Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft
File: NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft (raw, json)
Hash identifier: 0dYNIi+imBoqXJAtRjUgsnNuBBiWDTXCCFjp2xBU7j0=
Subject key identifier: 9C:FF:35:94:72:17:70:4B:39:B0:70:CD:0B:81:9F:E2:1F:50:AF:61
Authority key identifier: 34:FE:6B:9D:0C:C1:E7:F6:E1:6B:2A:46:B4:2C:A5:E0:1C:70:03:46
Certificate issuer: /CN=34fe6b9d0cc1e7f6e16b2a46b42ca5e01c700346
Certificate serial: 019A7226301987232B4DC3C896E07E24C77C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft
Manifest number: 1489
Signing time: Tue 11 Nov 2025 09:01:36 +0000
Manifest this update: Tue 11 Nov 2025 09:01:36 +0000
Manifest next update: Wed 12 Nov 2025 09:01:36 +0000
Files and hashes: 1: HXMlv9NxuKboyUtKNMBCZQbSjW0.roa (hash: mL85Iwg8ADnZv62S9C7eQgo7c8UTYuO4j6CsY6zppGQ=)
2: NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl (hash: MDiuRJ+sEF7Gvlv2cVwyXY5cIG0vaB/CYksWeTzY4P8=)
3: eJTJ2xXloI9cYA2PdEb7QzgzZMI.roa (hash: pJvyPt1aoxPTKu/5G35raZf6vtLPUO+Laz/ssfLJWrA=)
4: nyGwWtmUUenCuiNvi2rme3JvAnM.roa (hash: mv2iRNCUpphbjEmFj2ZluXSrRNCmkDp7k1nJS6ve48g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:30:19:87:23:2b:4d:c3:c8:96:e0:7e:24:c7:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34fe6b9d0cc1e7f6e16b2a46b42ca5e01c700346
Validity
Not Before: Nov 11 09:01:36 2025 GMT
Not After : Nov 12 09:01:36 2025 GMT
Subject: CN=9cff35947217704b39b070cd0b819fe21f50af61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a0:c0:fb:ab:a6:8f:77:81:47:75:f4:6a:46:
8e:f1:5c:80:70:51:91:e0:f4:30:58:90:e0:4a:ad:
7b:f5:0d:65:b6:af:17:42:7e:75:f2:c6:a1:cf:2b:
3b:19:8f:09:0c:60:d7:5f:7b:72:5f:f0:53:0c:ac:
50:24:05:23:80:4e:2f:ce:75:c6:9c:26:8e:5b:3c:
89:43:92:7d:2b:b9:59:a9:93:b3:b3:52:d6:2d:85:
b7:4b:df:ff:5a:7a:ed:f1:66:e4:ea:dd:80:e1:64:
25:c0:7f:3b:ac:b1:94:b9:13:bc:e8:11:45:c9:b7:
27:a9:aa:cb:ad:3a:36:ad:46:cf:c7:9c:fc:ea:64:
38:51:46:6e:51:7b:a4:d9:59:bf:86:ed:ee:1a:e1:
1f:2e:54:02:80:83:87:fc:cb:12:76:ca:93:81:cf:
12:f1:cd:33:4d:ea:ec:ea:37:66:a8:8a:7c:3e:ad:
38:13:f7:96:73:5b:c5:fd:9a:5d:b4:dd:d6:e3:13:
66:cf:4f:a3:84:14:62:7c:d3:58:a7:3b:81:0b:0b:
2d:47:39:0c:e1:37:be:95:0a:e2:b9:de:02:bb:d5:
bf:6a:69:53:da:f3:cd:4c:73:5e:7c:7b:b5:74:fe:
7b:5f:6c:83:8b:c2:9f:20:a3:9d:75:98:f7:bc:03:
6b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:FF:35:94:72:17:70:4B:39:B0:70:CD:0B:81:9F:E2:1F:50:AF:61
X509v3 Authority Key Identifier:
keyid:34:FE:6B:9D:0C:C1:E7:F6:E1:6B:2A:46:B4:2C:A5:E0:1C:70:03:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:a2:db:e7:f1:1b:8e:9d:a1:34:18:23:6b:6d:3d:8b:7b:4e:
d7:a3:88:36:e2:00:b1:e1:5c:b6:27:f1:e4:c9:66:68:25:af:
f1:33:92:87:99:4a:ab:fa:40:c0:fc:57:cc:43:7e:e9:04:46:
c5:84:34:c3:f7:3d:c6:77:99:6c:dc:1a:c7:bf:40:ec:99:fd:
68:26:50:20:fa:28:5c:a4:31:aa:88:bf:41:0f:c9:da:9e:af:
9c:92:73:e2:b3:8e:78:7e:ac:c6:a1:50:05:b2:cc:48:a4:8f:
3e:93:4b:81:17:0e:e1:f1:be:ac:d1:b4:c6:30:de:26:55:2f:
89:69:ce:c0:76:bd:bc:4b:2e:7d:61:94:0d:43:36:96:47:4c:
65:b5:9e:95:d9:b2:41:03:4f:09:ae:9a:34:88:bf:00:93:b8:
80:15:f3:b6:89:35:0d:6d:d1:5c:93:e4:1f:91:79:45:c5:b5:
f0:9c:2f:25:e6:be:e3:44:21:75:3b:82:e8:39:ab:63:31:7b:
84:dc:96:83:c8:fb:c5:2e:15:8e:7d:e6:b6:91:eb:ba:50:a9:
2c:22:b8:c8:87:08:6d:fd:5c:96:4f:1d:ec:4e:d2:76:2b:b1:
74:64:d9:79:40:bd:f9:71:75:2f:e7:99:2e:5e:7b:12:64:bf:
5e:1f:e6:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJjAZhyMrTcPIluB+JMd8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ZmU2YjlkMGNjMWU3ZjZlMTZiMmE0NmI0MmNhNWUwMWM3
MDAzNDYwHhcNMjUxMTExMDkwMTM2WhcNMjUxMTEyMDkwMTM2WjAzMTEwLwYDVQQD
Eyg5Y2ZmMzU5NDcyMTc3MDRiMzliMDcwY2QwYjgxOWZlMjFmNTBhZjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16DA+6umj3eBR3X0akaO8VyAcFGR
4PQwWJDgSq179Q1ltq8XQn518sahzys7GY8JDGDXX3tyX/BTDKxQJAUjgE4vznXG
nCaOWzyJQ5J9K7lZqZOzs1LWLYW3S9//Wnrt8Wbk6t2A4WQlwH87rLGUuRO86BFF
ybcnqarLrTo2rUbPx5z86mQ4UUZuUXuk2Vm/hu3uGuEfLlQCgIOH/MsSdsqTgc8S
8c0zTers6jdmqIp8Pq04E/eWc1vF/ZpdtN3W4xNmz0+jhBRifNNYpzuBCwstRzkM
4Te+lQriud4Cu9W/amlT2vPNTHNefHu1dP57X2yDi8KfIKOddZj3vANrVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJz/NZRyF3BLObBwzQuBn+IfUK9hMB8GA1UdIwQY
MBaAFDT+a50Mwef24WsqRrQspeAccANGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlA1cm5RekI1X2JoYXlwR3RDeWw0Qnh3QTBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC82MmRmMzYtZmQzNi00YmFmLTlkMmUt
MTE4YWZlZDdhNWFlLzEvTlA1cm5RekI1X2JoYXlwR3RDeWw0Qnh3QTBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC82MmRmMzYtZmQzNi00YmFmLTlkMmUtMTE4YWZlZDdhNWFl
LzEvTlA1cm5RekI1X2JoYXlwR3RDeWw0Qnh3QTBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACKLb5/Eb
jp2hNBgja209i3tO16OINuIAseFctifx5MlmaCWv8TOSh5lKq/pAwPxXzEN+6QRG
xYQ0w/c9xneZbNwax79A7Jn9aCZQIPooXKQxqoi/QQ/J2p6vnJJz4rOOeH6sxqFQ
BbLMSKSPPpNLgRcO4fG+rNG0xjDeJlUviWnOwHa9vEsufWGUDUM2lkdMZbWeldmy
QQNPCa6aNIi/AJO4gBXztok1DW3RXJPkH5F5RcW18JwvJea+40QhdTuC6DmrYzF7
hNyWg8j7xS4Vjn3mtpHrulCpLCK4yIcIbf1clk8d7E7SdiuxdGTZeUC9+XF1L+eZ
Ll57EmS/Xh/m4Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:42:57 2025 by rpki-client