Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
File: kP2KrhtuFZovqPA9ejGIoeGAcqA.mft (raw, json)
Hash identifier: DIgo6FNvkRDlciT1VhimKMScn/Thfj58ufRv7S3xxqc=
Subject key identifier: 9B:76:F8:B8:85:DF:58:0B:3F:CE:49:0C:72:67:3D:9F:C9:5A:2D:C8
Authority key identifier: 90:FD:8A:AE:1B:6E:15:9A:2F:A8:F0:3D:7A:31:88:A1:E1:80:72:A0
Certificate issuer: /CN=90fd8aae1b6e159a2fa8f03d7a3188a1e18072a0
Certificate serial: 019A4E4F8A2780295BF8864053FAFC070568
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
Manifest number: 137A
Signing time: Tue 04 Nov 2025 10:00:26 +0000
Manifest this update: Tue 04 Nov 2025 10:00:26 +0000
Manifest next update: Wed 05 Nov 2025 10:00:26 +0000
Files and hashes: 1: M-Lz3FCjDhBtf8lJAjoTZlL7SGA.roa (hash: zkL8K0BACxY6H8HDpNVgGyq7SYLZMemlKE7UDQfTAuo=)
2: ZKs_PtzOl6JXrfZ_pu8ccHotJPY.roa (hash: 2dIpFoPyA8jItE82jeKy7Ii+7GgLwrgqHDUnlv82DBU=)
3: kP2KrhtuFZovqPA9ejGIoeGAcqA.crl (hash: ZiVBCiJYiURCYQRKTfWc+oZ3P9YciHxX2NnHbHlGBg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:8a:27:80:29:5b:f8:86:40:53:fa:fc:07:05:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90fd8aae1b6e159a2fa8f03d7a3188a1e18072a0
Validity
Not Before: Nov 4 10:00:26 2025 GMT
Not After : Nov 5 10:00:26 2025 GMT
Subject: CN=9b76f8b885df580b3fce490c72673d9fc95a2dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f8:98:87:d2:ec:bd:39:62:82:49:1e:22:db:
2d:e0:5a:01:ba:97:32:e1:4c:72:22:ea:da:91:cb:
f5:15:db:5a:8d:26:01:25:5d:0a:4f:d8:fe:9e:24:
9b:a4:b1:2e:f0:ac:3b:52:b9:cf:82:9b:bd:82:f4:
26:ff:fa:e1:96:2e:5b:1a:0c:8f:f5:7f:e5:ff:b9:
a3:3f:d4:f6:03:be:07:39:2f:f9:26:95:7f:47:de:
f9:b4:0e:5c:fc:36:ea:86:5a:ff:f0:2f:5f:e7:7e:
ae:b6:21:db:a1:d2:09:a3:bf:15:47:b9:40:67:e8:
b4:c2:5f:e4:8f:d0:85:42:97:5a:65:3b:38:fe:57:
d1:43:ba:d2:dd:4a:a7:20:8e:1f:94:41:0a:5d:e8:
a5:a4:2b:89:c7:3b:ed:0b:30:5d:f4:80:0d:72:e2:
f2:76:8a:12:cd:3e:a2:fb:e8:35:f3:ff:00:26:c0:
e2:27:57:13:a9:f1:46:35:6f:dc:97:00:01:d8:8e:
77:cb:ea:6e:dd:28:50:1a:ba:47:bd:23:93:2e:3c:
6c:bf:95:19:26:38:fa:75:29:46:56:aa:0c:0b:d8:
00:39:f3:3a:fd:d7:bf:83:aa:53:9e:9f:13:64:ae:
8f:8e:9d:85:aa:f7:8b:81:40:e5:7e:7e:94:af:2e:
71:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:76:F8:B8:85:DF:58:0B:3F:CE:49:0C:72:67:3D:9F:C9:5A:2D:C8
X509v3 Authority Key Identifier:
keyid:90:FD:8A:AE:1B:6E:15:9A:2F:A8:F0:3D:7A:31:88:A1:E1:80:72:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:14:7d:3f:fb:f2:84:58:87:26:f1:f6:17:0f:da:6a:63:7a:
d5:ae:c4:4a:b6:a4:b9:77:d2:8f:bd:4a:65:28:09:ff:31:dd:
5b:74:e7:c0:83:5a:c5:d7:fa:a0:89:7c:8b:b5:13:ae:7d:3f:
2d:f1:46:b9:d7:dc:f6:11:4f:91:73:bf:61:0a:4b:b8:e1:a9:
be:82:d7:75:e4:4f:a5:68:2b:3d:d5:fd:a1:d3:93:ab:f0:19:
a5:fe:d0:2d:12:e0:96:dc:1c:73:f1:e4:69:e5:a4:d1:34:37:
59:a3:ae:8b:28:f4:7e:cd:e4:6d:98:83:8f:8b:b4:6a:48:f8:
42:35:81:04:a5:d8:6b:00:9e:fb:92:aa:0c:bd:77:f2:5d:e5:
b4:57:18:8a:45:ab:9f:a1:7d:c4:5b:c9:1b:87:92:99:90:33:
21:64:7f:2f:99:ce:c1:e7:29:6f:f9:cf:da:a4:6d:08:f3:56:
f5:9a:fb:d7:09:90:d2:2e:d3:f0:97:13:d3:81:e4:8e:2b:aa:
00:6c:9b:df:63:7e:4a:5e:de:67:68:76:f4:42:ea:20:a4:6f:
9b:b5:4b:40:b6:07:38:2d:e1:c9:46:82:c3:37:86:04:3c:cd:
e4:50:a2:b6:55:31:69:55:42:b1:6c:c2:c0:71:ca:6d:91:01:
d6:60:74:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT4ongClb+IZAU/r8BwVoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwZmQ4YWFlMWI2ZTE1OWEyZmE4ZjAzZDdhMzE4OGExZTE4
MDcyYTAwHhcNMjUxMTA0MTAwMDI2WhcNMjUxMTA1MTAwMDI2WjAzMTEwLwYDVQQD
Eyg5Yjc2ZjhiODg1ZGY1ODBiM2ZjZTQ5MGM3MjY3M2Q5ZmM5NWEyZGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkviYh9LsvTligkkeItst4FoBupcy
4UxyIurakcv1FdtajSYBJV0KT9j+niSbpLEu8Kw7UrnPgpu9gvQm//rhli5bGgyP
9X/l/7mjP9T2A74HOS/5JpV/R975tA5c/Dbqhlr/8C9f536utiHbodIJo78VR7lA
Z+i0wl/kj9CFQpdaZTs4/lfRQ7rS3UqnII4flEEKXeilpCuJxzvtCzBd9IANcuLy
dooSzT6i++g18/8AJsDiJ1cTqfFGNW/clwAB2I53y+pu3ShQGrpHvSOTLjxsv5UZ
Jjj6dSlGVqoMC9gAOfM6/de/g6pTnp8TZK6Pjp2FqveLgUDlfn6Ury5xewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJt2+LiF31gLP85JDHJnPZ/JWi3IMB8GA1UdIwQY
MBaAFJD9iq4bbhWaL6jwPXoxiKHhgHKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1AyS3JodHVGWm92cVBBOWVqR0lvZUdBY3FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi81ZGZjNzYtZTdlYi00ZDM1LThhZDct
Nzk5MzU5MTExM2U0LzEva1AyS3JodHVGWm92cVBBOWVqR0lvZUdBY3FBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi81ZGZjNzYtZTdlYi00ZDM1LThhZDctNzk5MzU5MTExM2U0
LzEva1AyS3JodHVGWm92cVBBOWVqR0lvZUdBY3FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAARR9P/vy
hFiHJvH2Fw/aamN61a7ESrakuXfSj71KZSgJ/zHdW3TnwINaxdf6oIl8i7UTrn0/
LfFGudfc9hFPkXO/YQpLuOGpvoLXdeRPpWgrPdX9odOTq/AZpf7QLRLgltwcc/Hk
aeWk0TQ3WaOuiyj0fs3kbZiDj4u0akj4QjWBBKXYawCe+5KqDL138l3ltFcYikWr
n6F9xFvJG4eSmZAzIWR/L5nOwecpb/nP2qRtCPNW9Zr71wmQ0i7T8JcT04Hkjiuq
AGyb32N+Sl7eZ2h29ELqIKRvm7VLQLYHOC3hyUaCwzeGBDzN5FCitlUxaVVCsWzC
wHHKbZEB1mB0ng==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:22:23 2025 by rpki-client