Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
File: UJSiarpxAHYh_VmdU3u3rqreizM.mft (raw, json)
Hash identifier: 1IsB6+YYjwuAyvE/fZjkYYkSkwzQD9aoK4gvzMuknSg=
Subject key identifier: 26:92:C7:A2:90:C5:4C:2D:AA:6D:74:3E:39:6A:9E:0A:BA:2D:C6:ED
Authority key identifier: 50:94:A2:6A:BA:71:00:76:21:FD:59:9D:53:7B:B7:AE:AA:DE:8B:33
Certificate issuer: /CN=5094a26aba71007621fd599d537bb7aeaade8b33
Certificate serial: 019A4FD09A77C94BDCB956320EC657B00528
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 17:01:02 +0000
Manifest this update: Tue 04 Nov 2025 17:01:02 +0000
Manifest next update: Wed 05 Nov 2025 17:01:02 +0000
Files and hashes: 1: PYLR3kfr_0El_Ga2E9JeZcCyCVc.roa (hash: A0449RCi6B29H8zKA0rMM/NDvKNi2c+elOaTXG6BpHk=)
2: UJSiarpxAHYh_VmdU3u3rqreizM.crl (hash: Z6NewMvFGtZNtJq4w71fCAI2CeFksJAsC2GOS54TlFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:9a:77:c9:4b:dc:b9:56:32:0e:c6:57:b0:05:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5094a26aba71007621fd599d537bb7aeaade8b33
Validity
Not Before: Nov 4 17:01:02 2025 GMT
Not After : Nov 5 17:01:02 2025 GMT
Subject: CN=2692c7a290c54c2daa6d743e396a9e0aba2dc6ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:34:1d:11:f8:04:6a:86:89:01:9d:7c:53:99:
a3:0c:1f:0a:2b:27:a2:0f:f6:cb:65:87:ab:e1:4e:
98:69:c5:78:77:ee:92:a1:ae:d9:ac:af:3f:0e:ea:
bf:5c:9e:6a:c6:73:26:d6:8a:71:6f:62:6b:83:45:
95:cb:19:25:b9:2f:e2:35:f6:e3:36:ac:3d:4f:12:
29:36:ea:5a:8c:25:25:3c:7f:4e:dd:90:90:9d:8d:
aa:0b:dc:bb:b7:ff:9a:b5:e3:e8:2a:fe:f3:ab:8d:
f8:55:67:51:6c:9b:29:ed:f8:6a:7a:8d:6c:cd:6b:
72:25:4f:44:36:d2:c7:36:e1:e8:79:3b:e5:94:dc:
db:97:46:28:c1:7e:03:a8:05:70:95:63:21:73:c9:
cc:b0:42:3f:53:ab:7d:81:a1:1f:d8:d3:5a:5f:0a:
86:0f:88:45:24:8e:a3:ff:08:cb:50:1f:d1:d1:1e:
28:84:d6:bf:16:ce:67:cd:25:71:40:70:d4:77:df:
65:ce:82:2c:32:2b:56:c2:c7:94:ca:19:28:6e:e0:
28:f3:a4:1c:33:9b:4a:72:6d:3b:e2:d2:af:5f:e3:
be:21:67:62:5e:a5:03:ad:40:90:a5:ff:b2:8a:9f:
2a:1a:60:16:95:c3:1e:26:c8:92:90:8d:7c:75:1a:
18:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:92:C7:A2:90:C5:4C:2D:AA:6D:74:3E:39:6A:9E:0A:BA:2D:C6:ED
X509v3 Authority Key Identifier:
keyid:50:94:A2:6A:BA:71:00:76:21:FD:59:9D:53:7B:B7:AE:AA:DE:8B:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:b9:ce:b9:25:98:e8:1c:47:6d:cf:3d:c5:0a:32:44:72:e5:
2a:f3:58:25:2c:95:3b:43:f8:8f:d9:f5:17:29:72:17:cc:f9:
21:28:f1:2e:7c:de:8c:04:f2:db:25:32:ba:ff:40:41:8c:9d:
ff:18:ca:d6:1f:a0:61:38:2c:73:74:6b:d0:8d:33:ec:cd:fe:
fd:cd:b7:eb:9b:49:93:4d:20:39:9c:30:18:e5:e0:b8:25:14:
f4:8f:30:7e:65:63:61:33:2e:1c:d8:41:4e:9e:e8:17:a6:3a:
41:2d:8f:c8:a3:5c:da:f9:f1:62:cc:8f:a4:4f:61:7f:1b:09:
06:10:5e:db:1e:7b:ff:b0:5b:3f:58:90:60:79:44:36:2b:4b:
7f:a4:a2:05:89:6d:61:21:ec:9d:d9:d3:14:05:1b:df:b2:08:
e8:6d:f2:a6:eb:ae:48:14:0e:ad:6f:e1:96:93:98:33:e0:9c:
a4:73:2a:0e:18:45:a0:be:e3:2f:de:5b:78:86:48:23:95:05:
7e:8f:55:c8:32:b6:f8:e9:7c:13:a1:c9:55:79:26:1b:49:b0:
74:66:96:b6:5f:aa:e0:9e:60:84:b7:e4:d9:82:90:f9:d2:64:
99:8a:6c:fd:e7:46:0b:9f:06:4f:1c:59:e7:8f:c0:8f:77:66:
70:07:bc:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpP0Jp3yUvcuVYyDsZXsAUoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwOTRhMjZhYmE3MTAwNzYyMWZkNTk5ZDUzN2JiN2FlYWFk
ZThiMzMwHhcNMjUxMTA0MTcwMTAyWhcNMjUxMTA1MTcwMTAyWjAzMTEwLwYDVQQD
EygyNjkyYzdhMjkwYzU0YzJkYWE2ZDc0M2UzOTZhOWUwYWJhMmRjNmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojQdEfgEaoaJAZ18U5mjDB8KKyei
D/bLZYer4U6YacV4d+6Soa7ZrK8/Duq/XJ5qxnMm1opxb2Jrg0WVyxkluS/iNfbj
Nqw9TxIpNupajCUlPH9O3ZCQnY2qC9y7t/+atePoKv7zq434VWdRbJsp7fhqeo1s
zWtyJU9ENtLHNuHoeTvllNzbl0YowX4DqAVwlWMhc8nMsEI/U6t9gaEf2NNaXwqG
D4hFJI6j/wjLUB/R0R4ohNa/Fs5nzSVxQHDUd99lzoIsMitWwseUyhkobuAo86Qc
M5tKcm074tKvX+O+IWdiXqUDrUCQpf+yip8qGmAWlcMeJsiSkI18dRoYvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCaSx6KQxUwtqm10Pjlqngq6LcbtMB8GA1UdIwQY
MBaAFFCUomq6cQB2If1ZnVN7t66q3oszMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUpTaWFycHhBSFloX1ZtZFUzdTNycXJlaXpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85ZmNlNzgtNGY5ZC00ODQ3LWI3NTkt
YjQ1MWU0NzdiOWMyLzEvVUpTaWFycHhBSFloX1ZtZFUzdTNycXJlaXpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS85ZmNlNzgtNGY5ZC00ODQ3LWI3NTktYjQ1MWU0NzdiOWMy
LzEvVUpTaWFycHhBSFloX1ZtZFUzdTNycXJlaXpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABLnOuSWY
6BxHbc89xQoyRHLlKvNYJSyVO0P4j9n1FylyF8z5ISjxLnzejATy2yUyuv9AQYyd
/xjK1h+gYTgsc3Rr0I0z7M3+/c2365tJk00gOZwwGOXguCUU9I8wfmVjYTMuHNhB
Tp7oF6Y6QS2PyKNc2vnxYsyPpE9hfxsJBhBe2x57/7BbP1iQYHlENitLf6SiBYlt
YSHsndnTFAUb37II6G3ypuuuSBQOrW/hlpOYM+CcpHMqDhhFoL7jL95beIZII5UF
fo9VyDK2+Ol8E6HJVXkmG0mwdGaWtl+q4J5ghLfk2YKQ+dJkmYps/edGC58GTxxZ
54/Aj3dmcAe83A==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:48:58 2025 by rpki-client