Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/750d92-2de0-4f3a-bdd4-bf95c912e7a5/1/n6smdTuJXn8_2bhglc4E7j4TLMk.mft
File: n6smdTuJXn8_2bhglc4E7j4TLMk.mft (raw, json)
Hash identifier: GUbDUy5E/k77lYI17r3RNTvBI99cdaDKJDK8nDqCtW4=
Subject key identifier: 7A:CF:B4:2B:FD:0D:77:32:B8:F7:EC:F9:D8:78:54:D4:C9:E5:0D:4E
Authority key identifier: 9F:AB:26:75:3B:89:5E:7F:3F:D9:B8:60:95:CE:04:EE:3E:13:2C:C9
Certificate issuer: /CN=9fab26753b895e7f3fd9b86095ce04ee3e132cc9
Certificate serial: 019A7180924BCB4D0C2E7DF7C9987785B91C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n6smdTuJXn8_2bhglc4E7j4TLMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/750d92-2de0-4f3a-bdd4-bf95c912e7a5/1/n6smdTuJXn8_2bhglc4E7j4TLMk.mft
Manifest number: 09
Signing time: Tue 11 Nov 2025 06:00:42 +0000
Manifest this update: Tue 11 Nov 2025 06:00:42 +0000
Manifest next update: Wed 12 Nov 2025 06:00:42 +0000
Files and hashes: 1: dYAAAKmGuQuFHHrxRRst0Uq0VRk.roa (hash: bfKSiwXgZLehsZ59bheQc6vOAUOk/9VYKz44ndSMNOM=)
2: n6smdTuJXn8_2bhglc4E7j4TLMk.crl (hash: 4CtZGlAUlYrsWIqWT/75POGiMPPIYzhZNJxs5oRsI84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/750d92-2de0-4f3a-bdd4-bf95c912e7a5/1/n6smdTuJXn8_2bhglc4E7j4TLMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/750d92-2de0-4f3a-bdd4-bf95c912e7a5/1/n6smdTuJXn8_2bhglc4E7j4TLMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/n6smdTuJXn8_2bhglc4E7j4TLMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:92:4b:cb:4d:0c:2e:7d:f7:c9:98:77:85:b9:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fab26753b895e7f3fd9b86095ce04ee3e132cc9
Validity
Not Before: Nov 11 06:00:42 2025 GMT
Not After : Nov 12 06:00:42 2025 GMT
Subject: CN=7acfb42bfd0d7732b8f7ecf9d87854d4c9e50d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:fd:14:e9:0e:6f:02:54:c4:45:1e:96:f2:04:
8d:57:ea:30:b5:33:87:18:c8:ca:f9:ff:95:52:32:
11:e5:70:b8:20:6b:eb:f7:2d:9a:1f:26:2b:84:da:
02:3d:9b:98:52:83:39:19:4c:17:f2:29:95:91:aa:
07:59:38:b8:76:bd:30:e6:c0:a4:90:4b:96:b4:ad:
c6:a8:3c:c1:5c:ee:f2:35:5f:9a:36:47:ac:f7:0d:
36:97:e0:fe:1c:49:fb:d5:eb:69:12:3e:a0:53:01:
09:fe:d1:cf:0f:70:8c:cd:9f:e9:f3:fd:e3:43:e2:
6f:a5:67:4a:86:40:c9:ea:2f:ea:39:0a:4f:d4:ee:
94:0d:ee:8b:f3:f6:4f:28:59:21:9a:1c:70:8d:60:
f8:fe:65:6c:4b:0e:8e:9e:16:d3:3d:02:e4:5a:68:
26:cc:31:cc:df:2d:45:91:92:5d:7a:e1:96:70:74:
2a:7b:08:f1:ec:ab:af:2b:e1:47:b1:61:da:bc:9f:
56:28:b0:d9:f5:14:0e:ae:bc:ec:fa:14:dd:44:dc:
a8:f0:0d:1e:8d:43:3b:ee:cc:2f:fa:5d:41:46:8c:
5a:23:8a:c0:31:4d:84:40:ca:c5:ca:34:e3:fb:63:
4e:d6:34:cb:b1:db:46:56:d6:80:a9:9d:1b:fb:e1:
f3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:CF:B4:2B:FD:0D:77:32:B8:F7:EC:F9:D8:78:54:D4:C9:E5:0D:4E
X509v3 Authority Key Identifier:
keyid:9F:AB:26:75:3B:89:5E:7F:3F:D9:B8:60:95:CE:04:EE:3E:13:2C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n6smdTuJXn8_2bhglc4E7j4TLMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/750d92-2de0-4f3a-bdd4-bf95c912e7a5/1/n6smdTuJXn8_2bhglc4E7j4TLMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/750d92-2de0-4f3a-bdd4-bf95c912e7a5/1/n6smdTuJXn8_2bhglc4E7j4TLMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:b0:a4:64:c2:2e:a2:83:14:67:9e:32:95:65:66:e5:26:49:
a5:83:8a:8c:17:ac:71:0e:c1:66:6d:da:08:da:b8:a9:ea:fa:
5b:6c:1f:01:72:d5:ef:9a:75:98:90:f6:c9:ae:66:46:d5:a9:
eb:5a:37:05:16:1d:d5:08:45:36:cd:72:fc:55:30:79:8a:9c:
b5:e4:3a:c5:a4:53:96:31:ff:12:3a:9b:83:68:be:6b:24:78:
60:e9:e5:1d:29:70:95:68:13:e4:bc:5c:7a:8b:10:16:bd:33:
03:72:64:05:e0:97:d2:e0:a1:4d:0d:27:d5:62:ea:ab:bd:5d:
93:5e:40:f7:8e:fe:13:d7:6d:a4:fd:3a:2b:9a:69:d5:cd:8c:
b1:89:70:86:0b:db:f7:59:0c:86:ec:58:7e:4d:6e:d5:dd:32:
9b:db:85:9c:48:19:eb:bb:1b:ac:1e:df:96:96:6f:ef:4d:be:
8f:41:1c:35:c6:60:0b:b2:a8:87:b6:29:00:6a:0c:80:f9:13:
40:61:a2:f5:b1:aa:55:e3:71:cc:0f:56:13:42:94:a7:bd:ae:
2f:4c:1e:8a:e1:74:a9:29:00:67:71:63:fc:82:c3:14:e3:30:
7c:92:d4:7a:6a:06:85:d7:5a:96:88:ee:f6:32:e0:bd:d1:0a:
fa:07:95:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxgJJLy00MLn33yZh3hbkcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmYWIyNjc1M2I4OTVlN2YzZmQ5Yjg2MDk1Y2UwNGVlM2Ux
MzJjYzkwHhcNMjUxMTExMDYwMDQyWhcNMjUxMTEyMDYwMDQyWjAzMTEwLwYDVQQD
Eyg3YWNmYjQyYmZkMGQ3NzMyYjhmN2VjZjlkODc4NTRkNGM5ZTUwZDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6/0U6Q5vAlTERR6W8gSNV+owtTOH
GMjK+f+VUjIR5XC4IGvr9y2aHyYrhNoCPZuYUoM5GUwX8imVkaoHWTi4dr0w5sCk
kEuWtK3GqDzBXO7yNV+aNkes9w02l+D+HEn71etpEj6gUwEJ/tHPD3CMzZ/p8/3j
Q+JvpWdKhkDJ6i/qOQpP1O6UDe6L8/ZPKFkhmhxwjWD4/mVsSw6OnhbTPQLkWmgm
zDHM3y1FkZJdeuGWcHQqewjx7KuvK+FHsWHavJ9WKLDZ9RQOrrzs+hTdRNyo8A0e
jUM77swv+l1BRoxaI4rAMU2EQMrFyjTj+2NO1jTLsdtGVtaAqZ0b++HzQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHrPtCv9DXcyuPfs+dh4VNTJ5Q1OMB8GA1UdIwQY
MBaAFJ+rJnU7iV5/P9m4YJXOBO4+EyzJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjZzbWRUdUpYbjhfMmJoZ2xjNEU3ajRUTE1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi83NTBkOTItMmRlMC00ZjNhLWJkZDQt
YmY5NWM5MTJlN2E1LzEvbjZzbWRUdUpYbjhfMmJoZ2xjNEU3ajRUTE1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi83NTBkOTItMmRlMC00ZjNhLWJkZDQtYmY5NWM5MTJlN2E1
LzEvbjZzbWRUdUpYbjhfMmJoZ2xjNEU3ajRUTE1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdrCkZMIu
ooMUZ54ylWVm5SZJpYOKjBescQ7BZm3aCNq4qer6W2wfAXLV75p1mJD2ya5mRtWp
61o3BRYd1QhFNs1y/FUweYqcteQ6xaRTljH/Ejqbg2i+ayR4YOnlHSlwlWgT5Lxc
eosQFr0zA3JkBeCX0uChTQ0n1WLqq71dk15A947+E9dtpP06K5pp1c2MsYlwhgvb
91kMhuxYfk1u1d0ym9uFnEgZ67sbrB7flpZv702+j0EcNcZgC7Koh7YpAGoMgPkT
QGGi9bGqVeNxzA9WE0KUp72uL0weiuF0qSkAZ3Fj/ILDFOMwfJLUemoGhddaloju
9jLgvdEK+geVuw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:21 2025 by rpki-client