Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.mft
File: EKtXqw6WUYZ5EUy_DuivVLv9pfU.mft (raw, json)
Hash identifier: wyFKHD/ujrpwVBmb77DqzdDHl7fT18NiDb281WvR9cg=
Subject key identifier: FD:CA:8D:96:7F:EB:A5:A1:E9:69:BC:80:EA:CA:CA:7A:6E:1B:0F:AF
Authority key identifier: 10:AB:57:AB:0E:96:51:86:79:11:4C:BF:0E:E8:AF:54:BB:FD:A5:F5
Certificate issuer: /CN=10ab57ab0e96518679114cbf0ee8af54bbfda5f5
Certificate serial: 019A71B946ADA41138EF536094E723B7608A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EKtXqw6WUYZ5EUy_DuivVLv9pfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.mft
Manifest number: 092D
Signing time: Tue 11 Nov 2025 07:02:38 +0000
Manifest this update: Tue 11 Nov 2025 07:02:38 +0000
Manifest next update: Wed 12 Nov 2025 07:02:38 +0000
Files and hashes: 1: 5cdSX-zrncWspL0K6fL133Q3uNs.roa (hash: RtUr90lsO7bvirIbH36Twsg4zf98Kyt3Rbxenxpq4mM=)
2: EKtXqw6WUYZ5EUy_DuivVLv9pfU.crl (hash: OWz1vJ4pz8Za2N/NhqOotzovXn4JAdHNCTS8iLlb21g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/EKtXqw6WUYZ5EUy_DuivVLv9pfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:46:ad:a4:11:38:ef:53:60:94:e7:23:b7:60:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10ab57ab0e96518679114cbf0ee8af54bbfda5f5
Validity
Not Before: Nov 11 07:02:38 2025 GMT
Not After : Nov 12 07:02:38 2025 GMT
Subject: CN=fdca8d967feba5a1e969bc80eacaca7a6e1b0faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:03:77:a8:4e:1b:28:59:65:95:f5:55:03:60:
77:90:5f:89:51:6b:5a:15:2a:a1:dd:6d:9c:d4:aa:
da:d0:7b:8e:02:ed:5e:13:9c:26:9f:09:e2:1c:7e:
7d:c0:25:e6:00:b8:45:a7:5e:02:9f:cc:a2:03:9d:
b8:a7:a6:76:27:2c:40:ee:e9:8c:8b:26:ff:a9:42:
77:00:b0:9f:97:4c:4d:53:ea:fa:1f:22:14:a3:84:
b3:73:82:b5:bb:2f:a2:fc:af:97:e3:a2:ee:e7:1c:
34:9d:12:f4:f4:d5:e5:a4:e5:18:02:4f:2d:b6:0c:
74:55:f3:35:cc:17:66:1c:23:50:78:fd:3e:ed:29:
aa:19:58:92:bb:4e:04:e3:b6:40:a1:09:82:9e:70:
77:e2:f5:c9:ce:fb:d4:0d:14:f1:4e:7e:ba:e5:05:
2b:21:0a:9e:81:1b:79:34:71:fd:39:86:99:59:46:
98:17:56:fd:0d:f2:75:6d:34:98:7a:b7:fb:76:4a:
22:3e:c4:88:03:cc:0c:e1:b8:d0:cc:85:7d:06:21:
b7:fb:7d:28:e6:05:54:09:bd:47:c5:c6:85:13:d4:
f4:c1:88:df:47:80:99:b7:0c:62:1c:74:2f:21:37:
5e:af:49:42:e9:9d:5a:f7:23:6a:d3:b6:99:89:51:
5b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:CA:8D:96:7F:EB:A5:A1:E9:69:BC:80:EA:CA:CA:7A:6E:1B:0F:AF
X509v3 Authority Key Identifier:
keyid:10:AB:57:AB:0E:96:51:86:79:11:4C:BF:0E:E8:AF:54:BB:FD:A5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKtXqw6WUYZ5EUy_DuivVLv9pfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:6a:94:87:f8:67:99:44:65:c2:41:a8:15:4b:dc:8a:03:f6:
28:41:57:a0:bf:8a:b8:00:52:cc:12:87:8d:7d:74:5d:da:5a:
50:38:8b:de:77:90:f2:c8:c5:f3:29:50:fc:6a:85:00:be:e7:
ce:b5:01:14:6a:57:98:56:6d:22:57:89:c0:fe:03:be:d5:67:
eb:a1:67:c9:7a:9d:10:dc:0a:ae:5e:2f:d9:b6:59:a4:53:2a:
18:61:af:7e:3a:06:6d:9e:61:7b:10:b0:38:9d:a1:51:b2:18:
79:0f:2a:83:23:8d:ad:36:e8:77:81:5a:a3:85:90:25:c4:7d:
11:23:5c:ec:af:bf:cf:6f:37:fd:55:f6:4f:b1:ba:46:46:4d:
e2:d5:ec:a0:02:11:dc:47:fe:48:d3:37:9a:14:68:49:25:89:
af:2c:9e:29:b3:45:b2:ec:c3:06:cd:61:3c:59:e3:af:b7:37:
84:90:00:3c:9f:8b:da:9e:2d:ce:b4:30:b5:af:58:ea:7a:85:
81:e3:35:4b:ed:40:ea:cd:d9:04:ff:7d:3f:da:cd:94:bc:4f:
c6:90:1e:90:79:96:1c:a5:60:1b:4e:37:18:0e:10:fe:e4:3c:
6b:12:43:af:e9:72:8f:03:ec:7f:94:90:23:1b:42:87:e3:88:
e3:1b:1d:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuUatpBE471NglOcjt2CKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwYWI1N2FiMGU5NjUxODY3OTExNGNiZjBlZThhZjU0YmJm
ZGE1ZjUwHhcNMjUxMTExMDcwMjM4WhcNMjUxMTEyMDcwMjM4WjAzMTEwLwYDVQQD
EyhmZGNhOGQ5NjdmZWJhNWExZTk2OWJjODBlYWNhY2E3YTZlMWIwZmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQN3qE4bKFlllfVVA2B3kF+JUWta
FSqh3W2c1Kra0HuOAu1eE5wmnwniHH59wCXmALhFp14Cn8yiA524p6Z2JyxA7umM
iyb/qUJ3ALCfl0xNU+r6HyIUo4Szc4K1uy+i/K+X46Lu5xw0nRL09NXlpOUYAk8t
tgx0VfM1zBdmHCNQeP0+7SmqGViSu04E47ZAoQmCnnB34vXJzvvUDRTxTn665QUr
IQqegRt5NHH9OYaZWUaYF1b9DfJ1bTSYerf7dkoiPsSIA8wM4bjQzIV9BiG3+30o
5gVUCb1HxcaFE9T0wYjfR4CZtwxiHHQvITder0lC6Z1a9yNq07aZiVFbBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP3KjZZ/66Wh6Wm8gOrKynpuGw+vMB8GA1UdIwQY
MBaAFBCrV6sOllGGeRFMvw7or1S7/aX1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUt0WHF3NldVWVo1RVV5X0R1aXZWTHY5cGZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9iNjFhYzItNmUyNy00ZDRlLWFiOWUt
ZjM4MGJmMGZkZDg0LzEvRUt0WHF3NldVWVo1RVV5X0R1aXZWTHY5cGZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9iNjFhYzItNmUyNy00ZDRlLWFiOWUtZjM4MGJmMGZkZDg0
LzEvRUt0WHF3NldVWVo1RVV5X0R1aXZWTHY5cGZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMGqUh/hn
mURlwkGoFUvcigP2KEFXoL+KuABSzBKHjX10XdpaUDiL3neQ8sjF8ylQ/GqFAL7n
zrUBFGpXmFZtIleJwP4DvtVn66FnyXqdENwKrl4v2bZZpFMqGGGvfjoGbZ5hexCw
OJ2hUbIYeQ8qgyONrTbod4Fao4WQJcR9ESNc7K+/z283/VX2T7G6RkZN4tXsoAIR
3Ef+SNM3mhRoSSWJryyeKbNFsuzDBs1hPFnjr7c3hJAAPJ+L2p4tzrQwta9Y6nqF
geM1S+1A6s3ZBP99P9rNlLxPxpAekHmWHKVgG043GA4Q/uQ8axJDr+lyjwPsf5SQ
IxtCh+OI4xsdEw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:38 2025 by rpki-client