Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft
File: nJKqU9MpCqgDeZNTNdufzD_9Kao.mft (raw, json)
Hash identifier: 45zG3bB7QANEY+IvqNdzfRdV3wWh4/IfBzvOGcUrST4=
Subject key identifier: B1:9A:FF:16:5F:3C:A7:4C:63:E6:03:93:3A:34:92:91:32:56:E0:D9
Authority key identifier: 9C:92:AA:53:D3:29:0A:A8:03:79:93:53:35:DB:9F:CC:3F:FD:29:AA
Certificate issuer: /CN=9c92aa53d3290aa80379935335db9fcc3ffd29aa
Certificate serial: 019A4EF446248DBA3448D5C1E1CDF21C3131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJKqU9MpCqgDeZNTNdufzD_9Kao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft
Manifest number: 03F5
Signing time: Tue 04 Nov 2025 13:00:22 +0000
Manifest this update: Tue 04 Nov 2025 13:00:22 +0000
Manifest next update: Wed 05 Nov 2025 13:00:22 +0000
Files and hashes: 1: If4EKlwd9K1sFMswbVmwiqIL9EU.roa (hash: Xi+2lm3juwWtv3l4CgI611xVpcAT1z+T6D2yne87CLU=)
2: nJKqU9MpCqgDeZNTNdufzD_9Kao.crl (hash: /LQ9fLMAFeUlZ0O7r/AbBbQEufjd86zL4s41lH8NaGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJKqU9MpCqgDeZNTNdufzD_9Kao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:46:24:8d:ba:34:48:d5:c1:e1:cd:f2:1c:31:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c92aa53d3290aa80379935335db9fcc3ffd29aa
Validity
Not Before: Nov 4 13:00:22 2025 GMT
Not After : Nov 5 13:00:22 2025 GMT
Subject: CN=b19aff165f3ca74c63e603933a3492913256e0d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0c:c5:ce:90:1f:b1:40:58:f8:5c:9b:89:b0:
21:cd:8b:1e:98:08:52:e1:02:9d:e5:dc:cc:8b:07:
d3:7c:95:cf:13:a0:c5:33:b3:20:ae:0d:e0:9a:91:
09:7e:94:cb:87:af:08:18:1c:ee:9e:f9:57:af:5e:
6c:38:7e:ce:9a:8c:e0:82:c8:04:78:5e:30:bf:5d:
89:cc:00:fe:41:01:26:cb:cc:23:af:eb:77:ff:ca:
e0:90:36:2f:3e:08:45:dd:11:12:e9:c2:e4:ac:24:
bf:85:94:89:04:5b:e2:c1:24:e4:f3:43:59:fd:42:
14:5c:4b:21:bc:3a:cf:4a:10:2b:53:15:4a:e9:36:
b0:93:67:8c:d9:7b:db:b7:57:39:0d:71:a3:5b:f8:
99:89:ad:93:e8:5b:0c:60:dc:fe:de:54:c9:28:e5:
b5:9a:6a:9f:5c:e2:a8:99:a9:ff:29:43:08:fb:3b:
ac:ae:ce:45:70:79:a0:81:2b:d2:bd:24:08:ed:d4:
3e:72:b8:e1:d5:c8:4e:10:42:de:dd:15:7d:3a:86:
76:fe:02:a0:60:6f:6f:b2:89:b0:59:d5:f7:a6:a5:
f4:b9:85:7d:fa:29:68:61:36:2c:cb:1c:4c:da:f1:
b7:ad:32:9b:b1:cd:f4:f4:0f:70:08:a5:04:e2:e7:
50:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:9A:FF:16:5F:3C:A7:4C:63:E6:03:93:3A:34:92:91:32:56:E0:D9
X509v3 Authority Key Identifier:
keyid:9C:92:AA:53:D3:29:0A:A8:03:79:93:53:35:DB:9F:CC:3F:FD:29:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJKqU9MpCqgDeZNTNdufzD_9Kao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:26:a1:90:87:9a:d8:d7:17:91:b4:4f:b3:ad:35:3b:82:c9:
9e:26:53:20:f7:27:f6:38:3d:d7:74:f7:b0:86:a1:53:40:ca:
26:ad:f0:28:86:dd:be:2c:ff:6c:d8:fb:41:07:35:60:c3:bf:
14:06:1e:9d:9a:85:c4:86:13:32:b3:84:7a:ed:54:6d:75:a8:
14:e0:4e:2f:2e:ba:d1:c9:2a:6c:73:6c:6a:c2:54:34:00:73:
22:94:41:57:b8:57:96:bc:c1:90:e6:8b:51:18:1a:f2:9d:3e:
6e:27:e7:da:3f:bc:d4:22:45:74:25:d6:d0:24:29:d0:5b:26:
29:c4:f9:92:8b:5d:0c:1d:bc:c4:ad:2e:a8:f6:30:e1:c2:da:
40:b6:19:96:ac:77:bc:5a:7e:15:02:fa:9b:0b:d5:a9:e6:e6:
1f:44:28:04:7e:5f:55:4b:68:60:74:02:5d:8f:f2:37:67:82:
91:2c:d8:85:8c:9d:38:4e:89:5a:3e:09:fb:e9:09:b3:08:53:
d7:5b:25:5c:cf:69:65:11:cd:24:e8:8f:03:58:17:57:d2:ca:
10:c0:a1:10:45:60:39:cd:a9:af:b5:d2:64:34:09:9d:7c:43:
af:ce:7d:2d:2a:c6:de:69:a0:a0:e4:e6:f1:f6:82:a7:be:be:
4b:63:60:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9EYkjbo0SNXB4c3yHDExMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljOTJhYTUzZDMyOTBhYTgwMzc5OTM1MzM1ZGI5ZmNjM2Zm
ZDI5YWEwHhcNMjUxMTA0MTMwMDIyWhcNMjUxMTA1MTMwMDIyWjAzMTEwLwYDVQQD
EyhiMTlhZmYxNjVmM2NhNzRjNjNlNjAzOTMzYTM0OTI5MTMyNTZlMGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgzFzpAfsUBY+FybibAhzYsemAhS
4QKd5dzMiwfTfJXPE6DFM7Mgrg3gmpEJfpTLh68IGBzunvlXr15sOH7OmozggsgE
eF4wv12JzAD+QQEmy8wjr+t3/8rgkDYvPghF3RES6cLkrCS/hZSJBFviwSTk80NZ
/UIUXEshvDrPShArUxVK6Tawk2eM2Xvbt1c5DXGjW/iZia2T6FsMYNz+3lTJKOW1
mmqfXOKoman/KUMI+zusrs5FcHmggSvSvSQI7dQ+crjh1chOEELe3RV9OoZ2/gKg
YG9vsomwWdX3pqX0uYV9+iloYTYsyxxM2vG3rTKbsc309A9wCKUE4udQMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLGa/xZfPKdMY+YDkzo0kpEyVuDZMB8GA1UdIwQY
MBaAFJySqlPTKQqoA3mTUzXbn8w//SmqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkpLcVU5TXBDcWdEZVpOVE5kdWZ6RF85S2FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9lYWE0ZDAtOGQxZC00Y2MxLThiMjIt
NDUwMzk1ZmI4OGZhLzEvbkpLcVU5TXBDcWdEZVpOVE5kdWZ6RF85S2FvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9lYWE0ZDAtOGQxZC00Y2MxLThiMjItNDUwMzk1ZmI4OGZh
LzEvbkpLcVU5TXBDcWdEZVpOVE5kdWZ6RF85S2FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAECahkIea
2NcXkbRPs601O4LJniZTIPcn9jg913T3sIahU0DKJq3wKIbdviz/bNj7QQc1YMO/
FAYenZqFxIYTMrOEeu1UbXWoFOBOLy660ckqbHNsasJUNABzIpRBV7hXlrzBkOaL
URga8p0+bifn2j+81CJFdCXW0CQp0FsmKcT5kotdDB28xK0uqPYw4cLaQLYZlqx3
vFp+FQL6mwvVqebmH0QoBH5fVUtoYHQCXY/yN2eCkSzYhYydOE6JWj4J++kJswhT
11slXM9pZRHNJOiPA1gXV9LKEMChEEVgOc2pr7XSZDQJnXxDr859LSrG3mmgoOTm
8faCp76+S2NgHg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:27:39 2025 by rpki-client