Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft
File: MgrQyxyPq9KnFycj8utT6gLoSmk.mft (raw, json)
Hash identifier: MJhAHwTBXXaVci9acozy/bfeE2X3+wG+HYCOw4Mxyso=
Subject key identifier: 8C:76:18:36:DD:33:32:CF:BB:9B:18:AD:FC:AA:E8:27:0E:8A:E2:97
Authority key identifier: 32:0A:D0:CB:1C:8F:AB:D2:A7:17:27:23:F2:EB:53:EA:02:E8:4A:69
Certificate issuer: /CN=320ad0cb1c8fabd2a7172723f2eb53ea02e84a69
Certificate serial: 019A53E4142AF200B8A3A7785F2B582CA77D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MgrQyxyPq9KnFycj8utT6gLoSmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft
Manifest number: 037D
Signing time: Wed 05 Nov 2025 12:00:47 +0000
Manifest this update: Wed 05 Nov 2025 12:00:47 +0000
Manifest next update: Thu 06 Nov 2025 12:00:47 +0000
Files and hashes: 1: JUrgcpIbkD2s0Xwl5MPFsKClBSA.roa (hash: h68v76M+ZVUfqYetcYYdqqWMVphcDkEUG23cxVpEUw4=)
2: MgrQyxyPq9KnFycj8utT6gLoSmk.crl (hash: oMvgwyEcmkSL8g9CNIL+x2m/yvMoCfi4fZQmlna8g8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MgrQyxyPq9KnFycj8utT6gLoSmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e4:14:2a:f2:00:b8:a3:a7:78:5f:2b:58:2c:a7:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=320ad0cb1c8fabd2a7172723f2eb53ea02e84a69
Validity
Not Before: Nov 5 12:00:47 2025 GMT
Not After : Nov 6 12:00:47 2025 GMT
Subject: CN=8c761836dd3332cfbb9b18adfcaae8270e8ae297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5d:29:c6:e3:f2:a5:4f:dd:8e:a3:65:0c:49:
4b:05:0a:15:4c:6f:ef:07:b9:fa:85:f7:10:58:6b:
b2:7c:39:c1:b8:22:36:ec:97:02:23:de:2c:8d:ab:
d7:37:9e:1a:0b:8a:70:c7:0a:da:18:f0:3a:eb:61:
5e:a3:b5:bf:2e:18:60:5b:f0:1b:1f:00:07:08:e5:
cc:37:48:5c:e9:f6:1f:37:73:3c:5a:78:38:63:de:
47:b1:69:ad:df:87:85:eb:5b:17:61:d1:7d:54:4d:
0e:94:55:15:61:ef:1a:4e:50:c0:16:42:0b:b1:94:
40:c1:d5:56:0e:34:c7:5d:d8:fa:55:b8:54:ad:08:
89:80:ce:85:62:d1:d1:94:d7:4a:f9:6f:de:91:54:
24:90:9a:74:d2:5a:1e:1a:05:64:44:4d:33:e6:9a:
38:5e:87:28:99:72:d3:bb:61:6f:b5:ee:3c:c4:06:
a6:a9:a7:0b:4b:e4:80:2a:45:b1:24:2a:77:5a:41:
99:a8:5b:31:dc:57:7c:3f:3e:8a:c6:e6:ec:6b:3a:
9e:c6:8b:20:0d:28:b0:23:d8:f0:3d:83:72:47:d3:
ec:c8:6a:79:58:45:23:a0:bc:63:8e:17:2e:5c:27:
79:40:ce:8c:66:a8:35:5e:18:60:5b:4d:be:a1:a4:
bb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:76:18:36:DD:33:32:CF:BB:9B:18:AD:FC:AA:E8:27:0E:8A:E2:97
X509v3 Authority Key Identifier:
keyid:32:0A:D0:CB:1C:8F:AB:D2:A7:17:27:23:F2:EB:53:EA:02:E8:4A:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgrQyxyPq9KnFycj8utT6gLoSmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:1f:95:f9:41:f5:d7:d5:b8:04:39:78:35:be:11:4a:00:bc:
9c:6a:6e:f1:cc:44:3c:ef:99:59:2e:8b:40:21:2d:fa:ee:50:
10:3f:aa:37:70:ff:41:de:9b:5b:c5:ed:00:80:ca:4f:00:69:
e4:f8:19:6f:4b:6a:13:f1:f2:81:0b:71:81:8b:81:e1:8c:9a:
fd:fd:6b:2f:27:b8:fc:79:7b:9f:f5:38:dd:f1:81:ac:60:d2:
db:e6:f8:2a:a6:f0:68:fe:41:ef:e3:cb:de:88:73:a9:ad:e8:
60:3b:47:36:63:73:56:e5:10:5b:c8:ae:3a:98:83:83:a5:b2:
7b:44:5c:a0:e4:cd:ed:bb:8a:7d:32:98:7b:99:af:72:ee:2c:
39:83:41:81:84:76:37:a9:5d:8d:40:f8:91:d5:bb:5c:04:8a:
7d:c9:85:df:f4:18:72:ec:51:a8:70:c9:66:31:77:08:f2:d1:
41:29:55:5b:84:89:6c:b6:7c:dd:c8:82:95:a1:77:51:21:9d:
11:99:91:dd:23:06:df:91:bd:a2:83:4c:3f:03:c3:30:8e:43:
f7:9c:fb:fd:cd:47:eb:8e:14:6e:65:ee:8f:14:9c:4c:2e:a9:
31:46:de:7f:0b:7f:34:ec:a5:ad:19:d8:db:58:af:e7:68:fb:
30:f4:85:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpT5BQq8gC4o6d4XytYLKd9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMGFkMGNiMWM4ZmFiZDJhNzE3MjcyM2YyZWI1M2VhMDJl
ODRhNjkwHhcNMjUxMTA1MTIwMDQ3WhcNMjUxMTA2MTIwMDQ3WjAzMTEwLwYDVQQD
Eyg4Yzc2MTgzNmRkMzMzMmNmYmI5YjE4YWRmY2FhZTgyNzBlOGFlMjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs10pxuPypU/djqNlDElLBQoVTG/v
B7n6hfcQWGuyfDnBuCI27JcCI94sjavXN54aC4pwxwraGPA662Feo7W/LhhgW/Ab
HwAHCOXMN0hc6fYfN3M8Wng4Y95HsWmt34eF61sXYdF9VE0OlFUVYe8aTlDAFkIL
sZRAwdVWDjTHXdj6VbhUrQiJgM6FYtHRlNdK+W/ekVQkkJp00loeGgVkRE0z5po4
XocomXLTu2Fvte48xAamqacLS+SAKkWxJCp3WkGZqFsx3Fd8Pz6Kxubsazqexosg
DSiwI9jwPYNyR9PsyGp5WEUjoLxjjhcuXCd5QM6MZqg1XhhgW02+oaS7+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIx2GDbdMzLPu5sYrfyq6CcOiuKXMB8GA1UdIwQY
MBaAFDIK0Mscj6vSpxcnI/LrU+oC6EppMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWdyUXl4eVBxOUtuRnljajh1dFQ2Z0xvU21rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jMjYxOTktMzMwMy00MjIzLTlmMGYt
NWRhZmM2MzRjY2Q2LzEvTWdyUXl4eVBxOUtuRnljajh1dFQ2Z0xvU21rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9jMjYxOTktMzMwMy00MjIzLTlmMGYtNWRhZmM2MzRjY2Q2
LzEvTWdyUXl4eVBxOUtuRnljajh1dFQ2Z0xvU21rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApx+V+UH1
19W4BDl4Nb4RSgC8nGpu8cxEPO+ZWS6LQCEt+u5QED+qN3D/Qd6bW8XtAIDKTwBp
5PgZb0tqE/HygQtxgYuB4Yya/f1rLye4/Hl7n/U43fGBrGDS2+b4KqbwaP5B7+PL
3ohzqa3oYDtHNmNzVuUQW8iuOpiDg6Wye0RcoOTN7buKfTKYe5mvcu4sOYNBgYR2
N6ldjUD4kdW7XASKfcmF3/QYcuxRqHDJZjF3CPLRQSlVW4SJbLZ83ciClaF3USGd
EZmR3SMG35G9ooNMPwPDMI5D95z7/c1H644UbmXujxScTC6pMUbefwt/NOylrRnY
21iv52j7MPSFyg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 19:45:10 2025 by rpki-client