Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft
File: UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft (raw, json)
Hash identifier: jp2TltHZOwkZUFt3ye9FdlmVio9m9vpuljOaGNM+dfk=
Subject key identifier: 26:78:AB:47:2E:EE:74:00:7D:E5:23:2C:35:CA:F1:34:82:09:AE:9F
Authority key identifier: 51:E0:DF:C9:37:1A:94:91:CA:A8:58:70:0F:D9:45:23:66:D9:ED:DC
Certificate issuer: /CN=51e0dfc9371a9491caa858700fd9452366d9eddc
Certificate serial: 019A7301993C24C5A090F0E2D036DBAB0D7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeDfyTcalJHKqFhwD9lFI2bZ7dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft
Manifest number: 02D9
Signing time: Tue 11 Nov 2025 13:01:15 +0000
Manifest this update: Tue 11 Nov 2025 13:01:15 +0000
Manifest next update: Wed 12 Nov 2025 13:01:15 +0000
Files and hashes: 1: UeDfyTcalJHKqFhwD9lFI2bZ7dw.crl (hash: cX8EudTCKwCvDbdSeZWgRVQduhBLo98LA/41PAnno/A=)
2: nmBuzHJtZ8Dl8WdiCnqlxf6RBwE.roa (hash: 5lO2yokCGdZ3wXh+anWEIpykoRp00iS8dYyJESAicQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UeDfyTcalJHKqFhwD9lFI2bZ7dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:99:3c:24:c5:a0:90:f0:e2:d0:36:db:ab:0d:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e0dfc9371a9491caa858700fd9452366d9eddc
Validity
Not Before: Nov 11 13:01:15 2025 GMT
Not After : Nov 12 13:01:15 2025 GMT
Subject: CN=2678ab472eee74007de5232c35caf1348209ae9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a5:25:c9:26:82:12:cc:45:5e:c1:54:ae:9e:
de:76:52:cc:96:84:a2:9c:c7:d9:40:64:71:6b:6d:
14:0a:1e:c0:63:0c:67:a7:b2:58:54:97:62:70:db:
71:ff:a1:09:9b:da:1e:d1:7e:d7:77:a9:b7:e1:97:
d0:0c:7a:ac:ee:ea:57:eb:e9:95:1d:e7:db:27:a0:
33:57:23:fd:c8:8a:89:f9:74:a8:1c:af:94:57:0e:
f8:46:27:75:b8:a2:fa:2b:7e:1b:f5:49:d9:4a:67:
29:fc:54:5f:12:60:b3:46:e9:1a:64:b1:2c:9d:3e:
55:2e:7c:83:04:b1:02:73:de:4e:d7:70:d4:13:89:
f5:af:c8:3b:e9:f9:b0:2a:74:18:14:7d:3e:44:32:
b3:25:83:17:32:ec:fc:44:9f:fa:bc:a2:50:d8:2a:
62:1e:ad:f4:ac:5e:1f:b6:2e:98:30:d6:dc:23:e5:
72:63:a8:5e:84:84:e6:b8:c1:ca:6f:7c:ed:7a:e5:
86:f3:c7:13:99:ea:4a:04:63:4e:7c:09:f9:cb:87:
67:28:1f:6a:9e:af:0b:d7:25:67:c2:e0:78:c4:5e:
07:4e:f3:40:25:a2:ec:74:a9:eb:4f:9a:19:4e:4e:
d4:5e:d8:da:1c:e8:9d:dd:d7:55:ab:0f:c1:02:6e:
b2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:78:AB:47:2E:EE:74:00:7D:E5:23:2C:35:CA:F1:34:82:09:AE:9F
X509v3 Authority Key Identifier:
keyid:51:E0:DF:C9:37:1A:94:91:CA:A8:58:70:0F:D9:45:23:66:D9:ED:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeDfyTcalJHKqFhwD9lFI2bZ7dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:99:fc:2c:58:99:1a:fd:04:8e:b9:26:b4:60:ee:2c:79:10:
38:1a:2f:be:44:36:60:13:7d:0c:b4:6b:15:c9:01:86:c1:70:
fa:94:77:e3:49:24:f1:aa:4b:0e:4b:2a:85:fc:65:b3:5e:cb:
64:dd:0d:ff:87:88:90:61:93:05:da:91:ee:90:31:8a:df:e4:
c8:b7:b6:ce:75:26:a3:95:37:4f:e5:ed:3d:4f:d9:0b:2e:f3:
0e:4c:8f:62:19:4a:f0:67:4d:08:b2:01:7c:e9:6e:36:44:f1:
91:25:1c:4c:4d:f0:62:b2:62:f6:94:cb:ec:ca:75:14:01:3b:
bb:fb:f7:b2:26:66:4f:cf:ab:5b:ea:55:92:f7:09:30:53:03:
22:61:78:49:17:15:54:ba:03:ce:3f:19:95:76:4a:c9:ff:3d:
97:b0:a5:37:e1:a2:31:8f:0a:54:a5:d2:b6:3b:21:a7:5d:6e:
70:45:62:8e:a8:0e:b0:1b:b4:81:63:71:1c:3a:53:8b:62:20:
44:29:c3:23:de:3f:57:e0:d1:5f:9c:19:54:d0:c3:e6:91:a8:
94:53:68:3c:dd:23:1b:ca:b6:53:98:f0:9b:a3:d7:c9:e4:a2:
95:56:cf:19:bf:1f:08:b4:fe:6e:1d:cf:16:6e:77:3b:f5:7d:
90:22:05:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzAZk8JMWgkPDi0Dbbqw17MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxZTBkZmM5MzcxYTk0OTFjYWE4NTg3MDBmZDk0NTIzNjZk
OWVkZGMwHhcNMjUxMTExMTMwMTE1WhcNMjUxMTEyMTMwMTE1WjAzMTEwLwYDVQQD
EygyNjc4YWI0NzJlZWU3NDAwN2RlNTIzMmMzNWNhZjEzNDgyMDlhZTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaUlySaCEsxFXsFUrp7edlLMloSi
nMfZQGRxa20UCh7AYwxnp7JYVJdicNtx/6EJm9oe0X7Xd6m34ZfQDHqs7upX6+mV
HefbJ6AzVyP9yIqJ+XSoHK+UVw74Rid1uKL6K34b9UnZSmcp/FRfEmCzRukaZLEs
nT5VLnyDBLECc95O13DUE4n1r8g76fmwKnQYFH0+RDKzJYMXMuz8RJ/6vKJQ2Cpi
Hq30rF4fti6YMNbcI+VyY6hehITmuMHKb3zteuWG88cTmepKBGNOfAn5y4dnKB9q
nq8L1yVnwuB4xF4HTvNAJaLsdKnrT5oZTk7UXtjaHOid3ddVqw/BAm6yiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCZ4q0cu7nQAfeUjLDXK8TSCCa6fMB8GA1UdIwQY
MBaAFFHg38k3GpSRyqhYcA/ZRSNm2e3cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWVEZnlUY2FsSkhLcUZod0Q5bEZJMmJaN2R3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8zYWJlMjAtMWU3NS00YWJlLTllODkt
NmFjMzUzNzBmZDczLzEvVWVEZnlUY2FsSkhLcUZod0Q5bEZJMmJaN2R3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS8zYWJlMjAtMWU3NS00YWJlLTllODktNmFjMzUzNzBmZDcz
LzEvVWVEZnlUY2FsSkhLcUZod0Q5bEZJMmJaN2R3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATZn8LFiZ
Gv0EjrkmtGDuLHkQOBovvkQ2YBN9DLRrFckBhsFw+pR340kk8apLDksqhfxls17L
ZN0N/4eIkGGTBdqR7pAxit/kyLe2znUmo5U3T+XtPU/ZCy7zDkyPYhlK8GdNCLIB
fOluNkTxkSUcTE3wYrJi9pTL7Mp1FAE7u/v3siZmT8+rW+pVkvcJMFMDImF4SRcV
VLoDzj8ZlXZKyf89l7ClN+GiMY8KVKXStjshp11ucEVijqgOsBu0gWNxHDpTi2Ig
RCnDI94/V+DRX5wZVNDD5pGolFNoPN0jG8q2U5jwm6PXyeSilVbPGb8fCLT+bh3P
Fm53O/V9kCIF/A==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:11 2025 by rpki-client