Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft
File: nAqMF3kR9kwwVXNogVueZ9j8PA8.mft (raw, json)
Hash identifier: CVileEmNwixrZIA8dr2UVs6UgUFnNsizTlBSKQ+mbtg=
Subject key identifier: E3:46:AF:7B:22:17:2B:60:50:95:29:99:99:F8:FE:B5:DB:C9:E4:82
Authority key identifier: 9C:0A:8C:17:79:11:F6:4C:30:55:73:68:81:5B:9E:67:D8:FC:3C:0F
Certificate issuer: /CN=9c0a8c177911f64c30557368815b9e67d8fc3c0f
Certificate serial: 019A51F5A68C9F43CB93C2F254E7EA89D29F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAqMF3kR9kwwVXNogVueZ9j8PA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft
Manifest number: 0D20
Signing time: Wed 05 Nov 2025 03:00:44 +0000
Manifest this update: Wed 05 Nov 2025 03:00:44 +0000
Manifest next update: Thu 06 Nov 2025 03:00:44 +0000
Files and hashes: 1: d6blSjaqO2EcEPuhj7EsQzjBTt0.roa (hash: 4jd/vZVphNUOF+ezj/NTHKtL7kzqYpJOJYm6eI+27Hw=)
2: nAqMF3kR9kwwVXNogVueZ9j8PA8.crl (hash: rBbVCSSO/jjr1yEJv0XS0Wyb0cuiTjGnjtNOTaIQcSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAqMF3kR9kwwVXNogVueZ9j8PA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:a6:8c:9f:43:cb:93:c2:f2:54:e7:ea:89:d2:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0a8c177911f64c30557368815b9e67d8fc3c0f
Validity
Not Before: Nov 5 03:00:44 2025 GMT
Not After : Nov 6 03:00:44 2025 GMT
Subject: CN=e346af7b22172b605095299999f8feb5dbc9e482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e7:d5:ff:9e:6e:45:9a:3f:a1:43:bc:4c:80:
a8:4f:ad:20:41:9d:69:b9:19:29:a0:09:45:99:58:
8c:8b:e4:b7:39:5e:6b:69:97:51:10:d7:57:52:e3:
a8:02:41:84:4e:50:bf:ff:6b:b4:77:59:32:7b:45:
a4:2a:77:dc:2e:0e:41:1f:fd:4d:9b:45:ce:9c:74:
ec:89:5e:ba:4f:95:db:1c:4d:71:e1:8c:63:bf:0d:
8e:2f:6c:df:45:25:1a:66:2e:3e:4f:0d:04:06:98:
35:37:95:76:02:36:44:87:f3:89:06:8d:d3:84:5e:
f8:ce:43:0c:cf:7b:e4:7f:e6:7c:bf:ca:23:e6:0f:
29:9f:a0:f9:e9:ad:43:fd:ed:c3:e8:d7:fa:29:80:
89:e0:03:3b:56:97:7f:02:35:0e:83:58:55:e8:72:
7f:e1:22:43:9b:24:37:b2:75:27:fd:99:0b:bc:c4:
e0:f1:57:2a:23:e8:93:51:43:48:1d:6c:45:f5:68:
4a:ca:e6:60:dd:d7:c8:ab:d0:ae:14:14:ff:74:02:
46:c0:35:57:2f:b0:22:cd:73:59:d6:39:35:0f:d6:
9c:16:9a:50:74:39:b6:2e:2f:d4:fc:2b:5c:ba:b7:
29:17:04:61:65:34:27:c0:f6:f5:ff:47:e9:af:cd:
80:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:46:AF:7B:22:17:2B:60:50:95:29:99:99:F8:FE:B5:DB:C9:E4:82
X509v3 Authority Key Identifier:
keyid:9C:0A:8C:17:79:11:F6:4C:30:55:73:68:81:5B:9E:67:D8:FC:3C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAqMF3kR9kwwVXNogVueZ9j8PA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:58:68:0a:ef:65:75:c6:d9:43:97:83:ae:e0:a9:b5:24:f7:
5f:c0:50:c5:5c:e5:50:e0:97:d0:b7:6d:62:d2:32:fa:2e:0c:
cf:ef:ac:76:f1:71:cc:df:44:7c:a9:d2:f0:dd:c8:8d:04:2d:
18:df:61:a9:de:07:6d:06:57:0a:e9:8f:24:4d:e5:fd:ee:81:
7f:48:54:16:1c:06:72:c4:ec:3f:38:6c:e3:1e:1f:e2:2a:b1:
18:a0:64:ec:c9:a7:9a:0d:2d:93:c2:25:aa:f5:a1:98:2a:d7:
1f:04:b2:b7:64:e5:8f:08:87:09:29:b1:d5:e7:88:ab:cd:0c:
17:4c:a3:b4:a1:5e:15:b2:fa:27:64:ef:b7:6c:82:b8:15:45:
71:31:85:4b:bb:62:d8:51:97:50:98:60:0b:3c:79:65:3f:45:
5c:3b:c0:c9:8c:8e:08:45:1f:e3:f4:54:25:85:4b:d0:b2:17:
41:81:94:ac:06:0f:f5:d3:d8:a4:7c:88:1b:01:f3:42:25:4b:
a8:23:cd:88:4e:a1:fd:4d:bf:be:49:f6:c2:bd:e2:a8:02:b0:
cd:40:ca:1f:c5:11:53:63:55:47:ef:b3:89:5c:4c:26:f9:17:
26:8c:40:0f:04:d0:5c:52:c1:57:b1:7c:d5:a3:c5:1d:1e:94:
fd:5b:96:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpR9aaMn0PLk8LyVOfqidKfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljMGE4YzE3NzkxMWY2NGMzMDU1NzM2ODgxNWI5ZTY3ZDhm
YzNjMGYwHhcNMjUxMTA1MDMwMDQ0WhcNMjUxMTA2MDMwMDQ0WjAzMTEwLwYDVQQD
EyhlMzQ2YWY3YjIyMTcyYjYwNTA5NTI5OTk5OWY4ZmViNWRiYzllNDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0efV/55uRZo/oUO8TICoT60gQZ1p
uRkpoAlFmViMi+S3OV5raZdRENdXUuOoAkGETlC//2u0d1kye0WkKnfcLg5BH/1N
m0XOnHTsiV66T5XbHE1x4Yxjvw2OL2zfRSUaZi4+Tw0EBpg1N5V2AjZEh/OJBo3T
hF74zkMMz3vkf+Z8v8oj5g8pn6D56a1D/e3D6Nf6KYCJ4AM7Vpd/AjUOg1hV6HJ/
4SJDmyQ3snUn/ZkLvMTg8VcqI+iTUUNIHWxF9WhKyuZg3dfIq9CuFBT/dAJGwDVX
L7AizXNZ1jk1D9acFppQdDm2Li/U/CtcurcpFwRhZTQnwPb1/0fpr82AtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFONGr3siFytgUJUpmZn4/rXbyeSCMB8GA1UdIwQY
MBaAFJwKjBd5EfZMMFVzaIFbnmfY/DwPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkFxTUYza1I5a3d3VlhOb2dWdWVaOWo4UEE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy80YzczNzktMzY0OS00MWRlLTg5Zjct
ZDU2Mzc0ZTExNTdhLzEvbkFxTUYza1I5a3d3VlhOb2dWdWVaOWo4UEE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy80YzczNzktMzY0OS00MWRlLTg5ZjctZDU2Mzc0ZTExNTdh
LzEvbkFxTUYza1I5a3d3VlhOb2dWdWVaOWo4UEE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYFhoCu9l
dcbZQ5eDruCptST3X8BQxVzlUOCX0LdtYtIy+i4Mz++sdvFxzN9EfKnS8N3IjQQt
GN9hqd4HbQZXCumPJE3l/e6Bf0hUFhwGcsTsPzhs4x4f4iqxGKBk7Mmnmg0tk8Il
qvWhmCrXHwSyt2TljwiHCSmx1eeIq80MF0yjtKFeFbL6J2Tvt2yCuBVFcTGFS7ti
2FGXUJhgCzx5ZT9FXDvAyYyOCEUf4/RUJYVL0LIXQYGUrAYP9dPYpHyIGwHzQiVL
qCPNiE6h/U2/vkn2wr3iqAKwzUDKH8URU2NVR++ziVxMJvkXJoxADwTQXFLBV7F8
1aPFHR6U/VuWQA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:00:37 2025 by rpki-client