Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.mft
File: n1_z3hCjG79XAcC9smxlCAF9oso.mft (raw, json)
Hash identifier: jomq0fkLp+PO6SuGqRAvDFChrNQNhEaiZzwYCvCgON4=
Subject key identifier: 3F:8D:8F:03:40:B1:26:8F:58:41:AE:6E:C0:B0:FA:C1:D0:20:0D:D5
Authority key identifier: 9F:5F:F3:DE:10:A3:1B:BF:57:01:C0:BD:B2:6C:65:08:01:7D:A2:CA
Certificate issuer: /CN=9f5ff3de10a31bbf5701c0bdb26c6508017da2ca
Certificate serial: 019A725CE540273D9A8B9AD5AEAADC2BFE83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n1_z3hCjG79XAcC9smxlCAF9oso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.mft
Manifest number: 0D26
Signing time: Tue 11 Nov 2025 10:01:21 +0000
Manifest this update: Tue 11 Nov 2025 10:01:21 +0000
Manifest next update: Wed 12 Nov 2025 10:01:21 +0000
Files and hashes: 1: bY74pa2C3Js_pk8zrLxwAIuld50.roa (hash: hw+4FaOxGozuL2NvwyX/np4qCkqg+xjCV1sHwedmazg=)
2: n1_z3hCjG79XAcC9smxlCAF9oso.crl (hash: CIJAoeLa+PNKU+U66JZT9rkNeo0nUMb1XQ4rDN/dqeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.mft
rsync://rpki.ripe.net/repository/DEFAULT/n1_z3hCjG79XAcC9smxlCAF9oso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:e5:40:27:3d:9a:8b:9a:d5:ae:aa:dc:2b:fe:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f5ff3de10a31bbf5701c0bdb26c6508017da2ca
Validity
Not Before: Nov 11 10:01:21 2025 GMT
Not After : Nov 12 10:01:21 2025 GMT
Subject: CN=3f8d8f0340b1268f5841ae6ec0b0fac1d0200dd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d3:4a:26:6f:37:0a:a7:f1:b5:17:1e:1d:41:
30:a6:56:cc:0f:71:31:be:ff:c5:7e:41:b4:73:1a:
45:79:cc:3e:7e:31:e5:6c:38:dc:ef:6a:63:ed:19:
03:f7:4b:93:07:7c:62:ab:a6:74:57:ec:33:22:bc:
4d:66:85:7b:04:7c:ec:66:33:15:a8:9a:bc:d9:ac:
fb:42:7f:04:74:d9:cc:a9:36:68:49:a2:8e:6f:3c:
94:a1:97:be:ae:70:5c:9b:05:2a:f9:2e:6e:37:07:
10:38:ff:fb:7e:f1:63:eb:08:54:c3:32:0d:3d:de:
4d:8b:fd:4f:ad:35:0b:87:98:a4:d9:34:8a:7e:08:
0f:74:bd:84:e5:15:ce:90:c9:86:98:d7:23:6f:3e:
ea:85:60:ea:b4:a8:84:5e:70:4d:f5:e1:2f:f9:a5:
bd:4e:f4:11:3e:38:8f:e3:c4:bb:b3:f9:4c:49:ac:
35:0a:59:f2:39:c4:6e:98:bc:ba:b4:e1:c9:af:10:
6d:e1:20:ae:53:15:21:d5:bf:cc:e3:c4:85:a6:d5:
3d:03:bd:eb:4f:5b:aa:c4:7f:09:9a:b9:19:65:61:
cd:aa:61:2a:b1:a5:08:a4:e4:92:9e:00:3f:49:77:
3d:68:4f:8e:69:09:65:27:98:e3:4f:88:58:78:42:
7b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8D:8F:03:40:B1:26:8F:58:41:AE:6E:C0:B0:FA:C1:D0:20:0D:D5
X509v3 Authority Key Identifier:
keyid:9F:5F:F3:DE:10:A3:1B:BF:57:01:C0:BD:B2:6C:65:08:01:7D:A2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n1_z3hCjG79XAcC9smxlCAF9oso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:9c:e6:94:e6:45:c5:a5:ed:35:f4:91:02:df:4e:ed:e5:03:
be:6c:93:1c:50:24:64:16:f9:40:2f:73:30:87:0a:cb:17:1d:
2c:08:95:c1:7e:50:b5:28:3e:97:b5:a7:b9:fa:92:b4:1f:09:
27:09:5d:e1:e0:d9:7b:71:14:03:0e:24:6f:63:44:97:55:57:
a6:cf:de:85:8e:16:a4:fa:80:c1:30:08:72:c7:68:a9:c0:3c:
20:5a:ef:98:7a:83:0c:11:73:97:fe:10:7d:4a:94:3d:c0:e4:
c1:ab:bf:61:93:52:ba:fd:0a:37:32:01:9f:fe:e6:8e:c0:a3:
20:10:ae:ac:9d:ee:10:b2:c1:fd:17:0b:c7:a0:55:48:5c:f0:
ce:59:13:e7:3b:46:be:74:84:42:be:ff:67:bc:47:51:9b:fe:
2e:42:f2:8d:43:d2:bc:6e:61:0d:b6:98:f6:21:2c:ae:5b:34:
bd:65:f9:85:27:40:2b:b9:ba:49:31:96:cd:53:39:13:45:ff:
a7:b7:b3:33:ea:04:82:58:82:06:5a:e6:75:15:cb:58:57:f9:
f3:f9:9d:e2:d2:b5:4f:c9:3a:b7:37:6a:be:bb:ec:55:ff:e8:
6c:38:1b:d5:99:ed:43:1e:86:9e:f0:83:9a:e1:e8:03:da:42:
ec:a5:34:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:43 2025 by rpki-client