Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.mft
File: B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.mft (raw, json)
Hash identifier: 5bG0qVrY9mpt8awFLpxAmF6sofqpPiYWvOsUzp9lLDw=
Subject key identifier: CE:19:FC:6C:90:BB:9F:75:57:B5:EF:56:3F:F4:CB:4F:56:C7:C0:D8
Authority key identifier: 07:6B:01:85:CA:BB:66:84:3D:67:F8:86:01:BC:0A:79:A2:EE:BC:AD
Certificate issuer: /CN=076b0185cabb66843d67f88601bc0a79a2eebcad
Certificate serial: 019A7293B273AFE084293F41BC60190D9CAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.mft
Manifest number: 0E41
Signing time: Tue 11 Nov 2025 11:01:13 +0000
Manifest this update: Tue 11 Nov 2025 11:01:13 +0000
Manifest next update: Wed 12 Nov 2025 11:01:13 +0000
Files and hashes: 1: B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.crl (hash: ykDoNWF2+qrY7m7cYhOd4dVvhcPM+g1ptexa8i3Yv8Q=)
2: bKjmtKZ3Q_dbBV89_TPqXOrr9l8.roa (hash: fkweW281SglBT4coSKgBxiwmush3g6XftqB0c+xmAws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:b2:73:af:e0:84:29:3f:41:bc:60:19:0d:9c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=076b0185cabb66843d67f88601bc0a79a2eebcad
Validity
Not Before: Nov 11 11:01:13 2025 GMT
Not After : Nov 12 11:01:13 2025 GMT
Subject: CN=ce19fc6c90bb9f7557b5ef563ff4cb4f56c7c0d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ba:00:01:12:b8:d0:2b:24:d1:b0:e1:00:ec:
12:f1:15:4a:7f:c4:fb:78:67:14:70:aa:67:7b:02:
45:ef:54:c0:58:20:6a:79:33:d9:c4:0a:45:3c:b8:
ac:2c:28:70:b5:21:42:51:7b:f4:46:f1:62:72:39:
fa:90:46:2f:b6:61:2a:43:f4:5a:ff:aa:86:30:02:
a4:d2:d3:84:16:fb:b0:d3:3d:31:40:56:77:39:00:
8f:13:ac:8d:86:c1:e7:1e:e4:3e:14:71:ae:41:0e:
02:58:5e:44:e4:be:47:ba:21:98:69:4e:99:be:de:
aa:71:c2:6e:e0:80:7a:20:2c:8b:c0:0c:59:e7:aa:
1a:99:eb:74:cc:47:cf:ca:c5:2b:48:de:00:83:92:
8e:4d:30:e5:42:84:2c:1d:b9:57:b5:da:9e:e5:d6:
ee:75:3e:cf:bd:2d:43:27:ed:87:49:b0:0b:3b:35:
33:da:70:6b:7b:42:6a:cd:25:77:53:c5:ca:2c:8d:
22:52:c2:0a:4b:96:22:0a:da:33:f1:68:54:59:e4:
92:f7:b9:a4:41:94:98:8a:76:eb:e3:fb:c2:09:01:
43:db:73:d3:86:7f:41:f0:6b:e7:f2:67:fe:0f:64:
2b:38:44:ee:f5:42:89:9f:34:81:20:4d:b2:92:f1:
c5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:19:FC:6C:90:BB:9F:75:57:B5:EF:56:3F:F4:CB:4F:56:C7:C0:D8
X509v3 Authority Key Identifier:
keyid:07:6B:01:85:CA:BB:66:84:3D:67:F8:86:01:BC:0A:79:A2:EE:BC:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:bd:3c:aa:6c:31:84:58:42:83:b9:bc:24:90:9a:02:e0:e0:
30:7c:16:e5:87:85:7a:d8:fe:80:9a:44:2a:ac:72:85:5d:33:
85:ec:20:24:dc:f0:09:18:9e:c6:b3:9f:58:89:fe:39:79:1e:
df:a9:d7:b9:cc:bc:dc:14:b0:be:80:4e:96:49:0b:e2:3d:0b:
a1:ae:2c:95:31:dd:37:ef:68:e9:de:4d:0a:b1:a1:63:ef:ce:
51:64:8c:fb:ae:10:1f:75:9d:c1:a9:1c:09:28:27:bd:13:08:
82:2e:f7:7f:5d:60:48:3e:34:ca:40:4e:5d:99:0e:8c:aa:69:
f1:54:e0:99:28:42:fb:6d:01:97:c6:6f:e5:8d:8e:e9:3b:a4:
49:55:62:47:b4:1b:58:b0:94:f2:e1:32:7c:51:8a:53:64:b6:
90:68:6b:c7:d7:8a:48:fc:9e:49:37:8b:ec:24:3c:c1:d7:32:
74:e5:ff:9a:e3:54:86:a0:24:cc:75:f8:f3:bb:f8:cb:07:b0:
77:04:77:14:93:c0:0b:04:56:78:4d:60:c3:79:0e:ff:a0:0e:
e3:f4:8e:2a:67:2e:f9:5c:89:f4:18:8e:a4:96:7f:9b:6f:91:
ec:71:f3:30:8c:40:2d:29:bf:f5:60:56:34:f2:7e:27:40:23:
3a:0f:19:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk7Jzr+CEKT9BvGAZDZyvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NmIwMTg1Y2FiYjY2ODQzZDY3Zjg4NjAxYmMwYTc5YTJl
ZWJjYWQwHhcNMjUxMTExMTEwMTEzWhcNMjUxMTEyMTEwMTEzWjAzMTEwLwYDVQQD
EyhjZTE5ZmM2YzkwYmI5Zjc1NTdiNWVmNTYzZmY0Y2I0ZjU2YzdjMGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArboAARK40Csk0bDhAOwS8RVKf8T7
eGcUcKpnewJF71TAWCBqeTPZxApFPLisLChwtSFCUXv0RvFicjn6kEYvtmEqQ/Ra
/6qGMAKk0tOEFvuw0z0xQFZ3OQCPE6yNhsHnHuQ+FHGuQQ4CWF5E5L5HuiGYaU6Z
vt6qccJu4IB6ICyLwAxZ56oamet0zEfPysUrSN4Ag5KOTTDlQoQsHblXtdqe5dbu
dT7PvS1DJ+2HSbALOzUz2nBre0JqzSV3U8XKLI0iUsIKS5YiCtoz8WhUWeSS97mk
QZSYinbr4/vCCQFD23PThn9B8Gvn8mf+D2QrOETu9UKJnzSBIE2ykvHFlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM4Z/GyQu591V7XvVj/0y09Wx8DYMB8GA1UdIwQY
MBaAFAdrAYXKu2aEPWf4hgG8Cnmi7rytMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjJzQmhjcTdab1E5Wl9pR0Fid0tlYUx1dkswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9mMTRiYzMtMWY5Ni00ZGE4LWExNmYt
N2I0NWJlMDQ2NWFhLzEvQjJzQmhjcTdab1E5Wl9pR0Fid0tlYUx1dkswLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9mMTRiYzMtMWY5Ni00ZGE4LWExNmYtN2I0NWJlMDQ2NWFh
LzEvQjJzQmhjcTdab1E5Wl9pR0Fid0tlYUx1dkswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhL08qmwx
hFhCg7m8JJCaAuDgMHwW5YeFetj+gJpEKqxyhV0zhewgJNzwCRiexrOfWIn+OXke
36nXucy83BSwvoBOlkkL4j0Loa4slTHdN+9o6d5NCrGhY+/OUWSM+64QH3Wdwakc
CSgnvRMIgi73f11gSD40ykBOXZkOjKpp8VTgmShC+20Bl8Zv5Y2O6TukSVViR7Qb
WLCU8uEyfFGKU2S2kGhrx9eKSPyeSTeL7CQ8wdcydOX/muNUhqAkzHX487v4ywew
dwR3FJPACwRWeE1gw3kO/6AO4/SOKmcu+VyJ9BiOpJZ/m2+R7HHzMIxALSm/9WBW
NPJ+J0AjOg8Zrg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:58 2025 by rpki-client