Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.mft
File: LclV9MLHFXq72_6AnPGVYFlJppg.mft (raw, json)
Hash identifier: 8s9+I3P3SNyOfjrBizYrIn2eGyF3JRop7hfVkWWX4N4=
Subject key identifier: 78:2D:2F:F5:ED:F2:24:CA:91:B9:2D:15:2F:43:3F:BC:68:F3:C0:21
Authority key identifier: 2D:C9:55:F4:C2:C7:15:7A:BB:DB:FE:80:9C:F1:95:60:59:49:A6:98
Certificate issuer: /CN=2dc955f4c2c7157abbdbfe809cf195605949a698
Certificate serial: 019A72262ADA593450B8E1C3E379E15B52CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LclV9MLHFXq72_6AnPGVYFlJppg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.mft
Manifest number: 0428
Signing time: Tue 11 Nov 2025 09:01:35 +0000
Manifest this update: Tue 11 Nov 2025 09:01:35 +0000
Manifest next update: Wed 12 Nov 2025 09:01:35 +0000
Files and hashes: 1: IP4ujJVqk5UohCLCA6tGHFm6tpQ.roa (hash: u2FH+am0hxvosviHA7cG2t5BKioAL7DxGSIWvLxxQUo=)
2: LclV9MLHFXq72_6AnPGVYFlJppg.crl (hash: 4bZH+i/EJBvPcK7HSKsnWWIul3eh9ZILhtLJKdCjQhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LclV9MLHFXq72_6AnPGVYFlJppg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:2a:da:59:34:50:b8:e1:c3:e3:79:e1:5b:52:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dc955f4c2c7157abbdbfe809cf195605949a698
Validity
Not Before: Nov 11 09:01:35 2025 GMT
Not After : Nov 12 09:01:35 2025 GMT
Subject: CN=782d2ff5edf224ca91b92d152f433fbc68f3c021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:83:eb:2e:0a:c2:fb:12:19:82:e5:0c:3c:16:
78:a9:7e:96:24:ee:d5:08:90:a6:a3:de:62:72:31:
9a:5e:7b:fa:e4:7d:02:20:3f:83:f2:a4:69:ff:bc:
4a:07:6f:a5:87:90:6a:4c:13:ee:a0:54:23:98:c9:
53:2a:1b:73:2b:07:97:1c:37:de:b1:78:32:5c:66:
94:41:d7:6c:54:b8:29:c5:d2:15:6b:20:e1:19:17:
e2:bb:91:ea:51:a1:cf:eb:92:71:6f:8d:ad:8f:95:
78:ea:2f:ed:30:30:a8:b3:f8:9f:b7:06:97:98:53:
7e:91:ec:44:3d:b2:a8:eb:98:bc:02:43:a2:d4:95:
ab:ef:1c:3b:9a:4e:bc:cc:7c:3e:f9:a2:d4:17:b1:
ef:9b:ea:db:2f:b4:41:9c:ac:da:39:c6:c9:c4:82:
80:c5:2c:35:76:3c:4f:bc:ee:23:26:96:c9:35:48:
e5:c8:39:7c:f1:6d:4e:92:94:b9:16:47:4b:ee:6c:
53:fd:c5:b4:b9:c0:12:83:09:91:16:ce:e8:15:79:
17:b9:7d:00:a8:ff:17:96:58:5a:c3:9b:1d:7c:f4:
94:d4:ac:b0:18:2b:d0:ad:ce:a1:5b:9b:c3:fe:6e:
ae:50:67:8f:07:34:b5:84:ea:f0:7c:4e:76:b8:90:
55:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:2D:2F:F5:ED:F2:24:CA:91:B9:2D:15:2F:43:3F:BC:68:F3:C0:21
X509v3 Authority Key Identifier:
keyid:2D:C9:55:F4:C2:C7:15:7A:BB:DB:FE:80:9C:F1:95:60:59:49:A6:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LclV9MLHFXq72_6AnPGVYFlJppg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:51:b4:c0:d6:00:f1:bf:1e:8b:da:68:19:cf:d8:46:a8:94:
35:3c:d7:c8:16:22:e8:2f:8f:47:be:8e:c9:5e:2d:32:dc:dc:
7b:00:f3:70:6c:48:6d:43:69:97:03:6e:5c:9c:ef:25:e8:24:
c4:ef:ce:42:77:48:ad:f3:a8:75:0b:14:2b:73:75:d5:e1:b6:
a9:a3:55:2b:4b:a9:9e:fd:fe:55:cf:b8:9d:c6:c8:e0:ad:01:
11:1e:a2:cf:92:41:a4:fc:88:96:3b:38:17:27:4f:69:fe:29:
99:85:60:b2:36:d9:a6:46:68:b7:a1:3d:b5:49:8a:92:94:7a:
99:92:7f:6d:51:cf:ea:eb:7f:59:dc:64:7b:e9:25:fd:e9:92:
25:d4:2e:1f:17:a8:f8:83:d5:f9:ca:a0:93:f7:9a:70:41:76:
0b:c3:94:94:11:be:e6:1a:43:c1:eb:48:f7:9e:22:51:63:af:
24:02:d3:09:76:a6:4e:d4:c8:3c:68:7d:c5:1a:e9:1a:b7:c7:
be:48:d7:f3:72:cf:1c:21:73:b7:08:fc:9e:7f:2a:53:32:40:
72:3a:c1:b2:c2:d3:33:cb:56:20:fa:60:c0:18:ac:ba:4c:bd:
a8:4a:cd:9d:a3:57:09:39:db:f2:c5:fe:1b:25:4b:14:6c:90:
88:5e:83:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJiraWTRQuOHD43nhW1LKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkYzk1NWY0YzJjNzE1N2FiYmRiZmU4MDljZjE5NTYwNTk0
OWE2OTgwHhcNMjUxMTExMDkwMTM1WhcNMjUxMTEyMDkwMTM1WjAzMTEwLwYDVQQD
Eyg3ODJkMmZmNWVkZjIyNGNhOTFiOTJkMTUyZjQzM2ZiYzY4ZjNjMDIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIPrLgrC+xIZguUMPBZ4qX6WJO7V
CJCmo95icjGaXnv65H0CID+D8qRp/7xKB2+lh5BqTBPuoFQjmMlTKhtzKweXHDfe
sXgyXGaUQddsVLgpxdIVayDhGRfiu5HqUaHP65Jxb42tj5V46i/tMDCos/iftwaX
mFN+kexEPbKo65i8AkOi1JWr7xw7mk68zHw++aLUF7Hvm+rbL7RBnKzaOcbJxIKA
xSw1djxPvO4jJpbJNUjlyDl88W1OkpS5FkdL7mxT/cW0ucASgwmRFs7oFXkXuX0A
qP8Xllhaw5sdfPSU1KywGCvQrc6hW5vD/m6uUGePBzS1hOrwfE52uJBVawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHgtL/Xt8iTKkbktFS9DP7xo88AhMB8GA1UdIwQY
MBaAFC3JVfTCxxV6u9v+gJzxlWBZSaaYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGNsVjlNTEhGWHE3Ml82QW5QR1ZZRmxKcHBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9jNWM2YTctNzEwYy00OTBlLTg5ZGEt
MTE5ODIwYjUyMmFkLzEvTGNsVjlNTEhGWHE3Ml82QW5QR1ZZRmxKcHBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9jNWM2YTctNzEwYy00OTBlLTg5ZGEtMTE5ODIwYjUyMmFk
LzEvTGNsVjlNTEhGWHE3Ml82QW5QR1ZZRmxKcHBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgVG0wNYA
8b8ei9poGc/YRqiUNTzXyBYi6C+PR76OyV4tMtzcewDzcGxIbUNplwNuXJzvJegk
xO/OQndIrfOodQsUK3N11eG2qaNVK0upnv3+Vc+4ncbI4K0BER6iz5JBpPyIljs4
FydPaf4pmYVgsjbZpkZot6E9tUmKkpR6mZJ/bVHP6ut/Wdxke+kl/emSJdQuHxeo
+IPV+cqgk/eacEF2C8OUlBG+5hpDwetI954iUWOvJALTCXamTtTIPGh9xRrpGrfH
vkjX83LPHCFztwj8nn8qUzJAcjrBssLTM8tWIPpgwBisuky9qErNnaNXCTnb8sX+
GyVLFGyQiF6Djw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:14 2025 by rpki-client