Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft
File: 4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft (raw, json)
Hash identifier: 1+2cUMMZYYWCboNhGjgOYRFoyo6vIroy0epmGQhy7fU=
Subject key identifier: A0:44:DF:08:94:4C:0A:6E:B8:2C:1D:07:D7:47:1C:DC:02:54:8E:1E
Authority key identifier: E3:34:EC:39:34:48:D8:3B:F1:51:5F:49:67:A4:48:09:8E:55:FB:43
Certificate issuer: /CN=e334ec393448d83bf1515f4967a448098e55fb43
Certificate serial: 019A71EE87F27D011A71924C31DD94193932
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zTsOTRI2DvxUV9JZ6RICY5V-0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 08:00:49 +0000
Manifest this update: Tue 11 Nov 2025 08:00:49 +0000
Manifest next update: Wed 12 Nov 2025 08:00:49 +0000
Files and hashes: 1: 3i7bDwmXfkGeboYerA9gz4okFig.roa (hash: fWhHLCsrKiodDbQX5MlZg8yk8IDQZFwIAhXPpQk2VnY=)
2: 4zTsOTRI2DvxUV9JZ6RICY5V-0M.crl (hash: oKdJeTfpgD7OUp2JHr7+H9a+ubTSdUDaKcrl3Gb7pM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4zTsOTRI2DvxUV9JZ6RICY5V-0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:87:f2:7d:01:1a:71:92:4c:31:dd:94:19:39:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e334ec393448d83bf1515f4967a448098e55fb43
Validity
Not Before: Nov 11 08:00:49 2025 GMT
Not After : Nov 12 08:00:49 2025 GMT
Subject: CN=a044df08944c0a6eb82c1d07d7471cdc02548e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e0:33:a4:15:f8:86:0a:9f:cf:19:9f:89:7f:
0b:2c:ab:50:b8:25:fd:85:68:87:9e:3e:62:63:70:
86:75:c2:4b:b4:a8:81:77:9d:86:6a:e0:b2:4a:72:
0e:57:cf:15:6f:cb:c2:3b:8a:25:cd:e5:dd:51:fc:
a5:e7:70:1f:dd:c9:8e:d3:26:86:5a:6d:e0:fe:56:
57:c9:66:01:4d:f0:1b:ad:64:3d:db:00:13:28:ec:
89:ff:97:70:2a:4d:2e:df:d8:18:69:e4:0a:45:1e:
c8:23:42:0f:83:f1:68:6d:a5:71:74:73:b7:17:6c:
79:f8:97:f0:13:ac:98:74:71:4f:b5:f3:c4:90:4c:
f1:72:32:b2:ba:bb:a2:bf:89:f5:ae:36:40:2f:af:
22:44:b0:36:cc:d3:0c:69:1a:99:eb:ef:45:71:1a:
aa:fc:ac:94:63:53:2e:a3:c8:43:6f:e5:8d:d1:b7:
5d:38:85:85:60:44:ef:b8:01:4f:b6:ea:87:82:03:
e2:55:e9:d3:e1:30:02:e2:28:73:e0:19:17:1f:61:
8b:7b:df:29:78:4f:2e:31:98:0f:77:5b:e3:31:c9:
fb:b4:1b:56:b9:e8:b0:af:2a:50:06:a9:fe:f8:ba:
f8:8e:45:e2:5c:7b:ad:c8:10:ec:e3:3f:5c:41:e6:
49:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:44:DF:08:94:4C:0A:6E:B8:2C:1D:07:D7:47:1C:DC:02:54:8E:1E
X509v3 Authority Key Identifier:
keyid:E3:34:EC:39:34:48:D8:3B:F1:51:5F:49:67:A4:48:09:8E:55:FB:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zTsOTRI2DvxUV9JZ6RICY5V-0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:42:8c:e4:dd:92:74:ec:a7:ba:a8:20:3c:6e:67:22:b6:8f:
61:33:ce:78:78:bc:14:97:03:68:28:f3:d9:d4:ec:55:90:96:
09:0a:3b:50:fd:62:5c:e3:d3:2f:77:44:d6:00:8e:d8:84:e5:
19:8d:81:49:1d:f6:35:45:b1:e1:d1:83:f8:07:54:6c:a8:34:
0c:7e:da:1a:4d:18:fa:03:bc:0f:3c:55:0a:1f:3e:cd:57:82:
8b:b6:34:c8:50:a6:46:65:ac:45:27:88:6e:e2:5b:96:bd:77:
5b:69:da:c4:ea:71:54:24:2d:2d:f1:ce:41:ed:50:2c:f3:31:
52:62:50:ef:67:5f:12:14:e5:dd:40:21:ad:ed:02:62:74:83:
68:f5:ec:97:2a:de:09:4f:30:59:69:ff:3e:e0:5b:37:44:41:
59:e2:1c:6d:d6:10:8f:20:24:80:68:02:1c:1c:ff:94:42:64:
82:e8:5e:d4:75:fa:7a:39:9f:de:fa:1e:c8:fd:fd:b8:78:ad:
b6:2f:c5:27:7a:68:ad:25:31:83:69:26:fe:06:a7:9c:cb:17:
b0:c5:9a:52:75:ec:94:fd:72:09:f0:39:d7:a1:70:b4:63:e9:
28:9b:76:ed:86:c9:1d:20:bf:37:cf:4f:66:65:79:9c:48:c0:
73:4a:bf:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7ofyfQEacZJMMd2UGTkyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMzRlYzM5MzQ0OGQ4M2JmMTUxNWY0OTY3YTQ0ODA5OGU1
NWZiNDMwHhcNMjUxMTExMDgwMDQ5WhcNMjUxMTEyMDgwMDQ5WjAzMTEwLwYDVQQD
EyhhMDQ0ZGYwODk0NGMwYTZlYjgyYzFkMDdkNzQ3MWNkYzAyNTQ4ZTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuAzpBX4hgqfzxmfiX8LLKtQuCX9
hWiHnj5iY3CGdcJLtKiBd52GauCySnIOV88Vb8vCO4olzeXdUfyl53Af3cmO0yaG
Wm3g/lZXyWYBTfAbrWQ92wATKOyJ/5dwKk0u39gYaeQKRR7II0IPg/FobaVxdHO3
F2x5+JfwE6yYdHFPtfPEkEzxcjKyuruiv4n1rjZAL68iRLA2zNMMaRqZ6+9FcRqq
/KyUY1Muo8hDb+WN0bddOIWFYETvuAFPtuqHggPiVenT4TAC4ihz4BkXH2GLe98p
eE8uMZgPd1vjMcn7tBtWueiwrypQBqn++Lr4jkXiXHutyBDs4z9cQeZJgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKBE3wiUTApuuCwdB9dHHNwCVI4eMB8GA1UdIwQY
MBaAFOM07Dk0SNg78VFfSWekSAmOVftDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHpUc09UUkkyRHZ4VVY5Slo2UklDWTVWLTBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8xOWJkOGEtYzZmMS00MmUyLTg0NjAt
Y2RhYjE5YTNmZGViLzEvNHpUc09UUkkyRHZ4VVY5Slo2UklDWTVWLTBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8xOWJkOGEtYzZmMS00MmUyLTg0NjAtY2RhYjE5YTNmZGVi
LzEvNHpUc09UUkkyRHZ4VVY5Slo2UklDWTVWLTBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI0KM5N2S
dOynuqggPG5nIraPYTPOeHi8FJcDaCjz2dTsVZCWCQo7UP1iXOPTL3dE1gCO2ITl
GY2BSR32NUWx4dGD+AdUbKg0DH7aGk0Y+gO8DzxVCh8+zVeCi7Y0yFCmRmWsRSeI
buJblr13W2naxOpxVCQtLfHOQe1QLPMxUmJQ72dfEhTl3UAhre0CYnSDaPXslyre
CU8wWWn/PuBbN0RBWeIcbdYQjyAkgGgCHBz/lEJkguhe1HX6ejmf3voeyP39uHit
ti/FJ3porSUxg2km/gannMsXsMWaUnXslP1yCfA516FwtGPpKJt27YbJHSC/N89P
ZmV5nEjAc0q/sA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:43 2025 by rpki-client