Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/c57b75-10a7-4723-94ea-e857477a7008/1/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.mft
File: RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.mft (raw, json)
Hash identifier: TK9hXSP4UWH272Ofq6InnWgDZSFtS+LTPkhx0sEbdZk=
Subject key identifier: 3B:0B:5A:77:48:41:CC:8F:40:73:2C:43:93:BF:F6:0C:E1:31:5A:54
Authority key identifier: 46:73:50:D5:97:5A:27:2A:88:BF:B8:81:0A:F4:59:81:CD:55:93:5A
Certificate issuer: /CN=467350d5975a272a88bfb8810af45981cd55935a
Certificate serial: 019A725CC3E881C96B97F42DDB454A007CFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/c57b75-10a7-4723-94ea-e857477a7008/1/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.mft
Manifest number: 101A
Signing time: Tue 11 Nov 2025 10:01:13 +0000
Manifest this update: Tue 11 Nov 2025 10:01:13 +0000
Manifest next update: Wed 12 Nov 2025 10:01:13 +0000
Files and hashes: 1: RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.crl (hash: iQyaj7YtJ9YGbqmFAuSDwoHq9N4muU6/LtnNyS5pC7A=)
2: cM594o8l7Xh7Dw0EOXhcxgvWLYI.roa (hash: 1Ym4804A2QtxpGJhVDPpEbLS0giUeOdd5FG8xMIV330=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/c57b75-10a7-4723-94ea-e857477a7008/1/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/c57b75-10a7-4723-94ea-e857477a7008/1/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:c3:e8:81:c9:6b:97:f4:2d:db:45:4a:00:7c:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=467350d5975a272a88bfb8810af45981cd55935a
Validity
Not Before: Nov 11 10:01:13 2025 GMT
Not After : Nov 12 10:01:13 2025 GMT
Subject: CN=3b0b5a774841cc8f40732c4393bff60ce1315a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f4:be:b4:73:a5:ab:9f:2c:d7:ca:cf:88:92:
7d:75:f2:f5:fd:d8:cc:66:9a:78:c9:83:40:2b:85:
1b:83:51:87:e2:e6:6f:88:7d:72:d8:91:f6:b1:2e:
10:3e:9e:1a:d2:b3:8a:42:59:bd:e7:da:12:7c:53:
d1:40:2a:e4:81:fa:91:0e:2d:29:54:7a:1c:40:98:
c6:48:bf:c8:a0:fb:88:9a:dc:c2:c2:f0:83:c4:94:
4f:02:96:73:ff:04:e8:81:10:00:cd:71:b6:8e:62:
83:a9:98:24:0c:21:fc:13:40:37:78:58:66:c1:75:
2c:c3:97:d5:c4:ad:b1:cf:58:83:8b:99:05:93:2d:
c6:f6:8e:0b:41:5f:99:45:e3:6a:67:0b:cb:e0:86:
c1:8d:ad:05:bb:bb:4f:dc:bd:09:0c:6c:8a:7d:e5:
c1:42:99:12:99:c9:11:64:66:a4:b5:cc:9d:a9:ee:
b9:36:13:df:d4:4b:b5:ec:bc:2b:b0:47:63:9d:eb:
4d:40:3d:54:f7:56:2e:27:76:40:3c:c2:14:82:a5:
6f:c6:7f:50:94:b6:b0:73:b2:76:48:e7:ff:43:ab:
1e:01:9e:e3:02:f9:e3:99:1d:28:64:f5:a2:0a:1a:
ba:8a:8e:a8:6c:ad:8c:dc:41:a6:38:6a:78:49:b2:
f6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:0B:5A:77:48:41:CC:8F:40:73:2C:43:93:BF:F6:0C:E1:31:5A:54
X509v3 Authority Key Identifier:
keyid:46:73:50:D5:97:5A:27:2A:88:BF:B8:81:0A:F4:59:81:CD:55:93:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c57b75-10a7-4723-94ea-e857477a7008/1/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c57b75-10a7-4723-94ea-e857477a7008/1/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:0a:da:62:4f:d4:f7:58:26:b1:a8:8b:ea:90:a8:83:64:36:
1a:00:08:c8:18:2d:f2:d8:eb:bb:32:c3:77:05:a9:57:c0:98:
7c:84:5b:91:0c:85:76:e9:24:28:95:fb:e2:f1:95:fc:22:e4:
42:42:f9:b9:83:2e:6e:3e:b5:99:49:ed:fa:b0:d4:23:d1:36:
4a:6a:00:bb:22:3c:26:37:22:0b:e8:55:d8:fa:56:7e:98:d3:
12:27:47:33:ee:29:bb:72:36:4f:b4:b8:6f:ea:78:90:43:ab:
1f:89:86:31:0a:e6:5a:32:69:7b:6f:85:8d:d3:ae:6a:a6:d1:
4b:84:ad:93:0a:44:1b:f6:1f:86:59:47:e8:07:81:07:d9:09:
d9:11:c0:89:d5:60:e1:4b:70:7c:62:e4:c5:f7:ef:cf:0c:3e:
54:f9:0b:c3:69:d5:9a:a5:3b:86:6d:5f:20:31:45:83:e1:d5:
6b:13:a5:7c:b2:d0:57:6f:18:5c:a1:ff:b6:3b:83:c7:7c:c0:
a5:a0:35:ec:14:9d:1e:46:80:e1:89:a2:86:77:25:3d:5d:2a:
ae:ef:52:8f:8c:a2:6b:95:26:2d:7b:4a:7c:45:1a:7c:e4:29:
b2:68:78:55:67:cd:df:09:8e:d0:d7:7a:6e:43:d8:de:39:a4:
27:c4:c1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:15:18 2025 by rpki-client