Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.mft
File: n78C8E7EMIy1tgeL0GoXywDYM2k.mft (raw, json)
Hash identifier: 2fttuVzZz/2jLIcrCBCnFOFEU3270Wqb7sZPMWz3lRs=
Subject key identifier: 28:59:48:87:06:E0:BD:39:1B:A5:B5:16:AB:8D:CC:BC:BB:9E:EB:56
Authority key identifier: 9F:BF:02:F0:4E:C4:30:8C:B5:B6:07:8B:D0:6A:17:CB:00:D8:33:69
Certificate issuer: /CN=9fbf02f04ec4308cb5b6078bd06a17cb00d83369
Certificate serial: 019A71EEBCEA60012FE982D7D0579F738271
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n78C8E7EMIy1tgeL0GoXywDYM2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.mft
Manifest number: 01AE
Signing time: Tue 11 Nov 2025 08:01:02 +0000
Manifest this update: Tue 11 Nov 2025 08:01:02 +0000
Manifest next update: Wed 12 Nov 2025 08:01:02 +0000
Files and hashes: 1: lB6tM26XvybAjC_i9gyukbY90Gs.roa (hash: QCUB0nbnI7vfbQcfu12QO8f17dboTNQ2oQD6KvaVOOo=)
2: n78C8E7EMIy1tgeL0GoXywDYM2k.crl (hash: ziAmY5hjTcK/UZE+5Qc9/ms/dXBesFrolD/XQpQlVXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/n78C8E7EMIy1tgeL0GoXywDYM2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:bc:ea:60:01:2f:e9:82:d7:d0:57:9f:73:82:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fbf02f04ec4308cb5b6078bd06a17cb00d83369
Validity
Not Before: Nov 11 08:01:02 2025 GMT
Not After : Nov 12 08:01:02 2025 GMT
Subject: CN=2859488706e0bd391ba5b516ab8dccbcbb9eeb56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:14:89:5d:c8:2c:a8:97:fe:f7:53:fd:b2:a2:
8c:69:12:a2:6e:63:fc:f2:3a:5b:f4:49:29:ea:41:
50:8f:34:a5:77:a7:c0:fa:03:ec:a6:10:6c:c7:68:
b7:9d:46:38:df:4a:a3:7d:e3:37:f3:ce:ca:f5:01:
84:56:0e:e3:05:cf:e3:f7:31:55:8c:74:62:41:d5:
ca:23:3d:5f:a3:dd:b7:1c:e3:07:1a:55:e2:dc:f0:
dd:ac:b9:0c:e7:0f:7f:83:b5:ca:bf:ed:f4:71:ca:
b5:3a:7f:15:9c:fb:33:77:6b:09:0a:e7:8a:dd:ea:
7d:10:4a:53:cf:8a:71:b4:bf:56:b4:51:24:9b:62:
b9:bd:07:9a:a8:13:af:65:06:50:90:40:26:85:28:
dd:26:3c:2c:28:e1:93:37:76:de:9f:c3:5d:18:7c:
14:2c:a9:ea:94:b6:38:49:a4:a6:ce:c2:b0:36:7b:
e6:bc:ad:68:3c:07:dd:7b:4e:fd:9b:5b:df:a6:cb:
04:10:1e:8a:1d:4c:d4:c6:12:49:29:b5:a2:14:3a:
21:88:1b:d3:6a:c1:19:7f:6e:c3:14:99:25:52:ce:
11:de:31:72:81:04:c9:4b:f4:89:5d:45:15:98:47:
b1:72:f7:0f:c6:a4:28:7f:9e:4a:c8:67:0f:30:81:
6d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:59:48:87:06:E0:BD:39:1B:A5:B5:16:AB:8D:CC:BC:BB:9E:EB:56
X509v3 Authority Key Identifier:
keyid:9F:BF:02:F0:4E:C4:30:8C:B5:B6:07:8B:D0:6A:17:CB:00:D8:33:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n78C8E7EMIy1tgeL0GoXywDYM2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:2c:e3:49:45:e8:dd:34:94:1d:98:cf:c8:1d:34:2e:39:70:
5d:f4:45:34:be:80:27:dc:cd:51:1f:13:06:7d:72:64:ad:0d:
b1:62:f6:53:34:c2:02:d3:55:dc:32:79:55:04:bb:0a:57:e0:
ba:72:6d:51:71:57:58:10:25:d3:c3:c3:14:15:e3:2b:a3:5a:
14:4e:0d:a6:c5:b7:3b:49:de:05:10:08:eb:d9:89:45:31:cb:
3a:20:8a:b9:0a:d7:f0:23:ec:dd:ba:44:b2:46:67:97:fe:9f:
e4:33:aa:03:67:7d:f4:59:ca:13:5d:9d:ed:00:ed:6b:ed:ca:
e1:48:d9:2c:a7:e1:73:7a:a1:73:12:91:46:9c:62:69:d6:6b:
7f:32:29:cf:0b:d7:ba:dc:19:e3:b0:49:49:b1:cc:a2:67:53:
34:a7:d5:ca:33:57:0a:d4:3d:1f:65:91:33:09:bc:87:73:3c:
8b:eb:34:05:fa:6c:78:91:4b:db:0a:1d:cf:c5:3c:23:e7:fa:
23:f4:b0:63:61:23:74:6d:69:ea:74:99:d1:e6:6f:37:cf:e2:
b1:8e:7f:00:ab:71:da:75:55:56:3f:03:a0:bd:5b:9c:e5:15:
bf:9d:eb:72:52:62:a6:8e:9e:4a:ae:f8:63:a7:a0:f3:7e:4d:
73:1a:c8:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7rzqYAEv6YLX0Fefc4JxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmYmYwMmYwNGVjNDMwOGNiNWI2MDc4YmQwNmExN2NiMDBk
ODMzNjkwHhcNMjUxMTExMDgwMTAyWhcNMjUxMTEyMDgwMTAyWjAzMTEwLwYDVQQD
EygyODU5NDg4NzA2ZTBiZDM5MWJhNWI1MTZhYjhkY2NiY2JiOWVlYjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBSJXcgsqJf+91P9sqKMaRKibmP8
8jpb9Ekp6kFQjzSld6fA+gPsphBsx2i3nUY430qjfeM3887K9QGEVg7jBc/j9zFV
jHRiQdXKIz1fo923HOMHGlXi3PDdrLkM5w9/g7XKv+30ccq1On8VnPszd2sJCueK
3ep9EEpTz4pxtL9WtFEkm2K5vQeaqBOvZQZQkEAmhSjdJjwsKOGTN3ben8NdGHwU
LKnqlLY4SaSmzsKwNnvmvK1oPAfde079m1vfpssEEB6KHUzUxhJJKbWiFDohiBvT
asEZf27DFJklUs4R3jFygQTJS/SJXUUVmEexcvcPxqQof55KyGcPMIFtsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFChZSIcG4L05G6W1FquNzLy7nutWMB8GA1UdIwQY
MBaAFJ+/AvBOxDCMtbYHi9BqF8sA2DNpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjc4QzhFN0VNSXkxdGdlTDBHb1h5d0RZTTJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9jYWY0NjYtNmU2Yy00MDA5LWE1NWEt
NWZhOWRhMDNmNTcwLzEvbjc4QzhFN0VNSXkxdGdlTDBHb1h5d0RZTTJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9jYWY0NjYtNmU2Yy00MDA5LWE1NWEtNWZhOWRhMDNmNTcw
LzEvbjc4QzhFN0VNSXkxdGdlTDBHb1h5d0RZTTJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuyzjSUXo
3TSUHZjPyB00LjlwXfRFNL6AJ9zNUR8TBn1yZK0NsWL2UzTCAtNV3DJ5VQS7Clfg
unJtUXFXWBAl08PDFBXjK6NaFE4NpsW3O0neBRAI69mJRTHLOiCKuQrX8CPs3bpE
skZnl/6f5DOqA2d99FnKE12d7QDta+3K4UjZLKfhc3qhcxKRRpxiadZrfzIpzwvX
utwZ47BJSbHMomdTNKfVyjNXCtQ9H2WRMwm8h3M8i+s0BfpseJFL2wodz8U8I+f6
I/SwY2EjdG1p6nSZ0eZvN8/isY5/AKtx2nVVVj8DoL1bnOUVv53rclJipo6eSq74
Y6eg835NcxrI1g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:41 2025 by rpki-client