Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft
File: vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft (raw, json)
Hash identifier: o8lBB9LT2LlYXzW27ZONHET8BLR3Y+WNHf3KC+e1j6M=
Subject key identifier: DF:90:34:97:8C:64:71:75:27:C0:B7:08:E9:81:8B:C0:8F:9B:4C:1B
Authority key identifier: BE:44:8C:67:A3:AB:0E:A3:75:FB:A8:48:C9:FE:8C:8E:B1:E8:4D:6F
Certificate issuer: /CN=be448c67a3ab0ea375fba848c9fe8c8eb1e84d6f
Certificate serial: 019A71B838F43680C2E6A3563FA0418C6069
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft
Manifest number: 0D10
Signing time: Tue 11 Nov 2025 07:01:29 +0000
Manifest this update: Tue 11 Nov 2025 07:01:29 +0000
Manifest next update: Wed 12 Nov 2025 07:01:29 +0000
Files and hashes: 1: 9UcomILdtAe6cNct4YOh4DKdhek.roa (hash: 5S+dEogRJfe8M30SkPrXb8z3+L8Fg1f4Nn7krQuU6Oo=)
2: vkSMZ6OrDqN1-6hIyf6MjrHoTW8.crl (hash: BhVTZ+Ts/lnW5oezjK9SLQsahGAVyTZO0iH+cOg3Kyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:38:f4:36:80:c2:e6:a3:56:3f:a0:41:8c:60:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be448c67a3ab0ea375fba848c9fe8c8eb1e84d6f
Validity
Not Before: Nov 11 07:01:29 2025 GMT
Not After : Nov 12 07:01:29 2025 GMT
Subject: CN=df9034978c64717527c0b708e9818bc08f9b4c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ac:28:6b:d2:84:5c:1b:51:53:80:63:49:21:
ee:5c:7a:71:00:eb:27:ac:f8:a7:64:38:1c:40:ea:
9d:c5:a9:f5:6d:25:eb:2c:25:90:66:46:c2:42:f2:
17:2a:4d:ea:38:32:9f:9b:50:a9:bc:ca:1b:98:d5:
81:8a:01:da:6a:15:2b:00:68:f7:0d:3c:53:bb:24:
d9:46:19:06:91:51:47:f1:c5:c5:ec:7f:9e:72:52:
8c:e6:84:da:ce:4a:c5:72:c9:ba:2a:a2:29:84:30:
ba:c0:72:b3:96:fc:72:38:87:b0:3c:89:44:d7:24:
e8:00:e1:ce:16:b9:dc:56:55:1f:20:09:20:ab:89:
56:da:0b:c8:a8:70:be:a6:18:dd:7e:8d:73:f7:60:
38:2c:d6:d8:92:aa:90:18:ce:df:5a:72:99:9c:03:
8c:1e:2d:70:ab:65:34:11:92:1d:d1:a2:63:66:de:
ef:b8:42:f6:7b:5c:7d:dd:b1:1f:5c:07:44:2c:ba:
c5:a8:94:8e:c9:56:82:f5:de:8e:42:fc:a3:93:0b:
5e:30:12:69:ff:89:e7:a7:43:cb:da:bb:59:7d:29:
44:30:10:e1:a9:de:a4:2b:cb:f2:17:77:0d:71:89:
fe:34:24:cd:06:a2:f7:49:99:19:53:f5:17:c3:92:
0e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:90:34:97:8C:64:71:75:27:C0:B7:08:E9:81:8B:C0:8F:9B:4C:1B
X509v3 Authority Key Identifier:
keyid:BE:44:8C:67:A3:AB:0E:A3:75:FB:A8:48:C9:FE:8C:8E:B1:E8:4D:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:63:8a:c7:c4:3e:18:1d:5d:25:35:79:69:f8:c6:ac:cb:a3:
7b:16:3d:47:25:f8:92:ba:d6:60:8c:a9:b5:e6:03:a3:9c:f4:
ba:03:d0:9e:b3:f5:14:ac:c9:73:13:bb:82:5f:95:80:71:06:
18:d4:03:bc:45:d6:4e:5a:19:65:d2:47:6f:c4:25:b5:a9:3b:
95:55:0d:c3:35:f9:fb:eb:59:02:0c:92:05:d7:2d:bf:2e:a9:
ae:11:de:3c:3e:70:b7:d8:1b:7e:62:48:17:97:7c:b5:8a:19:
68:9f:9d:ad:24:6d:bb:6d:ca:13:6f:28:51:62:27:fe:af:92:
c5:10:f9:b5:c5:be:c9:af:1c:4e:ca:19:77:76:c2:ee:2b:7b:
f8:5e:a0:56:ba:69:f1:11:8c:e1:04:b5:e5:20:06:23:13:c0:
9d:40:1f:24:9c:b1:f8:aa:04:aa:08:f1:47:2e:b9:34:82:8f:
79:03:c4:ae:d6:51:f8:57:69:7e:08:10:9b:2e:81:12:71:a8:
79:58:85:cc:d5:53:26:71:a6:67:e2:d5:a4:66:8c:0c:ea:4b:
4e:fe:79:7f:4a:74:15:ee:79:4d:09:18:f7:00:b6:19:ed:52:
34:16:22:34:97:07:21:8d:ea:a0:e6:f1:47:88:44:6d:78:86:
6b:c0:b5:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuDj0NoDC5qNWP6BBjGBpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNDQ4YzY3YTNhYjBlYTM3NWZiYTg0OGM5ZmU4YzhlYjFl
ODRkNmYwHhcNMjUxMTExMDcwMTI5WhcNMjUxMTEyMDcwMTI5WjAzMTEwLwYDVQQD
EyhkZjkwMzQ5NzhjNjQ3MTc1MjdjMGI3MDhlOTgxOGJjMDhmOWI0YzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqwoa9KEXBtRU4BjSSHuXHpxAOsn
rPinZDgcQOqdxan1bSXrLCWQZkbCQvIXKk3qODKfm1CpvMobmNWBigHaahUrAGj3
DTxTuyTZRhkGkVFH8cXF7H+eclKM5oTazkrFcsm6KqIphDC6wHKzlvxyOIewPIlE
1yToAOHOFrncVlUfIAkgq4lW2gvIqHC+phjdfo1z92A4LNbYkqqQGM7fWnKZnAOM
Hi1wq2U0EZId0aJjZt7vuEL2e1x93bEfXAdELLrFqJSOyVaC9d6OQvyjkwteMBJp
/4nnp0PL2rtZfSlEMBDhqd6kK8vyF3cNcYn+NCTNBqL3SZkZU/UXw5IO+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN+QNJeMZHF1J8C3COmBi8CPm0wbMB8GA1UdIwQY
MBaAFL5EjGejqw6jdfuoSMn+jI6x6E1vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmtTTVo2T3JEcU4xLTZoSXlmNk1qckhvVFc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9lMjA5MzgtNDMzYy00YTI2LTg3NDUt
OWQ3NDdkOWEyNTBhLzEvdmtTTVo2T3JEcU4xLTZoSXlmNk1qckhvVFc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9lMjA5MzgtNDMzYy00YTI2LTg3NDUtOWQ3NDdkOWEyNTBh
LzEvdmtTTVo2T3JEcU4xLTZoSXlmNk1qckhvVFc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbmOKx8Q+
GB1dJTV5afjGrMujexY9RyX4krrWYIypteYDo5z0ugPQnrP1FKzJcxO7gl+VgHEG
GNQDvEXWTloZZdJHb8Qltak7lVUNwzX5++tZAgySBdctvy6prhHePD5wt9gbfmJI
F5d8tYoZaJ+drSRtu23KE28oUWIn/q+SxRD5tcW+ya8cTsoZd3bC7it7+F6gVrpp
8RGM4QS15SAGIxPAnUAfJJyx+KoEqgjxRy65NIKPeQPErtZR+FdpfggQmy6BEnGo
eViFzNVTJnGmZ+LVpGaMDOpLTv55f0p0Fe55TQkY9wC2Ge1SNBYiNJcHIY3qoObx
R4hEbXiGa8C1VA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:38 2025 by rpki-client