Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.mft
File: c46JPc00f32rX3DTUfj84d6qZdE.mft (raw, json)
Hash identifier: NiltJxDRTaaege/WIybqFmCf0wvh7WZninbgCmhZ2y8=
Subject key identifier: B9:C1:EE:D8:31:88:6D:17:F5:BA:00:8E:21:86:27:09:A6:0E:EA:A0
Authority key identifier: 73:8E:89:3D:CD:34:7F:7D:AB:5F:70:D3:51:F8:FC:E1:DE:AA:65:D1
Certificate issuer: /CN=738e893dcd347f7dab5f70d351f8fce1deaa65d1
Certificate serial: 019A4F993E4CA1A5F1195D623D8463DBC26B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c46JPc00f32rX3DTUfj84d6qZdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 16:00:34 +0000
Manifest this update: Tue 04 Nov 2025 16:00:34 +0000
Manifest next update: Wed 05 Nov 2025 16:00:34 +0000
Files and hashes: 1: 3ktEzDL0WvhnsuJm2C6DIk-mHBM.roa (hash: OJtb++yW5+MtXw5QSymaUjcZIRPMQ11YahPbPvwPK4Q=)
2: c46JPc00f32rX3DTUfj84d6qZdE.crl (hash: IkCwOStPRrW8/iyfgu4LjbRVm1d4r9iKhXZStIzYoio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/c46JPc00f32rX3DTUfj84d6qZdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:3e:4c:a1:a5:f1:19:5d:62:3d:84:63:db:c2:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=738e893dcd347f7dab5f70d351f8fce1deaa65d1
Validity
Not Before: Nov 4 16:00:34 2025 GMT
Not After : Nov 5 16:00:34 2025 GMT
Subject: CN=b9c1eed831886d17f5ba008e21862709a60eeaa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3b:4f:d8:42:3e:1b:ca:2d:6a:92:60:97:3b:
fb:06:b2:97:d3:dc:a2:1b:ac:2d:36:03:16:33:ef:
42:8a:c2:17:19:08:e3:9a:90:ff:04:14:34:69:7f:
42:07:e0:50:05:ba:7f:a9:89:77:07:57:e1:e6:e1:
1f:9a:b1:50:91:a6:00:8f:62:2e:a0:4b:db:f2:ec:
ac:a5:39:b4:0a:bd:e0:c8:7f:a2:c8:19:b5:73:38:
6c:04:f7:38:49:ed:51:95:b6:33:c9:36:b1:24:71:
4e:1e:ac:ef:b7:a9:70:f8:6c:39:cc:ca:2e:1d:0f:
9b:bc:3f:4e:7e:fc:a3:1c:4b:e3:38:21:55:93:56:
15:f7:b8:09:32:6a:dd:e2:de:27:e7:46:79:3b:9d:
47:fb:18:e2:c6:13:7a:f5:cb:40:34:a3:4a:e6:04:
d5:39:ed:29:0c:6d:72:fe:0a:8f:31:8b:ed:4b:6d:
28:50:2f:2f:35:cd:63:5f:60:55:c9:c9:a6:6d:15:
fc:cd:3c:b1:cb:2c:95:8c:13:19:c3:b6:f8:9d:df:
2b:62:6c:4b:a9:53:57:8b:84:1a:29:8d:cc:75:39:
ff:72:24:ed:5c:7c:30:2f:34:fc:2d:0a:18:9d:ee:
35:22:3f:25:7a:a1:98:7f:c1:c8:d4:64:0a:89:37:
88:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C1:EE:D8:31:88:6D:17:F5:BA:00:8E:21:86:27:09:A6:0E:EA:A0
X509v3 Authority Key Identifier:
keyid:73:8E:89:3D:CD:34:7F:7D:AB:5F:70:D3:51:F8:FC:E1:DE:AA:65:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c46JPc00f32rX3DTUfj84d6qZdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:a0:88:3b:4b:30:0f:a3:89:fc:c3:53:7b:1a:9f:32:d8:2c:
b6:d1:1b:e6:9f:d4:3b:1f:a3:0a:da:47:f9:15:ec:0f:96:5a:
b1:ac:ed:33:cb:f1:e6:1a:20:67:fa:30:fb:88:33:12:dc:ea:
97:28:e9:b6:d0:78:77:92:1f:81:8a:14:05:c1:cf:3a:24:e2:
c7:29:16:45:be:4f:f5:77:7f:93:bf:be:0d:8c:a6:06:64:20:
bd:b9:d0:53:27:39:af:67:67:bc:38:f0:cf:54:fa:c5:bd:5b:
98:a9:4c:0d:31:47:93:26:8a:0b:89:8e:68:32:02:cd:66:b3:
ac:63:a4:36:1c:d8:c4:d4:fa:e6:7b:dd:5d:da:05:2a:d5:cd:
ee:58:14:01:18:56:72:57:e0:cd:6a:17:3f:26:05:1a:c0:0f:
b3:e5:6e:16:e8:45:0a:e1:e8:9d:ca:db:e6:f1:07:ce:ae:70:
a1:91:62:1a:db:ec:15:61:83:4c:f2:e1:a9:31:a5:0a:34:67:
7a:14:27:82:30:17:9e:ee:c7:48:b2:cc:22:6f:d2:4b:bb:dd:
3a:8d:82:92:4c:60:01:d4:6a:13:6e:33:09:d8:37:10:f8:0e:
ec:07:49:7f:97:bd:2e:63:91:ae:84:e6:5f:9c:c5:f7:d9:0a:
69:44:ee:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmT5MoaXxGV1iPYRj28JrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczOGU4OTNkY2QzNDdmN2RhYjVmNzBkMzUxZjhmY2UxZGVh
YTY1ZDEwHhcNMjUxMTA0MTYwMDM0WhcNMjUxMTA1MTYwMDM0WjAzMTEwLwYDVQQD
EyhiOWMxZWVkODMxODg2ZDE3ZjViYTAwOGUyMTg2MjcwOWE2MGVlYWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjtP2EI+G8otapJglzv7BrKX09yi
G6wtNgMWM+9CisIXGQjjmpD/BBQ0aX9CB+BQBbp/qYl3B1fh5uEfmrFQkaYAj2Iu
oEvb8uyspTm0Cr3gyH+iyBm1czhsBPc4Se1RlbYzyTaxJHFOHqzvt6lw+Gw5zMou
HQ+bvD9OfvyjHEvjOCFVk1YV97gJMmrd4t4n50Z5O51H+xjixhN69ctANKNK5gTV
Oe0pDG1y/gqPMYvtS20oUC8vNc1jX2BVycmmbRX8zTyxyyyVjBMZw7b4nd8rYmxL
qVNXi4QaKY3MdTn/ciTtXHwwLzT8LQoYne41Ij8leqGYf8HI1GQKiTeIGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLnB7tgxiG0X9boAjiGGJwmmDuqgMB8GA1UdIwQY
MBaAFHOOiT3NNH99q19w01H4/OHeqmXRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzQ2SlBjMDBmMzJyWDNEVFVmajg0ZDZxWmRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8yNTUxNDktOGM0Yi00Y2Q4LTkxOWYt
NzdiYjUzMjIyOGI0LzEvYzQ2SlBjMDBmMzJyWDNEVFVmajg0ZDZxWmRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi8yNTUxNDktOGM0Yi00Y2Q4LTkxOWYtNzdiYjUzMjIyOGI0
LzEvYzQ2SlBjMDBmMzJyWDNEVFVmajg0ZDZxWmRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzKCIO0sw
D6OJ/MNTexqfMtgsttEb5p/UOx+jCtpH+RXsD5ZasaztM8vx5hogZ/ow+4gzEtzq
lyjpttB4d5IfgYoUBcHPOiTixykWRb5P9Xd/k7++DYymBmQgvbnQUyc5r2dnvDjw
z1T6xb1bmKlMDTFHkyaKC4mOaDICzWazrGOkNhzYxNT65nvdXdoFKtXN7lgUARhW
clfgzWoXPyYFGsAPs+VuFuhFCuHoncrb5vEHzq5woZFiGtvsFWGDTPLhqTGlCjRn
ehQngjAXnu7HSLLMIm/SS7vdOo2CkkxgAdRqE24zCdg3EPgO7AdJf5e9LmORroTm
X5zF99kKaUTuHA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:15:48 2025 by rpki-client