Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
File: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft (raw, json)
Hash identifier: ifAmn5TuJ+U2Hk+pmE3bH2/bYviFYhG+VailXKqNAWY=
Subject key identifier: B3:A7:BD:A2:26:C8:C2:F1:62:4F:16:17:18:4F:09:DE:AD:80:67:77
Authority key identifier: E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46
Certificate issuer: /CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
Certificate serial: 019A50E3D0C97C4F30F0B7199CC9029190BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
Manifest number: 171C
Signing time: Tue 04 Nov 2025 22:01:38 +0000
Manifest this update: Tue 04 Nov 2025 22:01:38 +0000
Manifest next update: Wed 05 Nov 2025 22:01:38 +0000
Files and hashes: 1: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl (hash: Wo00MSgg1cN8oBKlkRqpkmJBSWTbRSB+ImvZjfDFz4I=)
2: 9le1peACXBsZiHPrKGecXIwJa-c.roa (hash: abfbtZOYUj++vuicVi05zrp5kGNnF9HGnL5WTr/9qlE=)
3: AP7i3LahdsovYM70eVMlu0H0VyQ.roa (hash: gGYT6xMXK+q6XWFTZbqb5glJj73Q26Rxlysft5i280U=)
4: De0WCETpJfbN-_KAZM7Z5RJy8Ss.roa (hash: Kcw5neScj8y714DABjN4V/ktwunea0zBp9yHTOn8VeE=)
5: WCta5h-gHZZ_q49m5T2AptEQh0A.roa (hash: UEF6WvkAssJSXqYGaMl3u6THXq5hVmf7y+Pa60Tl3Bc=)
6: WIgYr5JYPXYMftdONSWv5Do5-Gk.roa (hash: Z2h27NPSq0u/AueWae1+/QX3Wc6gNsL5Ji2s5jEoznc=)
7: fLAxf74rd6UX3gfivf6snrbKhmg.roa (hash: 2y9JcTYhuslVBan0BBae3TsVIsvndLj/5tEYAdt92BQ=)
8: oSdrWOCaJ0gBbDhOrwzjpvj5kgk.roa (hash: fLc644uvb/7KJE5lOwMGlDoVjD+MslKnwZyZQoL0QcU=)
9: obrA-ZoCgk0zS8hgJpmT67NaB2Y.roa (hash: z5uErOAwohXeLePMQPhb50zJXMj4qbujXHMXCoCiW5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:d0:c9:7c:4f:30:f0:b7:19:9c:c9:02:91:90:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
Validity
Not Before: Nov 4 22:01:38 2025 GMT
Not After : Nov 5 22:01:38 2025 GMT
Subject: CN=b3a7bda226c8c2f1624f1617184f09dead806777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:10:5c:37:d8:cf:89:34:64:44:37:bf:2b:5c:
34:d0:ce:e8:2c:74:87:b6:cb:d4:6d:39:8c:fe:ee:
ea:ab:db:d6:28:f7:bf:8f:76:1e:f3:02:ac:c0:3a:
0f:d7:66:83:6d:df:bc:c8:e6:b1:c3:2f:68:c4:f2:
c0:b2:e6:bb:41:f1:7c:84:65:a6:3b:26:68:91:46:
ae:0e:0d:88:78:46:56:19:c7:d8:bc:8a:21:e2:90:
a0:6e:40:85:33:cc:40:8d:1c:a9:a3:51:2f:7f:29:
56:e0:57:4b:07:8d:cf:95:ce:2a:67:81:3d:03:97:
06:d8:eb:eb:67:c3:a4:11:57:fa:75:1a:f7:54:b4:
d6:91:14:97:52:79:0f:77:74:86:54:83:20:34:26:
3a:7f:22:0a:35:6b:8d:42:55:32:6d:76:31:72:03:
9a:bf:f4:61:9f:32:ab:33:0d:b1:e6:2b:ed:fa:05:
f0:03:e2:8d:72:45:02:6a:72:a7:0e:8e:40:ac:58:
55:4d:eb:ea:0d:c4:90:de:90:d1:ee:42:db:55:b2:
4c:ed:4e:d9:e3:b3:32:fb:fe:44:00:59:c4:61:e7:
ac:d2:05:a7:a5:c8:5a:03:0d:42:80:5a:5f:26:2c:
fd:8d:72:23:3d:12:d5:ea:87:b1:7d:7c:e5:e0:12:
01:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A7:BD:A2:26:C8:C2:F1:62:4F:16:17:18:4F:09:DE:AD:80:67:77
X509v3 Authority Key Identifier:
keyid:E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:4f:a3:7d:2a:a3:8e:05:6f:76:af:79:0b:ab:dd:7a:7d:7b:
91:97:a3:ca:c5:64:ed:7b:06:05:e0:fc:24:62:b1:ef:aa:a5:
d4:df:e6:40:9f:03:ba:58:c9:6c:48:5a:58:d7:c6:ef:16:1d:
97:b8:42:87:6d:4c:63:69:d5:da:b8:82:a2:e9:b0:07:23:bf:
dd:9d:33:a4:09:39:df:36:45:c4:f1:3a:29:fa:0b:d0:48:66:
a0:f9:06:0d:f9:f8:2f:3f:6b:14:f1:d1:cf:6d:da:d9:34:e9:
0f:4f:01:43:c6:17:51:63:af:9e:27:0d:72:1d:f3:b9:fe:26:
77:73:56:33:57:aa:87:91:7f:93:af:9a:8e:f9:e8:b7:fd:57:
d5:62:f5:06:3b:11:30:f4:31:a3:94:c2:0b:ff:5a:fb:4c:a2:
f1:02:44:8f:f2:82:3f:92:6a:41:20:02:e5:f6:a6:0b:e9:77:
c9:ee:f6:50:26:04:ec:1b:26:ab:6f:3c:28:69:48:f3:ee:e1:
ba:70:b9:a3:c6:19:48:6f:8f:77:2f:ba:c1:71:a3:ee:c5:50:
9f:02:3a:13:ab:d5:2e:b7:2b:1c:48:37:dc:33:c5:42:00:76:
93:9d:46:ce:9a:de:4a:aa:47:67:5c:40:e8:c7:7e:1a:ea:e9:
dd:2b:27:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ49DJfE8w8LcZnMkCkZC/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMzhlYzI0MmE0M2U5YzlkNGNlYjI1ZGM5MGU1NDUzMzcz
ZDNmNDYwHhcNMjUxMTA0MjIwMTM4WhcNMjUxMTA1MjIwMTM4WjAzMTEwLwYDVQQD
EyhiM2E3YmRhMjI2YzhjMmYxNjI0ZjE2MTcxODRmMDlkZWFkODA2Nzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxBcN9jPiTRkRDe/K1w00M7oLHSH
tsvUbTmM/u7qq9vWKPe/j3Ye8wKswDoP12aDbd+8yOaxwy9oxPLAsua7QfF8hGWm
OyZokUauDg2IeEZWGcfYvIoh4pCgbkCFM8xAjRypo1EvfylW4FdLB43Plc4qZ4E9
A5cG2OvrZ8OkEVf6dRr3VLTWkRSXUnkPd3SGVIMgNCY6fyIKNWuNQlUybXYxcgOa
v/RhnzKrMw2x5ivt+gXwA+KNckUCanKnDo5ArFhVTevqDcSQ3pDR7kLbVbJM7U7Z
47My+/5EAFnEYees0gWnpchaAw1CgFpfJiz9jXIjPRLV6oexfXzl4BIB+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLOnvaImyMLxYk8WFxhPCd6tgGd3MB8GA1UdIwQY
MBaAFOE47CQqQ+nJ1M6yXckOVFM3PT9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wYjdmZDMtOTBmMC00NWQxLThhNTgt
Njc4NWNkNDU2ODcxLzEvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8wYjdmZDMtOTBmMC00NWQxLThhNTgtNjc4NWNkNDU2ODcx
LzEvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnE+jfSqj
jgVvdq95C6vden17kZejysVk7XsGBeD8JGKx76ql1N/mQJ8DuljJbEhaWNfG7xYd
l7hCh21MY2nV2riCoumwByO/3Z0zpAk53zZFxPE6KfoL0EhmoPkGDfn4Lz9rFPHR
z23a2TTpD08BQ8YXUWOvnicNch3zuf4md3NWM1eqh5F/k6+ajvnot/1X1WL1BjsR
MPQxo5TCC/9a+0yi8QJEj/KCP5JqQSAC5famC+l3ye72UCYE7Bsmq288KGlI8+7h
unC5o8YZSG+Pdy+6wXGj7sVQnwI6E6vVLrcrHEg33DPFQgB2k51GzpreSqpHZ1xA
6Md+Gurp3SsnUw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:22:43 2025 by rpki-client