Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft
File: 9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft (raw, json)
Hash identifier: +yOuXkzYDdgmCLW1v9ulv1oGMbHASfQppJjogdL4RzA=
Subject key identifier: D6:26:CC:4F:68:F6:BF:BB:26:CE:C6:CA:A1:DA:80:63:69:63:BB:8B
Authority key identifier: F4:DC:B5:74:1E:29:35:2D:DD:42:46:92:70:17:85:06:00:8A:41:40
Certificate issuer: /CN=f4dcb5741e29352ddd42469270178506008a4140
Certificate serial: 019A4DAB2AC054FE17566ABDA94268BA75AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Ny1dB4pNS3dQkaScBeFBgCKQUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft
Manifest number: 0378
Signing time: Tue 04 Nov 2025 07:00:54 +0000
Manifest this update: Tue 04 Nov 2025 07:00:54 +0000
Manifest next update: Wed 05 Nov 2025 07:00:54 +0000
Files and hashes: 1: 9Ny1dB4pNS3dQkaScBeFBgCKQUA.crl (hash: z3RNbmUlN7AbngVXgQ6J+eVhhuZL+d/2g3Ti2G3B2yg=)
2: T3T0ZkFQFPUc2BEd0op7sYAz8XA.roa (hash: WuXt/ChkvGDFgO8WDo1RKpja79/oAcXrCCkvEETR+EY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Ny1dB4pNS3dQkaScBeFBgCKQUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:ab:2a:c0:54:fe:17:56:6a:bd:a9:42:68:ba:75:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4dcb5741e29352ddd42469270178506008a4140
Validity
Not Before: Nov 4 07:00:54 2025 GMT
Not After : Nov 5 07:00:54 2025 GMT
Subject: CN=d626cc4f68f6bfbb26cec6caa1da80636963bb8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:67:8b:5d:27:70:e1:72:29:01:8b:e0:13:8d:
bf:9e:ab:bf:dc:95:5c:03:ff:46:fd:ff:0b:05:b9:
16:e6:57:36:13:6e:ee:c3:a7:fd:f3:27:58:15:02:
92:01:2d:30:62:20:ad:3c:ae:ef:b2:4d:cf:34:59:
b1:80:9a:79:56:6d:1e:4f:b6:97:d0:7d:5d:cb:f8:
80:cf:f7:13:70:7f:6d:a1:be:be:64:a0:79:a9:63:
25:94:8b:51:c6:de:66:23:f4:5a:7d:8d:91:39:9a:
14:cf:cc:a7:ce:f0:b0:32:7c:09:7e:78:30:96:2f:
b0:8f:a5:fb:1e:75:1c:c5:ab:bc:ba:f2:cf:93:c7:
68:f0:ee:0c:c9:15:fa:0c:7b:3c:d9:22:27:0a:21:
f3:94:02:b2:93:10:60:e5:b1:cb:54:c6:c4:6c:c7:
f6:98:5e:04:3a:a5:55:13:8c:14:ae:6c:09:e7:90:
bc:1b:10:05:0e:52:24:11:9d:72:52:52:a4:dc:4a:
a9:81:64:5d:32:01:eb:63:1b:3d:b8:d0:60:5f:b9:
dc:07:65:23:24:c0:c0:2f:18:70:93:4f:12:a3:a7:
0f:42:cd:e2:cc:e3:9e:a7:06:58:a9:69:b2:15:74:
d8:66:f0:c4:96:eb:a2:03:e6:56:fd:ea:04:9f:b6:
21:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:26:CC:4F:68:F6:BF:BB:26:CE:C6:CA:A1:DA:80:63:69:63:BB:8B
X509v3 Authority Key Identifier:
keyid:F4:DC:B5:74:1E:29:35:2D:DD:42:46:92:70:17:85:06:00:8A:41:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Ny1dB4pNS3dQkaScBeFBgCKQUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:cd:8d:07:87:40:42:83:ab:9b:12:08:b0:0a:75:14:47:f8:
fa:ee:3f:97:b1:94:5b:06:0f:ac:a4:e6:ba:1d:99:3c:69:ba:
a3:61:7f:94:08:80:9a:40:43:d3:94:7c:f4:fe:f9:de:59:9f:
58:05:67:1e:f3:46:aa:7f:84:d5:42:63:b3:7f:87:4e:9a:9e:
69:16:46:6f:ab:64:90:d0:14:e1:aa:fc:2b:5f:d2:f7:71:f4:
b9:4f:8e:3f:92:87:9e:a8:c2:fe:3c:05:57:b4:82:97:b1:d2:
42:ba:86:7b:03:d5:ef:21:89:59:d6:f3:04:01:f4:0a:47:a1:
8c:f0:7c:62:ae:d2:67:61:00:83:0a:22:f5:8b:67:fd:fd:1a:
08:af:dc:a8:0e:10:f6:96:95:66:ca:73:08:92:2e:3e:65:d5:
e7:b8:de:b0:8b:0c:d2:8b:17:a1:59:4f:89:df:b3:53:05:53:
83:30:0c:29:81:0c:f0:1f:8d:5e:a4:75:06:ab:3c:56:1f:03:
ee:a9:65:7f:62:3c:78:80:dc:4b:ed:12:23:31:c3:6b:dc:9f:
d5:99:98:19:3c:94:f7:e3:c7:6c:b9:88:5c:50:7f:a9:78:83:
f1:17:d9:b1:76:0b:00:bf:10:ee:79:a0:98:9b:60:2d:01:30:
d2:65:0e:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNqyrAVP4XVmq9qUJounWtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZGNiNTc0MWUyOTM1MmRkZDQyNDY5MjcwMTc4NTA2MDA4
YTQxNDAwHhcNMjUxMTA0MDcwMDU0WhcNMjUxMTA1MDcwMDU0WjAzMTEwLwYDVQQD
EyhkNjI2Y2M0ZjY4ZjZiZmJiMjZjZWM2Y2FhMWRhODA2MzY5NjNiYjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2eLXSdw4XIpAYvgE42/nqu/3JVc
A/9G/f8LBbkW5lc2E27uw6f98ydYFQKSAS0wYiCtPK7vsk3PNFmxgJp5Vm0eT7aX
0H1dy/iAz/cTcH9tob6+ZKB5qWMllItRxt5mI/RafY2ROZoUz8ynzvCwMnwJfngw
li+wj6X7HnUcxau8uvLPk8do8O4MyRX6DHs82SInCiHzlAKykxBg5bHLVMbEbMf2
mF4EOqVVE4wUrmwJ55C8GxAFDlIkEZ1yUlKk3EqpgWRdMgHrYxs9uNBgX7ncB2Uj
JMDALxhwk08So6cPQs3izOOepwZYqWmyFXTYZvDEluuiA+ZW/eoEn7YhuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNYmzE9o9r+7Js7GyqHagGNpY7uLMB8GA1UdIwQY
MBaAFPTctXQeKTUt3UJGknAXhQYAikFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU55MWRCNHBOUzNkUWthU2NCZUZCZ0NLUVVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9kMDczZjEtOTZlZC00YjM1LWEzZjQt
ZjgzMDc3Nzk5NDViLzEvOU55MWRCNHBOUzNkUWthU2NCZUZCZ0NLUVVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9kMDczZjEtOTZlZC00YjM1LWEzZjQtZjgzMDc3Nzk5NDVi
LzEvOU55MWRCNHBOUzNkUWthU2NCZUZCZ0NLUVVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYc2NB4dA
QoOrmxIIsAp1FEf4+u4/l7GUWwYPrKTmuh2ZPGm6o2F/lAiAmkBD05R89P753lmf
WAVnHvNGqn+E1UJjs3+HTpqeaRZGb6tkkNAU4ar8K1/S93H0uU+OP5KHnqjC/jwF
V7SCl7HSQrqGewPV7yGJWdbzBAH0CkehjPB8Yq7SZ2EAgwoi9Ytn/f0aCK/cqA4Q
9paVZspzCJIuPmXV57jesIsM0osXoVlPid+zUwVTgzAMKYEM8B+NXqR1Bqs8Vh8D
7qllf2I8eIDcS+0SIzHDa9yf1ZmYGTyU9+PHbLmIXFB/qXiD8RfZsXYLAL8Q7nmg
mJtgLQEw0mUOXg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:49:45 2025 by rpki-client