Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
File: NR8cdaHchk37-YdDxQbuGGkk9kM.mft (raw, json)
Hash identifier: iacpS0XcCl1F8aYQr7oQ6OQdmothtMAIgIo5m+u8qls=
Subject key identifier: C7:6F:E5:0F:18:8F:18:67:38:78:C5:D5:55:B4:E2:AD:DB:F7:F4:B1
Authority key identifier: 35:1F:1C:75:A1:DC:86:4D:FB:F9:87:43:C5:06:EE:18:69:24:F6:43
Certificate issuer: /CN=351f1c75a1dc864dfbf98743c506ee186924f643
Certificate serial: 019A72937047D789816D546857E01911A22C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
Manifest number: 028A
Signing time: Tue 11 Nov 2025 11:00:56 +0000
Manifest this update: Tue 11 Nov 2025 11:00:56 +0000
Manifest next update: Wed 12 Nov 2025 11:00:56 +0000
Files and hashes: 1: Cn6aTJ6E1_-gCpRxnelqtaB0lKU.roa (hash: VqTM+HURS8DC+WZMdKoSVyf3dPPj9el6+N1nRAL14WU=)
2: NR8cdaHchk37-YdDxQbuGGkk9kM.crl (hash: FeLEXrGWzb8TkFv4mlN458o6d/+DjTH1UyNZLT/2mt0=)
3: rT2NKGhh-IbqjO8Z7nYfbW1wOX8.roa (hash: iTv3B38u9yzbs8hr8RvbnohLnyRQDgptr0b4/9herOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:70:47:d7:89:81:6d:54:68:57:e0:19:11:a2:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351f1c75a1dc864dfbf98743c506ee186924f643
Validity
Not Before: Nov 11 11:00:56 2025 GMT
Not After : Nov 12 11:00:56 2025 GMT
Subject: CN=c76fe50f188f18673878c5d555b4e2addbf7f4b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c9:8f:fc:3a:b5:40:c6:bf:24:bc:23:72:e2:
39:86:f4:6a:6c:af:eb:ec:e7:9c:d2:7b:b4:9d:60:
e3:2b:0e:d2:2f:01:b1:5a:06:48:e7:f5:14:b9:e4:
5e:de:52:bf:60:4c:58:56:7a:80:5d:ee:af:b5:68:
f0:7d:57:1f:36:36:45:97:49:22:08:40:5a:aa:fc:
02:8f:10:62:ce:00:70:6a:d0:d8:49:96:05:2a:a9:
56:66:fa:72:26:84:02:18:02:4f:9e:df:58:ea:43:
4a:09:44:af:20:b2:eb:cc:8c:b6:62:98:da:44:9a:
52:1c:6b:80:39:1b:b4:80:99:18:aa:c7:47:78:e9:
2d:25:a5:3c:6f:52:e0:7b:a4:35:cc:00:b8:4d:23:
c5:d3:2a:82:6b:85:e8:d9:54:b9:d0:e7:15:6c:db:
fe:35:ee:8d:b5:ad:62:a6:cc:4e:f7:53:62:3a:98:
55:ed:fc:84:38:2a:ad:62:a2:b5:7a:6e:66:c2:c3:
cc:8e:3d:e8:9d:65:96:98:49:2c:42:b0:aa:e6:00:
c1:81:6c:ab:8f:30:58:3a:a6:56:67:40:47:db:68:
63:58:a4:85:39:8f:47:59:52:69:e7:cc:97:f6:9f:
18:87:13:3a:1c:75:fb:b5:a4:e7:0e:f3:b3:84:58:
c2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:6F:E5:0F:18:8F:18:67:38:78:C5:D5:55:B4:E2:AD:DB:F7:F4:B1
X509v3 Authority Key Identifier:
keyid:35:1F:1C:75:A1:DC:86:4D:FB:F9:87:43:C5:06:EE:18:69:24:F6:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:ff:77:b0:b4:56:be:76:4c:4e:e6:21:3d:d7:4b:c0:53:f2:
0d:7d:fb:72:28:fc:8e:e5:ad:b3:1e:42:7c:25:df:bd:7a:4a:
27:2b:d8:c7:c3:fc:07:aa:94:5c:10:82:5d:4d:37:ff:8b:1a:
3b:48:67:d4:e8:88:2a:70:19:9c:3d:1e:0a:a8:56:0b:2a:53:
56:06:30:59:ff:e9:15:80:12:64:17:54:e9:e0:5c:c7:68:7b:
fc:74:04:f7:6c:c9:c4:68:5d:01:e9:06:4b:6c:cf:a6:b2:e2:
e6:0e:6f:cb:e8:3a:a5:d2:57:23:f6:fa:4d:3f:23:54:5b:3f:
bd:3b:58:8e:68:15:57:f1:41:ae:e7:b9:ad:61:9f:2b:e1:61:
f5:0e:77:66:f8:5f:f9:90:e3:e5:b0:fc:85:ba:ec:a5:17:8a:
e3:c6:c7:12:0e:22:18:32:11:84:bf:74:14:7d:24:14:81:fa:
f3:a6:aa:c6:51:cf:58:ed:41:6c:81:d3:45:55:38:37:9c:a1:
22:a7:1e:f4:a9:06:db:e9:76:1f:4f:91:77:1f:68:6d:d0:f2:
ca:29:5e:a5:62:bb:c6:41:6e:98:ab:09:06:08:5a:06:84:c3:
23:dd:77:0a:8c:42:17:5d:19:b6:64:6f:1e:6a:d5:2e:98:1d:
5d:d4:e1:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk3BH14mBbVRoV+AZEaIsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MWYxYzc1YTFkYzg2NGRmYmY5ODc0M2M1MDZlZTE4Njky
NGY2NDMwHhcNMjUxMTExMTEwMDU2WhcNMjUxMTEyMTEwMDU2WjAzMTEwLwYDVQQD
EyhjNzZmZTUwZjE4OGYxODY3Mzg3OGM1ZDU1NWI0ZTJhZGRiZjdmNGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8mP/Dq1QMa/JLwjcuI5hvRqbK/r
7Oec0nu0nWDjKw7SLwGxWgZI5/UUueRe3lK/YExYVnqAXe6vtWjwfVcfNjZFl0ki
CEBaqvwCjxBizgBwatDYSZYFKqlWZvpyJoQCGAJPnt9Y6kNKCUSvILLrzIy2Ypja
RJpSHGuAORu0gJkYqsdHeOktJaU8b1Lge6Q1zAC4TSPF0yqCa4Xo2VS50OcVbNv+
Ne6Nta1ipsxO91NiOphV7fyEOCqtYqK1em5mwsPMjj3onWWWmEksQrCq5gDBgWyr
jzBYOqZWZ0BH22hjWKSFOY9HWVJp58yX9p8YhxM6HHX7taTnDvOzhFjC9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMdv5Q8YjxhnOHjF1VW04q3b9/SxMB8GA1UdIwQY
MBaAFDUfHHWh3IZN+/mHQ8UG7hhpJPZDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlI4Y2RhSGNoazM3LVlkRHhRYnVHR2trOWtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8yOWE2Y2QtM2FjNi00NzQ5LThjZmUt
ZGNlYWEyYWUwYTc0LzEvTlI4Y2RhSGNoazM3LVlkRHhRYnVHR2trOWtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8yOWE2Y2QtM2FjNi00NzQ5LThjZmUtZGNlYWEyYWUwYTc0
LzEvTlI4Y2RhSGNoazM3LVlkRHhRYnVHR2trOWtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl/93sLRW
vnZMTuYhPddLwFPyDX37cij8juWtsx5CfCXfvXpKJyvYx8P8B6qUXBCCXU03/4sa
O0hn1OiIKnAZnD0eCqhWCypTVgYwWf/pFYASZBdU6eBcx2h7/HQE92zJxGhdAekG
S2zPprLi5g5vy+g6pdJXI/b6TT8jVFs/vTtYjmgVV/FBrue5rWGfK+Fh9Q53Zvhf
+ZDj5bD8hbrspReK48bHEg4iGDIRhL90FH0kFIH686aqxlHPWO1BbIHTRVU4N5yh
Iqce9KkG2+l2H0+Rdx9obdDyyilepWK7xkFumKsJBghaBoTDI913CoxCF10ZtmRv
HmrVLpgdXdTh/w==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:14:10 2025 by rpki-client