Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
File: A86wnV7qahjljf3v6_KbQQXgJnw.mft (raw, json)
Hash identifier: qYCwNJNTI6E69LEBE1pxdOcXzc99/AuU7undSGxt1sA=
Subject key identifier: 4A:13:4C:90:DF:99:07:90:AE:FC:23:AC:D1:4A:B1:35:40:16:B9:CB
Authority key identifier: 03:CE:B0:9D:5E:EA:6A:18:E5:8D:FD:EF:EB:F2:9B:41:05:E0:26:7C
Certificate issuer: /CN=03ceb09d5eea6a18e58dfdefebf29b4105e0267c
Certificate serial: 019A4EF4D9A2BCD394AF31FD0A37A16CCE95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
Manifest number: 05D3
Signing time: Tue 04 Nov 2025 13:01:00 +0000
Manifest this update: Tue 04 Nov 2025 13:01:00 +0000
Manifest next update: Wed 05 Nov 2025 13:01:00 +0000
Files and hashes: 1: A86wnV7qahjljf3v6_KbQQXgJnw.crl (hash: SSXGplfQBaTi7lI2oiVKRQSJncONSdAQPZRBd/6BfTs=)
2: ihNwlKbuNiGlnJM8yFd2Nxrvaqo.roa (hash: auV56nH817P5x20E5reCmB5GZHUds7d7BudXxN/HlG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:d9:a2:bc:d3:94:af:31:fd:0a:37:a1:6c:ce:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ceb09d5eea6a18e58dfdefebf29b4105e0267c
Validity
Not Before: Nov 4 13:01:00 2025 GMT
Not After : Nov 5 13:01:00 2025 GMT
Subject: CN=4a134c90df990790aefc23acd14ab1354016b9cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f7:1e:01:39:48:a7:8e:77:17:31:8f:c1:36:
01:c6:e5:91:13:51:68:03:40:55:00:c5:48:f8:64:
15:44:9e:82:11:a5:a3:64:78:17:84:9b:e0:2c:9f:
ac:c9:7a:45:e4:3d:00:f3:ba:88:a4:bd:79:34:50:
54:35:61:7c:f4:22:2f:eb:91:1f:39:f5:41:1c:fd:
f9:0a:66:89:78:82:c3:da:0b:57:b0:35:cf:85:88:
29:82:32:5c:2d:e1:d1:d3:f1:12:1c:35:14:58:da:
6a:10:86:33:cb:f8:3b:9e:43:a4:d4:d7:3f:f0:ce:
b4:94:39:03:2d:93:ae:e1:cf:4c:26:aa:24:a5:84:
13:b2:ec:77:68:84:4b:fa:a1:89:86:c1:03:a2:81:
91:7f:fb:c7:9d:ec:e9:4d:26:28:82:e7:8e:92:c0:
ed:04:5d:56:d7:2a:91:d1:fc:35:83:16:31:6b:ad:
77:8a:5d:98:ca:f3:07:a4:f9:78:fa:fe:6f:81:66:
65:e9:ab:b6:8a:11:21:33:bc:c0:57:75:22:d0:9d:
46:17:7b:24:d8:a8:a8:74:17:13:24:53:68:41:72:
d7:0e:ad:50:5c:21:39:d4:87:b1:92:3d:da:5d:58:
f3:4c:36:91:09:d1:2e:19:30:68:e9:e4:89:b9:79:
5c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:13:4C:90:DF:99:07:90:AE:FC:23:AC:D1:4A:B1:35:40:16:B9:CB
X509v3 Authority Key Identifier:
keyid:03:CE:B0:9D:5E:EA:6A:18:E5:8D:FD:EF:EB:F2:9B:41:05:E0:26:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:c7:84:d9:85:9e:4e:4a:ad:21:f4:91:3a:a2:a0:47:56:a0:
7b:17:22:9f:56:43:d1:c6:31:fc:49:6a:5c:e5:10:51:ae:b7:
6e:71:64:04:56:07:08:fc:26:a6:22:33:8f:b2:56:c5:92:0b:
53:eb:f5:04:18:56:6f:fa:ca:4b:49:b8:ae:34:d5:ff:aa:76:
96:6c:23:81:3e:cb:23:76:7d:95:af:54:c9:80:3d:f4:29:76:
c0:d7:2e:bd:e3:c2:8f:66:28:a8:a7:1d:f4:14:ad:96:a0:73:
de:4a:e8:4d:d7:35:5b:1f:21:e8:23:8d:76:16:f7:b6:7c:63:
06:85:fc:c8:3c:98:88:63:a7:65:62:95:d6:c0:90:58:e2:6a:
a7:dd:33:58:1f:05:2b:73:ce:17:4d:86:9c:e2:88:d1:c3:c0:
03:6f:2c:01:28:29:82:66:17:bf:fa:92:1d:f7:94:eb:29:cf:
d0:4d:5f:11:fd:bd:de:78:a6:66:66:70:72:d6:a4:0e:9a:c0:
6b:da:41:6c:a8:56:e7:31:e0:b3:16:17:21:60:b9:c1:9f:bd:
44:28:eb:42:ad:dc:74:48:66:1f:9d:3d:2c:4a:13:81:48:3a:
0a:bd:6c:df:59:bc:b9:57:64:b2:31:da:80:2c:d5:39:91:73:
04:fc:f7:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9NmivNOUrzH9CjehbM6VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzY2ViMDlkNWVlYTZhMThlNThkZmRlZmViZjI5YjQxMDVl
MDI2N2MwHhcNMjUxMTA0MTMwMTAwWhcNMjUxMTA1MTMwMTAwWjAzMTEwLwYDVQQD
Eyg0YTEzNGM5MGRmOTkwNzkwYWVmYzIzYWNkMTRhYjEzNTQwMTZiOWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfceATlIp453FzGPwTYBxuWRE1Fo
A0BVAMVI+GQVRJ6CEaWjZHgXhJvgLJ+syXpF5D0A87qIpL15NFBUNWF89CIv65Ef
OfVBHP35CmaJeILD2gtXsDXPhYgpgjJcLeHR0/ESHDUUWNpqEIYzy/g7nkOk1Nc/
8M60lDkDLZOu4c9MJqokpYQTsux3aIRL+qGJhsEDooGRf/vHnezpTSYogueOksDt
BF1W1yqR0fw1gxYxa613il2YyvMHpPl4+v5vgWZl6au2ihEhM7zAV3Ui0J1GF3sk
2KiodBcTJFNoQXLXDq1QXCE51Iexkj3aXVjzTDaRCdEuGTBo6eSJuXlc3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEoTTJDfmQeQrvwjrNFKsTVAFrnLMB8GA1UdIwQY
MBaAFAPOsJ1e6moY5Y397+vym0EF4CZ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTg2d25WN3FhaGpsamYzdjZfS2JRUVhnSm53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8wYzQ2NTAtNzk2NC00OGFmLTk4NWEt
MzQwMThkNWM5ZGY1LzEvQTg2d25WN3FhaGpsamYzdjZfS2JRUVhnSm53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8wYzQ2NTAtNzk2NC00OGFmLTk4NWEtMzQwMThkNWM5ZGY1
LzEvQTg2d25WN3FhaGpsamYzdjZfS2JRUVhnSm53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgceE2YWe
TkqtIfSROqKgR1agexcin1ZD0cYx/ElqXOUQUa63bnFkBFYHCPwmpiIzj7JWxZIL
U+v1BBhWb/rKS0m4rjTV/6p2lmwjgT7LI3Z9la9UyYA99Cl2wNcuvePCj2YoqKcd
9BStlqBz3kroTdc1Wx8h6CONdhb3tnxjBoX8yDyYiGOnZWKV1sCQWOJqp90zWB8F
K3POF02GnOKI0cPAA28sASgpgmYXv/qSHfeU6ynP0E1fEf293nimZmZwctakDprA
a9pBbKhW5zHgsxYXIWC5wZ+9RCjrQq3cdEhmH509LEoTgUg6Cr1s31m8uVdksjHa
gCzVOZFzBPz3jg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:59 2025 by rpki-client