Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
File: Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft (raw, json)
Hash identifier: Tat/SYOWKV9WiWe3YBOI3ejyNFxo5JAKAKlnaGSNwO8=
Subject key identifier: 3D:F4:36:C0:B5:6C:10:EE:FF:BF:EF:62:1C:7D:69:59:9B:EF:E5:F7
Authority key identifier: 4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
Certificate issuer: /CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Certificate serial: 019A4E18744A7FBB9D5D9DCA88A77B2F3AAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
Manifest number: 176E
Signing time: Tue 04 Nov 2025 09:00:16 +0000
Manifest this update: Tue 04 Nov 2025 09:00:16 +0000
Manifest next update: Wed 05 Nov 2025 09:00:16 +0000
Files and hashes: 1: 1-n-9hD734eUWTfI1sQzb2mm0u70.roa (hash: prY6VkL1Otme9e/iQnbu0E7x7kgOdTIuBs01J6UM6iw=)
2: 77nHJ74F1fFAwUbmMeRLrxeDdWA.roa (hash: 2Mtt2AaUFR4ZOfRNdKyuPT3cj2EQ+qy46BQe2ut00YY=)
3: G7v3pCkQ6hmfhpbVxzOwUWwmzDY.roa (hash: nVHjBCeWZEPbhgav/+qfuSQLmW0a+8zRMZx9D7jY6PU=)
4: Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl (hash: ZPrTKzW4KMK9lTSdmxI9l/WXDdIhStaRe2sFiIS3rSQ=)
5: ZLnsYJrehSHy13eQaMRY1Tbep5I.roa (hash: beMY8QS7fWlkYI5VTaRGjskfF3hsi1HR7CrNo9yaWBM=)
6: ikzzB-TS7fbu_e8Jm20uc--Bfbk.roa (hash: L3G3izasb6pEF2T5imYXwo1rhko1cZpeUonzNyfE5G4=)
7: jUW3uJuzvpMts6ZS_PpOE0-vHy4.roa (hash: QVsKQjI9Ob132etLfwnFEQDpraGA87DL9fvaD59Kiac=)
8: s2kaxqyHVyCTqaRomO4ohfBebsc.roa (hash: vuPF+RwNPBvTGLZXAOB0JJk86Umi+Vc+1JKtKmoQbqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:74:4a:7f:bb:9d:5d:9d:ca:88:a7:7b:2f:3a:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Validity
Not Before: Nov 4 09:00:16 2025 GMT
Not After : Nov 5 09:00:16 2025 GMT
Subject: CN=3df436c0b56c10eeffbfef621c7d69599befe5f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:67:87:a0:89:f4:15:c7:5b:34:ce:3a:43:8d:
01:88:ac:4c:70:3d:9c:ae:99:9f:53:eb:b8:a4:34:
30:e1:fb:78:58:52:2d:55:75:9a:a6:74:10:2a:bb:
29:5c:ec:a5:6e:6f:95:a3:4a:db:f5:bd:dd:30:bc:
9a:c2:a6:2f:97:49:db:c1:97:9b:f0:89:6f:39:6e:
f4:9c:0f:a8:e6:3a:c9:df:f9:7f:0e:ae:aa:1e:56:
a4:7a:3f:2e:ab:af:4d:15:06:33:20:70:3d:5a:8d:
9d:f3:82:c1:a2:f7:06:90:84:a0:72:6c:f2:77:eb:
72:64:0d:68:d7:59:6c:3e:e2:44:c3:47:34:cd:a0:
99:20:69:6c:7d:6f:00:8f:81:1b:a2:2c:b0:79:ce:
c3:2d:7d:14:0b:cd:9d:85:7e:25:e0:33:c5:63:bf:
e0:fa:4c:f1:a4:74:80:95:89:5b:ba:8c:ce:ca:f3:
ab:3e:d8:67:b5:09:67:40:89:99:b4:72:00:07:53:
6a:82:31:78:3a:01:69:8d:36:c2:78:21:c8:1c:1c:
b2:e5:1b:48:72:b7:cc:43:a8:15:c0:65:48:1c:f8:
21:ff:ae:5b:13:f0:f5:d2:a7:e3:43:85:a1:7d:12:
61:c2:55:77:9f:d7:3a:6d:a2:ac:bb:14:41:37:2f:
f1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F4:36:C0:B5:6C:10:EE:FF:BF:EF:62:1C:7D:69:59:9B:EF:E5:F7
X509v3 Authority Key Identifier:
keyid:4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:b3:ae:6f:6b:1a:26:38:de:b8:7d:90:af:67:00:51:44:06:
c6:50:a1:fd:9d:72:ba:d0:d9:cb:a7:f1:5b:c3:1a:96:81:2b:
6f:aa:12:cb:74:cb:5d:73:d2:0d:01:2a:1b:0d:09:ea:d6:cb:
c0:dd:fd:65:c1:1e:29:47:80:e6:82:f8:4c:29:3b:0e:6f:53:
c3:3a:70:0b:dc:6b:f6:bc:28:d0:e7:05:b9:f3:ed:e2:db:0c:
d0:57:33:32:9f:cd:4c:70:41:9e:07:58:94:52:cd:15:c4:7a:
5e:e5:19:b1:e7:32:13:5a:88:e8:57:fe:06:88:bc:92:47:5f:
0b:be:8e:63:1a:7a:03:94:4f:ea:49:ca:a2:5c:e7:7c:c3:3f:
0b:05:d9:7c:49:38:35:9d:54:96:67:e8:7e:23:49:36:4b:21:
5e:6f:cb:92:bd:59:be:1d:f8:25:dc:ec:7d:5f:ed:f4:ea:55:
2a:1a:f1:b8:12:b4:84:9b:c6:23:8d:e5:10:d2:58:d2:50:ce:
f0:a5:00:b0:27:28:e5:3d:ca:86:21:03:7a:e8:f7:51:ed:3f:
2e:8c:58:bf:73:f4:d5:91:38:f0:58:9b:cc:01:55:bf:18:7d:
98:a1:5f:a1:36:d1:b2:fa:36:c9:ba:33:b4:06:b8:dc:4b:fc:
b5:d8:55:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGHRKf7udXZ3KiKd7LzqvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlY2Y1MzAwN2M3OWNjNWUyZjJkNzM1NmJhOTEyMWE3OGMw
Yzc3MTQwHhcNMjUxMTA0MDkwMDE2WhcNMjUxMTA1MDkwMDE2WjAzMTEwLwYDVQQD
EygzZGY0MzZjMGI1NmMxMGVlZmZiZmVmNjIxYzdkNjk1OTliZWZlNWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWeHoIn0FcdbNM46Q40BiKxMcD2c
rpmfU+u4pDQw4ft4WFItVXWapnQQKrspXOylbm+Vo0rb9b3dMLyawqYvl0nbwZeb
8IlvOW70nA+o5jrJ3/l/Dq6qHlakej8uq69NFQYzIHA9Wo2d84LBovcGkISgcmzy
d+tyZA1o11lsPuJEw0c0zaCZIGlsfW8Aj4Eboiywec7DLX0UC82dhX4l4DPFY7/g
+kzxpHSAlYlbuozOyvOrPthntQlnQImZtHIAB1NqgjF4OgFpjTbCeCHIHByy5RtI
crfMQ6gVwGVIHPgh/65bE/D10qfjQ4WhfRJhwlV3n9c6baKsuxRBNy/xBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD30NsC1bBDu/7/vYhx9aVmb7+X3MB8GA1UdIwQY
MBaAFE7PUwB8ecxeLy1zVrqRIaeMDHcUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHM5VEFIeDV6RjR2TFhOV3VwRWhwNHdNZHhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82NDhjNzUtMmJlOC00YmZkLWExYjEt
Y2I4YjNhMDk0MjA5LzEvVHM5VEFIeDV6RjR2TFhOV3VwRWhwNHdNZHhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi82NDhjNzUtMmJlOC00YmZkLWExYjEtY2I4YjNhMDk0MjA5
LzEvVHM5VEFIeDV6RjR2TFhOV3VwRWhwNHdNZHhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh7Oub2sa
JjjeuH2Qr2cAUUQGxlCh/Z1yutDZy6fxW8MaloErb6oSy3TLXXPSDQEqGw0J6tbL
wN39ZcEeKUeA5oL4TCk7Dm9TwzpwC9xr9rwo0OcFufPt4tsM0FczMp/NTHBBngdY
lFLNFcR6XuUZsecyE1qI6Ff+Boi8kkdfC76OYxp6A5RP6knKolznfMM/CwXZfEk4
NZ1UlmfofiNJNkshXm/Lkr1Zvh34JdzsfV/t9OpVKhrxuBK0hJvGI43lENJY0lDO
8KUAsCco5T3KhiEDeuj3Ue0/LoxYv3P01ZE48FibzAFVvxh9mKFfoTbRsvo2yboz
tAa43Ev8tdhV6g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:15:24 2025 by rpki-client