Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft
File: 9_38M32M4OBe9_e3KvJ-thzUcDc.mft (raw, json)
Hash identifier: 1rzuaRZeTRVMlXP93UDG/I0/G1Bus/V077reSxfiDu4=
Subject key identifier: 7A:B8:2C:29:F4:2E:3A:65:66:F5:B3:73:ED:D7:32:BC:2E:AA:A0:45
Authority key identifier: F7:FD:FC:33:7D:8C:E0:E0:5E:F7:F7:B7:2A:F2:7E:B6:1C:D4:70:37
Certificate issuer: /CN=f7fdfc337d8ce0e05ef7f7b72af27eb61cd47037
Certificate serial: 019A0C386F8447BE7F464D2612EC0F1B2F49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft
Manifest number: 16EF
Signing time: Wed 22 Oct 2025 14:00:16 +0000
Manifest this update: Wed 22 Oct 2025 14:00:16 +0000
Manifest next update: Thu 23 Oct 2025 14:00:16 +0000
Files and hashes: 1: 9_38M32M4OBe9_e3KvJ-thzUcDc.crl (hash: 7rkDDYOQTtYHA6wRKyN2X7GRYZparyum8JXQ+UQdxe4=)
2: HFh_eeQijygIePsUO7KzM5bNq6k.roa (hash: f2J1YRSlfTR9F+Nhq15QjxHIC1sqOM+BN59BVcBlUfo=)
3: fCHzIX3PF5IX4vTpqhp12B4ANgE.roa (hash: 56hifj5pI9Tipd1DppPjnl4odiFdle6vhykV6J1DFck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0c:38:6f:84:47:be:7f:46:4d:26:12:ec:0f:1b:2f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7fdfc337d8ce0e05ef7f7b72af27eb61cd47037
Validity
Not Before: Oct 22 14:00:16 2025 GMT
Not After : Oct 23 14:00:16 2025 GMT
Subject: CN=7ab82c29f42e3a6566f5b373edd732bc2eaaa045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:58:a2:14:cf:95:d3:63:30:4b:e4:c9:63:d0:
44:9b:3d:cf:79:0c:ec:c5:7e:2b:be:eb:a5:e5:01:
a7:2b:4a:8c:10:0c:f5:73:fc:1a:e5:cc:b2:68:ff:
53:04:28:ec:78:12:c2:67:ab:a0:d9:ef:98:e0:a9:
ec:d4:39:fe:2d:9a:63:32:e9:f0:8b:0c:cf:b7:55:
90:74:f5:17:7c:fa:b4:5b:62:6f:c6:1f:8f:d9:8e:
d8:8b:76:0d:25:c2:e3:87:71:b8:5b:1d:18:ee:ce:
e2:05:a4:e4:61:64:c8:0a:0f:8d:3f:96:25:aa:b5:
7b:b0:c8:5f:db:a0:1b:88:ad:1f:22:3a:25:ce:37:
38:a1:67:d4:91:e9:50:ec:f9:12:48:fc:5f:66:56:
81:bf:a9:84:76:46:73:26:02:8c:e5:ae:63:22:46:
94:83:ae:b0:3b:af:f0:88:29:7c:2c:1e:ee:e5:4b:
73:4f:b6:5f:f2:f1:9b:b7:09:55:0d:91:71:13:3b:
3f:0d:42:6b:79:d4:0c:16:c1:9b:a6:cc:6a:8b:99:
2a:d7:bc:cf:66:df:8c:6b:f8:94:16:1d:24:f8:7b:
14:61:5f:da:5f:19:4d:a3:35:a4:aa:fb:ff:ad:e6:
f2:a0:5e:14:43:ce:14:3d:2b:ef:24:14:6c:b5:39:
65:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B8:2C:29:F4:2E:3A:65:66:F5:B3:73:ED:D7:32:BC:2E:AA:A0:45
X509v3 Authority Key Identifier:
keyid:F7:FD:FC:33:7D:8C:E0:E0:5E:F7:F7:B7:2A:F2:7E:B6:1C:D4:70:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:0f:6b:22:b9:5e:7f:f3:22:f8:9e:b6:1a:70:e1:c6:b3:fd:
2d:4f:cd:17:1e:bc:a7:3f:84:47:25:b0:be:6d:6d:2a:aa:4e:
66:2c:ed:0a:0e:c8:8b:d7:20:27:1b:9c:0a:c8:2f:2b:03:e9:
d1:28:f9:a0:54:92:54:7a:19:40:eb:5f:d1:46:a9:8b:f5:a2:
41:20:29:1b:a4:92:0a:49:d5:76:34:57:e9:71:69:39:4d:f4:
8f:6f:67:79:73:22:f3:d9:6f:60:21:ae:0c:b3:b5:d1:03:3b:
f2:83:1b:ed:c5:0f:8c:19:29:a5:0c:ec:cd:52:b9:a8:2d:bc:
91:c5:71:c3:26:07:87:fb:7b:2f:6e:59:69:fa:bc:f7:c5:26:
69:7d:3c:ad:e2:a4:bd:46:1f:29:77:e3:12:bb:c1:f9:de:88:
aa:83:31:db:39:15:c0:36:45:05:ce:57:f8:5c:b4:d3:53:07:
9d:74:de:ce:d2:ce:e0:5e:b3:e7:6f:4d:8e:88:a6:a2:88:9f:
3a:ef:d0:79:7f:e7:d0:09:0e:d1:ad:2b:a7:df:09:89:13:2a:
40:f9:0b:9d:e2:bd:d3:06:07:17:14:30:c2:1c:ea:8a:c7:19:
44:aa:b1:85:3d:a4:09:a6:0d:c6:ff:b3:3c:c1:ad:45:3d:f3:
f9:65:79:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoMOG+ER75/Rk0mEuwPGy9JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ZmRmYzMzN2Q4Y2UwZTA1ZWY3ZjdiNzJhZjI3ZWI2MWNk
NDcwMzcwHhcNMjUxMDIyMTQwMDE2WhcNMjUxMDIzMTQwMDE2WjAzMTEwLwYDVQQD
Eyg3YWI4MmMyOWY0MmUzYTY1NjZmNWIzNzNlZGQ3MzJiYzJlYWFhMDQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvViiFM+V02MwS+TJY9BEmz3PeQzs
xX4rvuul5QGnK0qMEAz1c/wa5cyyaP9TBCjseBLCZ6ug2e+Y4Kns1Dn+LZpjMunw
iwzPt1WQdPUXfPq0W2Jvxh+P2Y7Yi3YNJcLjh3G4Wx0Y7s7iBaTkYWTICg+NP5Yl
qrV7sMhf26AbiK0fIjolzjc4oWfUkelQ7PkSSPxfZlaBv6mEdkZzJgKM5a5jIkaU
g66wO6/wiCl8LB7u5UtzT7Zf8vGbtwlVDZFxEzs/DUJredQMFsGbpsxqi5kq17zP
Zt+Ma/iUFh0k+HsUYV/aXxlNozWkqvv/rebyoF4UQ84UPSvvJBRstTllVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHq4LCn0LjplZvWzc+3XMrwuqqBFMB8GA1UdIwQY
MBaAFPf9/DN9jODgXvf3tyryfrYc1HA3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOV8zOE0zMk00T0JlOV9lM0t2Si10aHpVY0RjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9jYTA2NmUtOGRjYS00ZDI4LTk0NGIt
Zjk1OWQ0ZTFmMjg5LzEvOV8zOE0zMk00T0JlOV9lM0t2Si10aHpVY0RjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9jYTA2NmUtOGRjYS00ZDI4LTk0NGItZjk1OWQ0ZTFmMjg5
LzEvOV8zOE0zMk00T0JlOV9lM0t2Si10aHpVY0RjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeQ9rIrle
f/Mi+J62GnDhxrP9LU/NFx68pz+ERyWwvm1tKqpOZiztCg7Ii9cgJxucCsgvKwPp
0Sj5oFSSVHoZQOtf0Uapi/WiQSApG6SSCknVdjRX6XFpOU30j29neXMi89lvYCGu
DLO10QM78oMb7cUPjBkppQzszVK5qC28kcVxwyYHh/t7L25Zafq898UmaX08reKk
vUYfKXfjErvB+d6IqoMx2zkVwDZFBc5X+Fy001MHnXTeztLO4F6z529Njoimooif
Ou/QeX/n0AkO0a0rp98JiRMqQPkLneK90wYHFxQwwhzqiscZRKqxhT2kCaYNxv+z
PMGtRT3z+WV5Rg==
-----END CERTIFICATE-----
Generated at Wed Oct 22 18:33:52 2025 by rpki-client