Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.mft
File: d7yR94ozULrLv743b4gTIS0UmTE.mft (raw, json)
Hash identifier: 4bcrUTHhX6KEN6h4hSuO/LQVFfZdc2bxkiwvSD4j0hU=
Subject key identifier: 27:6C:07:A7:D5:27:92:18:DA:92:DC:81:00:31:40:5C:B1:8A:5E:B1
Authority key identifier: 77:BC:91:F7:8A:33:50:BA:CB:BF:BE:37:6F:88:13:21:2D:14:99:31
Certificate issuer: /CN=77bc91f78a3350bacbbfbe376f8813212d149931
Certificate serial: 019A714A25F89E8E0CDF5CC086EB1E4E4D2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7yR94ozULrLv743b4gTIS0UmTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 05:01:15 +0000
Manifest this update: Tue 11 Nov 2025 05:01:15 +0000
Manifest next update: Wed 12 Nov 2025 05:01:15 +0000
Files and hashes: 1: 1-1kKr9VJ8bw_SUqQcMUBecH1TKg.roa (hash: 3o6hb5np+9u5Gu9cp0jYxsJnhLz7Y1oIDpNf2dIi2oE=)
2: d7yR94ozULrLv743b4gTIS0UmTE.crl (hash: /d4wrGjg5MM/zONSeFqzVQqXZgy3su4RStycizbxtvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/d7yR94ozULrLv743b4gTIS0UmTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:25:f8:9e:8e:0c:df:5c:c0:86:eb:1e:4e:4d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77bc91f78a3350bacbbfbe376f8813212d149931
Validity
Not Before: Nov 11 05:01:15 2025 GMT
Not After : Nov 12 05:01:15 2025 GMT
Subject: CN=276c07a7d5279218da92dc810031405cb18a5eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6a:9c:d3:cd:54:93:bc:e6:f2:9c:e0:d4:d7:
5a:e8:b5:d6:15:82:c6:e8:3c:ab:7a:fe:02:08:c0:
14:92:92:ef:35:8b:e7:53:53:57:83:68:5e:a5:02:
98:55:12:28:d3:3c:7c:a6:26:06:af:ef:9c:45:db:
c1:fe:79:92:14:70:62:6f:4c:d6:0a:6f:f0:bd:b8:
d6:75:1f:05:f4:be:01:88:d5:65:b0:09:b3:cd:de:
64:39:c8:c6:fc:be:7a:b2:b9:50:0e:9d:02:f6:40:
a7:ca:b4:43:46:d0:0c:10:aa:64:32:af:b2:52:d6:
f3:1d:24:cb:42:7d:3f:3b:25:3c:4c:66:41:c8:4d:
c3:f1:52:e9:11:28:2c:d0:b2:0b:f2:fa:61:29:96:
c1:21:14:d7:ab:c9:78:d6:82:a4:cd:2c:5f:cf:47:
79:1a:d3:05:b4:5d:cd:e4:64:7f:51:57:6c:22:70:
a5:b5:f1:31:cd:f1:cf:02:76:cf:82:29:a0:7e:aa:
7d:97:4a:83:3b:1c:66:2c:8b:2e:0b:2b:30:dd:ed:
2d:fd:08:dc:a2:1d:00:12:08:10:76:46:25:63:99:
08:6b:4c:5a:e1:3f:70:ee:fb:51:69:98:10:5b:bd:
bc:dd:f4:ff:44:99:36:2c:be:74:f6:0e:ad:9b:36:
77:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:6C:07:A7:D5:27:92:18:DA:92:DC:81:00:31:40:5C:B1:8A:5E:B1
X509v3 Authority Key Identifier:
keyid:77:BC:91:F7:8A:33:50:BA:CB:BF:BE:37:6F:88:13:21:2D:14:99:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7yR94ozULrLv743b4gTIS0UmTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:7e:1a:4b:f3:d7:c3:ce:40:d9:74:d0:03:48:09:29:68:97:
5a:1d:5f:4a:c0:0e:7e:29:e6:05:d3:c1:4d:9f:9c:dc:71:e1:
b5:52:4a:d9:fd:ac:f7:12:16:f5:fb:b6:73:84:2e:49:38:b4:
57:38:9c:84:24:2c:8c:2f:ae:83:3d:98:be:1a:39:83:09:3f:
2c:d5:dd:4e:26:5c:fd:8d:80:22:99:3d:a6:f9:b1:99:1a:6c:
34:8c:8c:3b:15:d2:96:ff:9f:46:e2:1e:d8:23:c6:eb:8e:21:
af:b1:19:13:ce:f8:58:fa:6d:63:0b:b4:e7:c2:93:d1:1f:2f:
1a:78:9a:20:fd:7d:22:c1:2d:cc:c1:69:25:ee:c1:66:6d:8b:
bb:8c:98:73:b9:61:de:27:da:48:54:ea:27:02:53:d0:42:0c:
6b:fa:05:07:63:da:4d:23:f1:fb:68:f9:6d:d6:40:c0:71:86:
bf:69:f9:90:88:a2:5f:b3:4e:51:c7:97:4d:ef:31:27:d1:f4:
dd:12:ba:41:3b:fa:01:f2:74:58:60:45:3e:7a:a0:90:7f:7a:
5a:9f:e8:e7:84:23:97:ea:5b:1c:8b:f6:21:3c:a6:86:a9:50:
80:90:1a:7e:1d:96:7e:2a:d7:8f:c0:cf:97:df:e6:c0:58:6e:
66:b3:d5:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSiX4no4M31zAhuseTk0tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YmM5MWY3OGEzMzUwYmFjYmJmYmUzNzZmODgxMzIxMmQx
NDk5MzEwHhcNMjUxMTExMDUwMTE1WhcNMjUxMTEyMDUwMTE1WjAzMTEwLwYDVQQD
EygyNzZjMDdhN2Q1Mjc5MjE4ZGE5MmRjODEwMDMxNDA1Y2IxOGE1ZWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2qc081Uk7zm8pzg1Nda6LXWFYLG
6Dyrev4CCMAUkpLvNYvnU1NXg2hepQKYVRIo0zx8piYGr++cRdvB/nmSFHBib0zW
Cm/wvbjWdR8F9L4BiNVlsAmzzd5kOcjG/L56srlQDp0C9kCnyrRDRtAMEKpkMq+y
UtbzHSTLQn0/OyU8TGZByE3D8VLpESgs0LIL8vphKZbBIRTXq8l41oKkzSxfz0d5
GtMFtF3N5GR/UVdsInCltfExzfHPAnbPgimgfqp9l0qDOxxmLIsuCysw3e0t/Qjc
oh0AEggQdkYlY5kIa0xa4T9w7vtRaZgQW7283fT/RJk2LL509g6tmzZ3/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCdsB6fVJ5IY2pLcgQAxQFyxil6xMB8GA1UdIwQY
MBaAFHe8kfeKM1C6y7++N2+IEyEtFJkxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDd5Ujk0b3pVTHJMdjc0M2I0Z1RJUzBVbVRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9mOTJiOWYtNDc1OC00NDI4LWEyMmMt
OWRiNTdjM2ZlNDFkLzEvZDd5Ujk0b3pVTHJMdjc0M2I0Z1RJUzBVbVRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9mOTJiOWYtNDc1OC00NDI4LWEyMmMtOWRiNTdjM2ZlNDFk
LzEvZDd5Ujk0b3pVTHJMdjc0M2I0Z1RJUzBVbVRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHX4aS/PX
w85A2XTQA0gJKWiXWh1fSsAOfinmBdPBTZ+c3HHhtVJK2f2s9xIW9fu2c4QuSTi0
VzichCQsjC+ugz2Yvho5gwk/LNXdTiZc/Y2AIpk9pvmxmRpsNIyMOxXSlv+fRuIe
2CPG644hr7EZE874WPptYwu058KT0R8vGniaIP19IsEtzMFpJe7BZm2Lu4yYc7lh
3ifaSFTqJwJT0EIMa/oFB2PaTSPx+2j5bdZAwHGGv2n5kIiiX7NOUceXTe8xJ9H0
3RK6QTv6AfJ0WGBFPnqgkH96Wp/o54Qjl+pbHIv2ITymhqlQgJAafh2WfirXj8DP
l9/mwFhuZrPVFg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:32 2025 by rpki-client