Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
File: R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft (raw, json)
Hash identifier: xxG5dYiOhl+kpULRhME0moyQ2rMXXBDtJcq619n6oww=
Subject key identifier: E5:35:E3:09:5C:F1:DD:48:1B:EA:2D:CD:BB:7D:77:4E:CE:3E:D7:34
Authority key identifier: 47:7F:4B:6E:C4:34:71:57:C4:D1:3E:F0:E7:AB:E1:29:0A:0B:F5:7C
Certificate issuer: /CN=477f4b6ec4347157c4d13ef0e7abe1290a0bf57c
Certificate serial: 019A541AF2A5CAF581DFFF31F7EEB4C688CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
Manifest number: 0717
Signing time: Wed 05 Nov 2025 13:00:43 +0000
Manifest this update: Wed 05 Nov 2025 13:00:43 +0000
Manifest next update: Thu 06 Nov 2025 13:00:43 +0000
Files and hashes: 1: 0XKLHVF6OopWfkCp5SGDRjUGSwc.roa (hash: LlbXk7YPxKtyITregmmE7lsrGbU25UL9jnRqhgrsqYQ=)
2: BXJ7UivZREqfV3oE_cto5-RbCwU.roa (hash: H5O0TywJPldSIFgMKfugAhkIQ7kPwBy5/c6iSkGttag=)
3: R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl (hash: FdoeHnFuglGyY+rMn3dPPBjm03AGaRelamp926Bzi+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1a:f2:a5:ca:f5:81:df:ff:31:f7:ee:b4:c6:88:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=477f4b6ec4347157c4d13ef0e7abe1290a0bf57c
Validity
Not Before: Nov 5 13:00:43 2025 GMT
Not After : Nov 6 13:00:43 2025 GMT
Subject: CN=e535e3095cf1dd481bea2dcdbb7d774ece3ed734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6e:83:5e:a2:e1:c9:1f:ce:19:a6:b4:7d:54:
13:fa:e2:8d:6e:67:37:1c:14:49:6d:db:9f:42:a1:
8d:2c:c0:02:23:6a:ee:91:5e:76:5f:6e:9a:0a:9f:
92:fb:fc:a0:e6:7d:f6:c1:65:f9:41:36:c0:23:c3:
e4:af:6a:34:62:42:e4:23:4c:f5:11:6a:b7:da:25:
b4:9d:68:73:23:aa:c5:55:87:28:5f:a4:7f:7b:51:
d7:a0:4b:28:45:9e:c2:ca:af:e3:03:65:b1:2f:08:
04:0c:4e:cd:f0:8e:38:8e:de:3a:d9:c5:d0:3e:68:
2b:bd:c5:8a:17:3a:37:9f:65:37:9c:4f:46:0e:6d:
27:b6:45:b1:60:bc:20:91:2d:97:24:e4:db:8f:c5:
ed:37:09:4e:ed:e7:0f:2d:23:4f:a3:17:c9:ea:2c:
44:75:2f:f3:f2:cf:bc:d4:f5:86:f4:78:fe:7e:8d:
3d:a3:f3:2f:e8:01:15:62:4e:d3:98:16:4b:81:28:
df:ba:10:ec:4e:ab:9e:7c:8d:20:91:6d:1d:d3:a8:
94:ad:b6:e6:ed:7b:3f:83:14:44:58:5e:38:7c:fd:
d4:0d:8f:e6:7a:35:b3:d5:a2:c2:c9:c2:09:1f:c0:
f3:48:18:13:a0:c5:49:5b:40:c4:d8:9b:c0:a6:7b:
0f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:35:E3:09:5C:F1:DD:48:1B:EA:2D:CD:BB:7D:77:4E:CE:3E:D7:34
X509v3 Authority Key Identifier:
keyid:47:7F:4B:6E:C4:34:71:57:C4:D1:3E:F0:E7:AB:E1:29:0A:0B:F5:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:36:6f:fb:1c:3b:c8:6d:a2:fd:d0:27:58:46:f0:81:54:14:
f8:6e:b3:ae:a7:5b:91:00:08:df:05:08:e2:2c:f9:7e:fd:2a:
a9:bb:8e:b2:66:5b:6e:7b:21:a4:86:27:7b:a0:f1:97:98:be:
0f:34:e5:21:fc:bd:70:e9:d3:34:e3:1d:ab:c1:99:0b:5d:c9:
b6:c4:81:fe:76:59:2f:7b:7e:09:1f:a6:8e:94:e3:b4:bd:00:
10:b2:4c:3a:68:3e:1c:c4:a2:c7:bb:1f:dc:90:55:66:f6:58:
a0:d9:bc:0e:ba:8c:2b:70:72:6b:c4:b0:88:6b:eb:bb:4c:b5:
62:eb:a8:5e:30:ab:6b:ef:f2:a7:01:37:b1:b7:2b:92:e7:79:
45:18:db:cf:7e:15:ab:65:58:75:14:6f:fd:58:0d:dc:5b:2c:
6b:d4:52:74:b2:7a:88:5c:62:81:29:7b:3d:10:9f:9a:df:81:
72:d4:44:df:23:ea:e3:50:32:6b:47:40:61:1a:f1:6f:4b:9d:
15:89:2f:98:a8:f6:e1:b8:f3:6d:3e:d4:ae:dc:cd:c8:07:74:
61:93:fc:60:2b:5a:f0:76:79:ed:63:f1:9b:b1:1d:1e:ae:87:
3c:af:7d:0c:d5:02:25:0e:dd:47:f1:91:3c:96:e8:38:cd:f2:
ac:e6:ea:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpUGvKlyvWB3/8x9+60xojKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3N2Y0YjZlYzQzNDcxNTdjNGQxM2VmMGU3YWJlMTI5MGEw
YmY1N2MwHhcNMjUxMTA1MTMwMDQzWhcNMjUxMTA2MTMwMDQzWjAzMTEwLwYDVQQD
EyhlNTM1ZTMwOTVjZjFkZDQ4MWJlYTJkY2RiYjdkNzc0ZWNlM2VkNzM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAum6DXqLhyR/OGaa0fVQT+uKNbmc3
HBRJbdufQqGNLMACI2rukV52X26aCp+S+/yg5n32wWX5QTbAI8Pkr2o0YkLkI0z1
EWq32iW0nWhzI6rFVYcoX6R/e1HXoEsoRZ7Cyq/jA2WxLwgEDE7N8I44jt462cXQ
PmgrvcWKFzo3n2U3nE9GDm0ntkWxYLwgkS2XJOTbj8XtNwlO7ecPLSNPoxfJ6ixE
dS/z8s+81PWG9Hj+fo09o/Mv6AEVYk7TmBZLgSjfuhDsTquefI0gkW0d06iUrbbm
7Xs/gxREWF44fP3UDY/mejWz1aLCycIJH8DzSBgToMVJW0DE2JvApnsPYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOU14wlc8d1IG+otzbt9d07OPtc0MB8GA1UdIwQY
MBaAFEd/S27ENHFXxNE+8Oer4SkKC/V8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjM5TGJzUTBjVmZFMFQ3dzU2dmhLUW9MOVh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zOTNlMTYtODk4ZS00NWQ4LTlkNzIt
ZDhiZDI1MGI2NGY5LzEvUjM5TGJzUTBjVmZFMFQ3dzU2dmhLUW9MOVh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8zOTNlMTYtODk4ZS00NWQ4LTlkNzItZDhiZDI1MGI2NGY5
LzEvUjM5TGJzUTBjVmZFMFQ3dzU2dmhLUW9MOVh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfTZv+xw7
yG2i/dAnWEbwgVQU+G6zrqdbkQAI3wUI4iz5fv0qqbuOsmZbbnshpIYne6Dxl5i+
DzTlIfy9cOnTNOMdq8GZC13JtsSB/nZZL3t+CR+mjpTjtL0AELJMOmg+HMSix7sf
3JBVZvZYoNm8DrqMK3Bya8SwiGvru0y1YuuoXjCra+/ypwE3sbcrkud5RRjbz34V
q2VYdRRv/VgN3Fssa9RSdLJ6iFxigSl7PRCfmt+BctRE3yPq41Aya0dAYRrxb0ud
FYkvmKj24bjzbT7UrtzNyAd0YZP8YCta8HZ57WPxm7EdHq6HPK99DNUCJQ7dR/GR
PJboOM3yrObqaA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 19:45:27 2025 by rpki-client