Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft
File: 4BEGBvUk26pTjmfhI8r7xt8zhsA.mft (raw, json)
Hash identifier: OD7XJxmC+RyM8EgULx6+vX0YlwFr+KRf3bxc6eejI0E=
Subject key identifier: 72:15:7E:9A:2E:89:2A:4A:3E:34:30:86:E3:4E:2E:3F:BB:C1:52:A4
Authority key identifier: E0:11:06:06:F5:24:DB:AA:53:8E:67:E1:23:CA:FB:C6:DF:33:86:C0
Certificate issuer: /CN=e0110606f524dbaa538e67e123cafbc6df3386c0
Certificate serial: 019A4E18C5667C750EA6D451DB78C7AB2C08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BEGBvUk26pTjmfhI8r7xt8zhsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft
Manifest number: 0473
Signing time: Tue 04 Nov 2025 09:00:37 +0000
Manifest this update: Tue 04 Nov 2025 09:00:37 +0000
Manifest next update: Wed 05 Nov 2025 09:00:37 +0000
Files and hashes: 1: 4BEGBvUk26pTjmfhI8r7xt8zhsA.crl (hash: NK4PR7lCvZj5VjqmxtS0NVh1lklKzBOpptWBRQjLMdM=)
2: LKg2o2zlysSfcmScabBK3xapbdE.roa (hash: 1l6VyqJgKUuQ/XvxIU6XnLgEokzCKE4ghCBRoC85WGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4BEGBvUk26pTjmfhI8r7xt8zhsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:c5:66:7c:75:0e:a6:d4:51:db:78:c7:ab:2c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0110606f524dbaa538e67e123cafbc6df3386c0
Validity
Not Before: Nov 4 09:00:37 2025 GMT
Not After : Nov 5 09:00:37 2025 GMT
Subject: CN=72157e9a2e892a4a3e343086e34e2e3fbbc152a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:66:cc:e1:fe:fc:b2:e8:50:9f:3a:fc:e5:cb:
4e:c6:af:4d:1c:63:ab:d9:dc:f3:a2:f0:bf:6d:d2:
fa:0b:e2:58:58:3c:58:d5:95:9e:87:dc:08:9f:bc:
6a:34:eb:e5:2a:30:45:d3:ab:d5:dd:90:06:6d:40:
68:85:43:0e:ba:6d:18:6d:77:ac:3a:5d:39:d8:5b:
df:e9:82:ad:d9:d2:c4:b0:3e:9a:f1:4a:8d:26:53:
eb:0a:6a:ca:d7:5b:ef:d1:bf:70:42:1b:fb:d1:7e:
7a:f8:98:68:b4:21:17:10:94:06:7e:89:ce:b8:cd:
cb:2d:26:3d:38:3d:68:8b:9d:ee:e7:f4:56:47:e8:
e6:87:f3:f8:f4:19:dc:97:65:1f:37:2c:9b:b4:1b:
04:6f:1f:c9:4e:be:31:7a:3a:58:01:3e:eb:32:73:
3b:41:87:49:6d:32:7f:9c:6c:97:13:bb:ee:98:86:
10:b2:39:bd:16:0d:8a:d9:e3:b4:b0:ff:20:cf:9a:
3b:1d:70:77:6e:72:a7:a1:a7:27:cd:22:26:28:4d:
0c:03:00:7d:8b:3f:05:fb:37:0d:a3:66:42:21:31:
44:df:97:e5:56:da:c5:a7:72:2a:75:8b:32:3c:e0:
91:67:b4:b5:8e:2d:a7:13:8e:f3:27:c4:9d:ad:a5:
dd:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:15:7E:9A:2E:89:2A:4A:3E:34:30:86:E3:4E:2E:3F:BB:C1:52:A4
X509v3 Authority Key Identifier:
keyid:E0:11:06:06:F5:24:DB:AA:53:8E:67:E1:23:CA:FB:C6:DF:33:86:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BEGBvUk26pTjmfhI8r7xt8zhsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:30:29:99:5c:d7:b6:bc:f1:26:f9:0e:c6:3f:ee:49:c3:26:
36:ce:3d:98:a2:03:6c:fb:2d:ce:59:0e:9b:1f:f4:b9:6e:4b:
1c:ab:47:c3:40:f3:6e:da:56:d5:e4:f1:2f:69:94:9d:cf:ea:
1e:47:45:cc:59:92:10:6b:f5:dd:df:18:b2:c9:d9:a1:9a:e0:
a7:1b:b0:f3:92:32:77:ff:59:0f:bf:e8:2a:d9:06:0b:5b:96:
de:1c:80:15:2a:19:df:d2:45:9e:ea:96:f3:db:63:fa:0e:30:
9a:06:93:05:43:97:22:01:b0:f7:bb:b4:e5:29:01:e0:44:2d:
cb:0b:4e:d7:2a:0c:5a:43:cd:31:41:f3:0a:b9:fc:95:f6:75:
73:39:33:11:f1:71:bf:13:4d:76:f5:c9:2d:86:67:9e:40:7d:
eb:92:20:78:ee:99:70:af:bf:12:01:a6:84:a6:fc:e6:59:1a:
26:3d:9d:47:39:64:ac:2b:12:1c:e6:9f:31:e1:86:38:d5:34:
79:1a:e1:80:bd:1a:e9:25:b3:31:e5:8e:d8:2f:87:03:51:8b:
66:56:8f:c4:db:b1:75:7b:04:c3:08:8a:62:1f:18:8f:a7:57:
ba:91:f5:f5:0e:89:23:b2:8d:b7:34:f7:a3:51:cb:5c:ff:ed:
18:94:cb:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGMVmfHUOptRR23jHqywIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwMTEwNjA2ZjUyNGRiYWE1MzhlNjdlMTIzY2FmYmM2ZGYz
Mzg2YzAwHhcNMjUxMTA0MDkwMDM3WhcNMjUxMTA1MDkwMDM3WjAzMTEwLwYDVQQD
Eyg3MjE1N2U5YTJlODkyYTRhM2UzNDMwODZlMzRlMmUzZmJiYzE1MmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGbM4f78suhQnzr85ctOxq9NHGOr
2dzzovC/bdL6C+JYWDxY1ZWeh9wIn7xqNOvlKjBF06vV3ZAGbUBohUMOum0YbXes
Ol052Fvf6YKt2dLEsD6a8UqNJlPrCmrK11vv0b9wQhv70X56+JhotCEXEJQGfonO
uM3LLSY9OD1oi53u5/RWR+jmh/P49Bncl2UfNyybtBsEbx/JTr4xejpYAT7rMnM7
QYdJbTJ/nGyXE7vumIYQsjm9Fg2K2eO0sP8gz5o7HXB3bnKnoacnzSImKE0MAwB9
iz8F+zcNo2ZCITFE35flVtrFp3IqdYsyPOCRZ7S1ji2nE47zJ8SdraXdGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHIVfpouiSpKPjQwhuNOLj+7wVKkMB8GA1UdIwQY
MBaAFOARBgb1JNuqU45n4SPK+8bfM4bAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEJFR0J2VWsyNnBUam1maEk4cjd4dDh6aHNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS83M2Y3NDktNDU2MC00YWJlLThkMGIt
ZTJjMWFiYWZhYTZjLzEvNEJFR0J2VWsyNnBUam1maEk4cjd4dDh6aHNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS83M2Y3NDktNDU2MC00YWJlLThkMGItZTJjMWFiYWZhYTZj
LzEvNEJFR0J2VWsyNnBUam1maEk4cjd4dDh6aHNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYTApmVzX
trzxJvkOxj/uScMmNs49mKIDbPstzlkOmx/0uW5LHKtHw0DzbtpW1eTxL2mUnc/q
HkdFzFmSEGv13d8YssnZoZrgpxuw85Iyd/9ZD7/oKtkGC1uW3hyAFSoZ39JFnuqW
89tj+g4wmgaTBUOXIgGw97u05SkB4EQtywtO1yoMWkPNMUHzCrn8lfZ1czkzEfFx
vxNNdvXJLYZnnkB965IgeO6ZcK+/EgGmhKb85lkaJj2dRzlkrCsSHOafMeGGONU0
eRrhgL0a6SWzMeWO2C+HA1GLZlaPxNuxdXsEwwiKYh8Yj6dXupH19Q6JI7KNtzT3
o1HLXP/tGJTLtg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:24 2025 by rpki-client