Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
File: pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft (raw, json)
Hash identifier: VKIKWpcVTL1mSWohBX5kMzIxmHC5cyFsA9M0712U0LE=
Subject key identifier: 9E:9C:60:BA:47:35:12:D6:CB:2A:6C:27:69:29:B9:F7:23:6F:F2:D2
Authority key identifier: A4:08:FC:92:46:04:27:51:11:0D:2E:C5:06:5D:0C:47:D1:D4:3C:D0
Certificate issuer: /CN=a408fc9246042751110d2ec5065d0c47d1d43cd0
Certificate serial: 019A4E4F9961EACFD869B0AE4B45CCA5EBC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
Manifest number: 0C8F
Signing time: Tue 04 Nov 2025 10:00:30 +0000
Manifest this update: Tue 04 Nov 2025 10:00:30 +0000
Manifest next update: Wed 05 Nov 2025 10:00:30 +0000
Files and hashes: 1: E8EItKN2__9iKd7VUUHBehRVQCo.roa (hash: mIn23TrAWNsxopm3nGDSwuz19rtPaaB79Dzo0Qrhuqk=)
2: pAj8kkYEJ1ERDS7FBl0MR9HUPNA.crl (hash: nJbSwRMDj4JOpOdRwuAWDhjVHz/f1ZSX/oSnxGCepEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:99:61:ea:cf:d8:69:b0:ae:4b:45:cc:a5:eb:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a408fc9246042751110d2ec5065d0c47d1d43cd0
Validity
Not Before: Nov 4 10:00:30 2025 GMT
Not After : Nov 5 10:00:30 2025 GMT
Subject: CN=9e9c60ba473512d6cb2a6c276929b9f7236ff2d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5a:09:3e:39:4b:3c:32:8e:fd:40:4e:9f:9d:
32:94:8e:db:2f:2c:8a:d6:16:30:d4:6b:8e:2e:7a:
51:63:90:07:68:81:ac:e5:d7:9f:b0:12:69:b6:c4:
73:8b:55:3b:a4:d6:b6:62:73:61:36:c8:b5:c3:91:
80:8d:8e:1b:e0:59:09:f4:94:66:ee:dc:6a:43:81:
d7:49:c3:6e:28:d6:b2:4e:90:93:f9:a5:a2:75:1f:
9c:c2:46:74:e3:62:7f:d4:ff:7c:ed:20:04:3b:71:
2b:1c:9b:b2:47:d6:2f:ee:67:53:f9:a5:82:a8:e9:
7a:35:0f:14:f2:1a:9e:a5:bb:c9:c2:c2:a9:ba:6e:
59:a9:bd:c6:21:81:6b:b6:02:af:08:d6:38:73:fb:
a0:dc:6a:a4:c2:0c:03:c2:cd:73:5a:2d:9d:3a:80:
c1:c7:89:28:69:3a:61:b1:cc:96:b7:92:91:c2:5b:
3b:03:72:64:74:d1:5c:46:ec:4d:9a:ab:3a:8e:69:
d9:f0:7b:32:b1:22:c8:02:26:21:7a:a6:82:6d:4f:
c7:95:b1:2e:7c:d7:a6:40:95:09:2c:dd:0f:2d:86:
3d:a2:aa:4f:72:ce:fa:f2:0a:5e:4a:98:9b:b0:fb:
bf:8e:43:53:59:1f:57:41:28:2d:e4:07:f5:c4:b9:
e6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:9C:60:BA:47:35:12:D6:CB:2A:6C:27:69:29:B9:F7:23:6F:F2:D2
X509v3 Authority Key Identifier:
keyid:A4:08:FC:92:46:04:27:51:11:0D:2E:C5:06:5D:0C:47:D1:D4:3C:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:09:02:dc:98:f2:05:c4:88:9e:c1:02:ad:e4:b3:3d:77:67:
a2:50:73:b6:be:a5:a5:ec:c0:14:8c:b7:32:6e:ef:8a:f4:6f:
cb:48:48:bd:f6:90:ab:dc:86:99:25:3c:c5:d1:eb:75:75:4e:
66:2b:0a:fd:b2:1f:0c:f4:05:3d:cd:5e:87:04:05:83:13:1f:
69:1d:fc:8b:c6:b4:7b:83:67:62:06:64:f1:db:15:52:b2:a5:
cc:9e:83:83:9c:aa:12:d9:f0:dc:e7:ae:b1:2a:b3:18:df:59:
94:9d:0d:d1:3e:39:eb:7f:99:3f:db:38:2d:c7:19:6a:b8:13:
f6:12:6c:8b:46:75:d9:f6:c1:6c:c8:ab:70:03:87:3a:ad:24:
a4:95:ae:d9:ec:18:cf:e3:44:20:fc:5a:f5:fd:a9:28:c0:e8:
d6:91:f3:e9:e4:fe:dc:83:f9:24:91:ba:b2:f1:f8:37:fa:81:
1e:fc:1e:2f:f3:44:1f:73:ca:ed:f6:a7:a2:4a:85:1b:82:7c:
a7:e1:4c:52:fa:33:f9:ed:e8:d9:73:c8:b1:03:76:a4:3d:a2:
c9:db:33:d2:f0:22:cb:97:73:85:8c:a8:87:48:9c:bf:1a:90:
27:fb:51:ba:1c:9b:85:b4:e1:fe:1d:7a:f4:47:79:78:80:a5:
70:09:83:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT5lh6s/YabCuS0XMpevEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MDhmYzkyNDYwNDI3NTExMTBkMmVjNTA2NWQwYzQ3ZDFk
NDNjZDAwHhcNMjUxMTA0MTAwMDMwWhcNMjUxMTA1MTAwMDMwWjAzMTEwLwYDVQQD
Eyg5ZTljNjBiYTQ3MzUxMmQ2Y2IyYTZjMjc2OTI5YjlmNzIzNmZmMmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFoJPjlLPDKO/UBOn50ylI7bLyyK
1hYw1GuOLnpRY5AHaIGs5defsBJptsRzi1U7pNa2YnNhNsi1w5GAjY4b4FkJ9JRm
7txqQ4HXScNuKNayTpCT+aWidR+cwkZ042J/1P987SAEO3ErHJuyR9Yv7mdT+aWC
qOl6NQ8U8hqepbvJwsKpum5Zqb3GIYFrtgKvCNY4c/ug3GqkwgwDws1zWi2dOoDB
x4koaTphscyWt5KRwls7A3JkdNFcRuxNmqs6jmnZ8HsysSLIAiYheqaCbU/HlbEu
fNemQJUJLN0PLYY9oqpPcs768gpeSpibsPu/jkNTWR9XQSgt5Af1xLnm8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ6cYLpHNRLWyypsJ2kpufcjb/LSMB8GA1UdIwQY
MBaAFKQI/JJGBCdREQ0uxQZdDEfR1DzQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEFqOGtrWUVKMUVSRFM3RkJsME1SOUhVUE5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9hNTk3YzUtM2VjNC00YjQ2LThjN2It
ZDkyMjQ4YWFiZTJkLzEvcEFqOGtrWUVKMUVSRFM3RkJsME1SOUhVUE5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9hNTk3YzUtM2VjNC00YjQ2LThjN2ItZDkyMjQ4YWFiZTJk
LzEvcEFqOGtrWUVKMUVSRFM3RkJsME1SOUhVUE5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIAkC3Jjy
BcSInsECreSzPXdnolBztr6lpezAFIy3Mm7vivRvy0hIvfaQq9yGmSU8xdHrdXVO
ZisK/bIfDPQFPc1ehwQFgxMfaR38i8a0e4NnYgZk8dsVUrKlzJ6Dg5yqEtnw3Oeu
sSqzGN9ZlJ0N0T4563+ZP9s4LccZargT9hJsi0Z12fbBbMircAOHOq0kpJWu2ewY
z+NEIPxa9f2pKMDo1pHz6eT+3IP5JJG6svH4N/qBHvweL/NEH3PK7fanokqFG4J8
p+FMUvoz+e3o2XPIsQN2pD2iydsz0vAiy5dzhYyoh0icvxqQJ/tRuhybhbTh/h16
9Ed5eIClcAmDjw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:06 2025 by rpki-client