Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
File: 3A4bkNUSzDQC92FBQGKXleTUrEw.mft (raw, json)
Hash identifier: gy7YxFhetxLzdc2o2qJT6A5fNB/KeRG+fsLiXZsoTt4=
Subject key identifier: 44:C2:18:92:C1:E2:E8:E2:8C:58:E1:33:44:23:86:07:51:53:48:8C
Authority key identifier: DC:0E:1B:90:D5:12:CC:34:02:F7:61:41:40:62:97:95:E4:D4:AC:4C
Certificate issuer: /CN=dc0e1b90d512cc3402f7614140629795e4d4ac4c
Certificate serial: 019A518778157B90C53D3975BE3EC7B7A216
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
Manifest number: 1220
Signing time: Wed 05 Nov 2025 01:00:23 +0000
Manifest this update: Wed 05 Nov 2025 01:00:23 +0000
Manifest next update: Thu 06 Nov 2025 01:00:23 +0000
Files and hashes: 1: 3A4bkNUSzDQC92FBQGKXleTUrEw.crl (hash: GkoWSRChUGmUSSg6ZXSY/TAFiOwv8nbEAPacY5zw3ks=)
2: ruyaJPOfuuheWzXgHxMIwRIiRmI.roa (hash: dOziRNC4DuCftQxbewVCKgY2HoDJCSSxS8NFyfVWRc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:78:15:7b:90:c5:3d:39:75:be:3e:c7:b7:a2:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0e1b90d512cc3402f7614140629795e4d4ac4c
Validity
Not Before: Nov 5 01:00:23 2025 GMT
Not After : Nov 6 01:00:23 2025 GMT
Subject: CN=44c21892c1e2e8e28c58e133442386075153488c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:fc:73:2f:04:fc:39:d8:51:61:0b:f3:29:db:
66:03:40:f4:b0:3d:d7:6c:5c:e6:c1:d8:01:bf:ea:
66:31:7a:70:8f:52:fd:c9:bf:ec:3f:65:61:80:5b:
91:b6:6e:44:88:c3:1d:d4:84:64:77:17:72:88:1a:
72:e1:23:d8:01:d1:a2:26:df:89:44:ba:fc:fc:a7:
b2:cd:cb:1d:78:a0:9d:31:d4:11:ea:1b:bd:64:8f:
c8:54:8f:c3:51:c2:1c:39:58:04:39:b0:c0:68:b6:
95:11:7f:94:fe:c0:fd:36:19:f5:70:bc:3f:79:16:
25:ca:58:c1:18:7b:2d:97:3c:5b:76:4e:20:81:e8:
82:86:10:c5:e4:9f:c2:f3:a4:d1:ed:21:c7:b4:f9:
25:78:37:5d:25:cd:f0:df:a7:40:2a:2d:5f:2b:17:
c9:c6:8d:55:63:a2:98:d4:ad:f9:a5:17:cc:a0:6a:
fc:b5:22:89:e0:41:52:a8:6b:f8:c2:87:42:4c:8d:
86:ae:83:8f:65:b0:d9:0b:81:52:31:40:de:66:70:
4b:7b:b9:8b:1e:db:fe:e7:ee:0b:f5:5d:1b:af:ee:
63:c6:17:f9:98:60:55:e4:55:65:3d:51:69:39:3d:
ff:42:e7:88:1f:21:8a:8f:40:64:2f:31:28:43:00:
0e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C2:18:92:C1:E2:E8:E2:8C:58:E1:33:44:23:86:07:51:53:48:8C
X509v3 Authority Key Identifier:
keyid:DC:0E:1B:90:D5:12:CC:34:02:F7:61:41:40:62:97:95:E4:D4:AC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:06:60:8f:69:0e:7f:ea:99:ce:cc:62:ac:be:16:c0:a0:46:
ec:6d:16:70:50:59:96:ed:38:9f:46:a6:e3:d8:4b:cd:4d:57:
da:5b:4c:db:78:56:c9:82:27:f9:c6:7b:3c:2e:1a:c2:9c:84:
7c:da:94:4e:67:bb:e3:3f:eb:7f:9d:e2:1c:90:1c:5a:38:7a:
c6:f2:a5:d6:8a:67:9c:e3:f8:c1:1f:d6:a7:93:1b:3d:6f:91:
03:60:81:6c:8a:e1:e4:0d:18:e6:1e:d2:c8:2d:ae:51:51:0e:
f7:a0:7c:ad:90:42:f1:23:2f:68:4b:d0:f7:02:61:e3:46:08:
5f:c8:f0:03:f8:32:83:fb:b9:76:05:c6:c3:8c:5f:ba:52:14:
77:39:2a:82:12:40:fb:44:42:5d:b8:e2:50:7c:ef:1e:80:3b:
2b:30:cb:a7:e1:0e:ff:8d:03:65:5c:a4:c8:60:26:16:4b:8e:
7c:90:bf:9a:30:2e:82:f9:1e:9b:b7:37:8d:0f:b6:00:65:d3:
22:9e:bb:0a:16:17:71:74:f8:9b:3e:4f:e4:95:01:86:99:82:
11:9a:df:1b:39:7e:cc:8f:5a:0c:61:ee:f9:f9:10:0b:c4:d8:
75:b2:c7:86:1c:eb:36:32:e8:10:e6:d4:fa:36:cd:d0:55:cd:
e2:30:9e:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRh3gVe5DFPTl1vj7Ht6IWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMGUxYjkwZDUxMmNjMzQwMmY3NjE0MTQwNjI5Nzk1ZTRk
NGFjNGMwHhcNMjUxMTA1MDEwMDIzWhcNMjUxMTA2MDEwMDIzWjAzMTEwLwYDVQQD
Eyg0NGMyMTg5MmMxZTJlOGUyOGM1OGUxMzM0NDIzODYwNzUxNTM0ODhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6PxzLwT8OdhRYQvzKdtmA0D0sD3X
bFzmwdgBv+pmMXpwj1L9yb/sP2VhgFuRtm5EiMMd1IRkdxdyiBpy4SPYAdGiJt+J
RLr8/KeyzcsdeKCdMdQR6hu9ZI/IVI/DUcIcOVgEObDAaLaVEX+U/sD9Nhn1cLw/
eRYlyljBGHstlzxbdk4ggeiChhDF5J/C86TR7SHHtPkleDddJc3w36dAKi1fKxfJ
xo1VY6KY1K35pRfMoGr8tSKJ4EFSqGv4wodCTI2GroOPZbDZC4FSMUDeZnBLe7mL
Htv+5+4L9V0br+5jxhf5mGBV5FVlPVFpOT3/QueIHyGKj0BkLzEoQwAOxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFETCGJLB4ujijFjhM0QjhgdRU0iMMB8GA1UdIwQY
MBaAFNwOG5DVEsw0AvdhQUBil5Xk1KxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0E0YmtOVVN6RFFDOTJGQlFHS1hsZVRVckV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85YTIzMTQtMjMxMC00M2RkLWE3NjYt
MTZmNTJjZWE0ZWIxLzEvM0E0YmtOVVN6RFFDOTJGQlFHS1hsZVRVckV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi85YTIzMTQtMjMxMC00M2RkLWE3NjYtMTZmNTJjZWE0ZWIx
LzEvM0E0YmtOVVN6RFFDOTJGQlFHS1hsZVRVckV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJgZgj2kO
f+qZzsxirL4WwKBG7G0WcFBZlu04n0am49hLzU1X2ltM23hWyYIn+cZ7PC4awpyE
fNqUTme74z/rf53iHJAcWjh6xvKl1opnnOP4wR/Wp5MbPW+RA2CBbIrh5A0Y5h7S
yC2uUVEO96B8rZBC8SMvaEvQ9wJh40YIX8jwA/gyg/u5dgXGw4xfulIUdzkqghJA
+0RCXbjiUHzvHoA7KzDLp+EO/40DZVykyGAmFkuOfJC/mjAugvkem7c3jQ+2AGXT
Ip67ChYXcXT4mz5P5JUBhpmCEZrfGzl+zI9aDGHu+fkQC8TYdbLHhhzrNjLoEObU
+jbN0FXN4jCe5A==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:35:57 2025 by rpki-client