Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/mnCwUeXN-WLbwms1JIjQgxvfmjw.mft
File: mnCwUeXN-WLbwms1JIjQgxvfmjw.mft (raw, json)
Hash identifier: kA2UJBqIAtRMINfgVE92ot5jn96vMQLYbg6MMWB9Cpo=
Subject key identifier: 41:86:E4:ED:D7:97:77:C0:9C:47:D7:A8:99:B3:40:09:01:4D:F1:DD
Authority key identifier: 9A:70:B0:51:E5:CD:F9:62:DB:C2:6B:35:24:88:D0:83:1B:DF:9A:3C
Certificate issuer: /CN=9a70b051e5cdf962dbc26b352488d0831bdf9a3c
Certificate serial: 019A71EEF3718962E2474FD64095CA2CFF34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnCwUeXN-WLbwms1JIjQgxvfmjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/mnCwUeXN-WLbwms1JIjQgxvfmjw.mft
Manifest number: 13D8
Signing time: Tue 11 Nov 2025 08:01:16 +0000
Manifest this update: Tue 11 Nov 2025 08:01:16 +0000
Manifest next update: Wed 12 Nov 2025 08:01:16 +0000
Files and hashes: 1: ApYo8usd2f87kfxBSCL43GkwNl4.roa (hash: HVht7PktvVlX5vG6maaHsCCbjpS8pRttM16W+m0bt9g=)
2: Uc7Gw0WDW5zdDRKa954NyTzqv6g.roa (hash: FmxP6Uz7faOa7pJaYu4u/4WUOpulDOhau3FqT5C1MnI=)
3: mnCwUeXN-WLbwms1JIjQgxvfmjw.crl (hash: s4z2oz9/bAQuyTx+qUso5er4CJ8v954BFTD5aKZAKc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/mnCwUeXN-WLbwms1JIjQgxvfmjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/mnCwUeXN-WLbwms1JIjQgxvfmjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnCwUeXN-WLbwms1JIjQgxvfmjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:f3:71:89:62:e2:47:4f:d6:40:95:ca:2c:ff:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a70b051e5cdf962dbc26b352488d0831bdf9a3c
Validity
Not Before: Nov 11 08:01:16 2025 GMT
Not After : Nov 12 08:01:16 2025 GMT
Subject: CN=4186e4edd79777c09c47d7a899b34009014df1dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:50:a4:ff:d6:dc:da:95:43:de:9a:65:73:28:
3e:d0:58:50:51:85:23:49:ca:dd:24:00:ed:55:e9:
01:1f:4b:2f:06:b6:46:a6:63:d0:f3:97:91:b3:a8:
7e:fd:73:c7:63:67:41:64:b6:97:73:a7:90:35:fe:
c4:fa:f4:3d:6d:3c:ed:3e:91:f2:4a:16:53:41:ed:
86:09:50:14:1f:79:27:6b:da:e2:57:45:5f:68:51:
04:1b:1a:8d:4d:71:9c:7b:bb:d8:87:7a:a6:d1:bc:
05:20:05:f8:6e:bd:c2:ee:50:3a:f1:4a:ba:37:6a:
a4:d2:8f:68:4e:cf:a9:40:65:72:23:4a:44:f3:55:
1c:75:db:86:64:fc:77:d2:f7:c3:bb:21:e1:4d:f8:
bb:67:a6:d6:d5:61:6b:ee:b7:4b:59:58:24:cb:8c:
d5:f4:5a:b7:3d:ec:54:c9:0f:2a:92:32:86:04:5c:
82:8d:3f:99:b0:6f:59:5b:48:27:4f:20:a3:76:ea:
9f:b1:c1:8c:2d:40:ec:04:74:8b:78:20:ab:02:40:
d1:12:e7:82:28:ea:36:4e:07:52:ac:78:8d:2e:61:
93:8d:46:61:5d:2d:b1:1c:1f:dd:0a:37:c4:a2:47:
10:a9:99:f0:60:37:cc:be:ac:93:ba:ed:5e:a0:7e:
31:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:86:E4:ED:D7:97:77:C0:9C:47:D7:A8:99:B3:40:09:01:4D:F1:DD
X509v3 Authority Key Identifier:
keyid:9A:70:B0:51:E5:CD:F9:62:DB:C2:6B:35:24:88:D0:83:1B:DF:9A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnCwUeXN-WLbwms1JIjQgxvfmjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/mnCwUeXN-WLbwms1JIjQgxvfmjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/mnCwUeXN-WLbwms1JIjQgxvfmjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:52:e7:d9:6e:03:75:81:42:46:d4:ad:7a:76:db:17:e6:b7:
e1:d4:76:39:69:31:a4:9c:b0:5e:0c:d8:77:d2:b9:71:56:ef:
9b:25:ae:62:8e:80:0c:a2:6f:ab:7a:3e:dd:f2:4c:e0:fc:af:
45:9e:3a:18:ce:2d:2f:13:90:88:1f:1c:e2:9a:36:9f:a1:21:
1c:ea:3b:ca:7e:18:55:89:d0:30:b5:46:77:f7:9d:01:ad:7b:
5b:da:df:27:13:67:8b:74:c4:e1:61:cc:10:2c:fa:d9:cf:90:
5c:e4:d1:b1:d4:0a:06:3f:00:51:80:89:cf:2f:be:7c:8c:1c:
d7:17:42:2d:ec:7a:cd:e7:ce:c4:e1:08:2a:59:01:55:39:d0:
ff:2b:73:cd:56:b2:7e:67:e3:ae:eb:31:df:c4:6b:1e:04:d7:
8b:f4:2b:bd:98:29:c2:08:e0:dd:3b:24:75:79:e2:f8:0a:82:
af:15:0b:b7:8b:19:88:3f:1f:73:cd:33:00:c5:c3:2e:fc:3f:
59:ef:b4:38:4f:51:60:b4:6e:3a:ed:4a:54:c6:39:b4:2e:6f:
33:0b:61:72:92:f6:5f:1c:f8:e1:8f:b0:06:cc:d8:8a:d9:e8:
48:d7:43:80:a5:29:3f:56:44:1e:70:35:70:b7:39:57:49:63:
e9:bc:14:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7vNxiWLiR0/WQJXKLP80MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNzBiMDUxZTVjZGY5NjJkYmMyNmIzNTI0ODhkMDgzMWJk
ZjlhM2MwHhcNMjUxMTExMDgwMTE2WhcNMjUxMTEyMDgwMTE2WjAzMTEwLwYDVQQD
Eyg0MTg2ZTRlZGQ3OTc3N2MwOWM0N2Q3YTg5OWIzNDAwOTAxNGRmMWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslCk/9bc2pVD3pplcyg+0FhQUYUj
ScrdJADtVekBH0svBrZGpmPQ85eRs6h+/XPHY2dBZLaXc6eQNf7E+vQ9bTztPpHy
ShZTQe2GCVAUH3kna9riV0VfaFEEGxqNTXGce7vYh3qm0bwFIAX4br3C7lA68Uq6
N2qk0o9oTs+pQGVyI0pE81UcdduGZPx30vfDuyHhTfi7Z6bW1WFr7rdLWVgky4zV
9Fq3PexUyQ8qkjKGBFyCjT+ZsG9ZW0gnTyCjduqfscGMLUDsBHSLeCCrAkDREueC
KOo2TgdSrHiNLmGTjUZhXS2xHB/dCjfEokcQqZnwYDfMvqyTuu1eoH4xwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGG5O3Xl3fAnEfXqJmzQAkBTfHdMB8GA1UdIwQY
MBaAFJpwsFHlzfli28JrNSSI0IMb35o8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbW5Dd1VlWE4tV0xid21zMUpJalFneHZmbWp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9mOTY5MWQtYWZiMi00MWYyLThkMjIt
ZmE0NmI0ZjlhMjBjLzEvbW5Dd1VlWE4tV0xid21zMUpJalFneHZmbWp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9mOTY5MWQtYWZiMi00MWYyLThkMjItZmE0NmI0ZjlhMjBj
LzEvbW5Dd1VlWE4tV0xid21zMUpJalFneHZmbWp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw1Ln2W4D
dYFCRtStenbbF+a34dR2OWkxpJywXgzYd9K5cVbvmyWuYo6ADKJvq3o+3fJM4Pyv
RZ46GM4tLxOQiB8c4po2n6EhHOo7yn4YVYnQMLVGd/edAa17W9rfJxNni3TE4WHM
ECz62c+QXOTRsdQKBj8AUYCJzy++fIwc1xdCLex6zefOxOEIKlkBVTnQ/ytzzVay
fmfjrusx38RrHgTXi/QrvZgpwgjg3TskdXni+AqCrxULt4sZiD8fc80zAMXDLvw/
We+0OE9RYLRuOu1KVMY5tC5vMwthcpL2Xxz44Y+wBszYitnoSNdDgKUpP1ZEHnA1
cLc5V0lj6bwUOg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:47:11 2025 by rpki-client