Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
File: n_M9TzrAqIeECihM3Bq-t91kLwE.mft (raw, json)
Hash identifier: otAVQysZmeSp8WsvZ4pN4xnfW6ORXN/nGl4cjZGlcUg=
Subject key identifier: AA:F6:2A:1F:4E:F8:4A:60:78:E2:E4:2A:56:76:79:01:B3:A9:CD:39
Authority key identifier: 9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
Certificate issuer: /CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Certificate serial: 019A266664B31645409F8559097E4959EABC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
Manifest number: 1033
Signing time: Mon 27 Oct 2025 16:00:35 +0000
Manifest this update: Mon 27 Oct 2025 16:00:35 +0000
Manifest next update: Tue 28 Oct 2025 16:00:35 +0000
Files and hashes: 1: FVg-EXFcHktuG7QQnavEaXe-fnM.roa (hash: mi0+1itCdMO3yynnGJ5oIkWt7SrPDpOOMP9BVB9K+Jc=)
2: T3nKkG-dCBEn2EriUuJalbbWuME.roa (hash: NecAgRoxclxz3UKtAie4B0/FU5sK9TM4xXuPGjhm4Kc=)
3: n_M9TzrAqIeECihM3Bq-t91kLwE.crl (hash: fUlOhnxrlDwo37mCTZV7FwH0cvhN/DcNPSc+sD422q4=)
4: nl8-f4Y4T6rTsqYQijhuiNifL1Q.roa (hash: D8rqvsrK84p8WeU5jZAqKp61j1ey2NYKXftp+gwX6/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:66:64:b3:16:45:40:9f:85:59:09:7e:49:59:ea:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Validity
Not Before: Oct 27 16:00:35 2025 GMT
Not After : Oct 28 16:00:35 2025 GMT
Subject: CN=aaf62a1f4ef84a6078e2e42a56767901b3a9cd39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ad:5d:56:8c:fe:78:e2:29:e0:e9:9f:ad:3c:
ef:14:00:67:37:cd:43:9f:25:0a:bf:ce:a1:f2:bb:
af:2a:18:a8:6f:0e:93:93:5e:c0:49:b9:62:3d:a7:
92:52:60:77:c1:3f:7b:d6:f6:e4:c1:e7:75:36:6f:
ae:cc:07:98:aa:b7:18:e8:69:bf:73:c9:d1:ff:d1:
83:04:cb:8a:bd:48:c5:e0:d1:5c:f2:a9:59:91:b7:
2a:f1:14:ea:62:b4:b3:78:f9:69:81:a9:9b:e6:5d:
01:97:99:d9:b1:7f:53:70:f4:b6:f2:a6:ed:fa:04:
d2:e9:74:3e:b9:3b:10:73:a0:61:36:b9:66:a8:c4:
0e:d2:33:e0:33:77:66:0d:55:9d:5f:2a:cb:d0:ba:
80:c5:f1:c6:86:01:e9:f8:45:78:b2:58:35:53:72:
15:92:f7:07:b9:08:49:42:73:2f:5b:eb:89:65:31:
87:9b:cd:37:3a:9e:86:7e:c9:ae:87:f1:d7:5e:9b:
30:c5:3b:c3:9c:d0:0c:38:f6:ae:0f:c2:2d:9e:56:
e3:33:63:e2:42:97:d0:a4:67:c4:32:4b:65:8f:dd:
69:97:f7:7c:61:ef:21:dd:bf:f5:06:4a:c3:7c:c3:
6d:c8:97:a7:cc:5c:fd:fc:10:59:3d:50:aa:5e:18:
2f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F6:2A:1F:4E:F8:4A:60:78:E2:E4:2A:56:76:79:01:B3:A9:CD:39
X509v3 Authority Key Identifier:
keyid:9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:41:93:b3:6d:2b:bb:1c:c2:7c:9f:27:8d:ac:32:18:90:ad:
37:ea:f2:b5:aa:5e:19:9c:db:9b:c1:a4:0d:9e:bd:d7:8f:4d:
7d:b9:19:61:8e:03:88:16:7b:0f:4d:a4:7e:90:d2:08:0c:10:
63:3d:ab:4b:d0:df:10:0c:9c:4d:2c:dd:32:10:ca:00:8a:13:
ab:e6:03:9e:79:c3:3c:76:97:ec:47:3b:01:cd:02:ed:fe:23:
46:4f:af:38:ce:e5:f5:9f:3e:2e:78:3e:3d:2f:13:c9:be:83:
d6:fd:b8:fe:66:e8:af:e5:15:b1:78:ea:33:59:5c:fa:c6:45:
28:27:ea:6d:25:9c:37:17:bf:48:22:2e:72:39:27:0a:0f:0c:
c2:69:a7:a2:00:6e:a4:f7:42:67:19:1a:ba:0b:8e:98:2e:81:
3f:78:44:2f:64:e8:da:b8:1d:15:91:53:20:65:0d:42:36:b2:
d9:e2:e0:7c:3a:d0:00:ad:90:36:b6:f4:7c:22:fd:b6:39:79:
e9:59:f3:4a:40:93:0c:7b:7a:f7:6a:0c:3b:1c:af:b2:49:5f:
84:75:31:2d:b6:1b:76:8d:aa:6b:d2:58:8a:67:2d:3d:64:ec:
48:cf:85:d7:fc:eb:fb:80:ab:fd:47:00:68:2e:d1:c3:d1:8b:
3b:24:43:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZomZmSzFkVAn4VZCX5JWeq8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZjMzZDRmM2FjMGE4ODc4NDBhMjg0Y2RjMWFiZWI3ZGQ2
NDJmMDEwHhcNMjUxMDI3MTYwMDM1WhcNMjUxMDI4MTYwMDM1WjAzMTEwLwYDVQQD
EyhhYWY2MmExZjRlZjg0YTYwNzhlMmU0MmE1Njc2NzkwMWIzYTljZDM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAta1dVoz+eOIp4OmfrTzvFABnN81D
nyUKv86h8ruvKhiobw6Tk17ASbliPaeSUmB3wT971vbkwed1Nm+uzAeYqrcY6Gm/
c8nR/9GDBMuKvUjF4NFc8qlZkbcq8RTqYrSzePlpgamb5l0Bl5nZsX9TcPS28qbt
+gTS6XQ+uTsQc6BhNrlmqMQO0jPgM3dmDVWdXyrL0LqAxfHGhgHp+EV4slg1U3IV
kvcHuQhJQnMvW+uJZTGHm803Op6Gfsmuh/HXXpswxTvDnNAMOPauD8ItnlbjM2Pi
QpfQpGfEMktlj91pl/d8Ye8h3b/1BkrDfMNtyJenzFz9/BBZPVCqXhgvnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKr2Kh9O+EpgeOLkKlZ2eQGzqc05MB8GA1UdIwQY
MBaAFJ/zPU86wKiHhAooTNwavrfdZC8BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbl9NOVR6ckFxSWVFQ2loTTNCcS10OTFrTHdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8xMjc2ODQtNWFmZS00ZjE4LWI5NWQt
MzA3MjUwM2Q4NjA3LzEvbl9NOVR6ckFxSWVFQ2loTTNCcS10OTFrTHdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8xMjc2ODQtNWFmZS00ZjE4LWI5NWQtMzA3MjUwM2Q4NjA3
LzEvbl9NOVR6ckFxSWVFQ2loTTNCcS10OTFrTHdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf0GTs20r
uxzCfJ8njawyGJCtN+rytapeGZzbm8GkDZ69149NfbkZYY4DiBZ7D02kfpDSCAwQ
Yz2rS9DfEAycTSzdMhDKAIoTq+YDnnnDPHaX7Ec7Ac0C7f4jRk+vOM7l9Z8+Lng+
PS8Tyb6D1v24/mbor+UVsXjqM1lc+sZFKCfqbSWcNxe/SCIucjknCg8MwmmnogBu
pPdCZxkauguOmC6BP3hEL2To2rgdFZFTIGUNQjay2eLgfDrQAK2QNrb0fCL9tjl5
6VnzSkCTDHt692oMOxyvsklfhHUxLbYbdo2qa9JYimctPWTsSM+F1/zr+4Cr/UcA
aC7Rw9GLOyRDjQ==
-----END CERTIFICATE-----
Generated at Mon Oct 27 17:37:00 2025 by rpki-client