Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft
File: F9uL3_IuGjew9KaVNCS2UWmwNCk.mft (raw, json)
Hash identifier: S2TOcOOuBnLcNdw4Od0D3WrDzIMzBT/gwBc4jAZ74IE=
Subject key identifier: D2:88:D3:4F:20:A6:49:6B:9F:AB:CA:B4:E6:03:6E:8C:F0:29:53:AA
Authority key identifier: 17:DB:8B:DF:F2:2E:1A:37:B0:F4:A6:95:34:24:B6:51:69:B0:34:29
Certificate issuer: /CN=17db8bdff22e1a37b0f4a6953424b65169b03429
Certificate serial: 019A4F9925669786B386B1045F5C8038DBCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9uL3_IuGjew9KaVNCS2UWmwNCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft
Manifest number: 0E1A
Signing time: Tue 04 Nov 2025 16:00:27 +0000
Manifest this update: Tue 04 Nov 2025 16:00:27 +0000
Manifest next update: Wed 05 Nov 2025 16:00:27 +0000
Files and hashes: 1: F9uL3_IuGjew9KaVNCS2UWmwNCk.crl (hash: sid0ymsilps2L4dGAZ/Te1nc1qRHZkjx0DHkbbVJCp0=)
2: KNcCODBaDX2MFgjxBHddnmeDs1w.roa (hash: v5RHpNNKwnL8+b9d7xhZwKkWy+NYX2Itp+tps9r7KV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9uL3_IuGjew9KaVNCS2UWmwNCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:25:66:97:86:b3:86:b1:04:5f:5c:80:38:db:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17db8bdff22e1a37b0f4a6953424b65169b03429
Validity
Not Before: Nov 4 16:00:27 2025 GMT
Not After : Nov 5 16:00:27 2025 GMT
Subject: CN=d288d34f20a6496b9fabcab4e6036e8cf02953aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8f:a7:8c:2f:93:c8:04:fa:da:8b:9c:31:8a:
85:ce:1b:96:9d:53:15:56:9d:68:49:e7:7f:11:3a:
13:2e:ad:76:e0:d6:eb:f8:e4:b7:ac:a7:2a:2e:4a:
3f:6f:6f:d2:ef:40:97:c0:44:03:45:fa:11:c5:de:
d7:7b:9a:12:6e:34:f5:7c:a5:f5:41:e2:e2:c0:d4:
24:3c:49:70:26:f8:75:65:91:07:30:00:78:af:e6:
b4:f3:a8:a8:70:9a:8c:81:fc:7a:a8:5e:1b:cb:91:
c8:a7:4a:37:4d:18:2b:74:9d:c1:d5:f2:bd:74:f1:
d7:5f:8e:45:e7:a5:57:61:fb:05:50:9c:ba:a5:28:
87:1d:c2:e6:44:f4:66:e2:7a:62:17:f2:f8:7f:c0:
db:df:e4:74:33:cd:bf:df:66:84:0b:d3:41:6b:94:
4c:36:86:e8:7b:3e:53:b0:be:69:85:e3:b0:ce:ca:
47:7c:c9:ef:dc:d4:05:1d:1d:a3:da:6c:63:3b:05:
17:e5:d3:2e:c2:ca:ca:b6:ea:f7:33:40:98:30:21:
04:a2:8c:ca:26:70:f9:7a:a8:35:d2:02:3c:1b:08:
d3:46:c4:8f:54:ce:46:82:ae:f6:58:e9:59:e7:82:
af:83:e6:93:67:4f:f0:9a:fa:49:54:72:07:3e:b4:
40:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:88:D3:4F:20:A6:49:6B:9F:AB:CA:B4:E6:03:6E:8C:F0:29:53:AA
X509v3 Authority Key Identifier:
keyid:17:DB:8B:DF:F2:2E:1A:37:B0:F4:A6:95:34:24:B6:51:69:B0:34:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9uL3_IuGjew9KaVNCS2UWmwNCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:3e:1c:32:10:20:80:28:29:b2:8a:2e:f8:59:95:c3:ed:f1:
1e:ec:d5:64:05:e5:8c:22:d0:34:4c:bd:d2:5d:7e:0a:2c:b6:
12:08:14:85:1c:d9:e2:0f:86:7a:78:d0:98:ae:fa:8e:73:82:
fa:8b:a6:97:9a:d2:74:5e:eb:d9:18:88:4c:49:cb:85:f5:a3:
89:8a:da:4d:4d:28:cc:06:6d:e9:69:7a:44:d9:a9:a6:85:a5:
c5:a6:55:c9:f8:06:46:2d:0d:49:cc:ed:53:65:5a:fa:eb:06:
8d:45:9f:1c:79:70:3e:66:48:a5:c4:d7:6b:6a:38:5f:28:32:
61:ad:cd:6c:29:20:4f:0a:51:77:57:6b:99:2a:bc:16:e3:fe:
aa:3e:15:1e:df:80:b5:a5:b5:52:6b:49:7c:2f:36:3a:2f:8c:
c0:1a:04:95:35:4d:31:02:c7:fe:04:fb:33:3e:4f:be:77:66:
2f:c8:e0:e0:01:b0:9a:14:17:20:15:83:69:06:e1:c3:3f:76:
e5:02:62:6e:6b:c4:2f:27:06:1b:81:59:d5:a5:d6:bc:65:c2:
b9:f5:8c:d0:c1:2b:e0:fa:d5:df:1a:70:c4:8e:03:a0:df:1e:
2a:3d:12:a6:b2:61:4d:2f:7c:5e:66:b0:be:8b:a0:51:7c:18:
21:c7:27:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmSVml4azhrEEX1yAONvMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZGI4YmRmZjIyZTFhMzdiMGY0YTY5NTM0MjRiNjUxNjli
MDM0MjkwHhcNMjUxMTA0MTYwMDI3WhcNMjUxMTA1MTYwMDI3WjAzMTEwLwYDVQQD
EyhkMjg4ZDM0ZjIwYTY0OTZiOWZhYmNhYjRlNjAzNmU4Y2YwMjk1M2FhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApY+njC+TyAT62oucMYqFzhuWnVMV
Vp1oSed/EToTLq124Nbr+OS3rKcqLko/b2/S70CXwEQDRfoRxd7Xe5oSbjT1fKX1
QeLiwNQkPElwJvh1ZZEHMAB4r+a086iocJqMgfx6qF4by5HIp0o3TRgrdJ3B1fK9
dPHXX45F56VXYfsFUJy6pSiHHcLmRPRm4npiF/L4f8Db3+R0M82/32aEC9NBa5RM
Noboez5TsL5pheOwzspHfMnv3NQFHR2j2mxjOwUX5dMuwsrKtur3M0CYMCEEoozK
JnD5eqg10gI8GwjTRsSPVM5Ggq72WOlZ54Kvg+aTZ0/wmvpJVHIHPrRAXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNKI008gpklrn6vKtOYDbozwKVOqMB8GA1UdIwQY
MBaAFBfbi9/yLho3sPSmlTQktlFpsDQpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjl1TDNfSXVHamV3OUthVk5DUzJVV213TkNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi81YTNlMDgtZWQ0MS00ZDBlLWE2ZTAt
MzI3MDJkYmQ0YmM3LzEvRjl1TDNfSXVHamV3OUthVk5DUzJVV213TkNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi81YTNlMDgtZWQ0MS00ZDBlLWE2ZTAtMzI3MDJkYmQ0YmM3
LzEvRjl1TDNfSXVHamV3OUthVk5DUzJVV213TkNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATD4cMhAg
gCgpsoou+FmVw+3xHuzVZAXljCLQNEy90l1+Ciy2EggUhRzZ4g+GenjQmK76jnOC
+ouml5rSdF7r2RiITEnLhfWjiYraTU0ozAZt6Wl6RNmppoWlxaZVyfgGRi0NSczt
U2Va+usGjUWfHHlwPmZIpcTXa2o4XygyYa3NbCkgTwpRd1drmSq8FuP+qj4VHt+A
taW1UmtJfC82Oi+MwBoElTVNMQLH/gT7Mz5PvndmL8jg4AGwmhQXIBWDaQbhwz92
5QJibmvELycGG4FZ1aXWvGXCufWM0MEr4PrV3xpwxI4DoN8eKj0SprJhTS98Xmaw
vougUXwYIccnvw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:31:28 2025 by rpki-client