Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.mft
File: 4q9q9tGZ8R7LpDVVEOmbficatUA.mft (raw, json)
Hash identifier: KRwmDcj6JmXNT94yjMjirrnBa6SLdtHhX0b4X56KbUo=
Subject key identifier: B3:AD:1B:7A:2E:A1:91:61:45:31:76:AF:AF:10:65:5A:02:A3:DC:89
Authority key identifier: E2:AF:6A:F6:D1:99:F1:1E:CB:A4:35:55:10:E9:9B:7E:27:1A:B5:40
Certificate issuer: /CN=e2af6af6d199f11ecba4355510e99b7e271ab540
Certificate serial: 019A73A6DD2FDECCC8C4DB06BA26BA3FEE87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4q9q9tGZ8R7LpDVVEOmbficatUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.mft
Manifest number: 0256
Signing time: Tue 11 Nov 2025 16:01:46 +0000
Manifest this update: Tue 11 Nov 2025 16:01:46 +0000
Manifest next update: Wed 12 Nov 2025 16:01:46 +0000
Files and hashes: 1: 4q9q9tGZ8R7LpDVVEOmbficatUA.crl (hash: 7Fk7VzQXPk7Pc/jGNRGI8YNnQZeaOSZ50+IyjkcNHAw=)
2: C-s3qmcWvVMYI1a9KzViDKmJV5c.roa (hash: /bw45CjGjbfD9z7uFQfaYryXfUKu5UGOeYHJY32SaeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4q9q9tGZ8R7LpDVVEOmbficatUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a6:dd:2f:de:cc:c8:c4:db:06:ba:26:ba:3f:ee:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2af6af6d199f11ecba4355510e99b7e271ab540
Validity
Not Before: Nov 11 16:01:46 2025 GMT
Not After : Nov 12 16:01:46 2025 GMT
Subject: CN=b3ad1b7a2ea19161453176afaf10655a02a3dc89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c7:8a:e3:c1:8f:f2:da:f9:d9:5c:e6:48:fe:
22:14:f8:74:00:43:4e:3d:fb:c1:72:4e:7a:ac:df:
9d:c9:3f:ac:a7:0a:e8:d8:a2:07:e9:1f:1b:27:82:
9d:4f:22:09:34:ae:ce:71:03:c5:b3:80:07:c4:10:
77:c4:01:b2:37:e1:30:19:58:06:49:a7:53:54:da:
ab:5d:41:5a:2d:c7:f4:23:ca:f2:20:b3:88:89:6d:
25:96:65:2b:5f:21:f3:be:46:ff:3b:d6:d1:0e:5a:
1a:a9:e4:d7:20:82:8b:ca:dc:f3:18:e5:e1:48:ae:
6d:c5:79:9b:b6:4f:aa:5b:fa:1e:61:96:27:ff:b9:
be:99:f9:71:ed:5d:c1:3d:45:76:9e:a2:59:de:ae:
d5:fb:f7:14:7f:6f:27:56:0a:04:33:7e:39:ad:0d:
e8:56:76:b0:8d:6a:e1:4a:ee:ec:68:b9:d3:98:58:
a3:be:7d:3b:26:12:e9:8d:7e:4e:c3:94:fd:2e:c4:
a3:13:cf:10:82:fa:a9:db:ad:e1:9e:3d:fc:b4:e2:
8d:ad:44:4d:80:c6:24:2a:3c:e4:7b:8d:40:16:2a:
7b:26:73:4b:61:8d:14:8b:5b:3b:74:5a:29:ce:e4:
b3:cf:29:12:67:17:92:98:3f:e7:0f:b1:b6:b6:58:
92:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:AD:1B:7A:2E:A1:91:61:45:31:76:AF:AF:10:65:5A:02:A3:DC:89
X509v3 Authority Key Identifier:
keyid:E2:AF:6A:F6:D1:99:F1:1E:CB:A4:35:55:10:E9:9B:7E:27:1A:B5:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q9q9tGZ8R7LpDVVEOmbficatUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:5f:47:12:2b:4c:ab:6f:85:8f:f4:88:2e:5c:b8:38:ae:41:
c1:a2:26:fb:e5:34:4e:8e:1c:53:6f:f1:bb:26:1d:3b:af:c5:
a5:89:08:3b:5f:be:a9:a0:a8:a8:19:87:b2:57:0d:22:b9:ec:
b5:5e:58:d8:6d:ee:ef:1a:48:c2:9d:7c:e8:d9:7f:6b:ad:6d:
7b:b3:17:a3:6e:d5:d9:82:70:87:bf:51:8e:a0:23:7b:0c:65:
f4:6e:b7:df:f7:78:25:ec:10:11:bc:ca:4b:29:9c:e1:52:a7:
d2:77:e0:ea:ce:17:ac:a1:20:ed:21:f3:9d:3f:c7:e8:49:52:
bd:e9:fc:2c:ba:99:2e:28:49:d1:70:ca:6e:e3:40:65:6b:d3:
ec:38:8b:af:f1:37:40:42:bf:71:0f:9a:72:db:dd:05:28:a3:
2c:88:a9:3f:8a:6c:e4:ae:d8:1a:65:cf:64:e2:8a:7d:ab:dc:
4c:1a:8f:39:42:00:19:43:0a:ce:cc:ce:2d:95:a0:d5:61:63:
8b:c7:80:21:7b:c0:fc:5e:a9:59:f7:45:15:d4:f6:1b:d4:8f:
a5:33:80:48:81:63:9c:86:c8:e7:ba:b7:da:0e:36:b5:ed:0e:
54:c1:6f:20:3b:0c:0b:b7:b5:37:e7:db:b8:1a:07:b3:6c:f0:
cb:c9:7c:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzpt0v3szIxNsGuia6P+6HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYWY2YWY2ZDE5OWYxMWVjYmE0MzU1NTEwZTk5YjdlMjcx
YWI1NDAwHhcNMjUxMTExMTYwMTQ2WhcNMjUxMTEyMTYwMTQ2WjAzMTEwLwYDVQQD
EyhiM2FkMWI3YTJlYTE5MTYxNDUzMTc2YWZhZjEwNjU1YTAyYTNkYzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuceK48GP8tr52VzmSP4iFPh0AENO
PfvBck56rN+dyT+spwro2KIH6R8bJ4KdTyIJNK7OcQPFs4AHxBB3xAGyN+EwGVgG
SadTVNqrXUFaLcf0I8ryILOIiW0llmUrXyHzvkb/O9bRDloaqeTXIIKLytzzGOXh
SK5txXmbtk+qW/oeYZYn/7m+mflx7V3BPUV2nqJZ3q7V+/cUf28nVgoEM345rQ3o
VnawjWrhSu7saLnTmFijvn07JhLpjX5Ow5T9LsSjE88Qgvqp263hnj38tOKNrURN
gMYkKjzke41AFip7JnNLYY0Ui1s7dFopzuSzzykSZxeSmD/nD7G2tliSnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLOtG3ouoZFhRTF2r68QZVoCo9yJMB8GA1UdIwQY
MBaAFOKvavbRmfEey6Q1VRDpm34nGrVAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHE5cTl0R1o4UjdMcERWVkVPbWJmaWNhdFVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS82ODU2OWYtOTZjZi00NWUzLTlkYWIt
MmVhNTI4OTZiYWUxLzEvNHE5cTl0R1o4UjdMcERWVkVPbWJmaWNhdFVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS82ODU2OWYtOTZjZi00NWUzLTlkYWItMmVhNTI4OTZiYWUx
LzEvNHE5cTl0R1o4UjdMcERWVkVPbWJmaWNhdFVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHV9HEitM
q2+Fj/SILly4OK5BwaIm++U0To4cU2/xuyYdO6/FpYkIO1++qaCoqBmHslcNIrns
tV5Y2G3u7xpIwp186Nl/a61te7MXo27V2YJwh79RjqAjewxl9G633/d4JewQEbzK
Symc4VKn0nfg6s4XrKEg7SHznT/H6ElSven8LLqZLihJ0XDKbuNAZWvT7DiLr/E3
QEK/cQ+actvdBSijLIipP4ps5K7YGmXPZOKKfavcTBqPOUIAGUMKzszOLZWg1WFj
i8eAIXvA/F6pWfdFFdT2G9SPpTOASIFjnIbI57q32g42te0OVMFvIDsMC7e1N+fb
uBoHs2zwy8l8Rg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 17:16:46 2025 by rpki-client