Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft
File: g7826xjvmlfF-2A62kAP5rZojm4.mft (raw, json)
Hash identifier: MMi+rMRWFYbajUp6MSruh6M3/gCLtHnc85iIILsS1+I=
Subject key identifier: DE:2F:6C:4A:3B:28:A7:0B:4E:57:2B:1C:47:70:53:50:EB:66:15:8F
Authority key identifier: 83:BF:36:EB:18:EF:9A:57:C5:FB:60:3A:DA:40:0F:E6:B6:68:8E:6E
Certificate issuer: /CN=83bf36eb18ef9a57c5fb603ada400fe6b6688e6e
Certificate serial: 019A722666BA37E5A7666AAB6921F13AFAEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft
Manifest number: 1252
Signing time: Tue 11 Nov 2025 09:01:50 +0000
Manifest this update: Tue 11 Nov 2025 09:01:50 +0000
Manifest next update: Wed 12 Nov 2025 09:01:50 +0000
Files and hashes: 1: Db2mHELjbKafmmak8MMgrVJ9q6s.roa (hash: 0wtkW6LztiP4K0i9kH54ddtGh234DUMSdImFiKp9l5M=)
2: g7826xjvmlfF-2A62kAP5rZojm4.crl (hash: cCINJOBbl/8RhSBpLekcNLbOw2XN78ZapSR5KMcVojg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:66:ba:37:e5:a7:66:6a:ab:69:21:f1:3a:fa:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83bf36eb18ef9a57c5fb603ada400fe6b6688e6e
Validity
Not Before: Nov 11 09:01:50 2025 GMT
Not After : Nov 12 09:01:50 2025 GMT
Subject: CN=de2f6c4a3b28a70b4e572b1c47705350eb66158f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:33:f5:cc:fa:b0:4c:44:db:bc:dc:5c:99:7b:
2f:77:73:d5:33:88:59:52:80:2a:e2:8a:52:2c:1d:
10:2b:3f:89:27:a8:55:5f:d5:69:f1:7f:c3:81:b9:
e2:7f:14:2d:ca:ef:bf:11:45:89:4e:80:b4:4c:db:
0b:e8:fb:79:29:3f:e9:1f:61:04:4e:b0:50:1f:3a:
b1:4e:bd:ca:f9:dd:92:81:ab:95:c3:8a:b3:1c:9c:
b0:6f:28:c2:92:16:ee:37:3d:5c:3d:46:2b:13:a5:
00:43:10:f4:ff:97:13:94:49:59:f6:9d:50:a3:8b:
99:94:86:c2:54:ce:b1:5f:a9:33:ac:73:82:cf:fd:
ca:da:52:67:e5:76:70:d5:7b:25:c0:38:da:12:c1:
af:8d:c5:4f:dd:5b:f8:27:7d:7f:76:3a:57:42:01:
31:73:6d:27:b8:3d:e4:b1:14:b4:3e:89:41:1b:91:
ee:5e:6e:ac:ea:e4:44:98:b4:3f:3b:bc:ea:bf:eb:
09:47:f8:64:2e:d7:4a:88:80:7f:cf:a3:72:16:15:
7b:f5:44:23:3c:83:77:18:29:fc:f9:46:eb:3a:7d:
a4:74:d3:24:ca:1a:7f:9f:bc:71:74:3a:b8:5a:e1:
c4:7d:cb:33:f1:e7:46:a4:76:6a:c2:71:ac:24:2e:
18:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:2F:6C:4A:3B:28:A7:0B:4E:57:2B:1C:47:70:53:50:EB:66:15:8F
X509v3 Authority Key Identifier:
keyid:83:BF:36:EB:18:EF:9A:57:C5:FB:60:3A:DA:40:0F:E6:B6:68:8E:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:79:b0:fd:83:b5:db:2e:e2:39:8a:29:02:17:9d:49:62:1d:
e4:13:fb:f3:55:3b:82:ba:31:51:a7:f5:0f:00:1f:95:c3:46:
0b:ce:58:f8:44:a6:1a:24:d9:32:67:ce:7c:8b:0e:07:86:39:
91:e6:b0:1e:63:11:20:19:0c:76:ec:dc:c9:b7:7e:f4:31:2d:
74:9c:1d:34:fd:27:c2:ad:f8:12:a1:81:e3:46:04:25:8d:fa:
e2:15:da:2a:be:74:dc:4a:b7:61:d2:6d:ea:cf:19:4d:fe:54:
e0:b5:ee:00:a6:57:45:29:95:07:80:62:1b:a1:e9:85:15:28:
c4:72:de:5f:ef:be:2b:48:b0:94:c6:b8:7c:04:43:84:46:7f:
de:cc:f5:86:a6:d4:92:40:1b:21:de:29:b0:e4:18:35:02:26:
73:5c:da:08:06:ff:84:b1:61:7f:9b:47:bd:b9:4c:00:1a:a1:
49:28:e9:c5:89:bc:83:b6:03:52:72:b4:d7:c4:30:3d:d2:77:
84:e4:ae:9b:31:46:7f:0c:dd:56:bb:d7:95:70:dc:d9:a4:de:
e3:9b:83:a8:f6:44:d0:70:94:39:a8:b8:b8:aa:13:ad:ec:27:
53:42:e9:06:02:d3:7b:df:c0:87:7d:85:ca:95:4f:1e:07:5d:
70:53:8a:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJma6N+WnZmqraSHxOvrrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzYmYzNmViMThlZjlhNTdjNWZiNjAzYWRhNDAwZmU2YjY2
ODhlNmUwHhcNMjUxMTExMDkwMTUwWhcNMjUxMTEyMDkwMTUwWjAzMTEwLwYDVQQD
EyhkZTJmNmM0YTNiMjhhNzBiNGU1NzJiMWM0NzcwNTM1MGViNjYxNThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7jP1zPqwTETbvNxcmXsvd3PVM4hZ
UoAq4opSLB0QKz+JJ6hVX9Vp8X/DgbnifxQtyu+/EUWJToC0TNsL6Pt5KT/pH2EE
TrBQHzqxTr3K+d2SgauVw4qzHJywbyjCkhbuNz1cPUYrE6UAQxD0/5cTlElZ9p1Q
o4uZlIbCVM6xX6kzrHOCz/3K2lJn5XZw1XslwDjaEsGvjcVP3Vv4J31/djpXQgEx
c20nuD3ksRS0PolBG5HuXm6s6uREmLQ/O7zqv+sJR/hkLtdKiIB/z6NyFhV79UQj
PIN3GCn8+UbrOn2kdNMkyhp/n7xxdDq4WuHEfcsz8edGpHZqwnGsJC4YtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN4vbEo7KKcLTlcrHEdwU1DrZhWPMB8GA1UdIwQY
MBaAFIO/NusY75pXxftgOtpAD+a2aI5uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzc4MjZ4anZtbGZGLTJBNjJrQVA1clpvam00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9mNzdkNTEtZWUxYy00N2E5LTkwYmMt
ZTBkMmExYjZlOGFjLzEvZzc4MjZ4anZtbGZGLTJBNjJrQVA1clpvam00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9mNzdkNTEtZWUxYy00N2E5LTkwYmMtZTBkMmExYjZlOGFj
LzEvZzc4MjZ4anZtbGZGLTJBNjJrQVA1clpvam00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU3mw/YO1
2y7iOYopAhedSWId5BP781U7groxUaf1DwAflcNGC85Y+ESmGiTZMmfOfIsOB4Y5
keawHmMRIBkMduzcybd+9DEtdJwdNP0nwq34EqGB40YEJY364hXaKr503Eq3YdJt
6s8ZTf5U4LXuAKZXRSmVB4BiG6HphRUoxHLeX+++K0iwlMa4fARDhEZ/3sz1hqbU
kkAbId4psOQYNQImc1zaCAb/hLFhf5tHvblMABqhSSjpxYm8g7YDUnK018QwPdJ3
hOSumzFGfwzdVrvXlXDc2aTe45uDqPZE0HCUOai4uKoTrewnU0LpBgLTe9/Ah32F
ypVPHgddcFOKbQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:24 2025 by rpki-client