Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.mft
File: klA6rxJq980DHKw84eOYwXS4LgI.mft (raw, json)
Hash identifier: MZkV3tYFl3OBDmr1AXYHo5XsEPPRpxYXZCDrbWJPe/I=
Subject key identifier: 7E:8E:68:B9:47:E0:3F:24:88:56:E4:37:14:87:8F:91:CE:4C:D3:58
Authority key identifier: 92:50:3A:AF:12:6A:F7:CD:03:1C:AC:3C:E1:E3:98:C1:74:B8:2E:02
Certificate issuer: /CN=92503aaf126af7cd031cac3ce1e398c174b82e02
Certificate serial: 019A4E865A6EBC36F2631EF6785EECFBA3D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klA6rxJq980DHKw84eOYwXS4LgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.mft
Manifest number: 0E70
Signing time: Tue 04 Nov 2025 11:00:19 +0000
Manifest this update: Tue 04 Nov 2025 11:00:19 +0000
Manifest next update: Wed 05 Nov 2025 11:00:19 +0000
Files and hashes: 1: LyKlqkZe1vL0FqTF3iiSvFK7hTQ.roa (hash: 2Vj99SsHB7IFNM1FIg40rxpKy12rqtdylkU9a0vtpMc=)
2: klA6rxJq980DHKw84eOYwXS4LgI.crl (hash: lde7mjdIMViURx2pF0kmcNKUIpZt1yA+lwCQEstAswg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/klA6rxJq980DHKw84eOYwXS4LgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:5a:6e:bc:36:f2:63:1e:f6:78:5e:ec:fb:a3:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92503aaf126af7cd031cac3ce1e398c174b82e02
Validity
Not Before: Nov 4 11:00:19 2025 GMT
Not After : Nov 5 11:00:19 2025 GMT
Subject: CN=7e8e68b947e03f248856e43714878f91ce4cd358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c5:fb:e1:03:8b:3e:75:c8:bf:c2:6f:ae:bb:
90:df:02:42:72:56:ab:c3:66:06:42:32:a8:c7:15:
4e:94:e2:bb:85:b9:b2:98:89:6b:71:94:95:9e:18:
9b:cf:06:97:c3:f5:4e:18:23:ab:70:a3:0f:69:9c:
18:27:16:93:de:4f:89:f0:0b:4e:25:de:6a:1f:30:
56:d9:55:3d:16:ad:06:46:dc:43:a7:d9:e4:05:1a:
1a:48:ca:49:14:90:fd:6a:2b:15:9e:28:16:82:b4:
39:0e:d2:34:05:a1:21:6f:43:dd:23:27:32:93:6e:
65:93:cc:cb:1a:22:b9:12:d7:3d:5f:9c:b0:d2:3f:
a5:a1:29:73:d1:30:69:86:66:81:00:77:5d:a4:d3:
0b:92:44:5b:d2:36:09:42:c3:ea:ec:b1:16:63:af:
49:2e:26:88:4a:96:92:67:ce:51:79:a8:62:fd:4f:
e8:17:c4:cd:14:70:7d:4a:20:82:fe:c6:ad:22:d4:
96:b6:3b:d9:a1:bd:12:7d:86:ab:ef:f9:6b:68:24:
6d:28:0b:fa:bb:4d:7d:bb:02:02:e8:89:f9:01:dd:
2c:e6:17:5f:12:6a:96:5d:b1:c9:a5:12:e6:80:fe:
2e:b7:45:6f:92:85:53:d4:f6:04:6d:67:65:f4:f4:
5a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:8E:68:B9:47:E0:3F:24:88:56:E4:37:14:87:8F:91:CE:4C:D3:58
X509v3 Authority Key Identifier:
keyid:92:50:3A:AF:12:6A:F7:CD:03:1C:AC:3C:E1:E3:98:C1:74:B8:2E:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klA6rxJq980DHKw84eOYwXS4LgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:b5:d6:82:9d:54:1b:bb:1f:e7:fc:a9:4d:4d:68:44:c5:13:
62:f0:d6:02:fb:82:ae:75:0f:d6:41:55:da:a1:c1:5b:0d:0a:
92:e4:d7:41:c6:32:44:a3:28:83:7e:be:33:a5:72:89:a1:91:
40:33:d5:5a:29:8b:73:80:7b:40:0d:88:c0:0a:2d:25:6c:f0:
a1:4b:12:0b:c1:f5:00:a7:92:c2:a2:f2:10:1e:30:4f:37:92:
b6:bd:b8:a7:e7:68:e6:bf:5c:f6:e0:6e:24:02:0d:7a:ff:58:
6d:95:e1:23:54:e4:f9:55:07:16:01:98:d1:43:7d:c9:05:18:
cd:08:8d:cf:60:25:0e:a2:61:d4:ff:4f:30:a3:ca:2a:e8:e2:
34:ad:9f:29:65:bc:41:19:f7:0b:14:8b:9b:70:de:47:15:70:
67:44:5c:32:82:70:5b:13:bc:9f:b1:23:0d:db:15:d8:63:f9:
ec:f2:5b:f0:71:89:51:99:32:73:52:6f:9e:7f:e9:cd:67:e5:
d6:62:6c:24:ae:03:a9:dc:86:36:6d:b5:22:62:aa:4d:29:65:
45:ec:f6:1f:a9:4c:7a:d5:2c:0a:87:d2:fa:b9:de:3e:cf:cf:
f1:aa:dd:a0:a9:a8:3f:a7:0a:ac:e0:1f:49:8d:cc:db:d2:98:
87:6a:c8:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOhlpuvDbyYx72eF7s+6PRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNTAzYWFmMTI2YWY3Y2QwMzFjYWMzY2UxZTM5OGMxNzRi
ODJlMDIwHhcNMjUxMTA0MTEwMDE5WhcNMjUxMTA1MTEwMDE5WjAzMTEwLwYDVQQD
Eyg3ZThlNjhiOTQ3ZTAzZjI0ODg1NmU0MzcxNDg3OGY5MWNlNGNkMzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8X74QOLPnXIv8JvrruQ3wJCclar
w2YGQjKoxxVOlOK7hbmymIlrcZSVnhibzwaXw/VOGCOrcKMPaZwYJxaT3k+J8AtO
Jd5qHzBW2VU9Fq0GRtxDp9nkBRoaSMpJFJD9aisVnigWgrQ5DtI0BaEhb0PdIycy
k25lk8zLGiK5Etc9X5yw0j+loSlz0TBphmaBAHddpNMLkkRb0jYJQsPq7LEWY69J
LiaISpaSZ85Reahi/U/oF8TNFHB9SiCC/satItSWtjvZob0SfYar7/lraCRtKAv6
u019uwIC6In5Ad0s5hdfEmqWXbHJpRLmgP4ut0VvkoVT1PYEbWdl9PRatQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH6OaLlH4D8kiFbkNxSHj5HOTNNYMB8GA1UdIwQY
MBaAFJJQOq8SavfNAxysPOHjmMF0uC4CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2xBNnJ4SnE5ODBESEt3ODRlT1l3WFM0TGdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83OWJkYjAtYmQ1Yy00ODAwLTk3Njgt
YWZkMTI2OGZkYmZkLzEva2xBNnJ4SnE5ODBESEt3ODRlT1l3WFM0TGdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS83OWJkYjAtYmQ1Yy00ODAwLTk3NjgtYWZkMTI2OGZkYmZk
LzEva2xBNnJ4SnE5ODBESEt3ODRlT1l3WFM0TGdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJLXWgp1U
G7sf5/ypTU1oRMUTYvDWAvuCrnUP1kFV2qHBWw0KkuTXQcYyRKMog36+M6VyiaGR
QDPVWimLc4B7QA2IwAotJWzwoUsSC8H1AKeSwqLyEB4wTzeStr24p+do5r9c9uBu
JAINev9YbZXhI1Tk+VUHFgGY0UN9yQUYzQiNz2AlDqJh1P9PMKPKKujiNK2fKWW8
QRn3CxSLm3DeRxVwZ0RcMoJwWxO8n7EjDdsV2GP57PJb8HGJUZkyc1Jvnn/pzWfl
1mJsJK4DqdyGNm21ImKqTSllRez2H6lMetUsCofS+rnePs/P8ardoKmoP6cKrOAf
SY3M29KYh2rIjA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:15:22 2025 by rpki-client