Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
File: pjxtuvK89S8n5YwticbBxVuV3yY.mft (raw, json)
Hash identifier: H+ZZAWocz8sd6ZUb7738yZ2s88sVjK4vBacdndZm/yk=
Subject key identifier: 29:F1:0B:1D:AC:88:63:5C:C6:1E:78:6E:99:9B:08:0C:A6:50:16:D7
Authority key identifier: A6:3C:6D:BA:F2:BC:F5:2F:27:E5:8C:2D:89:C6:C1:C5:5B:95:DF:26
Certificate issuer: /CN=a63c6dbaf2bcf52f27e58c2d89c6c1c55b95df26
Certificate serial: 019A541AB555B5F3B0482AA0282DBD7D214C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
Manifest number: 0987
Signing time: Wed 05 Nov 2025 13:00:27 +0000
Manifest this update: Wed 05 Nov 2025 13:00:27 +0000
Manifest next update: Thu 06 Nov 2025 13:00:27 +0000
Files and hashes: 1: NANvvd_V7iIUj7mJYMTOqque3Po.roa (hash: z7IZKlxruCsipOwPt42pcffU0s1l9uB/ojQdv9l2AxM=)
2: pjxtuvK89S8n5YwticbBxVuV3yY.crl (hash: tJGeAgzrpHDBjT2nepyvESetO1E5vmexYsll0UdoIBM=)
3: yG3GRDnYBo69OMDgoi6l30IqdQQ.roa (hash: s36xnlN956H1thb9LXHw6o5GvT+TFLxm0zFqGU00y/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1a:b5:55:b5:f3:b0:48:2a:a0:28:2d:bd:7d:21:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63c6dbaf2bcf52f27e58c2d89c6c1c55b95df26
Validity
Not Before: Nov 5 13:00:27 2025 GMT
Not After : Nov 6 13:00:27 2025 GMT
Subject: CN=29f10b1dac88635cc61e786e999b080ca65016d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c7:6c:b9:9f:10:e0:3f:1a:b1:62:a1:ac:cc:
cf:47:4a:25:21:9d:10:e8:7c:c1:68:6e:82:f1:0b:
9c:70:82:91:a1:ae:a5:7c:3e:ba:c2:2e:47:b0:f1:
49:47:36:a8:30:cd:12:4f:8e:8a:9a:1b:d0:69:0b:
4c:ac:52:b6:9b:93:cb:78:a4:b6:e8:3f:e8:a5:5a:
1b:14:f9:f1:a7:da:c5:c6:90:31:ef:fd:45:ee:c8:
a8:fc:e4:8a:76:f2:25:ea:65:40:08:d4:7f:c7:c5:
93:72:61:8c:da:af:33:6c:96:09:4c:03:4d:64:00:
ce:8b:0e:22:00:29:d5:9d:df:9f:30:bb:aa:cb:28:
d4:ad:4f:59:52:a9:92:69:0f:8b:9f:31:3d:3f:3f:
f4:e6:cb:30:7f:df:7f:60:57:c5:62:45:86:23:34:
6f:12:98:89:5b:8f:27:86:f7:33:3f:26:04:7d:84:
70:0e:21:0b:46:2a:59:06:93:f9:ef:75:4e:20:84:
36:7b:40:30:d4:b5:17:ee:fc:1c:8d:6e:11:42:8c:
3d:cf:dd:fa:f2:d8:df:04:5b:67:04:05:10:e0:62:
e6:87:19:a4:9b:67:98:cc:fb:df:6f:c6:b4:c2:48:
4b:d6:24:e3:30:38:95:b6:df:31:d8:17:f6:8d:81:
59:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F1:0B:1D:AC:88:63:5C:C6:1E:78:6E:99:9B:08:0C:A6:50:16:D7
X509v3 Authority Key Identifier:
keyid:A6:3C:6D:BA:F2:BC:F5:2F:27:E5:8C:2D:89:C6:C1:C5:5B:95:DF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:2c:ac:73:48:75:2b:89:b2:73:d5:d1:14:75:65:8f:28:f8:
66:0f:c8:e3:d9:70:94:fa:f0:51:20:df:99:17:66:76:c6:65:
9b:0c:c2:bf:83:f0:bb:6e:02:89:cb:dc:06:10:68:d5:5a:ce:
f5:c6:f0:ad:4b:a1:30:3d:10:d3:fa:56:c0:8a:14:d5:c0:4a:
9b:d4:58:98:5e:5a:35:28:c6:4a:62:37:22:46:26:c9:82:fa:
de:14:2a:ad:4b:75:e4:26:31:6e:ff:79:cb:dd:fc:65:8d:05:
8c:32:aa:54:6b:3f:53:3e:c5:c9:69:08:bd:b6:7b:29:fe:1f:
33:4c:ad:4b:30:81:1b:57:71:26:4f:77:b7:7f:27:e2:8a:f9:
3b:65:b6:50:86:09:e2:e4:10:56:74:54:07:95:d8:29:a3:19:
73:71:65:12:87:1f:e0:be:99:f7:b7:97:ff:bb:e2:ff:ba:49:
a9:80:3d:82:e8:17:c9:63:79:fe:7f:2d:7e:f5:89:75:f3:07:
22:a6:8b:3d:19:79:46:85:9d:27:83:69:20:5f:6e:59:d1:b5:
9f:1d:50:30:7d:65:c0:4f:6b:ff:aa:17:8c:07:95:fa:2c:e0:
70:5b:c6:a9:1e:ed:24:ea:87:b2:f4:ec:84:de:b9:7d:b6:8f:
18:19:95:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpUGrVVtfOwSCqgKC29fSFMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2M2M2ZGJhZjJiY2Y1MmYyN2U1OGMyZDg5YzZjMWM1NWI5
NWRmMjYwHhcNMjUxMTA1MTMwMDI3WhcNMjUxMTA2MTMwMDI3WjAzMTEwLwYDVQQD
EygyOWYxMGIxZGFjODg2MzVjYzYxZTc4NmU5OTliMDgwY2E2NTAxNmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsdsuZ8Q4D8asWKhrMzPR0olIZ0Q
6HzBaG6C8QuccIKRoa6lfD66wi5HsPFJRzaoMM0ST46KmhvQaQtMrFK2m5PLeKS2
6D/opVobFPnxp9rFxpAx7/1F7sio/OSKdvIl6mVACNR/x8WTcmGM2q8zbJYJTANN
ZADOiw4iACnVnd+fMLuqyyjUrU9ZUqmSaQ+LnzE9Pz/05sswf99/YFfFYkWGIzRv
EpiJW48nhvczPyYEfYRwDiELRipZBpP573VOIIQ2e0Aw1LUX7vwcjW4RQow9z936
8tjfBFtnBAUQ4GLmhxmkm2eYzPvfb8a0wkhL1iTjMDiVtt8x2Bf2jYFZhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCnxCx2siGNcxh54bpmbCAymUBbXMB8GA1UdIwQY
MBaAFKY8bbryvPUvJ+WMLYnGwcVbld8mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGp4dHV2Szg5UzhuNVl3dGljYkJ4VnVWM3lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zM2Q3MWEtOTM1MC00MzQ1LWI2Yjgt
YTgzZDZjM2NmMDUzLzEvcGp4dHV2Szg5UzhuNVl3dGljYkJ4VnVWM3lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8zM2Q3MWEtOTM1MC00MzQ1LWI2YjgtYTgzZDZjM2NmMDUz
LzEvcGp4dHV2Szg5UzhuNVl3dGljYkJ4VnVWM3lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIyysc0h1
K4myc9XRFHVljyj4Zg/I49lwlPrwUSDfmRdmdsZlmwzCv4Pwu24CicvcBhBo1VrO
9cbwrUuhMD0Q0/pWwIoU1cBKm9RYmF5aNSjGSmI3IkYmyYL63hQqrUt15CYxbv95
y938ZY0FjDKqVGs/Uz7FyWkIvbZ7Kf4fM0ytSzCBG1dxJk93t38n4or5O2W2UIYJ
4uQQVnRUB5XYKaMZc3FlEocf4L6Z97eX/7vi/7pJqYA9gugXyWN5/n8tfvWJdfMH
IqaLPRl5RoWdJ4NpIF9uWdG1nx1QMH1lwE9r/6oXjAeV+izgcFvGqR7tJOqHsvTs
hN65fbaPGBmVFg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:37:08 2025 by rpki-client