Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
File: nzEukpe8HSfr60dt6g7hXddWVC0.mft (raw, json)
Hash identifier: 9phA4nvdXB5KYa5sAXLAMO8YqYEqYFOH+rt86uyNCVU=
Subject key identifier: F0:10:D8:83:2F:4B:E1:F9:C1:55:4B:7E:5D:2B:91:9E:A3:94:07:71
Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Certificate serial: 019A4EF5DEDA6CF902EA27439695CB74AAFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
Manifest number: 0DA6
Signing time: Tue 04 Nov 2025 13:02:07 +0000
Manifest this update: Tue 04 Nov 2025 13:02:07 +0000
Manifest next update: Wed 05 Nov 2025 13:02:07 +0000
Files and hashes: 1: 1-YKY-kDb-ok-O2t52erxOSFI9tY.roa (hash: Puf+xKue+984oQxVfH82nttD3pZrp9rN15gRLEzYPtg=)
2: 9DNpUDfjfX1cw67GoTejssp0I60.roa (hash: waZpM47Y+Uz4d9MPb5IIUjKVJuGJ/1amyn5dhXRlaKQ=)
3: Aesp-0bkacoacCkCpfhQPmoA2Jo.roa (hash: auTmqPfhdn5WgGssEA4un4kBW/LnIC2gzs/3RcvN434=)
4: BuDcPMwCapskKDGJlWsZctPOBc4.roa (hash: 3bBve525vpAtWU3g8/6VOaPU/EQ0F7VvrXGpa6fOHFk=)
5: bO_WvrYP5ttqrPDJq5s463Nszpo.roa (hash: EspaZPCLRAen7G7qKwAXYq7KwKVTki6xdz4+i5S1a6Q=)
6: nVCJmhFMb83gvB2R2U-hSqvqOrY.roa (hash: /YERfaDChwnXHF/qpIBHQyOtHUuBLeX/WEtxA7mKmAY=)
7: nzEukpe8HSfr60dt6g7hXddWVC0.crl (hash: P+RKdXnIlzuHLgpDBTmKLiF7XfmnT+whuJjI6FD3Zyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:de:da:6c:f9:02:ea:27:43:96:95:cb:74:aa:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Validity
Not Before: Nov 4 13:02:07 2025 GMT
Not After : Nov 5 13:02:07 2025 GMT
Subject: CN=f010d8832f4be1f9c1554b7e5d2b919ea3940771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d7:a9:ba:d9:d0:83:87:91:53:ca:df:90:b9:
05:ef:f7:29:d6:74:4d:21:93:45:b8:d9:86:df:24:
1d:44:b5:78:87:f8:f6:4f:c7:bc:a3:3d:36:31:ea:
5c:75:6e:a7:cc:e7:63:44:6a:df:f0:60:ab:6c:43:
e5:45:d0:92:96:6f:ae:7e:7a:86:79:bc:19:a7:c1:
1a:49:7b:ff:5a:83:fe:b0:34:c2:2d:37:68:11:c2:
f5:42:e4:6d:75:03:d3:ca:16:d3:80:47:53:58:7a:
85:31:5c:dd:17:88:06:84:d2:ad:a6:91:7e:58:81:
ff:67:59:2b:10:1f:ca:60:45:1c:49:55:17:2e:ea:
69:2a:02:32:ca:62:5d:52:a6:f8:e7:11:2b:e6:ca:
8e:e4:c3:5a:06:3d:65:27:04:9f:03:b0:a1:cb:86:
d2:f0:85:00:45:b6:3a:92:65:49:50:5b:e2:ed:c6:
28:d3:b5:14:4d:51:ad:cb:55:57:e4:ac:8a:c1:21:
3f:95:78:05:40:42:4d:0f:9c:1e:a5:11:f7:b4:e4:
91:7d:43:37:4b:ee:02:93:38:8d:56:7b:12:6f:94:
09:5f:d3:97:b5:6f:34:24:4f:5f:54:61:c6:00:62:
b1:70:6d:3b:5d:31:fc:77:82:bb:15:d5:83:78:85:
f1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:10:D8:83:2F:4B:E1:F9:C1:55:4B:7E:5D:2B:91:9E:A3:94:07:71
X509v3 Authority Key Identifier:
keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:4f:5b:5c:57:b4:58:f2:41:fa:1a:28:f7:1e:61:83:c4:7a:
d5:0b:2b:ed:7f:53:22:27:60:8a:00:97:24:50:65:12:39:c0:
d0:e1:11:77:a7:b1:a5:a9:99:87:30:5d:e8:bb:d3:7a:96:fb:
a2:af:53:8e:d6:9c:a0:5b:e9:4d:bc:97:db:89:c5:10:df:c5:
47:1c:eb:ce:6c:1d:ec:7b:f2:c1:b6:34:52:4c:ef:3d:50:ec:
5b:07:5c:7e:3c:9c:6e:31:4d:06:07:c3:03:80:b7:f4:07:a7:
a4:56:ab:97:0f:6b:85:b6:b3:de:45:46:6a:ce:02:19:88:c4:
92:b6:ce:bc:0b:b5:db:45:c5:0c:b3:b2:13:80:a6:2c:93:19:
23:b7:54:2a:73:20:4f:bb:b8:57:0d:ff:40:c4:d9:44:79:da:
63:42:a4:0b:7e:9d:fe:4f:46:9a:3f:23:80:3c:42:c0:d0:2e:
fc:40:05:c3:18:c9:12:10:1a:2e:97:87:20:e9:87:2c:06:79:
c1:c6:ec:84:ce:0f:e7:f9:22:d8:aa:c2:c3:35:06:dd:eb:e8:
00:64:83:3f:1e:31:a8:4f:07:81:52:20:85:ad:ed:8b:79:ae:
ad:99:13:51:a8:a5:cf:c1:12:5e:3f:53:cc:1d:cd:2e:bf:23:
34:a2:5c:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9d7abPkC6idDlpXLdKr8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMzEyZTkyOTdiYzFkMjdlYmViNDc2ZGVhMGVlMTVkZDc1
NjU0MmQwHhcNMjUxMTA0MTMwMjA3WhcNMjUxMTA1MTMwMjA3WjAzMTEwLwYDVQQD
EyhmMDEwZDg4MzJmNGJlMWY5YzE1NTRiN2U1ZDJiOTE5ZWEzOTQwNzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9eputnQg4eRU8rfkLkF7/cp1nRN
IZNFuNmG3yQdRLV4h/j2T8e8oz02MepcdW6nzOdjRGrf8GCrbEPlRdCSlm+ufnqG
ebwZp8EaSXv/WoP+sDTCLTdoEcL1QuRtdQPTyhbTgEdTWHqFMVzdF4gGhNKtppF+
WIH/Z1krEB/KYEUcSVUXLuppKgIyymJdUqb45xEr5sqO5MNaBj1lJwSfA7Chy4bS
8IUARbY6kmVJUFvi7cYo07UUTVGty1VX5KyKwSE/lXgFQEJND5wepRH3tOSRfUM3
S+4CkziNVnsSb5QJX9OXtW80JE9fVGHGAGKxcG07XTH8d4K7FdWDeIXxDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPAQ2IMvS+H5wVVLfl0rkZ6jlAdxMB8GA1UdIwQY
MBaAFJ8xLpKXvB0n6+tHbeoO4V3XVlQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQt
YmQ1ZDNmMDBmYmIyLzEvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQtYmQ1ZDNmMDBmYmIy
LzEvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArU9bXFe0
WPJB+hoo9x5hg8R61Qsr7X9TIidgigCXJFBlEjnA0OERd6expamZhzBd6LvTepb7
oq9TjtacoFvpTbyX24nFEN/FRxzrzmwd7HvywbY0UkzvPVDsWwdcfjycbjFNBgfD
A4C39AenpFarlw9rhbaz3kVGas4CGYjEkrbOvAu120XFDLOyE4CmLJMZI7dUKnMg
T7u4Vw3/QMTZRHnaY0KkC36d/k9Gmj8jgDxCwNAu/EAFwxjJEhAaLpeHIOmHLAZ5
wcbshM4P5/ki2KrCwzUG3evoAGSDPx4xqE8HgVIgha3ti3murZkTUailz8ESXj9T
zB3NLr8jNKJcPw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:12 2025 by rpki-client