Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft
File: U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft (raw, json)
Hash identifier: TACNofgT+Pj6jds6BQTbVGX99JPbZj+PFkqrD2Qwbww=
Subject key identifier: E8:33:EC:44:A9:17:9E:EE:B3:3F:6F:35:27:25:A0:28:FF:04:AC:F4
Authority key identifier: 53:5A:09:05:AD:56:84:F4:14:18:2C:99:E1:ED:99:81:63:09:30:01
Certificate issuer: /CN=535a0905ad5684f414182c99e1ed998163093001
Certificate serial: 019A725C660E97A3A336F2C95B4796B19301
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 10:00:49 +0000
Manifest this update: Tue 11 Nov 2025 10:00:49 +0000
Manifest next update: Wed 12 Nov 2025 10:00:49 +0000
Files and hashes: 1: 7SN7zcCvYfxuFlfhHOApOkQRiJo.roa (hash: 3PArA/Gbu4mqUDahb41KthgCQL2QFV8tBeKTUZBovcI=)
2: U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.crl (hash: reqEOjGoYV8iWx5FL2Zzg3DPTycP483Ahyq6fIURaD4=)
3: obJncD_0pTUlPPD-AcEn_M1zGfo.roa (hash: RuqdX0YCoJMcWHJ0m+d97tTxosEY+ohGr3DZreCWswY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:66:0e:97:a3:a3:36:f2:c9:5b:47:96:b1:93:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535a0905ad5684f414182c99e1ed998163093001
Validity
Not Before: Nov 11 10:00:49 2025 GMT
Not After : Nov 12 10:00:49 2025 GMT
Subject: CN=e833ec44a9179eeeb33f6f352725a028ff04acf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:56:9e:56:a5:d3:17:f4:b7:60:e7:d2:c1:e4:
34:cf:98:4a:47:6e:39:0e:d5:4b:b2:fc:0e:70:5e:
90:07:e7:37:3b:81:3a:bc:8e:ea:3d:17:99:e4:c8:
bd:59:b2:67:91:8c:e7:d9:3d:9d:ac:c6:4d:82:6a:
35:64:a8:4a:52:a9:bb:2c:89:e9:30:8a:2d:b6:89:
43:5d:59:e4:13:ea:6d:0c:ba:4f:1b:eb:c9:4a:f3:
b0:28:07:0e:ad:de:e2:d1:62:fd:5e:12:e5:99:10:
0d:dc:ba:d6:00:e2:7b:5b:90:f0:d9:33:34:04:fb:
94:3d:1b:d8:91:4a:e6:f1:12:c5:b8:d6:5f:ff:6d:
d2:61:76:0d:4f:84:47:83:0c:f9:26:76:7d:98:ac:
34:ea:93:e1:14:fa:14:73:d1:6f:6f:60:41:5d:c6:
ef:f7:88:81:f9:9b:90:24:97:6d:ef:a3:ba:96:24:
01:15:27:6b:5b:28:d6:22:ff:4e:de:74:22:4b:6f:
7d:cc:2b:4f:16:d3:20:08:5e:42:ed:3c:52:b0:9f:
ab:56:da:4f:19:a5:16:ad:29:ea:5f:d8:76:24:d4:
e5:0e:5f:e9:c7:a9:fc:46:8c:a6:d9:a1:48:f5:c5:
24:96:64:9f:70:4e:26:7c:06:48:ce:65:14:4d:6b:
ed:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:33:EC:44:A9:17:9E:EE:B3:3F:6F:35:27:25:A0:28:FF:04:AC:F4
X509v3 Authority Key Identifier:
keyid:53:5A:09:05:AD:56:84:F4:14:18:2C:99:E1:ED:99:81:63:09:30:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:2a:8e:0f:a8:ea:8f:e2:cf:50:01:1c:60:b3:53:01:85:20:
0e:25:ba:13:d1:a9:9f:b1:b9:05:fc:cb:b5:32:a4:be:61:4a:
af:cf:8a:82:f1:f6:84:54:df:4a:7a:ea:fa:c4:ce:c0:6e:27:
ca:f5:33:16:50:a3:e6:24:96:07:44:ce:4b:d2:7f:42:1b:08:
d6:d3:b0:56:0d:3b:c7:25:88:6f:47:15:fa:5a:3a:65:cc:0f:
78:0e:a8:1e:0c:78:39:bf:1e:18:0c:ac:bb:25:a2:3b:86:59:
8b:8c:6a:85:fe:3e:b7:88:a2:cf:a8:8d:61:dc:3d:9e:9b:89:
c6:34:71:5b:61:b9:5a:57:3b:b4:5b:67:ad:f4:04:ff:ee:a2:
b0:7d:fe:5e:07:89:1c:f8:4a:ed:35:41:f0:6f:1f:dd:da:59:
20:c6:d6:3f:67:d7:25:14:4f:7a:df:9c:e7:d2:f8:13:5c:4d:
8a:9e:bf:90:05:60:6f:95:ee:09:90:d3:bf:20:28:1c:28:ee:
92:aa:ec:4c:27:f4:a3:af:24:62:b7:3d:2b:cc:f1:73:81:81:
9c:97:e9:dd:20:04:b8:82:61:cf:9d:23:82:51:f9:0c:85:f2:
83:1a:b7:e3:ac:89:f2:9f:f6:67:6b:c7:a8:bd:83:d3:65:eb:
bb:90:d2:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXGYOl6OjNvLJW0eWsZMBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNWEwOTA1YWQ1Njg0ZjQxNDE4MmM5OWUxZWQ5OTgxNjMw
OTMwMDEwHhcNMjUxMTExMTAwMDQ5WhcNMjUxMTEyMTAwMDQ5WjAzMTEwLwYDVQQD
EyhlODMzZWM0NGE5MTc5ZWVlYjMzZjZmMzUyNzI1YTAyOGZmMDRhY2Y0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1aeVqXTF/S3YOfSweQ0z5hKR245
DtVLsvwOcF6QB+c3O4E6vI7qPReZ5Mi9WbJnkYzn2T2drMZNgmo1ZKhKUqm7LInp
MIottolDXVnkE+ptDLpPG+vJSvOwKAcOrd7i0WL9XhLlmRAN3LrWAOJ7W5Dw2TM0
BPuUPRvYkUrm8RLFuNZf/23SYXYNT4RHgwz5JnZ9mKw06pPhFPoUc9Fvb2BBXcbv
94iB+ZuQJJdt76O6liQBFSdrWyjWIv9O3nQiS299zCtPFtMgCF5C7TxSsJ+rVtpP
GaUWrSnqX9h2JNTlDl/px6n8Roym2aFI9cUklmSfcE4mfAZIzmUUTWvtvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOgz7ESpF57usz9vNScloCj/BKz0MB8GA1UdIwQY
MBaAFFNaCQWtVoT0FBgsmeHtmYFjCTABMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTFvSkJhMVdoUFFVR0N5WjRlMlpnV01KTUFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9iMjdiYWYtZTY4MS00YWI2LWI5MDMt
NmExMGM2ZTMyMjJkLzEvVTFvSkJhMVdoUFFVR0N5WjRlMlpnV01KTUFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9iMjdiYWYtZTY4MS00YWI2LWI5MDMtNmExMGM2ZTMyMjJk
LzEvVTFvSkJhMVdoUFFVR0N5WjRlMlpnV01KTUFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASyqOD6jq
j+LPUAEcYLNTAYUgDiW6E9Gpn7G5BfzLtTKkvmFKr8+KgvH2hFTfSnrq+sTOwG4n
yvUzFlCj5iSWB0TOS9J/QhsI1tOwVg07xyWIb0cV+lo6ZcwPeA6oHgx4Ob8eGAys
uyWiO4ZZi4xqhf4+t4iiz6iNYdw9npuJxjRxW2G5Wlc7tFtnrfQE/+6isH3+XgeJ
HPhK7TVB8G8f3dpZIMbWP2fXJRRPet+c59L4E1xNip6/kAVgb5XuCZDTvyAoHCju
kqrsTCf0o68kYrc9K8zxc4GBnJfp3SAEuIJhz50jglH5DIXygxq346yJ8p/2Z2vH
qL2D02Xru5DS3g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:44:20 2025 by rpki-client