Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
File: A86wnV7qahjljf3v6_KbQQXgJnw.mft (raw, json)
Hash identifier: nMTCX23fciVXdjtarwO8lkcT4RcaYVi3xr8ZKm16yVg=
Subject key identifier: 41:79:E4:F0:94:D2:BD:D3:B2:6C:20:12:BB:8E:23:22:94:79:C7:C6
Authority key identifier: 03:CE:B0:9D:5E:EA:6A:18:E5:8D:FD:EF:EB:F2:9B:41:05:E0:26:7C
Certificate issuer: /CN=03ceb09d5eea6a18e58dfdefebf29b4105e0267c
Certificate serial: 019A71B8CEC1826E0580B9170C86E0777DA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
Manifest number: 05E5
Signing time: Tue 11 Nov 2025 07:02:08 +0000
Manifest this update: Tue 11 Nov 2025 07:02:08 +0000
Manifest next update: Wed 12 Nov 2025 07:02:08 +0000
Files and hashes: 1: A86wnV7qahjljf3v6_KbQQXgJnw.crl (hash: LGCY2coMyA7TlBYofwbQwnNB47+T3Jo2/2U4oB66+mE=)
2: ihNwlKbuNiGlnJM8yFd2Nxrvaqo.roa (hash: auV56nH817P5x20E5reCmB5GZHUds7d7BudXxN/HlG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:ce:c1:82:6e:05:80:b9:17:0c:86:e0:77:7d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ceb09d5eea6a18e58dfdefebf29b4105e0267c
Validity
Not Before: Nov 11 07:02:08 2025 GMT
Not After : Nov 12 07:02:08 2025 GMT
Subject: CN=4179e4f094d2bdd3b26c2012bb8e23229479c7c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0d:2b:ad:16:b1:77:7e:23:25:32:16:82:39:
08:6a:94:32:8c:c7:6a:a4:a0:2d:7d:ee:47:56:a8:
c4:1b:4a:67:d8:c1:cf:75:34:5d:1f:5e:88:73:1e:
b0:0c:90:6d:a1:54:68:50:ff:b5:49:bd:cb:de:69:
cc:3d:97:94:0f:eb:c1:03:12:58:2b:13:c9:ee:4d:
65:2d:a5:ce:cd:e1:66:7f:b4:e9:7b:cf:56:64:1f:
f1:7e:d1:a5:d4:c9:72:4d:41:6b:ea:dd:97:83:bd:
e9:67:99:71:da:21:51:83:37:60:88:f2:de:c4:8c:
19:62:95:13:8a:ea:58:e9:5e:15:5e:bf:46:15:12:
00:35:2d:66:f7:b1:68:67:70:da:88:e4:95:e6:2d:
22:4e:2d:4c:ad:20:cd:aa:fe:a7:f4:9c:5f:18:60:
a9:15:73:9c:b6:4e:a9:9c:d5:8f:af:ba:36:0e:49:
5f:87:26:3e:6b:c3:cb:5f:d3:9f:f1:bb:16:98:a2:
e3:33:87:bd:31:f4:33:eb:45:a8:c1:43:6c:0b:12:
36:29:06:ec:56:44:b4:9c:bf:b0:69:4f:df:f8:bf:
92:02:6a:12:3b:f4:bb:b0:4f:05:b4:76:a2:bb:af:
dd:f9:02:4c:bc:50:43:c4:bc:9c:00:cf:d2:50:0e:
ed:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:79:E4:F0:94:D2:BD:D3:B2:6C:20:12:BB:8E:23:22:94:79:C7:C6
X509v3 Authority Key Identifier:
keyid:03:CE:B0:9D:5E:EA:6A:18:E5:8D:FD:EF:EB:F2:9B:41:05:E0:26:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:6e:cc:30:91:85:03:69:ac:dc:18:4e:b2:44:15:cc:fd:d2:
58:6b:a0:78:0c:7e:f2:c4:fc:4a:45:d7:64:76:ca:a4:00:43:
b8:70:7f:a1:51:66:2e:a6:04:43:8a:b9:a1:08:36:71:27:56:
67:5b:14:69:25:ca:ce:c4:a1:72:15:a5:d6:8b:f1:e5:f5:00:
26:17:e1:27:41:ca:49:46:ae:4d:6a:29:c8:de:84:f2:a6:86:
04:a4:be:34:4f:a3:3f:ec:84:70:2c:70:49:ea:76:33:7c:95:
b8:90:22:5e:95:cc:cd:bb:96:3e:51:c2:a2:d1:ae:59:32:f5:
67:83:77:77:85:97:b2:3f:b4:44:03:3a:9c:b5:b1:57:97:80:
25:0a:f4:06:af:11:0f:1a:eb:8c:96:00:6d:56:17:47:64:9c:
bf:2f:da:0c:7a:69:ff:01:f7:88:7e:e1:9d:79:cc:97:7e:5b:
28:9c:44:17:cd:20:c8:09:af:3a:41:11:62:ce:9a:b7:35:2e:
e6:a3:48:36:ef:24:42:5a:34:cb:b5:84:31:25:89:b9:f8:08:
79:e2:3a:18:53:c8:cf:8d:03:55:50:94:a0:71:80:aa:b7:56:
d7:23:df:d4:21:9f:79:e0:c0:cd:f4:9b:c7:85:f5:86:a0:8e:
b8:d1:e0:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuM7Bgm4FgLkXDIbgd32jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzY2ViMDlkNWVlYTZhMThlNThkZmRlZmViZjI5YjQxMDVl
MDI2N2MwHhcNMjUxMTExMDcwMjA4WhcNMjUxMTEyMDcwMjA4WjAzMTEwLwYDVQQD
Eyg0MTc5ZTRmMDk0ZDJiZGQzYjI2YzIwMTJiYjhlMjMyMjk0NzljN2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvg0rrRaxd34jJTIWgjkIapQyjMdq
pKAtfe5HVqjEG0pn2MHPdTRdH16Icx6wDJBtoVRoUP+1Sb3L3mnMPZeUD+vBAxJY
KxPJ7k1lLaXOzeFmf7Tpe89WZB/xftGl1MlyTUFr6t2Xg73pZ5lx2iFRgzdgiPLe
xIwZYpUTiupY6V4VXr9GFRIANS1m97FoZ3DaiOSV5i0iTi1MrSDNqv6n9JxfGGCp
FXOctk6pnNWPr7o2DklfhyY+a8PLX9Of8bsWmKLjM4e9MfQz60WowUNsCxI2KQbs
VkS0nL+waU/f+L+SAmoSO/S7sE8FtHaiu6/d+QJMvFBDxLycAM/SUA7tDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEF55PCU0r3TsmwgEruOIyKUecfGMB8GA1UdIwQY
MBaAFAPOsJ1e6moY5Y397+vym0EF4CZ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTg2d25WN3FhaGpsamYzdjZfS2JRUVhnSm53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8wYzQ2NTAtNzk2NC00OGFmLTk4NWEt
MzQwMThkNWM5ZGY1LzEvQTg2d25WN3FhaGpsamYzdjZfS2JRUVhnSm53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8wYzQ2NTAtNzk2NC00OGFmLTk4NWEtMzQwMThkNWM5ZGY1
LzEvQTg2d25WN3FhaGpsamYzdjZfS2JRUVhnSm53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhm7MMJGF
A2ms3BhOskQVzP3SWGugeAx+8sT8SkXXZHbKpABDuHB/oVFmLqYEQ4q5oQg2cSdW
Z1sUaSXKzsShchWl1ovx5fUAJhfhJ0HKSUauTWopyN6E8qaGBKS+NE+jP+yEcCxw
Sep2M3yVuJAiXpXMzbuWPlHCotGuWTL1Z4N3d4WXsj+0RAM6nLWxV5eAJQr0Bq8R
DxrrjJYAbVYXR2Scvy/aDHpp/wH3iH7hnXnMl35bKJxEF80gyAmvOkERYs6atzUu
5qNINu8kQlo0y7WEMSWJufgIeeI6GFPIz40DVVCUoHGAqrdW1yPf1CGfeeDAzfSb
x4X1hqCOuNHgyw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:46 2025 by rpki-client