Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
File: 3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft (raw, json)
Hash identifier: ak7MzRnHZpmaaLNsN2uSudVut49SIyUkJob96AGSPSk=
Subject key identifier: AF:7F:BD:1E:16:6F:20:0E:64:96:93:A9:8E:A3:92:45:EB:2D:35:C5
Authority key identifier: DE:51:C3:C5:DD:C4:FB:61:38:1C:3B:EA:24:C1:BA:4F:74:99:8E:AB
Certificate issuer: /CN=de51c3c5ddc4fb61381c3bea24c1ba4f74998eab
Certificate serial: 019A7293A0D5DD282F1CD727E51681DDD644
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
Manifest number: 13C4
Signing time: Tue 11 Nov 2025 11:01:08 +0000
Manifest this update: Tue 11 Nov 2025 11:01:08 +0000
Manifest next update: Wed 12 Nov 2025 11:01:08 +0000
Files and hashes: 1: 3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl (hash: Nd76RYtjIdYLWn+qRfP9DC8g7gUvyIPWZrN1qlLPkf8=)
2: yrS5JvCeQkL61hQzQKYDkOhEOTg.roa (hash: goLq7UsC9/y1qbTkOPG/FDEBz20Pk1byDqCOGCbWKi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:a0:d5:dd:28:2f:1c:d7:27:e5:16:81:dd:d6:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de51c3c5ddc4fb61381c3bea24c1ba4f74998eab
Validity
Not Before: Nov 11 11:01:08 2025 GMT
Not After : Nov 12 11:01:08 2025 GMT
Subject: CN=af7fbd1e166f200e649693a98ea39245eb2d35c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a1:2a:62:f4:7b:83:36:b3:67:4d:60:7d:ec:
ed:50:38:19:a5:58:8e:26:59:b9:c1:19:9e:21:b4:
5f:20:e9:22:dc:dd:77:d6:41:e0:d3:4b:2e:f3:6a:
e0:d7:fe:cf:c4:32:be:59:4a:10:5c:23:42:b2:3d:
c4:35:06:49:46:69:cb:3a:b2:b3:67:c1:11:04:07:
17:05:47:be:54:d0:02:5e:07:e5:e4:f7:18:25:7e:
9e:98:63:be:c2:75:f5:08:b5:42:75:8c:1d:79:1e:
85:a9:ad:40:8c:a9:69:84:72:c3:2b:a9:1e:6a:82:
46:b9:6b:fb:e5:97:cf:ab:86:88:c2:dd:a7:a3:86:
c6:a0:0f:73:cd:db:32:3c:ad:9b:11:6c:ee:2a:e3:
89:fa:0d:70:eb:69:e4:ed:fc:9b:73:d5:85:b4:11:
6e:b8:f1:5c:f0:0b:58:08:ef:c0:74:0e:61:9c:8c:
e3:28:d6:bc:7a:c0:54:a8:1f:f1:83:7b:65:c8:49:
ae:54:56:7c:4c:e5:95:94:fe:ba:be:f2:38:4d:53:
b8:42:da:9c:3f:53:aa:0e:83:c1:fb:0f:fd:86:5a:
6d:b7:da:9b:40:62:4f:82:c1:9b:d4:fc:ed:00:f9:
04:95:bb:db:88:65:69:61:66:d5:92:0b:c4:b2:3b:
f6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:7F:BD:1E:16:6F:20:0E:64:96:93:A9:8E:A3:92:45:EB:2D:35:C5
X509v3 Authority Key Identifier:
keyid:DE:51:C3:C5:DD:C4:FB:61:38:1C:3B:EA:24:C1:BA:4F:74:99:8E:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:0a:58:34:b2:e8:13:20:1c:46:00:91:c3:38:23:83:90:84:
82:38:08:7b:af:3f:df:34:e1:06:b3:b3:75:b7:d3:aa:67:7b:
3b:e8:d2:51:40:05:57:6b:bb:96:0e:0a:cf:92:99:ac:f1:81:
9c:0c:c4:3d:6b:e5:48:66:7f:5f:78:a1:b3:29:33:2f:b6:cc:
ef:da:7d:21:94:b5:93:50:9e:53:e8:ea:6d:b0:8f:b8:cd:3d:
bc:ef:a0:8a:6e:be:c9:d7:5e:2b:68:52:00:74:ff:46:78:a4:
3d:39:5a:68:80:8e:a3:9f:6d:0c:84:d9:53:58:21:fb:45:9b:
e4:e9:44:1a:b9:87:1c:85:b6:11:9d:9a:a1:28:c5:d9:7f:c9:
91:df:e5:b7:ea:73:8e:bd:1e:dc:6e:d3:22:a3:82:1c:58:a4:
ee:0d:2c:7a:8b:7f:18:f3:ef:6e:32:c4:71:a2:2f:b9:c0:90:
e1:37:ab:6a:f6:2b:7e:64:ec:b2:e1:0f:57:40:d1:ab:51:aa:
ca:92:42:2a:67:21:47:1e:54:38:58:db:f4:b1:86:b8:bc:4c:
7d:27:e3:34:55:dc:70:fe:0a:2c:83:06:69:94:47:ff:21:f0:
c3:94:7b:5c:49:ee:78:3d:6d:97:e6:0a:c4:3f:89:80:f6:5a:
63:4c:f3:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk6DV3SgvHNcn5RaB3dZEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlNTFjM2M1ZGRjNGZiNjEzODFjM2JlYTI0YzFiYTRmNzQ5
OThlYWIwHhcNMjUxMTExMTEwMTA4WhcNMjUxMTEyMTEwMTA4WjAzMTEwLwYDVQQD
EyhhZjdmYmQxZTE2NmYyMDBlNjQ5NjkzYTk4ZWEzOTI0NWViMmQzNWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKEqYvR7gzazZ01gfeztUDgZpViO
Jlm5wRmeIbRfIOki3N131kHg00su82rg1/7PxDK+WUoQXCNCsj3ENQZJRmnLOrKz
Z8ERBAcXBUe+VNACXgfl5PcYJX6emGO+wnX1CLVCdYwdeR6Fqa1AjKlphHLDK6ke
aoJGuWv75ZfPq4aIwt2no4bGoA9zzdsyPK2bEWzuKuOJ+g1w62nk7fybc9WFtBFu
uPFc8AtYCO/AdA5hnIzjKNa8esBUqB/xg3tlyEmuVFZ8TOWVlP66vvI4TVO4Qtqc
P1OqDoPB+w/9hlptt9qbQGJPgsGb1PztAPkElbvbiGVpYWbVkgvEsjv2rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK9/vR4WbyAOZJaTqY6jkkXrLTXFMB8GA1UdIwQY
MBaAFN5Rw8XdxPthOBw76iTBuk90mY6rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2xIRHhkM0UtMkU0SER2cUpNRzZUM1NaanFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS82ZGU2NWUtMDRiZC00MzQ2LTg1YjEt
YTUzMjVkNDQxNzAyLzEvM2xIRHhkM0UtMkU0SER2cUpNRzZUM1NaanFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS82ZGU2NWUtMDRiZC00MzQ2LTg1YjEtYTUzMjVkNDQxNzAy
LzEvM2xIRHhkM0UtMkU0SER2cUpNRzZUM1NaanFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOgpYNLLo
EyAcRgCRwzgjg5CEgjgIe68/3zThBrOzdbfTqmd7O+jSUUAFV2u7lg4Kz5KZrPGB
nAzEPWvlSGZ/X3ihsykzL7bM79p9IZS1k1CeU+jqbbCPuM09vO+gim6+yddeK2hS
AHT/RnikPTlaaICOo59tDITZU1gh+0Wb5OlEGrmHHIW2EZ2aoSjF2X/Jkd/lt+pz
jr0e3G7TIqOCHFik7g0seot/GPPvbjLEcaIvucCQ4TeravYrfmTssuEPV0DRq1Gq
ypJCKmchRx5UOFjb9LGGuLxMfSfjNFXccP4KLIMGaZRH/yHww5R7XEnueD1tl+YK
xD+JgPZaY0zzUw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 16:46:19 2025 by rpki-client