Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft
File: 1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft (raw, json)
Hash identifier: qldhkryWnpFmtHZH3JEglSXJd0I7+yUHX0hSBy400oE=
Subject key identifier: 76:F5:D3:9C:44:77:2D:24:84:8B:62:27:FB:5E:19:2F:75:00:A3:2C
Authority key identifier: F9:9F:65:E1:BE:42:A6:5B:49:4C:F2:64:2A:4D:D8:E3:28:D0:F9:CE
Certificate issuer: /CN=f99f65e1be42a65b494cf2642a4dd8e328d0f9ce
Certificate serial: 019A71B7B86D8F2DDE8933786E40701EF3FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft
Manifest number: 0E3D
Signing time: Tue 11 Nov 2025 07:00:56 +0000
Manifest this update: Tue 11 Nov 2025 07:00:56 +0000
Manifest next update: Wed 12 Nov 2025 07:00:56 +0000
Files and hashes: 1: 1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.crl (hash: clnn1Rur+Ebw+g8EPapK+J+cN2poSnhR42IqLhgjNJA=)
2: qWXcfiQuPBHMjlQKkWiAfKgYZzg.roa (hash: Wc2JW8a4VkUPRVVW0ORvuNA6sC5FJWmi5KtU2JoA5R0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:b8:6d:8f:2d:de:89:33:78:6e:40:70:1e:f3:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f99f65e1be42a65b494cf2642a4dd8e328d0f9ce
Validity
Not Before: Nov 11 07:00:56 2025 GMT
Not After : Nov 12 07:00:56 2025 GMT
Subject: CN=76f5d39c44772d24848b6227fb5e192f7500a32c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:47:96:7c:46:89:71:50:33:33:f4:7e:b8:e4:
41:b9:13:53:39:c2:50:7b:9b:4f:8b:f2:07:4e:2c:
7c:47:b2:ea:0e:28:08:63:6c:31:a8:3e:e0:51:4e:
9f:5a:36:fc:7f:53:61:a9:34:01:05:a3:3f:66:14:
0a:31:91:ee:4e:c0:d8:59:c2:59:52:09:be:75:f6:
87:b5:6f:e2:da:69:72:28:00:ce:68:72:ef:a2:18:
5a:68:1b:2a:73:0c:19:9d:8e:39:e5:2d:f7:6b:84:
78:f2:12:da:c0:d0:b3:3a:26:02:d8:46:31:0b:03:
a6:4a:df:bc:9c:78:66:f3:38:86:90:1b:4f:be:ec:
38:61:36:ac:ba:a3:a8:85:6d:74:86:e7:6e:73:52:
f3:61:f4:17:dc:7c:76:59:84:65:9c:a3:d1:59:f5:
34:ab:63:fa:01:7e:e6:80:b5:f7:6b:44:fc:90:eb:
4d:56:f3:2c:35:c9:a3:89:5f:17:e3:f1:a8:c9:d3:
0a:73:b9:c1:84:f8:96:8b:aa:29:47:08:29:93:ce:
db:3a:ea:8a:ad:e1:c4:d5:54:d8:17:92:bd:e3:12:
96:1f:87:f0:db:13:78:ce:a6:23:48:ff:58:0b:e2:
91:83:bd:56:82:f2:a2:d3:aa:fa:8b:f1:6a:02:e4:
27:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F5:D3:9C:44:77:2D:24:84:8B:62:27:FB:5E:19:2F:75:00:A3:2C
X509v3 Authority Key Identifier:
keyid:F9:9F:65:E1:BE:42:A6:5B:49:4C:F2:64:2A:4D:D8:E3:28:D0:F9:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:e7:78:bc:d2:0a:13:fa:c3:25:a1:2d:c9:b5:eb:30:f2:f6:
02:33:b4:bd:38:23:51:f8:2b:5c:e7:8d:fc:ea:24:77:32:71:
de:8d:ba:36:52:a6:11:a7:dc:b1:52:94:2a:e8:be:ee:42:89:
a1:d8:8a:44:37:fb:9a:dc:11:74:d7:9f:1c:77:d7:9b:93:ba:
90:b6:dc:01:6d:fd:bb:ec:bc:1f:e2:69:2b:7b:5d:2a:92:82:
4b:a9:31:74:ca:35:ff:93:82:71:35:5b:ca:21:29:ee:e0:d1:
9d:12:75:4c:e9:ab:f3:9b:57:ca:f8:be:be:95:31:57:62:63:
3a:8d:fd:66:1f:c7:1e:e9:ea:0e:e1:c8:db:c3:8c:28:fb:a8:
57:e6:84:80:fe:4a:bb:f4:7f:f8:b3:b9:88:1d:12:cc:58:95:
79:31:cf:92:d6:63:7d:22:ea:a8:d6:50:a0:fe:d1:6d:ab:2e:
12:de:01:69:4c:80:c0:96:8e:1a:00:f0:2a:27:bd:d9:15:ee:
fe:ec:ff:ad:9b:3c:8e:ca:ca:db:36:fa:a9:de:13:35:a5:e4:
ca:26:ec:17:21:bf:ef:55:67:51:27:61:40:33:2c:9f:8e:bc:
c2:fd:a7:47:b4:bc:22:c5:da:54:a4:02:83:9f:d8:ec:5a:b1:
25:2a:d0:bb
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZpxt7htjy3eiTN4bkBwHvP6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5OWY2NWUxYmU0MmE2NWI0OTRjZjI2NDJhNGRkOGUzMjhk
MGY5Y2UwHhcNMjUxMTExMDcwMDU2WhcNMjUxMTEyMDcwMDU2WjAzMTEwLwYDVQQD
Eyg3NmY1ZDM5YzQ0NzcyZDI0ODQ4YjYyMjdmYjVlMTkyZjc1MDBhMzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0eWfEaJcVAzM/R+uORBuRNTOcJQ
e5tPi/IHTix8R7LqDigIY2wxqD7gUU6fWjb8f1NhqTQBBaM/ZhQKMZHuTsDYWcJZ
Ugm+dfaHtW/i2mlyKADOaHLvohhaaBsqcwwZnY455S33a4R48hLawNCzOiYC2EYx
CwOmSt+8nHhm8ziGkBtPvuw4YTasuqOohW10huduc1LzYfQX3Hx2WYRlnKPRWfU0
q2P6AX7mgLX3a0T8kOtNVvMsNcmjiV8X4/GoydMKc7nBhPiWi6opRwgpk87bOuqK
reHE1VTYF5K94xKWH4fw2xN4zqYjSP9YC+KRg71WgvKi06r6i/FqAuQnGQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFHb105xEdy0khItiJ/teGS91AKMsMB8GA1UdIwQY
MBaAFPmfZeG+QqZbSUzyZCpN2OMo0PnOMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1aOWw0YjVDcGx0SlRQSmtLazNZNHlqUS1jNC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjYvNmRmOGJhLWQ0Y2ItNDcwNS1iZjU1
LTU0ZDE2MjI5OGZmZC8xLzEtWjlsNGI1Q3BsdEpUUEprS2szWTR5alEtYzQubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2I2LzZkZjhiYS1kNGNiLTQ3MDUtYmY1NS01NGQxNjIyOThm
ZmQvMS8xLVo5bDRiNUNwbHRKVFBKa0trM1k0eWpRLWM0LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV+d4
vNIKE/rDJaEtybXrMPL2AjO0vTgjUfgrXOeN/OokdzJx3o26NlKmEafcsVKUKui+
7kKJodiKRDf7mtwRdNefHHfXm5O6kLbcAW39u+y8H+JpK3tdKpKCS6kxdMo1/5OC
cTVbyiEp7uDRnRJ1TOmr85tXyvi+vpUxV2JjOo39Zh/HHunqDuHI28OMKPuoV+aE
gP5Ku/R/+LO5iB0SzFiVeTHPktZjfSLqqNZQoP7RbasuEt4BaUyAwJaOGgDwKie9
2RXu/uz/rZs8jsrK2zb6qd4TNaXkyibsFyG/71VnUSdhQDMsn468wv2nR7S8IsXa
VKQCg5/Y7FqxJSrQuw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:01 2025 by rpki-client