99:82:5c:56:46:81:
97:62:d2:ef:79:03:7d:50:90:fe:b0:ea:84:e4:b7:44:c3:9e:
bb:50:e1:48:9b:7e:b1:ff:08:c1:78:ba:9b:11:23:77:92:81:
db:cc:f5:6d:16:4d:fe:7e:8b:6c:b4:41:28:57:6a:bf:e3:ff:
6f:60:50:4f:0d:4c:43:3a:38:1d:da:e8:49:32:68:50:0d:7b:
70:f9:0e:e0:45:00:42:d7:17:17:87:be:56:1d:44:2a:77:1e:
3d:46:bf:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNdITnaAgHPmFipIZWRjOxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3Y2E5YWRhNDQ1MjRmYzUzNmZhM2VjYWJmNzU4ZGYyNjQw
N2M4YjEwHhcNMjUxMTA0MDYwMTEzWhcNMjUxMTA1MDYwMTEzWjAzMTEwLwYDVQQD
EygwOGExYzE3NDViZGVjNzRjYWM2YjczNjBkZWZlZjZmNWE0ZTMwZmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TxypqCES2/GB7xzWkvLrhctlNh5
IzuAh79jKjR+NS6L3/WRhdzPB8PrAGCPXRY/zIei9jKTn8fI/5F69r6lOnr4wXL7
cgORSBgukUWqurZlLBXStkH1zKmwFJRTFUhN22gl0uF1hbBIq9eHfrmsOVOpamNs
Jhr6X+v2mKNtydEZaNGYDvcVBMVbljEKa8f2Ge9LlMHgp+34OKxVMb3Y3EMGlwYZ
zSLfIZVlYFiJ07QbqOjc6DV/7PFFa/MMlSrviUUdmWlnmudBjeyxXLaonbYebtmm
URO3GZepqHkEb131ia+49WB9tT27m8uthF+06D0wlR0x3h8C/1E8KApAdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAihwXRb3sdMrGtzYN7+9vWk4w/+MB8GA1UdIwQY
MBaAFKfKmtpEUk/FNvo+yr91jfJkB8ixMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDhxYTJrUlNUOFUyLWo3S3YzV044bVFIeUxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9mN2VjNzAtMGRlZC00MmNhLTlkMDAt
OWQ5ZTFiNmJlZWU5LzEvcDhxYTJrUlNUOFUyLWo3S3YzV044bVFIeUxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9mN2VjNzAtMGRlZC00MmNhLTlkMDAtOWQ5ZTFiNmJlZWU5
LzEvcDhxYTJrUlNUOFUyLWo3S3YzV044bVFIeUxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe2NiuFbS
3/pVEeDD34tGCXbMcWaUHaqofew82MDApAswJTqtkz/VuDmy4bDfPSlpAFa4N8NT
OMfi4xdsSPvB36dcOr2EcDTW+yoYaUG9b5UiHnIZFgeQCYTBbLF1H8DlfNH518AY
EfkJZED96jDwY0SmONJ9qs9zLvi/qC4DWhZfM7/wc5AZypH63NLeIdF0XDq+zluk
AUIcg+yUmYJcVkaBl2LS73kDfVCQ/rDqhOS3RMOeu1DhSJt+sf8IwXi6mxEjd5KB
28z1bRZN/n6LbLRBKFdqv+P/b2BQTw1MQzo4HdroSTJoUA17cPkO4EUAQtcXF4e+
Vh1EKncePUa/hA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:53 2025 by rpki-client