Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft
File: NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft (raw, json)
Hash identifier: xycptrzsAnl9VFCgceUI23hUnzBAd5MoPagvyPVesgo=
Subject key identifier: E9:3C:9A:BC:AF:27:12:C5:BF:43:42:53:D3:24:83:BC:37:B4:8E:DD
Authority key identifier: 34:A6:3D:C8:61:20:E8:7F:4C:FF:8C:59:AF:32:61:E6:E1:29:2F:D9
Certificate issuer: /CN=34a63dc86120e87f4cff8c59af3261e6e1292fd9
Certificate serial: 019A4DE1AC851F167D80ACE54D6DAFE719A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NKY9yGEg6H9M_4xZrzJh5uEpL9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft
Manifest number: 1043
Signing time: Tue 04 Nov 2025 08:00:26 +0000
Manifest this update: Tue 04 Nov 2025 08:00:26 +0000
Manifest next update: Wed 05 Nov 2025 08:00:26 +0000
Files and hashes: 1: MjfPB6z00e-ff7RNJtIi20gDUz8.roa (hash: Cpw1zTo9jE0fDsY0ux+7L1DgxTy3Nnzm8fXHw47pw5Q=)
2: NKY9yGEg6H9M_4xZrzJh5uEpL9k.crl (hash: VuGPAFaMqns/KLn2ZR4KlQ38bo/EUZOAGk67a883Ws0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/NKY9yGEg6H9M_4xZrzJh5uEpL9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:ac:85:1f:16:7d:80:ac:e5:4d:6d:af:e7:19:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34a63dc86120e87f4cff8c59af3261e6e1292fd9
Validity
Not Before: Nov 4 08:00:26 2025 GMT
Not After : Nov 5 08:00:26 2025 GMT
Subject: CN=e93c9abcaf2712c5bf434253d32483bc37b48edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:54:ce:7d:d3:bc:fa:21:9a:64:16:b5:1d:0b:
e3:e5:2e:21:92:49:e4:71:09:12:2d:40:c1:7b:c2:
b9:8d:78:ca:c8:0a:6a:0e:9b:78:09:e1:9a:cf:6a:
c8:fe:4d:0a:54:aa:89:0f:e1:3e:f4:15:51:d9:2c:
23:77:33:2e:71:be:92:d6:9d:3a:95:2c:19:aa:d8:
34:c6:57:46:89:62:3a:67:2b:56:af:f8:17:fa:70:
2e:68:b9:1c:41:d3:a5:57:43:18:47:96:27:60:59:
88:54:c7:75:bf:2e:47:07:8e:dd:83:1e:47:5b:d8:
d9:79:ab:31:f1:a4:6d:06:a6:fb:49:b3:fa:30:57:
d6:39:6a:dd:ec:a6:3d:1a:1c:65:fd:22:b9:2e:02:
79:59:d5:a8:75:b8:1b:bc:92:ee:dd:2d:3d:6c:03:
f7:d7:a9:8e:54:46:cd:99:20:32:80:8c:ab:9e:8b:
c8:b3:01:46:fb:2c:9e:a3:00:de:ce:50:e6:f8:bd:
80:0a:2e:2b:13:00:bf:88:59:aa:05:a3:28:8f:ae:
63:4d:9e:48:2a:7f:2c:ff:48:54:a8:4e:50:56:89:
7f:1b:e0:72:fa:82:79:72:5d:b8:47:bf:b1:8a:b3:
aa:a5:8c:da:54:e2:b6:d4:ee:9a:2d:cc:58:20:02:
c6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:3C:9A:BC:AF:27:12:C5:BF:43:42:53:D3:24:83:BC:37:B4:8E:DD
X509v3 Authority Key Identifier:
keyid:34:A6:3D:C8:61:20:E8:7F:4C:FF:8C:59:AF:32:61:E6:E1:29:2F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NKY9yGEg6H9M_4xZrzJh5uEpL9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a0:da:a9:6f:c7:71:46:9a:b7:06:34:53:06:06:09:3c:01:
65:38:aa:76:e4:41:66:47:5b:14:cd:bd:5d:78:73:ad:2e:32:
05:89:98:b2:a0:38:c2:8f:bb:f2:b9:1e:ac:75:3d:d3:9a:d1:
c9:6f:37:39:aa:05:5f:80:fd:11:d6:0e:6b:6f:44:97:b5:41:
51:1b:a5:14:9b:60:e7:81:f4:1c:0b:d7:26:c2:eb:59:eb:55:
2d:ff:05:24:b8:17:ea:c6:6d:6c:2d:4c:90:7e:be:68:c3:33:
a4:0f:f6:65:b7:1e:78:16:47:5f:d8:dc:11:67:17:25:c8:ca:
73:c8:37:d3:72:0e:2c:84:b9:b3:df:20:c1:5c:7c:b0:3b:62:
87:83:d9:46:9a:af:15:cf:3f:c9:e8:ec:31:73:18:14:6b:0b:
26:3f:cb:51:2a:ea:c5:bd:49:b4:1f:4e:3a:92:d6:39:ec:ff:
29:52:59:d4:a6:66:55:ae:72:31:b4:2d:e5:37:91:6f:18:39:
0f:fa:ab:93:2b:f6:b9:c3:c0:1b:a6:83:96:3c:6f:69:15:dd:
0a:3c:0d:7e:04:db:de:05:04:0f:c6:c4:68:70:21:36:f6:a4:
89:ee:e8:18:e0:09:f5:92:72:7b:e2:1c:0f:e6:9c:4a:b5:25:
95:2b:b4:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4ayFHxZ9gKzlTW2v5xmpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0YTYzZGM4NjEyMGU4N2Y0Y2ZmOGM1OWFmMzI2MWU2ZTEy
OTJmZDkwHhcNMjUxMTA0MDgwMDI2WhcNMjUxMTA1MDgwMDI2WjAzMTEwLwYDVQQD
EyhlOTNjOWFiY2FmMjcxMmM1YmY0MzQyNTNkMzI0ODNiYzM3YjQ4ZWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lTOfdO8+iGaZBa1HQvj5S4hkknk
cQkSLUDBe8K5jXjKyApqDpt4CeGaz2rI/k0KVKqJD+E+9BVR2SwjdzMucb6S1p06
lSwZqtg0xldGiWI6ZytWr/gX+nAuaLkcQdOlV0MYR5YnYFmIVMd1vy5HB47dgx5H
W9jZeasx8aRtBqb7SbP6MFfWOWrd7KY9Ghxl/SK5LgJ5WdWodbgbvJLu3S09bAP3
16mOVEbNmSAygIyrnovIswFG+yyeowDezlDm+L2ACi4rEwC/iFmqBaMoj65jTZ5I
Kn8s/0hUqE5QVol/G+By+oJ5cl24R7+xirOqpYzaVOK21O6aLcxYIALGVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOk8mryvJxLFv0NCU9Mkg7w3tI7dMB8GA1UdIwQY
MBaAFDSmPchhIOh/TP+MWa8yYebhKS/ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTktZOXlHRWc2SDlNXzR4WnJ6Smg1dUVwTDlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82YjljN2EtOWRjNy00MDQwLWIyOWEt
ZmM3YTBlYTZiMGUyLzEvTktZOXlHRWc2SDlNXzR4WnJ6Smg1dUVwTDlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy82YjljN2EtOWRjNy00MDQwLWIyOWEtZmM3YTBlYTZiMGUy
LzEvTktZOXlHRWc2SDlNXzR4WnJ6Smg1dUVwTDlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcaDaqW/H
cUaatwY0UwYGCTwBZTiqduRBZkdbFM29XXhzrS4yBYmYsqA4wo+78rkerHU905rR
yW83OaoFX4D9EdYOa29El7VBURulFJtg54H0HAvXJsLrWetVLf8FJLgX6sZtbC1M
kH6+aMMzpA/2ZbceeBZHX9jcEWcXJcjKc8g303IOLIS5s98gwVx8sDtih4PZRpqv
Fc8/yejsMXMYFGsLJj/LUSrqxb1JtB9OOpLWOez/KVJZ1KZmVa5yMbQt5TeRbxg5
D/qrkyv2ucPAG6aDljxvaRXdCjwNfgTb3gUED8bEaHAhNvakie7oGOAJ9ZJye+Ic
D+acSrUllSu0lA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:07 2025 by rpki-client