Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft
File: mpGLgMuzJzekayRIaaatVQlUP6E.mft (raw, json)
Hash identifier: r1JBaSXOYMvLO0hcGsMY0pXYcaWQQfB+3AqdG/Tqyrc=
Subject key identifier: F0:D6:62:95:B8:68:E9:6C:02:02:46:A5:6A:77:ED:EC:C0:50:DA:41
Authority key identifier: 9A:91:8B:80:CB:B3:27:37:A4:6B:24:48:69:A6:AD:55:09:54:3F:A1
Certificate issuer: /CN=9a918b80cbb32737a46b244869a6ad5509543fa1
Certificate serial: 019A7225EFA1A0660EBF5A81365D2234317B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpGLgMuzJzekayRIaaatVQlUP6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft
Manifest number: 0AC6
Signing time: Tue 11 Nov 2025 09:01:20 +0000
Manifest this update: Tue 11 Nov 2025 09:01:20 +0000
Manifest next update: Wed 12 Nov 2025 09:01:20 +0000
Files and hashes: 1: _sJ1gEKp9zcUkmdoEUiL1Hgw__4.roa (hash: QNXdCikQmuLlbojTN81QhJiEfrR2COSucqfmF6ZaSHQ=)
2: mpGLgMuzJzekayRIaaatVQlUP6E.crl (hash: AwiqQ5VGTEP+zZIQq+KhSJ+l29O+hC5D6t53lnTawh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpGLgMuzJzekayRIaaatVQlUP6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:ef:a1:a0:66:0e:bf:5a:81:36:5d:22:34:31:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a918b80cbb32737a46b244869a6ad5509543fa1
Validity
Not Before: Nov 11 09:01:20 2025 GMT
Not After : Nov 12 09:01:20 2025 GMT
Subject: CN=f0d66295b868e96c020246a56a77edecc050da41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e1:0c:27:5c:5b:69:58:60:bd:6e:f3:81:f6:
76:d8:9a:75:c4:db:5a:89:07:65:fb:8c:30:74:8b:
ec:f3:03:2f:8b:fa:a7:78:08:3e:79:dc:cf:6c:6b:
8a:c5:9d:72:d2:3e:d9:27:9b:c1:6c:48:ef:cb:de:
07:2b:3b:db:f3:eb:c4:f9:9c:88:1a:e6:88:84:df:
f3:21:81:1d:99:4e:60:0b:a1:02:1f:4c:9a:58:c8:
e8:07:25:eb:92:0d:73:f7:3a:bf:37:16:9c:8b:98:
d6:a4:c7:c7:2f:ca:5e:e3:6d:c6:9b:58:cc:c5:18:
5b:e0:09:a7:62:62:3b:2d:46:da:2f:e1:a7:4b:42:
65:49:d1:c4:35:97:b7:c3:a6:35:0c:b5:7b:9a:c1:
ae:48:9f:0c:6a:63:a8:e6:61:84:83:2b:2d:bd:94:
8a:ae:03:08:1d:30:dc:f7:0e:f1:88:55:54:7e:53:
19:96:43:f2:63:36:8f:46:e4:82:61:37:f5:58:1e:
21:59:8a:56:93:5e:62:6c:e6:35:0f:a1:28:62:bd:
e9:cc:c9:70:56:c8:53:af:cf:56:50:ac:83:70:e3:
77:e3:52:74:bc:65:66:ef:66:0d:43:0c:6d:1c:49:
78:d3:19:4d:e6:fb:5b:79:76:7f:d1:ff:a7:29:e3:
bf:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D6:62:95:B8:68:E9:6C:02:02:46:A5:6A:77:ED:EC:C0:50:DA:41
X509v3 Authority Key Identifier:
keyid:9A:91:8B:80:CB:B3:27:37:A4:6B:24:48:69:A6:AD:55:09:54:3F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpGLgMuzJzekayRIaaatVQlUP6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:b2:1a:32:14:a9:58:63:c2:eb:78:0e:bf:50:90:6e:4b:de:
f8:76:57:6e:90:1c:1e:0f:d8:57:e8:4b:ee:bd:ab:e2:62:a2:
36:ec:27:7e:ed:29:3e:8b:68:85:69:ab:a4:b8:05:96:09:35:
e0:99:8c:dd:db:6b:5b:f3:fb:83:7f:9d:75:c0:87:2f:3f:f3:
b4:c6:11:8e:0a:34:cc:61:14:4e:15:3f:cf:ce:f3:ff:14:9e:
1f:3c:51:9e:59:f1:94:87:1d:28:93:6a:fe:67:9f:f2:0a:6d:
56:8e:91:b0:40:54:e3:c1:fe:41:82:8a:7a:26:f5:1c:8d:83:
e4:80:42:b3:f3:60:c9:e7:8a:21:98:0a:d8:30:a0:86:5b:30:
11:d0:47:2b:2f:a8:c1:ea:08:21:81:8c:6a:d6:e7:d9:29:a4:
ab:ec:8d:f8:7c:fb:f7:18:17:94:23:04:7a:52:3d:e0:43:f4:
9d:56:08:7c:1e:ea:ae:df:87:a3:3f:0c:21:ee:45:0c:80:ba:
63:6c:9c:01:ba:dc:52:c4:7c:28:fc:31:cc:e9:d4:b8:50:11:
60:d1:bd:4c:2b:ff:37:70:c7:0d:cf:23:4e:89:12:9c:96:f6:
ee:2d:db:03:ad:50:89:ce:ae:63:2b:68:ef:1f:a2:cf:87:f5:
e6:7c:84:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJe+hoGYOv1qBNl0iNDF7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhOTE4YjgwY2JiMzI3MzdhNDZiMjQ0ODY5YTZhZDU1MDk1
NDNmYTEwHhcNMjUxMTExMDkwMTIwWhcNMjUxMTEyMDkwMTIwWjAzMTEwLwYDVQQD
EyhmMGQ2NjI5NWI4NjhlOTZjMDIwMjQ2YTU2YTc3ZWRlY2MwNTBkYTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluEMJ1xbaVhgvW7zgfZ22Jp1xNta
iQdl+4wwdIvs8wMvi/qneAg+edzPbGuKxZ1y0j7ZJ5vBbEjvy94HKzvb8+vE+ZyI
GuaIhN/zIYEdmU5gC6ECH0yaWMjoByXrkg1z9zq/Nxaci5jWpMfHL8pe423Gm1jM
xRhb4AmnYmI7LUbaL+GnS0JlSdHENZe3w6Y1DLV7msGuSJ8MamOo5mGEgystvZSK
rgMIHTDc9w7xiFVUflMZlkPyYzaPRuSCYTf1WB4hWYpWk15ibOY1D6EoYr3pzMlw
VshTr89WUKyDcON341J0vGVm72YNQwxtHEl40xlN5vtbeXZ/0f+nKeO/KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPDWYpW4aOlsAgJGpWp37ezAUNpBMB8GA1UdIwQY
MBaAFJqRi4DLsyc3pGskSGmmrVUJVD+hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXBHTGdNdXpKemVrYXlSSWFhYXRWUWxVUDZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi81YzBiNGEtMmRhNC00M2E1LTkyODkt
MTkzN2JkZThjZDZmLzEvbXBHTGdNdXpKemVrYXlSSWFhYXRWUWxVUDZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi81YzBiNGEtMmRhNC00M2E1LTkyODktMTkzN2JkZThjZDZm
LzEvbXBHTGdNdXpKemVrYXlSSWFhYXRWUWxVUDZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARrIaMhSp
WGPC63gOv1CQbkve+HZXbpAcHg/YV+hL7r2r4mKiNuwnfu0pPotohWmrpLgFlgk1
4JmM3dtrW/P7g3+ddcCHLz/ztMYRjgo0zGEUThU/z87z/xSeHzxRnlnxlIcdKJNq
/mef8gptVo6RsEBU48H+QYKKeib1HI2D5IBCs/NgyeeKIZgK2DCghlswEdBHKy+o
weoIIYGMatbn2Smkq+yN+Hz79xgXlCMEelI94EP0nVYIfB7qrt+Hoz8MIe5FDIC6
Y2ycAbrcUsR8KPwxzOnUuFARYNG9TCv/N3DHDc8jTokSnJb27i3bA61Qic6uYyto
7x+iz4f15nyEbA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:00 2025 by rpki-client