Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft
File: sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft (raw, json)
Hash identifier: tEWtwh5DfbZUqolkEJA05U8nEIEaD22ZAjKvv/0Gj58=
Subject key identifier: C1:6D:2E:32:6B:5E:0D:1E:AF:76:4D:02:C6:2F:8C:60:25:28:E6:A2
Authority key identifier: B1:CD:C2:6D:44:EA:F8:56:54:48:1E:95:81:04:3E:14:88:77:65:B4
Certificate issuer: /CN=b1cdc26d44eaf85654481e9581043e14887765b4
Certificate serial: 019A71808A0EB445DC7B1A701520A22BFA6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft
Manifest number: 127A
Signing time: Tue 11 Nov 2025 06:00:40 +0000
Manifest this update: Tue 11 Nov 2025 06:00:40 +0000
Manifest next update: Wed 12 Nov 2025 06:00:40 +0000
Files and hashes: 1: 1yRED3DLRuGHiDRGq2BJfqb4Zqo.roa (hash: A0EcYSNMbodN6e0h1ex8R5EJse986btPlyr9ZhoJg/Q=)
2: H01ntKK0r8APxCOVN-CK85R5ZWE.roa (hash: oVsMYFAHfuRHFJ8dBLy1BmqZhlpZjkZZOD+7Y4uxLr4=)
3: nzP88bjh-XEZ2kCW3oiiu2uSEHc.roa (hash: Kf5r0P3IvTLCYpsr+vk6c4IGLFB/DHZsFGgImWavBWE=)
4: sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl (hash: NbOB17WfufHQglggzx9VPAubEBFpRvK0yl9n3uo4C5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:8a:0e:b4:45:dc:7b:1a:70:15:20:a2:2b:fa:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1cdc26d44eaf85654481e9581043e14887765b4
Validity
Not Before: Nov 11 06:00:40 2025 GMT
Not After : Nov 12 06:00:40 2025 GMT
Subject: CN=c16d2e326b5e0d1eaf764d02c62f8c602528e6a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f7:44:d1:f4:c1:75:0c:a7:dd:3c:ca:b6:8d:
73:50:2f:f7:87:6c:fb:6c:08:6f:91:44:2c:1c:18:
1e:aa:31:18:1f:e7:99:f1:cd:60:10:4e:a8:f9:20:
6c:b6:1c:15:80:8e:8c:ba:2e:c7:36:f3:49:3d:65:
0a:37:11:b2:11:2f:8a:76:ff:4d:fe:98:ea:5b:e9:
27:8e:d5:54:b1:2c:4a:61:2c:a5:94:e4:d0:c7:b1:
4e:23:1c:64:88:2a:4a:c1:dc:dd:1c:92:8e:58:6f:
6b:80:6c:46:0f:eb:9d:9f:93:1f:9e:6a:17:9a:f9:
11:3b:83:97:29:7d:b7:64:1d:d3:c2:2f:fe:ef:61:
a3:bf:dc:92:8c:fa:67:19:06:3f:3c:18:06:7d:e4:
29:07:aa:ee:e1:00:fd:9d:7a:fb:4b:6a:cc:ea:db:
0f:ca:c4:83:66:9f:e2:72:36:0d:83:ef:f8:87:f6:
c2:8f:b0:9a:65:bf:21:d5:a0:2c:29:a0:15:88:f9:
9b:a1:d2:2d:2b:0e:bf:e6:81:b9:c0:81:50:a0:da:
2a:6f:06:88:6c:22:1e:69:d5:8e:34:4f:b9:e9:a2:
95:c4:72:83:9b:17:2f:ad:33:e7:9e:5e:fc:34:98:
20:13:17:e4:51:8a:a7:41:11:1b:9b:c4:97:d9:4d:
81:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:6D:2E:32:6B:5E:0D:1E:AF:76:4D:02:C6:2F:8C:60:25:28:E6:A2
X509v3 Authority Key Identifier:
keyid:B1:CD:C2:6D:44:EA:F8:56:54:48:1E:95:81:04:3E:14:88:77:65:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:55:77:30:fe:b3:52:8b:fe:c3:0a:07:d0:56:10:32:1f:80:
4d:dd:82:7e:12:9c:a4:bd:fc:5f:c1:15:7f:5e:75:4d:a4:61:
09:cd:0e:06:45:9c:cb:40:6e:79:3d:6f:6a:52:50:00:4f:8c:
00:67:85:ce:e6:61:5c:48:01:39:b6:c1:1d:de:b0:f4:15:c6:
e4:6e:52:dc:97:14:94:a9:e3:35:82:1b:67:54:eb:33:3d:d7:
c4:6e:1f:b9:d6:25:8b:e8:4f:ed:a8:1c:83:9a:37:59:46:6e:
ea:50:e3:86:aa:c0:e0:b2:a2:41:bb:5d:03:7a:0f:1d:43:f5:
5b:ac:93:5b:41:b6:e2:03:f9:1a:21:be:74:f2:d2:16:17:eb:
35:7c:1b:7f:e4:85:89:20:e9:ff:38:de:4c:f4:b0:7e:fe:6b:
74:8f:8c:16:b3:eb:48:12:d5:56:c3:55:6f:5b:26:01:91:00:
a2:54:1b:d6:9d:33:8a:18:e4:e0:d3:a5:14:67:f1:9d:68:73:
67:43:4f:36:7a:9d:62:ff:cf:40:41:7a:a3:b0:4e:13:88:a9:
82:6e:53:23:1b:b0:a0:4a:5b:b0:94:45:d0:f1:bb:d6:39:6c:
79:07:66:a7:a0:74:b5:64:40:0d:4e:94:47:18:25:ad:33:49:
6b:84:65:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxgIoOtEXcexpwFSCiK/prMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxY2RjMjZkNDRlYWY4NTY1NDQ4MWU5NTgxMDQzZTE0ODg3
NzY1YjQwHhcNMjUxMTExMDYwMDQwWhcNMjUxMTEyMDYwMDQwWjAzMTEwLwYDVQQD
EyhjMTZkMmUzMjZiNWUwZDFlYWY3NjRkMDJjNjJmOGM2MDI1MjhlNmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfdE0fTBdQyn3TzKto1zUC/3h2z7
bAhvkUQsHBgeqjEYH+eZ8c1gEE6o+SBsthwVgI6Mui7HNvNJPWUKNxGyES+Kdv9N
/pjqW+knjtVUsSxKYSyllOTQx7FOIxxkiCpKwdzdHJKOWG9rgGxGD+udn5MfnmoX
mvkRO4OXKX23ZB3Twi/+72Gjv9ySjPpnGQY/PBgGfeQpB6ru4QD9nXr7S2rM6tsP
ysSDZp/icjYNg+/4h/bCj7CaZb8h1aAsKaAViPmbodItKw6/5oG5wIFQoNoqbwaI
bCIeadWONE+56aKVxHKDmxcvrTPnnl78NJggExfkUYqnQREbm8SX2U2BhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMFtLjJrXg0er3ZNAsYvjGAlKOaiMB8GA1UdIwQY
MBaAFLHNwm1E6vhWVEgelYEEPhSId2W0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2MzQ2JVVHEtRlpVU0I2VmdRUS1GSWgzWmJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9hYWFkYWMtNDgwOS00OTU1LWFjNjIt
OGY5Y2EwZWJjY2FiLzEvc2MzQ2JVVHEtRlpVU0I2VmdRUS1GSWgzWmJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9hYWFkYWMtNDgwOS00OTU1LWFjNjItOGY5Y2EwZWJjY2Fi
LzEvc2MzQ2JVVHEtRlpVU0I2VmdRUS1GSWgzWmJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANFV3MP6z
Uov+wwoH0FYQMh+ATd2CfhKcpL38X8EVf151TaRhCc0OBkWcy0BueT1valJQAE+M
AGeFzuZhXEgBObbBHd6w9BXG5G5S3JcUlKnjNYIbZ1TrMz3XxG4fudYli+hP7agc
g5o3WUZu6lDjhqrA4LKiQbtdA3oPHUP1W6yTW0G24gP5GiG+dPLSFhfrNXwbf+SF
iSDp/zjeTPSwfv5rdI+MFrPrSBLVVsNVb1smAZEAolQb1p0zihjk4NOlFGfxnWhz
Z0NPNnqdYv/PQEF6o7BOE4ipgm5TIxuwoEpbsJRF0PG71jlseQdmp6B0tWRADU6U
RxglrTNJa4RlAg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:52:04 2025 by rpki-client