Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft
File: kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft (raw, json)
Hash identifier: 4L3EBafyS/AvRq01uJ+XrWB1yUcxKiQ3IO3p0IN5OPo=
Subject key identifier: AD:F7:34:E6:91:CC:56:08:37:AD:7F:5E:50:03:B6:E9:66:67:DD:7A
Authority key identifier: 91:CD:4C:6C:12:60:FC:9A:7C:89:4B:F6:AB:E7:7A:6E:EC:FE:C0:6E
Certificate issuer: /CN=91cd4c6c1260fc9a7c894bf6abe77a6eecfec06e
Certificate serial: 019A2967160AD8E174E3FC6643D0596FC8F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kc1MbBJg_Jp8iUv2q-d6buz-wG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft
Manifest number: 127C
Signing time: Tue 28 Oct 2025 06:00:12 +0000
Manifest this update: Tue 28 Oct 2025 06:00:12 +0000
Manifest next update: Wed 29 Oct 2025 06:00:12 +0000
Files and hashes: 1: 7onO-XhdJCc_IRQIQVCJn8u-1wE.roa (hash: sTU2wUb7RHNn6n+c6UyiV4vOHD7amsQkLEZ6q5B98dM=)
2: kc1MbBJg_Jp8iUv2q-d6buz-wG4.crl (hash: 4GbLw+p2xV/hnnxYio4QZ2GSYLZaLZ1f2pun+fJUOVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kc1MbBJg_Jp8iUv2q-d6buz-wG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 06:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:67:16:0a:d8:e1:74:e3:fc:66:43:d0:59:6f:c8:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91cd4c6c1260fc9a7c894bf6abe77a6eecfec06e
Validity
Not Before: Oct 28 06:00:12 2025 GMT
Not After : Oct 29 06:00:12 2025 GMT
Subject: CN=adf734e691cc560837ad7f5e5003b6e96667dd7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:26:d9:b1:5e:81:ce:8c:cc:2a:34:bd:ba:15:
28:a0:ff:35:5d:27:90:b2:38:8c:1b:3c:4d:ae:fd:
6d:69:8c:1b:48:a9:11:7f:ee:97:32:75:f8:20:97:
d7:0f:8b:17:31:b1:26:b3:72:d7:ab:1d:98:22:00:
9d:ab:5c:88:01:1e:c4:6d:05:78:57:94:94:24:33:
0e:74:55:b7:f8:e3:a0:58:6c:34:da:99:39:61:98:
c8:cc:d1:12:b2:f5:bd:71:ac:ff:ac:7e:84:91:a5:
e9:f2:5d:e6:7c:b0:87:d4:1e:3e:97:a8:19:8e:f6:
0d:24:91:d6:b7:8b:03:a7:1f:b7:05:08:fd:24:aa:
0a:9a:e7:66:6d:a7:8d:9a:1a:c5:5d:ac:41:d3:04:
d6:e3:17:a8:08:8e:ca:64:f5:07:6e:c0:8b:d5:87:
63:11:8b:94:58:99:3b:70:97:20:0f:75:22:b3:af:
b7:c3:18:e1:df:9a:26:18:40:1b:6e:a6:1d:7c:dc:
b9:b9:97:f1:46:bc:f6:49:2d:12:61:d9:ec:2b:30:
3e:e6:68:11:0b:12:68:be:4e:72:76:50:67:ba:e4:
c4:5c:0b:db:c0:9e:18:df:ee:47:2d:7d:19:05:0a:
69:90:72:b1:39:e6:f9:a6:13:8c:4c:7a:2b:33:3a:
15:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F7:34:E6:91:CC:56:08:37:AD:7F:5E:50:03:B6:E9:66:67:DD:7A
X509v3 Authority Key Identifier:
keyid:91:CD:4C:6C:12:60:FC:9A:7C:89:4B:F6:AB:E7:7A:6E:EC:FE:C0:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kc1MbBJg_Jp8iUv2q-d6buz-wG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ef:da:1b:f9:90:42:87:0b:5d:06:4a:a3:91:15:e2:fc:da:
62:b1:70:73:5b:77:85:ba:81:cf:9c:4c:3b:40:bc:d4:45:68:
63:52:b7:b7:98:f3:32:18:8f:4a:b3:d2:57:13:5b:71:99:f4:
22:27:b6:0c:e0:f5:5f:25:c9:d6:66:2f:d2:2e:43:3d:96:26:
00:45:92:09:26:5b:bc:bb:e5:21:6a:88:5a:5e:fc:a5:e2:db:
97:73:67:18:2f:5b:37:27:3c:7c:10:e4:aa:df:5f:fe:f1:01:
9e:40:70:d5:7f:bd:36:cf:27:80:51:f1:f9:fd:03:d0:56:5c:
a6:2f:ea:b1:e4:bc:aa:d9:6e:4f:7f:ec:13:e5:44:bc:56:eb:
53:46:a7:33:54:eb:b2:d3:c0:09:20:1f:08:8b:7c:b9:4f:38:
ca:0d:f0:f5:fd:32:51:0a:29:95:55:4e:65:a5:e6:2e:1e:8f:
10:35:3a:2b:4c:9f:7b:7c:79:d2:9e:39:9e:7e:ec:c8:8c:d1:
9b:f3:3a:d0:94:11:13:bf:ce:3c:f3:af:19:be:b7:27:59:c7:
e3:1c:42:99:d6:c7:5c:4f:51:20:99:a7:8f:d7:f4:12:d7:ec:
14:4c:16:12:77:d6:b6:15:82:38:a9:04:e3:14:d5:7d:76:68:
19:07:b4:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZopZxYK2OF04/xmQ9BZb8j4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxY2Q0YzZjMTI2MGZjOWE3Yzg5NGJmNmFiZTc3YTZlZWNm
ZWMwNmUwHhcNMjUxMDI4MDYwMDEyWhcNMjUxMDI5MDYwMDEyWjAzMTEwLwYDVQQD
EyhhZGY3MzRlNjkxY2M1NjA4MzdhZDdmNWU1MDAzYjZlOTY2NjdkZDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlibZsV6BzozMKjS9uhUooP81XSeQ
sjiMGzxNrv1taYwbSKkRf+6XMnX4IJfXD4sXMbEms3LXqx2YIgCdq1yIAR7EbQV4
V5SUJDMOdFW3+OOgWGw02pk5YZjIzNESsvW9caz/rH6EkaXp8l3mfLCH1B4+l6gZ
jvYNJJHWt4sDpx+3BQj9JKoKmudmbaeNmhrFXaxB0wTW4xeoCI7KZPUHbsCL1Ydj
EYuUWJk7cJcgD3Uis6+3wxjh35omGEAbbqYdfNy5uZfxRrz2SS0SYdnsKzA+5mgR
CxJovk5ydlBnuuTEXAvbwJ4Y3+5HLX0ZBQppkHKxOeb5phOMTHorMzoVgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK33NOaRzFYIN61/XlADtulmZ916MB8GA1UdIwQY
MBaAFJHNTGwSYPyafIlL9qvnem7s/sBuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2MxTWJCSmdfSnA4aVV2MnEtZDZidXotd0c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9lNWIzMDEtMGMzMy00OGI0LTg0N2It
ZTk4ZWUyMzgxMTQ2LzEva2MxTWJCSmdfSnA4aVV2MnEtZDZidXotd0c0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni9lNWIzMDEtMGMzMy00OGI0LTg0N2ItZTk4ZWUyMzgxMTQ2
LzEva2MxTWJCSmdfSnA4aVV2MnEtZDZidXotd0c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIu/aG/mQ
QocLXQZKo5EV4vzaYrFwc1t3hbqBz5xMO0C81EVoY1K3t5jzMhiPSrPSVxNbcZn0
Iie2DOD1XyXJ1mYv0i5DPZYmAEWSCSZbvLvlIWqIWl78peLbl3NnGC9bNyc8fBDk
qt9f/vEBnkBw1X+9Ns8ngFHx+f0D0FZcpi/qseS8qtluT3/sE+VEvFbrU0anM1Tr
stPACSAfCIt8uU84yg3w9f0yUQoplVVOZaXmLh6PEDU6K0yfe3x50p45nn7syIzR
m/M60JQRE7/OPPOvGb63J1nH4xxCmdbHXE9RIJmnj9f0EtfsFEwWEnfWthWCOKkE
4xTVfXZoGQe0Qg==
-----END CERTIFICATE-----
Generated at Tue Oct 28 11:10:17 2025 by rpki-client