Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
File: s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft (raw, json)
Hash identifier: JV7pJsMsD5pFTnWfuxcL0sI1qXwRSDAeT1G3GZXIQ2M=
Subject key identifier: 3C:19:D6:E3:E3:4F:EA:59:5E:82:14:54:76:3B:A7:1D:4F:30:FA:44
Authority key identifier: B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9
Certificate issuer: /CN=b393df877bf2f0cf01a9718973eaeee87b0697d9
Certificate serial: 019A2B1EB851091B59F6FAC0032AA68E30B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
Manifest number: 10D6
Signing time: Tue 28 Oct 2025 14:00:24 +0000
Manifest this update: Tue 28 Oct 2025 14:00:24 +0000
Manifest next update: Wed 29 Oct 2025 14:00:24 +0000
Files and hashes: 1: GhdbZGuzA1z36-UUonZ5zaCX38Q.roa (hash: gEgIQ1ixFSRgI4FI7VMbdhgtgY8jLC1wmNutDGTQS80=)
2: NItMcfmuUtS9SnSR4ZKm4r93TXs.roa (hash: F3sutapYp582NIFvW6vfwf2KF7d5dSaqH83k0FhwJoc=)
3: QCQJObKakvoo4ygnw5Fh20FS0Ts.roa (hash: pr5RHo/glhDEkjitYcq1TogKj+NW5j/LUqIM2EWPEaw=)
4: UVdJ6rkBr4eKgNxEkOLstufV6r8.roa (hash: +gXeK3tudL2I9QvUvgp4q5Jq/oJHp1PYKMtr+laCpNs=)
5: VtsYZXVJAZoFqneDgMrcdY1ZLqo.roa (hash: iydD1kql5GaDH+9KnMFCTe4zA6F46avj8WklVHWfoCY=)
6: YaM_6GNAfAUY1a7EBWWPiZdkY80.roa (hash: imYp4kHblD7OJu3xkBBiybF6gSfL+pAE8EuXrkCO7Ws=)
7: eulbDis-0B0z9GbHcqEo9NdV9rU.roa (hash: r5N8Yg0+954vST6YgvvV4VsOdx/dWOgqxmrlpu8jwtw=)
8: peZQPUG6EREQXk9fJ6XL9FgtEhs.roa (hash: dkv5IIQlSg33elfikzY5ije40KJ3f2E2+53gSCvVzhE=)
9: s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl (hash: bRz5657A8zqhYcmr25ipo4U5JCyFOHIkmYuioSxEEg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:1e:b8:51:09:1b:59:f6:fa:c0:03:2a:a6:8e:30:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b393df877bf2f0cf01a9718973eaeee87b0697d9
Validity
Not Before: Oct 28 14:00:24 2025 GMT
Not After : Oct 29 14:00:24 2025 GMT
Subject: CN=3c19d6e3e34fea595e821454763ba71d4f30fa44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1a:14:8a:52:b6:73:3a:25:74:17:14:55:23:
85:84:43:a7:c8:ef:cd:5d:8e:bb:bb:ed:83:64:7c:
c1:1a:ac:36:7d:83:70:49:96:69:96:dc:13:be:45:
5d:38:33:37:ea:dc:a2:2c:96:d2:e4:c7:cf:8d:25:
eb:01:08:9f:6b:97:b7:f6:55:02:5c:8d:d9:a5:77:
0a:a5:95:c2:82:ad:78:f7:ab:01:34:19:57:b7:94:
f9:b3:ed:b7:0c:1b:24:bc:d2:26:13:57:70:cf:13:
b7:17:80:11:c7:1d:59:48:51:d7:31:59:d0:95:5f:
f1:56:2a:bd:f5:53:a4:99:9a:31:8f:ec:07:96:51:
9f:44:6e:76:15:46:cc:d7:e4:7f:d3:61:33:99:64:
c5:78:51:66:32:1f:e7:f1:0d:a2:5b:b3:31:fc:02:
27:f8:5a:77:f2:eb:27:6d:6b:1c:93:e5:6a:3c:99:
de:20:8a:b9:ff:84:61:4d:43:70:c5:72:d9:d1:80:
df:53:41:c6:7b:ec:1f:0d:97:22:b3:54:f7:75:77:
3a:20:78:2c:19:03:b4:09:62:13:fa:bc:dc:6f:18:
71:0b:2a:a2:5b:b3:c5:68:ca:3d:d8:4a:19:70:19:
cd:f3:53:f0:48:a4:dc:e8:90:24:cb:56:a9:b0:43:
36:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:19:D6:E3:E3:4F:EA:59:5E:82:14:54:76:3B:A7:1D:4F:30:FA:44
X509v3 Authority Key Identifier:
keyid:B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:95:3a:b7:9a:f1:49:90:87:18:40:03:60:5b:57:45:24:54:
77:96:43:26:48:27:22:37:4f:2d:17:82:18:37:ea:c7:44:71:
21:61:4c:c9:55:ca:f8:ed:06:62:2d:85:51:03:8e:82:ec:54:
f2:c8:0e:47:3b:50:d5:e6:65:7a:ac:e5:14:95:ee:63:89:ac:
f9:ff:ad:07:e9:e1:42:33:20:f8:c4:74:c6:7f:cb:e7:82:82:
1a:a9:17:1f:97:2b:42:50:cc:7d:23:b7:56:26:ad:53:6c:60:
bd:ed:7e:b5:bb:1b:b3:55:63:42:63:6f:c1:f5:76:2a:e7:fa:
f3:b6:54:96:ab:96:b6:72:0e:48:ea:71:0b:67:59:07:55:a9:
b7:5e:12:b0:c0:5a:7a:4f:62:b8:63:09:f8:33:9b:81:a2:d3:
7b:ad:78:3a:57:a0:07:92:b1:2a:7a:da:59:05:ce:78:74:ed:
03:1f:55:31:e0:df:1a:a3:a8:e2:eb:ed:b4:d0:2b:47:c7:b4:
58:5a:ae:09:2c:96:f4:3d:82:9e:c8:bd:38:fa:c7:79:a7:86:
21:e8:2c:c8:65:18:50:12:a5:8a:4e:53:18:23:16:44:e2:5f:
7c:57:ae:af:6d:6e:41:cc:ed:b9:08:4d:a4:df:9c:15:84:07:
de:33:36:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZorHrhRCRtZ9vrAAyqmjjC1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzOTNkZjg3N2JmMmYwY2YwMWE5NzE4OTczZWFlZWU4N2Iw
Njk3ZDkwHhcNMjUxMDI4MTQwMDI0WhcNMjUxMDI5MTQwMDI0WjAzMTEwLwYDVQQD
EygzYzE5ZDZlM2UzNGZlYTU5NWU4MjE0NTQ3NjNiYTcxZDRmMzBmYTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthoUilK2czoldBcUVSOFhEOnyO/N
XY67u+2DZHzBGqw2fYNwSZZpltwTvkVdODM36tyiLJbS5MfPjSXrAQifa5e39lUC
XI3ZpXcKpZXCgq1496sBNBlXt5T5s+23DBskvNImE1dwzxO3F4ARxx1ZSFHXMVnQ
lV/xViq99VOkmZoxj+wHllGfRG52FUbM1+R/02EzmWTFeFFmMh/n8Q2iW7Mx/AIn
+Fp38usnbWsck+VqPJneIIq5/4RhTUNwxXLZ0YDfU0HGe+wfDZcis1T3dXc6IHgs
GQO0CWIT+rzcbxhxCyqiW7PFaMo92EoZcBnN81PwSKTc6JAky1apsEM2YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDwZ1uPjT+pZXoIUVHY7px1PMPpEMB8GA1UdIwQY
MBaAFLOT34d78vDPAalxiXPq7uh7BpfZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczVQZmgzdnk4TThCcVhHSmMtcnU2SHNHbDlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi85Mzc1ZTMtMzc3ZS00YjcwLWJhMzYt
Mzk2YmM3MjBlMmI0LzEvczVQZmgzdnk4TThCcVhHSmMtcnU2SHNHbDlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi85Mzc1ZTMtMzc3ZS00YjcwLWJhMzYtMzk2YmM3MjBlMmI0
LzEvczVQZmgzdnk4TThCcVhHSmMtcnU2SHNHbDlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO5U6t5rx
SZCHGEADYFtXRSRUd5ZDJkgnIjdPLReCGDfqx0RxIWFMyVXK+O0GYi2FUQOOguxU
8sgORztQ1eZleqzlFJXuY4ms+f+tB+nhQjMg+MR0xn/L54KCGqkXH5crQlDMfSO3
ViatU2xgve1+tbsbs1VjQmNvwfV2Kuf687ZUlquWtnIOSOpxC2dZB1Wpt14SsMBa
ek9iuGMJ+DObgaLTe614OlegB5KxKnraWQXOeHTtAx9VMeDfGqOo4uvttNArR8e0
WFquCSyW9D2Cnsi9OPrHeaeGIegsyGUYUBKlik5TGCMWROJffFeur21uQcztuQhN
pN+cFYQH3jM2+Q==
-----END CERTIFICATE-----
Generated at Tue Oct 28 22:15:20 2025 by rpki-client