Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.mft
File: NLypT2th4QEA3Dpxhv-j-bAMad0.mft (raw, json)
Hash identifier: 0ZFY+enK+huvAu4O+KY2khgdWpmTNTW49SnYhbFZP14=
Subject key identifier: CE:8C:07:29:95:50:25:44:1C:4B:4B:AC:7A:6B:7F:05:A6:05:AD:E9
Authority key identifier: 34:BC:A9:4F:6B:61:E1:01:00:DC:3A:71:86:FF:A3:F9:B0:0C:69:DD
Certificate issuer: /CN=34bca94f6b61e10100dc3a7186ffa3f9b00c69dd
Certificate serial: 019A722638F6C38BECAB49C4FE47A08C5407
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLypT2th4QEA3Dpxhv-j-bAMad0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.mft
Manifest number: 13B1
Signing time: Tue 11 Nov 2025 09:01:38 +0000
Manifest this update: Tue 11 Nov 2025 09:01:38 +0000
Manifest next update: Wed 12 Nov 2025 09:01:38 +0000
Files and hashes: 1: HIoC707cWv-kl8mp8yIuvONoh0w.roa (hash: EWzRp4vUO24ulN2ZRCrdnUVFpJrZ9XxymUQDpbogTtA=)
2: J2yd4O1iL2KCY7LAQ3uRto73WwQ.roa (hash: FnyzxFKFKQYZ99+AO0ucXUQHZHZrzRIvFySr51HyBug=)
3: NLypT2th4QEA3Dpxhv-j-bAMad0.crl (hash: 1a7zlyQdwCHeJ9QiAJln42PKkrFlrsBVmOOIVhGwe5w=)
4: m01g-CBC5mmua20tUAtJoqGt3ww.roa (hash: AY/opL59pPgH00+bWPEKHAE0TYN5GbYk0s+CgO2aV3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLypT2th4QEA3Dpxhv-j-bAMad0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:38:f6:c3:8b:ec:ab:49:c4:fe:47:a0:8c:54:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34bca94f6b61e10100dc3a7186ffa3f9b00c69dd
Validity
Not Before: Nov 11 09:01:38 2025 GMT
Not After : Nov 12 09:01:38 2025 GMT
Subject: CN=ce8c0729955025441c4b4bac7a6b7f05a605ade9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:37:c9:a5:a3:94:9c:29:03:0f:71:cc:5d:d5:
0c:0d:ce:52:55:b9:f6:cd:ba:63:4a:42:57:51:c0:
e8:2c:69:77:7f:b9:72:b3:fb:33:8c:25:2b:4f:7e:
41:6c:fe:18:7d:c1:33:d3:a9:74:b7:d9:d3:7d:b9:
c8:92:86:1f:b4:62:b0:21:c3:26:fc:d9:e7:f3:73:
bf:09:6e:13:d2:87:2f:d9:9d:42:17:0a:90:48:86:
89:42:52:9c:1d:95:2f:cb:5b:6e:92:c2:02:ff:66:
8b:19:2f:40:dc:02:1d:6f:46:a8:e2:13:52:dc:a4:
ac:74:9f:74:44:03:0f:fc:04:f8:d1:df:ab:76:aa:
ef:3c:6d:aa:b9:6d:e1:70:4c:88:7c:28:f6:2a:ef:
b5:86:dc:8e:9a:ce:69:f6:d1:46:75:e6:89:79:dd:
9e:77:4a:33:16:1d:35:cd:70:7d:60:10:e9:bd:a8:
30:1e:42:18:00:ad:fc:7f:20:a6:32:a1:4e:59:66:
f9:a3:57:06:b5:c9:69:3c:b2:c9:73:e9:3f:a3:e1:
5c:98:fe:17:2d:79:f9:77:1b:35:9d:df:39:44:a8:
0d:a9:0c:bf:99:ab:99:34:8d:e9:58:a9:5d:0a:ca:
45:62:33:8f:72:5d:64:cd:74:66:55:9d:32:09:b4:
3d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8C:07:29:95:50:25:44:1C:4B:4B:AC:7A:6B:7F:05:A6:05:AD:E9
X509v3 Authority Key Identifier:
keyid:34:BC:A9:4F:6B:61:E1:01:00:DC:3A:71:86:FF:A3:F9:B0:0C:69:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLypT2th4QEA3Dpxhv-j-bAMad0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:45:7b:a1:b3:a5:ae:73:a9:aa:31:53:a6:cc:f9:cc:6b:c4:
44:58:e8:d9:dc:9e:dc:90:b8:27:d4:49:b5:fc:e8:bc:26:55:
90:6e:01:a0:c0:7c:ab:5a:6c:ce:de:05:5b:00:2d:99:2f:53:
d4:11:ab:be:b4:43:f7:90:ea:9e:8e:29:c3:f5:fa:df:fc:f6:
30:db:0f:28:55:0e:c2:66:38:68:bf:1f:fc:bf:58:e1:40:81:
cf:35:e3:05:a9:24:cc:23:e8:c2:36:68:6c:10:5d:fc:81:aa:
8d:ff:37:7e:0a:90:4c:1a:ae:16:55:b7:b7:59:fe:8a:b8:73:
53:72:46:14:05:69:19:99:da:df:ca:c2:17:fe:b9:9f:8e:ed:
b4:af:51:38:59:c0:fc:22:e9:9b:94:89:7b:42:82:26:2a:a9:
cf:87:9e:91:d8:03:fb:84:4f:a6:8e:e9:22:8a:0f:81:7e:1d:
18:43:ea:ea:65:ef:7e:7c:02:85:79:c0:25:6b:c5:31:30:f6:
b4:21:57:91:6d:bc:58:8b:96:59:d5:55:88:e8:92:de:16:18:
90:a2:14:4e:4f:a8:6e:d1:b1:30:27:70:a4:12:af:a2:d8:94:
4e:fb:d8:f2:ae:8f:8a:6b:7e:dc:a2:ee:9f:ac:0d:f3:a3:15:
3c:1c:db:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJjj2w4vsq0nE/kegjFQHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0YmNhOTRmNmI2MWUxMDEwMGRjM2E3MTg2ZmZhM2Y5YjAw
YzY5ZGQwHhcNMjUxMTExMDkwMTM4WhcNMjUxMTEyMDkwMTM4WjAzMTEwLwYDVQQD
EyhjZThjMDcyOTk1NTAyNTQ0MWM0YjRiYWM3YTZiN2YwNWE2MDVhZGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDfJpaOUnCkDD3HMXdUMDc5SVbn2
zbpjSkJXUcDoLGl3f7lys/szjCUrT35BbP4YfcEz06l0t9nTfbnIkoYftGKwIcMm
/Nnn83O/CW4T0ocv2Z1CFwqQSIaJQlKcHZUvy1tuksIC/2aLGS9A3AIdb0ao4hNS
3KSsdJ90RAMP/AT40d+rdqrvPG2quW3hcEyIfCj2Ku+1htyOms5p9tFGdeaJed2e
d0ozFh01zXB9YBDpvagwHkIYAK38fyCmMqFOWWb5o1cGtclpPLLJc+k/o+FcmP4X
LXn5dxs1nd85RKgNqQy/mauZNI3pWKldCspFYjOPcl1kzXRmVZ0yCbQ9TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM6MBymVUCVEHEtLrHprfwWmBa3pMB8GA1UdIwQY
MBaAFDS8qU9rYeEBANw6cYb/o/mwDGndMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkx5cFQydGg0UUVBM0RweGh2LWotYkFNYWQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9mNGVhNTktMTgxMC00MjEwLTk4ZjMt
NzA5ZjAzNjI0ZTdlLzEvTkx5cFQydGg0UUVBM0RweGh2LWotYkFNYWQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9mNGVhNTktMTgxMC00MjEwLTk4ZjMtNzA5ZjAzNjI0ZTdl
LzEvTkx5cFQydGg0UUVBM0RweGh2LWotYkFNYWQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApkV7obOl
rnOpqjFTpsz5zGvERFjo2dye3JC4J9RJtfzovCZVkG4BoMB8q1pszt4FWwAtmS9T
1BGrvrRD95Dqno4pw/X63/z2MNsPKFUOwmY4aL8f/L9Y4UCBzzXjBakkzCPowjZo
bBBd/IGqjf83fgqQTBquFlW3t1n+irhzU3JGFAVpGZna38rCF/65n47ttK9ROFnA
/CLpm5SJe0KCJiqpz4eekdgD+4RPpo7pIooPgX4dGEPq6mXvfnwChXnAJWvFMTD2
tCFXkW28WIuWWdVViOiS3hYYkKIUTk+obtGxMCdwpBKvotiUTvvY8q6Pimt+3KLu
n6wN86MVPBzbvA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:58:45 2025 by rpki-client