Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
File: xFvSa8XYHu6cjhotDXjRDarggZU.mft (raw, json)
Hash identifier: PXRMbZMHmPMJXWPAJ8ZgqMNvxcoaQwkZNNXfTrsf7XY=
Subject key identifier: 9E:EF:2C:C6:CF:12:BF:AF:7D:FE:09:58:42:8E:75:69:BA:B6:80:C7
Authority key identifier: C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95
Certificate issuer: /CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195
Certificate serial: 019A533EB0B307CC6B1DF6E5FC7651D2A3E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 09:00:08 +0000
Manifest this update: Wed 05 Nov 2025 09:00:08 +0000
Manifest next update: Thu 06 Nov 2025 09:00:08 +0000
Files and hashes: 1: 0vF0gFHCKbav6GbEKyJcrztoM70.roa (hash: 3GJJhs9MQpGvWXk1FqNRB7SXiQvuJwcBJyHinoV355o=)
2: xFvSa8XYHu6cjhotDXjRDarggZU.crl (hash: lTZL4sg5k9Ou9BeYa5q2rpeS9NYmBs9V6XhU3YANDk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3e:b0:b3:07:cc:6b:1d:f6:e5:fc:76:51:d2:a3:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195
Validity
Not Before: Nov 5 09:00:08 2025 GMT
Not After : Nov 6 09:00:08 2025 GMT
Subject: CN=9eef2cc6cf12bfaf7dfe0958428e7569bab680c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:15:a6:fe:b2:3c:54:69:b5:57:e4:4b:7e:15:
b8:25:c3:22:fb:c8:75:ad:d4:5a:f7:ef:43:1d:cc:
fc:d0:ac:b2:16:26:fc:68:a6:14:b3:2b:60:79:a3:
ee:50:c2:8e:3d:a3:87:67:d4:c6:1d:86:c7:36:3d:
cf:3a:a7:1c:eb:89:d9:df:7e:97:b6:3a:f8:c0:ae:
2e:06:d8:76:43:6f:b9:02:19:7b:ed:9c:6f:9a:e9:
d6:08:82:70:15:bd:d0:04:d9:5d:75:80:b0:a1:89:
52:df:34:21:be:5e:b9:c6:bd:64:45:46:10:aa:8d:
0b:e5:82:96:67:17:2b:e8:1a:5f:3d:f1:13:b9:bd:
58:0c:8b:07:20:a5:a0:1d:1d:a9:33:30:a7:6b:6b:
bb:d2:84:c7:8a:db:ff:c8:e4:00:28:26:65:46:b1:
50:5d:0a:d6:8e:2a:b3:e1:ca:14:3f:28:75:b9:1b:
e3:8f:4c:bd:fe:b6:02:f3:84:f3:4e:c3:34:10:c4:
a4:0d:6c:f0:b4:2c:52:b5:d5:b0:31:97:f2:36:37:
6c:9b:a1:6b:cf:f0:88:ee:a6:62:dc:78:f8:cc:c1:
07:eb:b5:a9:a9:cd:10:ad:e7:85:9b:0e:75:d5:24:
64:c5:f6:63:22:27:3d:23:71:6c:d3:33:70:4f:50:
77:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:EF:2C:C6:CF:12:BF:AF:7D:FE:09:58:42:8E:75:69:BA:B6:80:C7
X509v3 Authority Key Identifier:
keyid:C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:e9:0f:4f:de:2a:db:17:80:61:19:18:6f:e6:d2:03:a9:0c:
f8:c6:a4:65:e7:32:83:75:f0:30:3c:3a:37:af:b7:69:4d:ac:
d8:97:9a:c3:7d:dc:81:fb:db:0d:66:50:a0:5b:b7:44:59:2e:
a4:09:92:c5:db:e9:47:6c:0d:77:89:65:63:28:0d:7a:1f:84:
0e:5d:77:a9:23:b5:47:c7:f4:eb:6f:d2:6c:e6:a5:c9:a3:8f:
f7:4c:fc:fb:8d:9b:39:95:09:bc:92:ec:f6:64:1a:39:0b:9b:
27:87:73:da:1b:21:a9:8e:25:68:36:c5:97:db:33:99:20:4a:
3a:96:ba:af:fc:4e:fd:40:2c:bf:ce:ed:ab:67:08:fb:25:bd:
ba:84:e6:6c:32:9b:90:62:d7:07:50:ea:33:5d:32:a0:c3:10:
b0:35:34:89:9e:01:45:cb:91:2e:0c:20:c8:17:3a:91:42:0e:
34:fe:59:dc:b2:79:ba:b7:b2:a9:e5:a2:35:b9:bf:db:15:60:
0e:e7:5e:9e:22:fe:5c:1e:df:9a:d9:0e:31:f9:df:cc:e5:07:
31:13:31:7d:25:44:b7:aa:8e:35:b3:00:38:f8:3c:d1:01:52:
4d:0a:f2:1a:4e:32:bd:f3:e0:cc:cf:ce:9a:a4:c2:11:2a:27:
60:bd:e5:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTPrCzB8xrHfbl/HZR0qPoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0NWJkMjZiYzVkODFlZWU5YzhlMWEyZDBkNzhkMTBkYWFl
MDgxOTUwHhcNMjUxMTA1MDkwMDA4WhcNMjUxMTA2MDkwMDA4WjAzMTEwLwYDVQQD
Eyg5ZWVmMmNjNmNmMTJiZmFmN2RmZTA5NTg0MjhlNzU2OWJhYjY4MGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xWm/rI8VGm1V+RLfhW4JcMi+8h1
rdRa9+9DHcz80KyyFib8aKYUsytgeaPuUMKOPaOHZ9TGHYbHNj3POqcc64nZ336X
tjr4wK4uBth2Q2+5Ahl77ZxvmunWCIJwFb3QBNlddYCwoYlS3zQhvl65xr1kRUYQ
qo0L5YKWZxcr6BpfPfETub1YDIsHIKWgHR2pMzCna2u70oTHitv/yOQAKCZlRrFQ
XQrWjiqz4coUPyh1uRvjj0y9/rYC84TzTsM0EMSkDWzwtCxStdWwMZfyNjdsm6Fr
z/CI7qZi3Hj4zMEH67Wpqc0QreeFmw511SRkxfZjIic9I3Fs0zNwT1B3CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ7vLMbPEr+vff4JWEKOdWm6toDHMB8GA1UdIwQY
MBaAFMRb0mvF2B7unI4aLQ140Q2q4IGVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEZ2U2E4WFlIdTZjamhvdERYalJEYXJnZ1pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC84NzgyOWEtZTMzMi00MjRmLTljNGYt
ZTQ0N2JlMmFjNjhlLzEveEZ2U2E4WFlIdTZjamhvdERYalJEYXJnZ1pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC84NzgyOWEtZTMzMi00MjRmLTljNGYtZTQ0N2JlMmFjNjhl
LzEveEZ2U2E4WFlIdTZjamhvdERYalJEYXJnZ1pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALekPT94q
2xeAYRkYb+bSA6kM+MakZecyg3XwMDw6N6+3aU2s2Jeaw33cgfvbDWZQoFu3RFku
pAmSxdvpR2wNd4llYygNeh+EDl13qSO1R8f062/SbOalyaOP90z8+42bOZUJvJLs
9mQaOQubJ4dz2hshqY4laDbFl9szmSBKOpa6r/xO/UAsv87tq2cI+yW9uoTmbDKb
kGLXB1DqM10yoMMQsDU0iZ4BRcuRLgwgyBc6kUIONP5Z3LJ5ureyqeWiNbm/2xVg
DudeniL+XB7fmtkOMfnfzOUHMRMxfSVEt6qONbMAOPg80QFSTQryGk4yvfPgzM/O
mqTCESonYL3l2A==
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:27:30 2025 by rpki-client