Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
File: dE4TPKDK2fH9FhWAWQspbbIjCM4.mft (raw, json)
Hash identifier: hFJQCG8N9WNuCrgYcbRlwCnsJ6T1BnSKHEWwcl3I5MQ=
Subject key identifier: CA:DF:2B:A8:B9:D5:A7:A4:82:00:DE:19:1F:19:1A:C9:5C:14:E3:E8
Authority key identifier: 74:4E:13:3C:A0:CA:D9:F1:FD:16:15:80:59:0B:29:6D:B2:23:08:CE
Certificate issuer: /CN=744e133ca0cad9f1fd161580590b296db22308ce
Certificate serial: 019A4D079CDB76B2290E4AC02F209A3F4E27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
Manifest number: 0AC0
Signing time: Tue 04 Nov 2025 04:02:15 +0000
Manifest this update: Tue 04 Nov 2025 04:02:15 +0000
Manifest next update: Wed 05 Nov 2025 04:02:15 +0000
Files and hashes: 1: TP6kkH0vZwohnuu8LaNGGzK2bx4.roa (hash: 5TOk/KFa4qvBJB1w3rUK12jUjLhZzxVEKo+9hT469YM=)
2: dE4TPKDK2fH9FhWAWQspbbIjCM4.crl (hash: AMxbuGYyoUof6nDP1t2OYeby8RuRgWlRT1ZkqSezHoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:9c:db:76:b2:29:0e:4a:c0:2f:20:9a:3f:4e:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744e133ca0cad9f1fd161580590b296db22308ce
Validity
Not Before: Nov 4 04:02:15 2025 GMT
Not After : Nov 5 04:02:15 2025 GMT
Subject: CN=cadf2ba8b9d5a7a48200de191f191ac95c14e3e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:95:95:f9:73:f0:b7:8c:6d:3f:59:41:be:c6:
d1:63:1f:8e:17:d9:6a:28:da:db:ca:c7:a3:4e:4c:
f7:66:a7:87:7c:26:a8:a8:67:1d:d7:4b:c8:b3:c6:
85:ca:f1:88:19:41:5a:c6:90:12:c1:00:7f:c5:2b:
19:8d:5e:6f:15:44:1a:34:a9:d1:3e:b9:0d:62:96:
b2:39:62:05:b6:cf:91:73:2d:6d:02:fb:4a:af:34:
95:38:08:98:c3:cf:d7:e6:da:55:2b:20:f3:f5:a3:
59:ab:58:55:6a:e2:95:5b:82:17:a2:13:d0:a1:19:
db:3c:b8:82:39:37:77:6a:3a:ff:c6:77:27:5c:5d:
24:36:ec:eb:39:04:47:2b:40:6a:0d:c9:f0:20:dc:
71:dc:7d:6d:12:11:f6:9e:0e:58:71:8a:da:05:c1:
a6:b7:b8:90:5e:db:e4:34:de:f5:8b:be:2d:43:42:
c4:d9:22:7b:e0:cd:df:82:12:7c:61:0a:cd:e2:e9:
b0:23:2e:a8:e5:e0:6a:ea:c3:1f:ac:31:2c:35:b2:
d0:7a:a8:44:3b:cd:9a:55:9b:61:e9:5a:e6:ca:7a:
5c:d7:b4:9c:82:8c:ff:aa:d1:c9:6b:a4:d6:bd:7d:
9f:e5:04:c9:7d:0e:36:e8:d6:13:30:5e:59:b0:23:
88:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:DF:2B:A8:B9:D5:A7:A4:82:00:DE:19:1F:19:1A:C9:5C:14:E3:E8
X509v3 Authority Key Identifier:
keyid:74:4E:13:3C:A0:CA:D9:F1:FD:16:15:80:59:0B:29:6D:B2:23:08:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:f7:8d:86:83:37:4c:a5:11:11:5c:c7:6c:f3:0d:4c:78:3f:
eb:97:fb:ca:d4:66:15:2c:7b:0b:44:47:7a:01:3b:c6:16:31:
a2:5a:80:06:f8:6e:c2:43:0a:d2:7e:af:89:04:9c:ce:7f:85:
aa:f5:fe:d1:26:00:c6:37:3b:47:f8:9d:75:e7:ee:e1:70:0e:
35:71:f6:f4:ef:0b:a6:d2:e5:b2:fd:20:a5:22:e2:79:fb:d1:
6f:11:cc:5c:6b:e7:da:3c:b9:5b:c8:d1:f0:29:80:e3:b8:d3:
45:23:3d:ba:f2:da:ea:a5:d7:39:5a:dc:52:84:63:f8:10:84:
da:c7:4b:a5:67:e6:a7:ec:76:2f:2a:d7:5d:e2:a5:19:51:80:
7d:6c:3c:e3:cf:7d:21:7d:0f:35:17:3e:43:3a:4b:af:00:7c:
3b:cd:42:72:51:06:d1:75:30:a0:63:f0:a6:0d:78:9f:b8:c0:
04:b3:be:9b:7f:c7:d6:b3:92:ba:ca:20:f4:d6:6e:b9:b7:e6:
06:d7:76:29:58:f3:98:e0:8e:72:2a:43:04:51:3c:76:af:64:
0f:f3:15:9a:db:3c:50:27:8a:6e:d3:35:5c:64:90:78:df:7d:
78:93:37:e5:96:9d:c6:52:e9:b6:14:31:ee:f5:a4:49:42:7d:
aa:1c:bc:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNB5zbdrIpDkrALyCaP04nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NGUxMzNjYTBjYWQ5ZjFmZDE2MTU4MDU5MGIyOTZkYjIy
MzA4Y2UwHhcNMjUxMTA0MDQwMjE1WhcNMjUxMTA1MDQwMjE1WjAzMTEwLwYDVQQD
EyhjYWRmMmJhOGI5ZDVhN2E0ODIwMGRlMTkxZjE5MWFjOTVjMTRlM2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5WV+XPwt4xtP1lBvsbRYx+OF9lq
KNrbysejTkz3ZqeHfCaoqGcd10vIs8aFyvGIGUFaxpASwQB/xSsZjV5vFUQaNKnR
PrkNYpayOWIFts+Rcy1tAvtKrzSVOAiYw8/X5tpVKyDz9aNZq1hVauKVW4IXohPQ
oRnbPLiCOTd3ajr/xncnXF0kNuzrOQRHK0BqDcnwINxx3H1tEhH2ng5YcYraBcGm
t7iQXtvkNN71i74tQ0LE2SJ74M3fghJ8YQrN4umwIy6o5eBq6sMfrDEsNbLQeqhE
O82aVZth6Vrmynpc17Scgoz/qtHJa6TWvX2f5QTJfQ426NYTMF5ZsCOIXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMrfK6i51aekggDeGR8ZGslcFOPoMB8GA1UdIwQY
MBaAFHROEzygytnx/RYVgFkLKW2yIwjOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEU0VFBLREsyZkg5RmhXQVdRc3BiYklqQ000LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9iNDExOTAtZGEyOC00MzAxLTkwYzUt
OTVhNGVmNDNjMjE1LzEvZEU0VFBLREsyZkg5RmhXQVdRc3BiYklqQ000Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9iNDExOTAtZGEyOC00MzAxLTkwYzUtOTVhNGVmNDNjMjE1
LzEvZEU0VFBLREsyZkg5RmhXQVdRc3BiYklqQ000LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhveNhoM3
TKUREVzHbPMNTHg/65f7ytRmFSx7C0RHegE7xhYxolqABvhuwkMK0n6viQSczn+F
qvX+0SYAxjc7R/iddefu4XAONXH29O8LptLlsv0gpSLiefvRbxHMXGvn2jy5W8jR
8CmA47jTRSM9uvLa6qXXOVrcUoRj+BCE2sdLpWfmp+x2LyrXXeKlGVGAfWw84899
IX0PNRc+QzpLrwB8O81CclEG0XUwoGPwpg14n7jABLO+m3/H1rOSusog9NZuubfm
Btd2KVjzmOCOcipDBFE8dq9kD/MVmts8UCeKbtM1XGSQeN99eJM35ZadxlLpthQx
7vWkSUJ9qhy88Q==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:55:00 2025 by rpki-client