Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
File: rJCSu8LKyuJHd09isP29xEqXTPI.mft (raw, json)
Hash identifier: 33iHy+DxARMEycAYIPhgtqgQ/vM/bP5TyFJGJb5MZzk=
Subject key identifier: 91:07:44:F3:06:AF:95:46:D1:F4:FD:47:16:B5:CB:96:FE:B1:5E:33
Authority key identifier: AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2
Certificate issuer: /CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2
Certificate serial: 019A24E63EEE263B0553E79F16B980541552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
Manifest number: 11C7
Signing time: Mon 27 Oct 2025 09:01:00 +0000
Manifest this update: Mon 27 Oct 2025 09:01:00 +0000
Manifest next update: Tue 28 Oct 2025 09:01:00 +0000
Files and hashes: 1: 50rNnFjazBYlu5lhZ-PnYemFhBU.roa (hash: TBn3PnK+MHsgG76RW1zj1H988aqSsXlA0MWIu2a6Dcs=)
2: Vt5KxzBthC81S5sv3v-peJs8Jfk.roa (hash: c9wa8mQEOam5sr33r5+tzZ9hrdt5UdjNVihhkrpnKdw=)
3: fL9MJjH2uZSPAsEqBzR-tRM2cJo.roa (hash: F7hAcwIBSQhJTiFeaos197lpjHo7B2FuCmRxN0q9JC0=)
4: rJCSu8LKyuJHd09isP29xEqXTPI.crl (hash: bvan8CZJyqC+y8piwmEew9O0qoM3U0l0p6TTuOjRCUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:e6:3e:ee:26:3b:05:53:e7:9f:16:b9:80:54:15:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2
Validity
Not Before: Oct 27 09:01:00 2025 GMT
Not After : Oct 28 09:01:00 2025 GMT
Subject: CN=910744f306af9546d1f4fd4716b5cb96feb15e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:68:d5:9a:f0:e4:52:2d:bb:e1:4b:22:08:5e:
ce:0f:3b:2d:09:7a:bc:16:d6:52:e8:49:b9:72:8d:
b5:2e:df:f8:61:ed:9b:57:7c:6b:2c:ec:e7:34:dd:
9a:dd:9f:89:96:db:1f:44:82:5f:1a:07:d9:76:36:
65:d0:e7:37:ad:24:9b:44:11:05:29:aa:f9:a7:15:
c8:e4:9c:c0:f2:4c:43:58:93:3a:97:d5:90:de:c0:
89:80:6c:dd:bf:52:c2:43:5c:0b:5e:61:07:26:66:
f2:bc:19:75:54:bb:4d:8d:14:d7:d4:cf:cd:24:69:
e9:d0:1a:42:c1:cb:fd:a5:cd:4a:c2:82:4a:5b:5e:
df:05:9d:b6:af:c6:92:16:28:a0:26:b7:9f:6c:18:
8c:ad:9b:5f:2b:ab:d4:35:9a:57:14:c9:2b:e5:76:
41:06:a6:a2:7d:1f:90:8e:5a:2a:74:19:56:c0:c8:
56:48:4d:46:4d:72:39:72:cd:0b:08:2e:80:6b:02:
b0:36:36:0d:57:5b:cc:63:ad:3f:fe:6a:41:aa:49:
0e:72:98:96:34:0c:3a:14:a1:0e:52:fb:0d:24:4b:
f3:06:8e:4d:f6:dc:14:9c:90:87:84:28:8c:d9:4a:
fc:ed:fa:d8:df:00:aa:0d:8c:55:00:e9:cc:2b:58:
e5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:07:44:F3:06:AF:95:46:D1:F4:FD:47:16:B5:CB:96:FE:B1:5E:33
X509v3 Authority Key Identifier:
keyid:AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:2c:af:54:16:bc:f3:79:a9:34:a5:46:ef:79:8c:0d:3b:fe:
7c:83:f6:bb:24:3e:06:79:73:3f:31:ce:57:e2:44:d7:a3:04:
b7:78:0c:ed:a6:48:39:6f:a5:a8:d0:4d:20:d9:42:60:4b:ec:
a7:3b:21:b4:4b:01:25:9e:8e:3a:40:9e:43:10:9e:f4:28:03:
94:66:5b:38:eb:c4:c0:41:cf:08:56:ea:b5:3c:a3:03:1c:c4:
78:18:51:e0:27:48:89:08:c3:1d:b1:75:43:f7:36:0a:4b:60:
26:01:56:e2:77:6a:4f:be:90:32:30:21:92:d0:6d:76:db:f6:
21:89:cb:23:87:39:1e:26:f5:07:22:60:7a:3f:0f:42:52:5d:
6d:0b:d3:24:b4:62:51:51:a0:2e:c4:73:cf:e7:a4:34:29:16:
91:52:df:03:62:25:78:05:9f:cc:4c:c3:33:d8:f5:88:24:3d:
63:70:b3:3e:6f:e8:e9:c0:99:fd:c2:b9:df:87:a9:9d:05:b5:
3f:71:d3:06:f4:58:dd:d0:34:67:b5:b5:98:fb:0b:3a:87:20:
35:99:67:ee:7a:74:16:a4:36:47:00:80:71:84:2d:31:40:26:
39:46:81:57:6e:72:05:7d:d9:43:41:f3:83:94:95:e3:88:e3:
56:cd:73:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZok5j7uJjsFU+efFrmAVBVSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjOTA5MmJiYzJjYWNhZTI0Nzc3NGY2MmIwZmRiZGM0NGE5
NzRjZjIwHhcNMjUxMDI3MDkwMTAwWhcNMjUxMDI4MDkwMTAwWjAzMTEwLwYDVQQD
Eyg5MTA3NDRmMzA2YWY5NTQ2ZDFmNGZkNDcxNmI1Y2I5NmZlYjE1ZTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWjVmvDkUi274UsiCF7ODzstCXq8
FtZS6Em5co21Lt/4Ye2bV3xrLOznNN2a3Z+JltsfRIJfGgfZdjZl0Oc3rSSbRBEF
Kar5pxXI5JzA8kxDWJM6l9WQ3sCJgGzdv1LCQ1wLXmEHJmbyvBl1VLtNjRTX1M/N
JGnp0BpCwcv9pc1KwoJKW17fBZ22r8aSFiigJrefbBiMrZtfK6vUNZpXFMkr5XZB
BqaifR+QjloqdBlWwMhWSE1GTXI5cs0LCC6AawKwNjYNV1vMY60//mpBqkkOcpiW
NAw6FKEOUvsNJEvzBo5N9twUnJCHhCiM2Ur87frY3wCqDYxVAOnMK1jlJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJEHRPMGr5VG0fT9Rxa1y5b+sV4zMB8GA1UdIwQY
MBaAFKyQkrvCysriR3dPYrD9vcRKl0zyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckpDU3U4TEt5dUpIZDA5aXNQMjl4RXFYVFBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9jOTYzNDktMGEyMi00MjQ3LTk5NDMt
YTNmYzE5NmFhYmIzLzEvckpDU3U4TEt5dUpIZDA5aXNQMjl4RXFYVFBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9jOTYzNDktMGEyMi00MjQ3LTk5NDMtYTNmYzE5NmFhYmIz
LzEvckpDU3U4TEt5dUpIZDA5aXNQMjl4RXFYVFBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApyyvVBa8
83mpNKVG73mMDTv+fIP2uyQ+BnlzPzHOV+JE16MEt3gM7aZIOW+lqNBNINlCYEvs
pzshtEsBJZ6OOkCeQxCe9CgDlGZbOOvEwEHPCFbqtTyjAxzEeBhR4CdIiQjDHbF1
Q/c2CktgJgFW4ndqT76QMjAhktBtdtv2IYnLI4c5Hib1ByJgej8PQlJdbQvTJLRi
UVGgLsRzz+ekNCkWkVLfA2IleAWfzEzDM9j1iCQ9Y3CzPm/o6cCZ/cK534epnQW1
P3HTBvRY3dA0Z7W1mPsLOocgNZln7np0FqQ2RwCAcYQtMUAmOUaBV25yBX3ZQ0Hz
g5SV44jjVs1zoA==
-----END CERTIFICATE-----
Generated at Mon Oct 27 11:45:34 2025 by rpki-client