Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
File: D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft (raw, json)
Hash identifier: sWEZPjnpwP1rj4N/n3Z23uY3FhIdMgE+CgeNuidEg5A=
Subject key identifier: D6:E3:CD:71:CD:CD:09:5D:99:04:2A:14:C3:26:F1:4D:9F:59:5E:DA
Authority key identifier: 0F:78:4E:BE:35:E4:1B:61:0B:E1:54:47:3B:C2:19:D0:AD:25:27:8F
Certificate issuer: /CN=0f784ebe35e41b610be154473bc219d0ad25278f
Certificate serial: 019A71B914DC69BA09EB76FEDF0005F985D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
Manifest number: 0637
Signing time: Tue 11 Nov 2025 07:02:26 +0000
Manifest this update: Tue 11 Nov 2025 07:02:26 +0000
Manifest next update: Wed 12 Nov 2025 07:02:26 +0000
Files and hashes: 1: 6Ws74y6Nwf78AVosGHIH3KZShUI.roa (hash: HtNFOxzPI0ZbD22siO8UeJbW1HbOmrNLXjn5ZOwIrAs=)
2: D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl (hash: a/1H9SS4ST3wpfvBKDzje2/GEuWJr2isbviG+0dmF2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:14:dc:69:ba:09:eb:76:fe:df:00:05:f9:85:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f784ebe35e41b610be154473bc219d0ad25278f
Validity
Not Before: Nov 11 07:02:26 2025 GMT
Not After : Nov 12 07:02:26 2025 GMT
Subject: CN=d6e3cd71cdcd095d99042a14c326f14d9f595eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:cf:dd:59:57:ae:2b:9f:8e:5b:6f:c7:09:31:
d4:5d:9f:b8:2b:ee:01:96:8b:6b:04:7a:0d:be:12:
07:4f:b1:7a:de:0e:ff:ee:de:7d:4e:99:3f:7b:84:
91:fa:41:23:27:55:57:f1:c1:04:eb:ed:39:c2:d9:
95:0d:95:da:64:d5:e5:52:44:e3:ae:87:cd:7f:0a:
a3:8a:bf:9a:25:4e:9a:b6:b7:c1:fa:e9:6b:ac:47:
7f:10:de:ea:66:56:74:26:e7:11:94:ea:e7:75:93:
69:ca:fb:b2:5f:b2:25:37:1f:00:35:21:d6:6d:04:
94:c9:dd:d3:41:ad:81:7f:a0:44:fd:10:a6:1f:39:
78:49:2a:1e:af:59:66:85:9b:b8:b0:d0:51:87:33:
1a:28:ad:6e:0e:38:69:78:a7:7e:f1:e5:1a:b7:a8:
ad:1c:69:98:a2:30:17:51:24:e5:0a:cd:96:7a:04:
dc:3c:00:d7:3d:52:e4:95:2d:1b:ae:37:c7:05:36:
44:a1:cd:92:0b:93:77:43:2d:0f:7a:e6:43:d6:f4:
4b:21:93:cb:7a:1f:26:22:c8:31:b3:ad:be:a1:fe:
b2:01:24:5c:d6:93:b5:63:21:28:57:18:fb:0d:0d:
e8:3c:f2:68:d7:b7:b6:0b:b7:5e:73:38:00:50:ba:
20:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E3:CD:71:CD:CD:09:5D:99:04:2A:14:C3:26:F1:4D:9F:59:5E:DA
X509v3 Authority Key Identifier:
keyid:0F:78:4E:BE:35:E4:1B:61:0B:E1:54:47:3B:C2:19:D0:AD:25:27:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:5a:2b:eb:3a:9e:e7:80:7a:0a:0e:b8:2f:56:af:37:dc:d5:
bd:c9:46:d6:ce:90:ed:c7:02:d6:94:9d:da:41:e9:05:e5:fa:
3b:81:67:67:f4:97:27:2f:ed:86:42:47:a7:61:de:92:f2:ed:
94:4b:2d:ec:11:f2:42:b4:2f:31:76:62:1a:71:72:7d:ba:3c:
02:2c:7b:18:9e:67:52:60:68:ed:a6:c8:f3:28:78:52:dd:58:
38:f6:4e:e6:68:b3:20:2c:f5:12:ba:66:e8:0c:9d:b5:9b:38:
49:10:ed:84:0e:e3:6a:3e:98:ea:4e:10:cf:d8:78:fd:d6:af:
ff:4f:91:8e:53:03:92:9a:25:a0:11:e7:1e:95:60:be:da:23:
c5:d4:66:de:31:5d:08:b4:68:85:e4:f2:2c:26:a3:98:ad:bb:
93:51:20:8e:f0:ee:18:07:50:e8:f7:df:6b:0f:0b:44:5d:00:
c6:c1:b3:e8:dc:f1:f5:ce:7c:0d:f7:ba:e9:fa:3a:da:c6:c8:
0f:d4:6a:fc:3f:3d:0c:be:f4:d5:77:b9:1c:41:dc:b7:6e:9e:
fe:e5:94:88:38:97:1d:af:84:4c:1d:d0:d7:b5:f0:55:f8:4b:
14:fa:ba:8c:d7:3d:34:95:51:ba:24:88:c7:a0:17:68:7a:e1:
07:2d:96:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuRTcaboJ63b+3wAF+YXUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNzg0ZWJlMzVlNDFiNjEwYmUxNTQ0NzNiYzIxOWQwYWQy
NTI3OGYwHhcNMjUxMTExMDcwMjI2WhcNMjUxMTEyMDcwMjI2WjAzMTEwLwYDVQQD
EyhkNmUzY2Q3MWNkY2QwOTVkOTkwNDJhMTRjMzI2ZjE0ZDlmNTk1ZWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6s/dWVeuK5+OW2/HCTHUXZ+4K+4B
lotrBHoNvhIHT7F63g7/7t59Tpk/e4SR+kEjJ1VX8cEE6+05wtmVDZXaZNXlUkTj
rofNfwqjir+aJU6atrfB+ulrrEd/EN7qZlZ0JucRlOrndZNpyvuyX7IlNx8ANSHW
bQSUyd3TQa2Bf6BE/RCmHzl4SSoer1lmhZu4sNBRhzMaKK1uDjhpeKd+8eUat6it
HGmYojAXUSTlCs2WegTcPADXPVLklS0brjfHBTZEoc2SC5N3Qy0PeuZD1vRLIZPL
eh8mIsgxs62+of6yASRc1pO1YyEoVxj7DQ3oPPJo17e2C7deczgAULogeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNbjzXHNzQldmQQqFMMm8U2fWV7aMB8GA1UdIwQY
MBaAFA94Tr415BthC+FURzvCGdCtJSePMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDNoT3ZqWGtHMkVMNFZSSE84SVowSzBsSjQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8wODhhMjEtNjIxNC00OWZhLWE4Zjct
OTEyZTc4YzJmMmViLzEvRDNoT3ZqWGtHMkVMNFZSSE84SVowSzBsSjQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi8wODhhMjEtNjIxNC00OWZhLWE4ZjctOTEyZTc4YzJmMmVi
LzEvRDNoT3ZqWGtHMkVMNFZSSE84SVowSzBsSjQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz1or6zqe
54B6Cg64L1avN9zVvclG1s6Q7ccC1pSd2kHpBeX6O4FnZ/SXJy/thkJHp2HekvLt
lEst7BHyQrQvMXZiGnFyfbo8Aix7GJ5nUmBo7abI8yh4Ut1YOPZO5mizICz1Erpm
6AydtZs4SRDthA7jaj6Y6k4Qz9h4/dav/0+RjlMDkpoloBHnHpVgvtojxdRm3jFd
CLRoheTyLCajmK27k1EgjvDuGAdQ6Pffaw8LRF0AxsGz6Nzx9c58Dfe66fo62sbI
D9Rq/D89DL701Xe5HEHct26e/uWUiDiXHa+ETB3Q17XwVfhLFPq6jNc9NJVRuiSI
x6AXaHrhBy2WvA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:36 2025 by rpki-client