Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
File: 9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft (raw, json)
Hash identifier: z49rc8x7ecbKE8ImmNIW60JG/alPHr4aOfr+daxRWcA=
Subject key identifier: 3F:A8:1B:BA:47:E6:76:A5:20:C9:8E:97:6B:AE:33:A5:CF:EA:58:3F
Authority key identifier: F4:F4:30:D0:80:5F:42:FF:A3:BC:D0:C0:B7:C5:50:80:51:17:92:3A
Certificate issuer: /CN=f4f430d0805f42ffa3bcd0c0b7c550805117923a
Certificate serial: 019A71B83F521320389FB6221EDADBDC6E0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
Manifest number: 16AE
Signing time: Tue 11 Nov 2025 07:01:31 +0000
Manifest this update: Tue 11 Nov 2025 07:01:31 +0000
Manifest next update: Wed 12 Nov 2025 07:01:31 +0000
Files and hashes: 1: 9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl (hash: v1Z79iSEdXPL4osdrzIMQePbOCgH8RyrySrjzeChTzY=)
2: opYZOi4k9YDcS_3foMnJJa-4gCI.roa (hash: VbpgC06Lnc7NWswjuIad3/ZduRJ+GtOZh31gorgG7Xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:3f:52:13:20:38:9f:b6:22:1e:da:db:dc:6e:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f430d0805f42ffa3bcd0c0b7c550805117923a
Validity
Not Before: Nov 11 07:01:31 2025 GMT
Not After : Nov 12 07:01:31 2025 GMT
Subject: CN=3fa81bba47e676a520c98e976bae33a5cfea583f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:13:51:6e:f2:48:2b:e7:29:8f:d1:11:1d:0d:
21:7f:76:45:ad:16:9d:94:29:2a:32:5b:0b:8c:60:
66:9e:27:87:f3:1f:d3:29:1f:a3:2c:6b:81:2e:fc:
ae:2f:b0:b1:fb:ca:e1:7e:2d:69:2f:dd:0a:ed:5a:
73:b9:74:ed:2a:40:f3:f7:69:9d:fd:65:52:82:90:
42:0e:48:d5:f2:58:01:86:ef:1c:38:bd:a9:3f:7e:
f2:38:23:da:27:e7:7d:a0:2b:40:08:b2:1a:ca:42:
77:e4:a1:1f:59:3b:62:c7:ae:72:4c:8b:65:ec:d6:
6b:e7:37:cd:14:f8:68:09:be:37:72:94:e7:9f:13:
02:49:8a:33:d3:00:74:2f:ed:25:ac:23:7f:24:f7:
d5:8e:ca:04:eb:61:a2:21:60:b0:f2:9c:49:4f:1b:
27:c9:0d:ed:4d:0d:df:cb:1f:9b:c7:02:24:f7:c8:
cc:b9:72:76:66:54:25:65:8b:f2:19:d1:37:39:8d:
70:d1:8d:c2:2f:0f:5c:d1:bc:43:0a:75:65:82:60:
e9:fd:69:49:c3:b3:43:d3:0f:78:58:e4:4c:08:f2:
b6:46:ff:45:79:a3:3f:ac:2e:b3:0e:46:9e:f9:85:
08:9b:82:00:43:b6:7b:da:25:f7:6c:9f:a9:4e:4e:
95:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A8:1B:BA:47:E6:76:A5:20:C9:8E:97:6B:AE:33:A5:CF:EA:58:3F
X509v3 Authority Key Identifier:
keyid:F4:F4:30:D0:80:5F:42:FF:A3:BC:D0:C0:B7:C5:50:80:51:17:92:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:9c:5e:06:e6:1d:95:6e:d9:e0:b4:b9:ef:50:67:89:bc:78:
dd:26:34:7a:0f:d4:1d:ef:c5:cf:cf:f2:e6:c4:ab:50:de:33:
d2:fe:6f:6e:a6:a5:ba:83:f8:d0:c9:24:8a:73:61:ce:c1:8e:
f9:bf:6e:e1:b2:8b:98:13:2b:ab:25:2d:0b:b5:fe:e7:48:af:
1b:90:33:c6:78:0b:9d:b8:0d:65:66:33:09:26:61:e0:1f:4a:
14:9f:1a:88:e4:2f:58:ef:9d:85:7c:51:2f:4d:16:aa:6d:13:
0d:21:32:f4:dd:3d:2b:d8:5f:fb:1b:e9:10:3c:8e:5b:5b:17:
63:49:c1:7d:89:12:e1:d4:ef:9d:21:45:10:c6:1b:48:a4:03:
5b:b8:cf:e4:bc:b0:54:24:05:22:e3:62:c7:e2:d0:16:80:a7:
e3:ba:32:1f:3a:3d:3a:86:31:81:9a:bd:56:38:be:9b:59:4d:
f2:d6:cf:5f:4e:3b:ed:65:50:9b:b8:f6:12:e4:bf:e8:a0:8b:
7c:dc:2c:c1:0e:8d:f1:7e:32:b3:6f:d2:3a:b3:46:6e:2c:d4:
cb:46:c2:bd:e7:30:21:67:4a:c9:50:f4:82:f7:89:77:55:ea:
74:df:65:b9:02:82:a2:f4:f1:0f:a5:c2:d0:de:66:78:50:03:
a8:a8:45:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuD9SEyA4n7YiHtrb3G4PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZjQzMGQwODA1ZjQyZmZhM2JjZDBjMGI3YzU1MDgwNTEx
NzkyM2EwHhcNMjUxMTExMDcwMTMxWhcNMjUxMTEyMDcwMTMxWjAzMTEwLwYDVQQD
EygzZmE4MWJiYTQ3ZTY3NmE1MjBjOThlOTc2YmFlMzNhNWNmZWE1ODNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhNRbvJIK+cpj9ERHQ0hf3ZFrRad
lCkqMlsLjGBmnieH8x/TKR+jLGuBLvyuL7Cx+8rhfi1pL90K7VpzuXTtKkDz92md
/WVSgpBCDkjV8lgBhu8cOL2pP37yOCPaJ+d9oCtACLIaykJ35KEfWTtix65yTItl
7NZr5zfNFPhoCb43cpTnnxMCSYoz0wB0L+0lrCN/JPfVjsoE62GiIWCw8pxJTxsn
yQ3tTQ3fyx+bxwIk98jMuXJ2ZlQlZYvyGdE3OY1w0Y3CLw9c0bxDCnVlgmDp/WlJ
w7ND0w94WORMCPK2Rv9FeaM/rC6zDkae+YUIm4IAQ7Z72iX3bJ+pTk6VzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD+oG7pH5nalIMmOl2uuM6XP6lg/MB8GA1UdIwQY
MBaAFPT0MNCAX0L/o7zQwLfFUIBRF5I6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVBRdzBJQmZRdi1qdk5EQXQ4VlFnRkVYa2pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8yOGJkMTMtOGEzYi00NTUwLTk3MDAt
ZjBmOTNjY2EyNDc5LzEvOVBRdzBJQmZRdi1qdk5EQXQ4VlFnRkVYa2pvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8yOGJkMTMtOGEzYi00NTUwLTk3MDAtZjBmOTNjY2EyNDc5
LzEvOVBRdzBJQmZRdi1qdk5EQXQ4VlFnRkVYa2pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU5xeBuYd
lW7Z4LS571Bnibx43SY0eg/UHe/Fz8/y5sSrUN4z0v5vbqaluoP40MkkinNhzsGO
+b9u4bKLmBMrqyUtC7X+50ivG5AzxngLnbgNZWYzCSZh4B9KFJ8aiOQvWO+dhXxR
L00Wqm0TDSEy9N09K9hf+xvpEDyOW1sXY0nBfYkS4dTvnSFFEMYbSKQDW7jP5Lyw
VCQFIuNix+LQFoCn47oyHzo9OoYxgZq9Vji+m1lN8tbPX0477WVQm7j2EuS/6KCL
fNwswQ6N8X4ys2/SOrNGbizUy0bCvecwIWdKyVD0gveJd1XqdN9luQKCovTxD6XC
0N5meFADqKhF7A==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:27:59 2025 by rpki-client