Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
File: 52IQ44sWkJp-6P47jQZkfwZlKSs.mft (raw, json)
Hash identifier: fvRUlMoXuTL8O8d1d9kcDbB22yU0rQ1QF68VJOKGP7U=
Subject key identifier: 39:E1:EF:A9:B7:02:09:DF:66:7B:E6:19:43:D4:A4:30:6B:9B:53:0F
Authority key identifier: E7:62:10:E3:8B:16:90:9A:7E:E8:FE:3B:8D:06:64:7F:06:65:29:2B
Certificate issuer: /CN=e76210e38b16909a7ee8fe3b8d06647f0665292b
Certificate serial: 019A725C68F945D62A0C05FB4C3792AE3EF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
Manifest number: 0A1B
Signing time: Tue 11 Nov 2025 10:00:50 +0000
Manifest this update: Tue 11 Nov 2025 10:00:50 +0000
Manifest next update: Wed 12 Nov 2025 10:00:50 +0000
Files and hashes: 1: 52IQ44sWkJp-6P47jQZkfwZlKSs.crl (hash: oypvAK+hmb65avXIN39zpXMov71sloI8XPNbnsCxbV4=)
2: AUcTDGFOG81He-CgX2Nb9NjPt98.roa (hash: VCQVsxF89yc5l33h6/1499iiv5KQTcfZEYfizAwCUSE=)
3: vaF2ggurkdMa29mOe8Ln8Gh0s84.roa (hash: 0hWPx/v7SQ3YrJu6uA8c9hJgR2g58Nd5ph2a6xS95t0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:68:f9:45:d6:2a:0c:05:fb:4c:37:92:ae:3e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76210e38b16909a7ee8fe3b8d06647f0665292b
Validity
Not Before: Nov 11 10:00:50 2025 GMT
Not After : Nov 12 10:00:50 2025 GMT
Subject: CN=39e1efa9b70209df667be61943d4a4306b9b530f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:56:2d:fb:2c:21:c5:15:56:e4:72:3c:b5:f8:
87:1a:34:5b:28:96:7f:29:0a:fb:c1:e5:79:bd:34:
f6:04:f3:49:a8:d5:14:89:3f:39:a8:62:d7:1a:95:
9a:61:e9:57:13:43:d9:b6:1d:48:eb:10:75:83:bd:
f6:e4:f1:fe:41:62:12:6a:3d:b9:0d:d6:8f:74:ec:
d8:af:03:17:e9:bc:e7:12:bd:69:45:25:17:73:5c:
9a:f1:29:a0:75:a3:cc:15:f0:a9:ef:01:1f:ce:63:
46:d2:3c:1d:c3:c1:cd:53:ae:4b:be:31:02:e7:4d:
2c:24:1a:7b:55:b4:82:ee:ec:47:2c:9e:5f:79:82:
6f:61:79:ac:b7:46:88:47:8c:30:7d:29:6e:f0:b2:
06:19:ce:f1:f1:76:17:7a:bf:0f:16:6c:28:14:cf:
c6:20:d2:06:e3:57:fd:eb:ef:d1:fe:4e:e1:7c:bf:
76:1e:d4:50:b5:5c:43:82:1b:ef:21:ad:05:6d:b1:
4a:74:aa:2a:6e:e1:20:d1:b4:00:6a:ea:0e:78:79:
cd:c4:b6:2c:ab:48:69:b7:77:5c:3a:29:ff:ce:5d:
2c:fd:04:29:8a:98:78:e5:0f:c8:61:dd:97:6a:c3:
85:96:35:2c:f2:2b:a3:61:96:6f:5d:70:5c:78:5f:
77:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E1:EF:A9:B7:02:09:DF:66:7B:E6:19:43:D4:A4:30:6B:9B:53:0F
X509v3 Authority Key Identifier:
keyid:E7:62:10:E3:8B:16:90:9A:7E:E8:FE:3B:8D:06:64:7F:06:65:29:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:d0:3f:cf:b2:1d:e5:98:46:49:19:7d:db:96:36:dc:79:1d:
72:3d:39:73:a8:a0:b6:e2:ae:cf:04:ac:8a:8d:56:75:16:e0:
a9:8b:0b:fe:01:21:22:01:ea:cb:22:12:35:4b:ff:99:b2:f3:
cb:08:01:b6:38:08:bf:2b:65:ba:88:4f:e4:0c:99:e2:75:0f:
ff:92:5b:6f:78:6a:0a:47:08:6c:6b:53:30:8c:02:f3:c3:af:
ab:92:1f:0d:99:82:a0:eb:1c:8a:3a:e4:98:0b:2d:67:93:f6:
cc:45:27:90:55:18:8e:4b:2c:3b:6a:4e:67:d7:6d:e8:97:6d:
24:63:04:bc:8a:23:f3:ab:61:40:9e:50:98:0f:d8:b3:a3:90:
55:41:7f:96:65:39:d0:38:a0:dc:3c:bb:f4:ec:29:72:c0:a4:
32:38:03:59:d9:e6:b4:5f:0f:6f:b3:8b:35:e5:7a:83:f5:7f:
d7:bf:a2:94:94:78:11:0c:17:f1:8f:71:44:99:43:01:77:36:
45:a9:19:10:fb:a9:e5:7b:e9:85:cf:19:66:af:86:c4:6a:e6:
ac:98:0a:87:f8:32:bf:3e:65:fe:e9:f4:0b:a7:05:7d:41:38:
93:23:5c:96:ee:af:b4:58:27:1c:58:58:36:66:70:b2:c2:bb:
fc:9e:7a:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXGj5RdYqDAX7TDeSrj7yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NjIxMGUzOGIxNjkwOWE3ZWU4ZmUzYjhkMDY2NDdmMDY2
NTI5MmIwHhcNMjUxMTExMTAwMDUwWhcNMjUxMTEyMTAwMDUwWjAzMTEwLwYDVQQD
EygzOWUxZWZhOWI3MDIwOWRmNjY3YmU2MTk0M2Q0YTQzMDZiOWI1MzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5VYt+ywhxRVW5HI8tfiHGjRbKJZ/
KQr7weV5vTT2BPNJqNUUiT85qGLXGpWaYelXE0PZth1I6xB1g7325PH+QWISaj25
DdaPdOzYrwMX6bznEr1pRSUXc1ya8SmgdaPMFfCp7wEfzmNG0jwdw8HNU65LvjEC
500sJBp7VbSC7uxHLJ5feYJvYXmst0aIR4wwfSlu8LIGGc7x8XYXer8PFmwoFM/G
INIG41f96+/R/k7hfL92HtRQtVxDghvvIa0FbbFKdKoqbuEg0bQAauoOeHnNxLYs
q0hpt3dcOin/zl0s/QQpiph45Q/IYd2XasOFljUs8iujYZZvXXBceF93pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDnh76m3AgnfZnvmGUPUpDBrm1MPMB8GA1UdIwQY
MBaAFOdiEOOLFpCafuj+O40GZH8GZSkrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTJJUTQ0c1drSnAtNlA0N2pRWmtmd1psS1NzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS82ZDZiNzYtYjRiNy00ZjdlLTg2Mjgt
Y2Y3OTQ2NThmNWJlLzEvNTJJUTQ0c1drSnAtNlA0N2pRWmtmd1psS1NzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS82ZDZiNzYtYjRiNy00ZjdlLTg2MjgtY2Y3OTQ2NThmNWJl
LzEvNTJJUTQ0c1drSnAtNlA0N2pRWmtmd1psS1NzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW9A/z7Id
5ZhGSRl925Y23Hkdcj05c6igtuKuzwSsio1WdRbgqYsL/gEhIgHqyyISNUv/mbLz
ywgBtjgIvytluohP5AyZ4nUP/5Jbb3hqCkcIbGtTMIwC88Ovq5IfDZmCoOscijrk
mAstZ5P2zEUnkFUYjkssO2pOZ9dt6JdtJGMEvIoj86thQJ5QmA/Ys6OQVUF/lmU5
0Dig3Dy79OwpcsCkMjgDWdnmtF8Pb7OLNeV6g/V/17+ilJR4EQwX8Y9xRJlDAXc2
RakZEPup5Xvphc8ZZq+GxGrmrJgKh/gyvz5l/un0C6cFfUE4kyNclu6vtFgnHFhY
NmZwssK7/J56Pw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:12:57 2025 by rpki-client