Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
File: 9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft (raw, json)
Hash identifier: 6lxk0Rc9ySjEZtIPW/HuU0pMvRu5q0ag2lMIBjvHiL4=
Subject key identifier: 3F:8C:47:71:F3:FB:79:A0:5C:BF:20:C8:42:96:D9:FF:19:C9:9D:F2
Authority key identifier: F6:95:4D:01:03:A7:A3:E6:52:35:4A:74:48:9F:86:DA:F9:A1:A5:9D
Certificate issuer: /CN=f6954d0103a7a3e652354a74489f86daf9a1a59d
Certificate serial: 019A70A56B83DB8C886DBE1C9A3AFF818D9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 02:01:20 +0000
Manifest this update: Tue 11 Nov 2025 02:01:20 +0000
Manifest next update: Wed 12 Nov 2025 02:01:20 +0000
Files and hashes: 1: 9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl (hash: OgNiXYCniE/E5xmRSUDOIYyUsoLD/hJStZfU9wqO+4Y=)
2: gGwKnYfvhCn5nwp-acIqahsS3nA.roa (hash: Rj4EAnxstBQ29bzxEKAGqDAmg0fXQP5ck4gqOBpaqb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:6b:83:db:8c:88:6d:be:1c:9a:3a:ff:81:8d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6954d0103a7a3e652354a74489f86daf9a1a59d
Validity
Not Before: Nov 11 02:01:20 2025 GMT
Not After : Nov 12 02:01:20 2025 GMT
Subject: CN=3f8c4771f3fb79a05cbf20c84296d9ff19c99df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f3:88:91:3a:d7:70:ed:0a:f5:6f:73:6b:ae:
d4:b9:85:2d:c8:53:4d:87:29:5d:c3:d2:07:b2:ed:
65:a1:04:c7:c8:85:16:dd:3e:d5:36:2d:04:2a:5e:
89:1e:37:c6:b2:79:f5:5b:1e:ef:2a:37:2a:73:b1:
03:2a:5c:c1:f9:f6:a1:ee:c1:cf:be:57:07:92:49:
ee:1f:b8:57:b4:3a:e7:2a:0b:2c:86:d5:d9:58:c1:
67:e7:07:cf:9d:30:30:06:03:3b:a7:95:14:61:d2:
37:4c:37:b3:aa:3f:b1:38:8e:6c:2f:d3:e3:fd:6e:
40:bd:c1:25:b0:a9:4b:de:ad:b9:e4:6a:03:a3:d0:
eb:e6:e9:2d:68:4d:67:59:65:45:57:af:e1:ea:69:
a5:a0:c7:ee:f3:a4:00:f2:a0:9a:c0:8a:8f:d2:a2:
8a:12:9e:7a:15:06:8b:e7:c3:61:64:7b:83:e5:5c:
f6:4b:5a:38:d6:64:c6:73:75:da:fb:46:e6:a7:38:
55:9f:6b:ea:2c:c3:39:16:61:42:e7:04:d4:7f:11:
55:6e:c8:00:22:ea:1e:70:4d:4d:e7:99:e7:a6:c1:
e4:f1:cb:f5:ce:7c:5b:70:57:f2:1f:2a:5e:55:da:
16:04:59:e3:a6:6d:66:93:fc:fb:08:7b:97:dc:58:
39:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8C:47:71:F3:FB:79:A0:5C:BF:20:C8:42:96:D9:FF:19:C9:9D:F2
X509v3 Authority Key Identifier:
keyid:F6:95:4D:01:03:A7:A3:E6:52:35:4A:74:48:9F:86:DA:F9:A1:A5:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:dd:00:16:10:33:10:a1:23:7c:19:81:84:f2:f0:f1:f3:ec:
4b:56:85:61:f8:41:bd:e7:18:60:a1:51:cb:4b:58:79:3e:47:
9f:dd:e0:6a:2d:f8:45:a1:56:26:b7:28:91:71:d5:a1:dd:c6:
8f:f6:11:aa:5f:83:88:09:c5:35:0f:2b:6f:d6:1b:6e:64:fd:
d7:51:b6:63:cd:9a:e5:41:05:05:23:dd:6f:bb:72:a8:ac:85:
15:36:3e:32:c8:1d:89:1d:5a:b7:47:fe:c5:3d:18:3e:2b:a1:
35:50:30:6a:f0:d7:63:6e:f4:2b:46:a6:27:cd:f7:f6:ee:d6:
48:f8:31:13:b4:f3:13:0e:2b:a3:e2:a4:bb:95:e3:23:52:79:
49:7e:d5:ef:83:86:d7:10:cc:06:67:96:05:e9:d2:d8:d6:2b:
c7:bd:7a:16:df:8c:12:98:7f:04:c3:aa:77:90:60:30:aa:3b:
bc:9b:0a:ba:a6:52:a5:5e:f2:bc:17:d0:a5:9d:f5:30:b8:95:
03:93:e4:4f:72:d5:88:7d:f4:15:c6:48:f9:c4:00:31:7f:99:
42:e8:9b:5b:12:71:21:19:fa:41:18:ab:bd:4e:29:d8:8d:1e:
b0:14:93:80:94:22:85:c9:79:fe:58:63:dd:51:51:a9:9f:b0:
43:7d:fb:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwpWuD24yIbb4cmjr/gY2bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2OTU0ZDAxMDNhN2EzZTY1MjM1NGE3NDQ4OWY4NmRhZjlh
MWE1OWQwHhcNMjUxMTExMDIwMTIwWhcNMjUxMTEyMDIwMTIwWjAzMTEwLwYDVQQD
EygzZjhjNDc3MWYzZmI3OWEwNWNiZjIwYzg0Mjk2ZDlmZjE5Yzk5ZGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvOIkTrXcO0K9W9za67UuYUtyFNN
hyldw9IHsu1loQTHyIUW3T7VNi0EKl6JHjfGsnn1Wx7vKjcqc7EDKlzB+fah7sHP
vlcHkknuH7hXtDrnKgsshtXZWMFn5wfPnTAwBgM7p5UUYdI3TDezqj+xOI5sL9Pj
/W5AvcElsKlL3q255GoDo9Dr5uktaE1nWWVFV6/h6mmloMfu86QA8qCawIqP0qKK
Ep56FQaL58NhZHuD5Vz2S1o41mTGc3Xa+0bmpzhVn2vqLMM5FmFC5wTUfxFVbsgA
IuoecE1N55nnpsHk8cv1znxbcFfyHypeVdoWBFnjpm1mk/z7CHuX3Fg5ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD+MR3Hz+3mgXL8gyEKW2f8ZyZ3yMB8GA1UdIwQY
MBaAFPaVTQEDp6PmUjVKdEifhtr5oaWdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXBWTkFRT25vLVpTTlVwMFNKLUcydm1ocFowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85NDA1NTAtZGFhYi00YzlkLTg0NDAt
ZjhjOWUwOTYyMzU0LzEvOXBWTkFRT25vLVpTTlVwMFNKLUcydm1ocFowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy85NDA1NTAtZGFhYi00YzlkLTg0NDAtZjhjOWUwOTYyMzU0
LzEvOXBWTkFRT25vLVpTTlVwMFNKLUcydm1ocFowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHd0AFhAz
EKEjfBmBhPLw8fPsS1aFYfhBvecYYKFRy0tYeT5Hn93gai34RaFWJrcokXHVod3G
j/YRql+DiAnFNQ8rb9YbbmT911G2Y82a5UEFBSPdb7tyqKyFFTY+MsgdiR1at0f+
xT0YPiuhNVAwavDXY270K0amJ8339u7WSPgxE7TzEw4ro+Kku5XjI1J5SX7V74OG
1xDMBmeWBenS2NYrx716Ft+MEph/BMOqd5BgMKo7vJsKuqZSpV7yvBfQpZ31MLiV
A5PkT3LViH30FcZI+cQAMX+ZQuibWxJxIRn6QRirvU4p2I0esBSTgJQihcl5/lhj
3VFRqZ+wQ337zA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:05 2025 by rpki-client