Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/uQ38KmUbXvqywM1ZMi1tO1WQZWM.mft
File: uQ38KmUbXvqywM1ZMi1tO1WQZWM.mft (raw, json)
Hash identifier: pPw+sZo9GUDiLzrinbeHfd2ugFOdBz+SnTkgajMZqlk=
Subject key identifier: A9:D4:6A:C1:AA:19:83:71:18:D0:8B:28:0D:30:B8:B0:30:99:AA:43
Authority key identifier: B9:0D:FC:2A:65:1B:5E:FA:B2:C0:CD:59:32:2D:6D:3B:55:90:65:63
Certificate issuer: /CN=b90dfc2a651b5efab2c0cd59322d6d3b55906563
Certificate serial: 019A71EE6A03F0A760B24DE90DA0CFF5FB4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQ38KmUbXvqywM1ZMi1tO1WQZWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/uQ38KmUbXvqywM1ZMi1tO1WQZWM.mft
Manifest number: 0B1D
Signing time: Tue 11 Nov 2025 08:00:41 +0000
Manifest this update: Tue 11 Nov 2025 08:00:41 +0000
Manifest next update: Wed 12 Nov 2025 08:00:41 +0000
Files and hashes: 1: FpN3CNrpC7an-iJQGSmMT_sDhCQ.roa (hash: IP5LQBH3slQY1vq5cW96oTpQwzobOGLQLnnmLh+kv0c=)
2: T2xZGAQ2utapiNKAxRkC6LvmPaU.roa (hash: wOG+SGzxtaS4DLVV01zxTU+InL0GZso9vp2F1RAwi2M=)
3: knjugsz4dO-GRlfWjJa4TPEo8dc.roa (hash: pgS04K1pxu870WaArIBezAQBjlsLTOobzOHJ29I84kY=)
4: uQ38KmUbXvqywM1ZMi1tO1WQZWM.crl (hash: gvFyemuCFtQUNHD6wP5IyMqHYpBYg0BJircPUbLaJL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/uQ38KmUbXvqywM1ZMi1tO1WQZWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/uQ38KmUbXvqywM1ZMi1tO1WQZWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/uQ38KmUbXvqywM1ZMi1tO1WQZWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:6a:03:f0:a7:60:b2:4d:e9:0d:a0:cf:f5:fb:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b90dfc2a651b5efab2c0cd59322d6d3b55906563
Validity
Not Before: Nov 11 08:00:41 2025 GMT
Not After : Nov 12 08:00:41 2025 GMT
Subject: CN=a9d46ac1aa19837118d08b280d30b8b03099aa43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7f:31:1c:af:c6:56:b7:37:f7:da:32:ce:43:
06:30:b2:b2:ee:85:9e:89:92:19:0f:16:50:1f:57:
a6:3c:09:b3:d9:36:bb:ce:be:73:13:97:94:79:a4:
c5:66:e5:87:83:5f:a4:f8:7f:1a:15:61:2c:8c:5a:
09:72:6a:1f:a0:67:02:38:bf:12:4e:2f:47:37:b7:
14:b3:36:56:fd:d3:f4:65:f3:68:70:7f:79:f4:cf:
b7:f3:c5:be:a6:18:fa:74:f5:c4:e0:a6:f5:1b:34:
8e:b3:7d:80:6c:60:8a:06:24:02:d0:c0:28:3d:34:
ca:21:c8:c4:94:78:b5:89:c1:a4:59:13:07:0c:31:
2f:de:d2:72:fe:73:ee:2e:ff:64:8b:63:06:b3:5d:
30:4e:8d:6e:ca:b8:3d:4f:a1:f9:9e:d3:e5:ea:47:
ac:3c:12:20:78:ea:d9:3f:70:21:2a:f1:9e:53:10:
6d:b0:c1:40:ab:44:84:5d:71:d0:d9:8a:1a:59:76:
19:4a:27:39:7c:13:b4:12:c4:e8:04:89:47:2a:82:
16:ce:6f:99:73:a3:53:54:22:d2:49:1c:69:91:79:
55:82:cf:60:06:e8:a1:4d:2c:9b:09:bc:ba:c1:4d:
fe:13:f1:ed:89:d8:b6:c5:dc:b2:d3:33:41:d6:63:
2a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D4:6A:C1:AA:19:83:71:18:D0:8B:28:0D:30:B8:B0:30:99:AA:43
X509v3 Authority Key Identifier:
keyid:B9:0D:FC:2A:65:1B:5E:FA:B2:C0:CD:59:32:2D:6D:3B:55:90:65:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQ38KmUbXvqywM1ZMi1tO1WQZWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/uQ38KmUbXvqywM1ZMi1tO1WQZWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/uQ38KmUbXvqywM1ZMi1tO1WQZWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:65:6f:69:ba:a4:c3:b9:e2:94:03:c5:ed:58:eb:e3:9f:6b:
e4:f7:89:5c:66:19:46:df:82:09:d3:19:f9:d2:c0:c7:12:1c:
40:df:02:52:56:b3:66:9d:b1:8c:1e:68:f6:bf:76:b7:10:5e:
67:4d:e5:f5:81:0f:ad:b5:e3:1d:03:9b:55:96:fd:9d:34:66:
c5:c3:d5:8a:3a:0d:c6:d0:13:95:fc:c8:d4:f1:ca:f2:7c:ce:
21:f3:31:8c:7a:18:fc:b7:0a:4b:7e:6d:bc:01:87:26:e9:ea:
48:3b:7b:f1:d0:d2:cd:ad:6e:6d:55:a1:22:2d:8b:c4:93:06:
ad:60:cf:0d:cc:c1:8a:55:6c:b8:0e:77:ff:cc:b3:d7:f6:8a:
d3:40:80:ec:2a:1c:39:c8:29:77:17:e2:61:a0:e5:9f:d4:c5:
05:22:2c:67:46:ab:26:1c:26:de:62:74:28:cb:28:1c:93:12:
23:9b:26:27:26:de:02:f1:bf:e8:39:2f:42:e4:81:08:07:13:
ce:ae:26:fd:a9:0f:cb:5f:83:0f:67:86:7c:6b:38:db:5b:00:
8d:9d:4f:9e:79:e0:bc:c2:a9:ec:19:d3:b1:6a:26:2b:91:e9:
ea:a9:be:b4:c1:77:e3:4a:a4:a9:47:7b:ff:d1:b2:51:8f:81:
28:05:ee:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7moD8Kdgsk3pDaDP9ftKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MGRmYzJhNjUxYjVlZmFiMmMwY2Q1OTMyMmQ2ZDNiNTU5
MDY1NjMwHhcNMjUxMTExMDgwMDQxWhcNMjUxMTEyMDgwMDQxWjAzMTEwLwYDVQQD
EyhhOWQ0NmFjMWFhMTk4MzcxMThkMDhiMjgwZDMwYjhiMDMwOTlhYTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo38xHK/GVrc399oyzkMGMLKy7oWe
iZIZDxZQH1emPAmz2Ta7zr5zE5eUeaTFZuWHg1+k+H8aFWEsjFoJcmofoGcCOL8S
Ti9HN7cUszZW/dP0ZfNocH959M+388W+phj6dPXE4Kb1GzSOs32AbGCKBiQC0MAo
PTTKIcjElHi1icGkWRMHDDEv3tJy/nPuLv9ki2MGs10wTo1uyrg9T6H5ntPl6kes
PBIgeOrZP3AhKvGeUxBtsMFAq0SEXXHQ2YoaWXYZSic5fBO0EsToBIlHKoIWzm+Z
c6NTVCLSSRxpkXlVgs9gBuihTSybCby6wU3+E/Htidi2xdyy0zNB1mMqOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKnUasGqGYNxGNCLKA0wuLAwmapDMB8GA1UdIwQY
MBaAFLkN/CplG176ssDNWTItbTtVkGVjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVEzOEttVWJYdnF5d00xWk1pMXRPMVdRWldNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC84NDdiYzgtZjdlNi00M2UwLWE1Y2Yt
ZDNlMTZhMTYzZGQzLzEvdVEzOEttVWJYdnF5d00xWk1pMXRPMVdRWldNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC84NDdiYzgtZjdlNi00M2UwLWE1Y2YtZDNlMTZhMTYzZGQz
LzEvdVEzOEttVWJYdnF5d00xWk1pMXRPMVdRWldNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHWVvabqk
w7nilAPF7Vjr459r5PeJXGYZRt+CCdMZ+dLAxxIcQN8CUlazZp2xjB5o9r92txBe
Z03l9YEPrbXjHQObVZb9nTRmxcPVijoNxtATlfzI1PHK8nzOIfMxjHoY/LcKS35t
vAGHJunqSDt78dDSza1ubVWhIi2LxJMGrWDPDczBilVsuA53/8yz1/aK00CA7Coc
OcgpdxfiYaDln9TFBSIsZ0arJhwm3mJ0KMsoHJMSI5smJybeAvG/6DkvQuSBCAcT
zq4m/akPy1+DD2eGfGs421sAjZ1PnnngvMKp7BnTsWomK5Hp6qm+tMF340qkqUd7
/9GyUY+BKAXuXg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:07 2025 by rpki-client