
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.mft
File: RgeLLcCGzllV5i25IvNUuC0TzVs.mft (raw, json)
Hash identifier: qeAKBaf7uV9ZX2JJvUNQRfg9y4VsYvubmZO3X1FYQfI=
Subject key identifier: DE:3D:93:D5:AA:18:87:FF:24:BA:DA:8B:09:BD:98:77:73:A1:0A:A3
Authority key identifier: 46:07:8B:2D:C0:86:CE:59:55:E6:2D:B9:22:F3:54:B8:2D:13:CD:5B
Certificate issuer: /CN=46078b2dc086ce5955e62db922f354b82d13cd5b
Certificate serial: 019A5150E1E359627AD4F3214B3750B7A6D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RgeLLcCGzllV5i25IvNUuC0TzVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.mft
Manifest number: 170E
Signing time: Wed 05 Nov 2025 00:00:46 +0000
Manifest this update: Wed 05 Nov 2025 00:00:46 +0000
Manifest next update: Thu 06 Nov 2025 00:00:46 +0000
Files and hashes: 1: RgeLLcCGzllV5i25IvNUuC0TzVs.crl (hash: aV1c3A3SBMsFqI9LHWf1aJ8zyozQkBcg4Yd3He61gBU=)
2: tev87foGLf9TpZQHMwDHXLYnBL4.roa (hash: jHI7Ehm4mIeH8EgzDR4OOBosKPRgVoLZvuWOXFcKqHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RgeLLcCGzllV5i25IvNUuC0TzVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 00:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:e1:e3:59:62:7a:d4:f3:21:4b:37:50:b7:a6:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46078b2dc086ce5955e62db922f354b82d13cd5b
Validity
Not Before: Nov 5 00:00:46 2025 GMT
Not After : Nov 6 00:00:46 2025 GMT
Subject: CN=de3d93d5aa1887ff24bada8b09bd987773a10aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:33:26:d2:4c:f6:59:3d:74:3f:33:e7:19:0d:
31:55:65:c8:f1:d1:2b:f9:82:b2:82:02:35:90:a9:
60:6f:71:72:f8:8c:bb:5a:db:80:40:2b:6c:c5:18:
c1:7a:73:40:ed:5d:2a:85:cd:38:05:a8:06:57:e6:
1d:df:f0:56:ee:83:8d:7c:a5:9e:3f:a8:15:80:de:
5f:65:13:4b:36:ed:e5:d1:61:22:27:29:aa:32:af:
69:77:0b:c3:33:18:f4:95:ab:68:13:f7:3f:15:8b:
92:39:ec:af:30:1e:9a:1a:07:17:c4:9a:ed:36:64:
0a:27:6d:a5:5d:6b:1f:8b:d9:3e:a7:fd:dd:f3:0a:
c9:2e:50:9d:ba:bc:85:61:ca:7f:d6:ac:8b:95:a2:
c5:45:69:e5:cc:ed:4b:55:fa:75:ea:a1:c9:98:e2:
2a:df:42:50:67:c9:3f:dd:9e:b1:d4:af:28:e2:be:
23:37:26:0f:4c:53:6a:f2:69:87:44:8b:41:15:d5:
55:3a:58:39:b9:ed:78:c4:9c:c2:b9:aa:11:f3:7a:
ba:91:e7:5f:52:9e:d3:54:0c:47:fc:ef:88:d9:1a:
fb:58:b4:b0:cf:f8:5b:ce:79:a9:ab:65:2b:de:2d:
a0:fb:25:b0:d6:f3:6e:81:aa:c7:28:c4:68:6c:63:
59:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:3D:93:D5:AA:18:87:FF:24:BA:DA:8B:09:BD:98:77:73:A1:0A:A3
X509v3 Authority Key Identifier:
keyid:46:07:8B:2D:C0:86:CE:59:55:E6:2D:B9:22:F3:54:B8:2D:13:CD:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgeLLcCGzllV5i25IvNUuC0TzVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:f6:b5:e3:60:13:f6:8d:57:14:c0:63:b4:d4:d4:b5:20:a7:
93:4a:ac:26:f3:b1:7d:ce:a9:45:c8:59:0b:5a:af:52:66:c3:
71:f7:25:61:78:df:6e:50:9b:e3:fa:35:22:09:c5:c3:df:0c:
9e:bf:b4:76:f7:d1:ac:6a:44:e9:4f:43:30:24:2c:68:20:5e:
bc:65:92:55:59:ad:e2:52:da:bd:31:26:8b:a8:d4:10:f3:3d:
79:83:71:18:a8:3b:10:9b:cb:d5:d9:13:9a:f8:5e:f1:11:d3:
c9:93:f6:ae:26:76:47:c9:ca:c3:ab:8f:e7:10:7e:aa:7f:04:
5e:40:4b:59:62:d7:56:fa:77:33:48:c8:34:2a:06:75:36:bf:
01:20:27:a9:dc:b0:79:99:6f:0f:0f:c2:b1:6c:b2:f6:40:c3:
f6:2b:a0:63:de:df:24:77:3a:8b:e2:1d:cb:e6:41:c7:03:3b:
c4:cc:27:2b:04:fa:28:df:03:70:fc:71:28:85:e5:6f:86:6d:
dd:ea:ac:4c:64:b1:fb:1f:bb:98:9e:f3:40:5b:57:83:6d:d6:
8d:71:fc:e2:e3:6a:fa:5a:86:9e:3c:67:6b:68:a0:7a:b2:ca:
3b:99:c0:9d:a3:eb:9a:b1:67:de:e7:17:49:d8:fe:9c:ec:d6:
ad:21:e7:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRUOHjWWJ61PMhSzdQt6bZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MDc4YjJkYzA4NmNlNTk1NWU2MmRiOTIyZjM1NGI4MmQx
M2NkNWIwHhcNMjUxMTA1MDAwMDQ2WhcNMjUxMTA2MDAwMDQ2WjAzMTEwLwYDVQQD
EyhkZTNkOTNkNWFhMTg4N2ZmMjRiYWRhOGIwOWJkOTg3NzczYTEwYWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjMm0kz2WT10PzPnGQ0xVWXI8dEr
+YKyggI1kKlgb3Fy+Iy7WtuAQCtsxRjBenNA7V0qhc04BagGV+Yd3/BW7oONfKWe
P6gVgN5fZRNLNu3l0WEiJymqMq9pdwvDMxj0latoE/c/FYuSOeyvMB6aGgcXxJrt
NmQKJ22lXWsfi9k+p/3d8wrJLlCduryFYcp/1qyLlaLFRWnlzO1LVfp16qHJmOIq
30JQZ8k/3Z6x1K8o4r4jNyYPTFNq8mmHRItBFdVVOlg5ue14xJzCuaoR83q6kedf
Up7TVAxH/O+I2Rr7WLSwz/hbznmpq2Ur3i2g+yWw1vNugarHKMRobGNZMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN49k9WqGIf/JLraiwm9mHdzoQqjMB8GA1UdIwQY
MBaAFEYHiy3Ahs5ZVeYtuSLzVLgtE81bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmdlTExjQ0d6bGxWNWkyNUl2TlV1QzBUelZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS85ZmY4YTEtMzY0Ny00MTM0LWIxNWYt
ZTVkZDYzODJhMWM3LzEvUmdlTExjQ0d6bGxWNWkyNUl2TlV1QzBUelZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS85ZmY4YTEtMzY0Ny00MTM0LWIxNWYtZTVkZDYzODJhMWM3
LzEvUmdlTExjQ0d6bGxWNWkyNUl2TlV1QzBUelZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlPa142AT
9o1XFMBjtNTUtSCnk0qsJvOxfc6pRchZC1qvUmbDcfclYXjfblCb4/o1IgnFw98M
nr+0dvfRrGpE6U9DMCQsaCBevGWSVVmt4lLavTEmi6jUEPM9eYNxGKg7EJvL1dkT
mvhe8RHTyZP2riZ2R8nKw6uP5xB+qn8EXkBLWWLXVvp3M0jINCoGdTa/ASAnqdyw
eZlvDw/CsWyy9kDD9iugY97fJHc6i+Idy+ZBxwM7xMwnKwT6KN8DcPxxKIXlb4Zt
3eqsTGSx+x+7mJ7zQFtXg23WjXH84uNq+lqGnjxna2igerLKO5nAnaPrmrFn3ucX
Sdj+nOzWrSHnnQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:00:10 2025 by rpki-client