Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft
File: JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft (raw, json)
Hash identifier: rVJph2JFZVZMVqVpXUsO6um9tauF4ORy39BN5okFIEc=
Subject key identifier: 09:85:F7:E8:A1:9C:69:98:3B:B1:95:F5:86:38:E3:0A:64:6F:6B:00
Authority key identifier: 26:42:7A:26:0D:6D:96:CC:11:15:CC:CE:8A:91:4A:FF:B0:E1:D1:6B
Certificate issuer: /CN=26427a260d6d96cc1115ccce8a914affb0e1d16b
Certificate serial: 019A714A28F9C42A354D9F8E04ED3BA1265A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft
Manifest number: 0447
Signing time: Tue 11 Nov 2025 05:01:16 +0000
Manifest this update: Tue 11 Nov 2025 05:01:16 +0000
Manifest next update: Wed 12 Nov 2025 05:01:16 +0000
Files and hashes: 1: HRacqG8l3Hf7zAmCVCG0P5KOMS4.roa (hash: POwtAYxNl5+u6y8FOiGiNGLuMGWBIZsQmYKWLa6++Q0=)
2: JkJ6Jg1tlswRFczOipFK_7Dh0Ws.crl (hash: VzbKvoi4WDuTdONprbnanlEjmUgFiXO9db0YY6EWn7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft
rsync://rpki.ripe.net/repository/DEFAULT/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:28:f9:c4:2a:35:4d:9f:8e:04:ed:3b:a1:26:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26427a260d6d96cc1115ccce8a914affb0e1d16b
Validity
Not Before: Nov 11 05:01:16 2025 GMT
Not After : Nov 12 05:01:16 2025 GMT
Subject: CN=0985f7e8a19c69983bb195f58638e30a646f6b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:05:22:78:1a:42:43:51:2a:23:12:1f:82:b5:
aa:4c:52:07:5e:7d:c2:08:8c:73:a0:82:13:25:a7:
99:67:ee:e3:17:46:2d:c3:e1:ef:8b:af:44:f9:2b:
d8:4f:e7:a5:98:58:c3:08:68:43:da:38:66:ec:10:
84:0b:93:0c:7b:00:df:38:52:47:58:fa:90:a1:bb:
b0:7c:a1:15:85:6f:3b:37:40:4d:c8:1f:e7:d0:aa:
90:5c:33:42:4c:50:cc:94:9c:f3:fb:22:4f:f0:ab:
06:d2:49:c7:33:f5:e6:24:a3:25:89:ae:e8:7f:da:
e9:fd:34:63:7d:64:88:1e:5f:10:8b:61:9e:46:98:
27:ab:da:51:b2:5b:e4:6b:45:1d:89:c4:d7:5a:19:
ae:33:7b:d6:fa:d0:e9:80:1e:8e:9a:bc:2a:5b:32:
80:5c:99:ee:b0:fa:43:84:f7:38:f5:e4:48:33:cf:
a1:37:56:79:65:72:2d:49:e0:35:7f:f1:83:10:7c:
d3:db:c5:3c:31:9b:68:5c:8f:29:37:4c:fa:61:2a:
d8:c6:54:0e:56:35:65:85:5e:fe:0a:d8:dd:53:0d:
68:5f:3e:db:57:79:74:fe:db:fd:96:17:01:04:cc:
e7:d8:eb:26:70:2e:3a:34:d4:5b:f9:f0:bd:16:2d:
86:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:85:F7:E8:A1:9C:69:98:3B:B1:95:F5:86:38:E3:0A:64:6F:6B:00
X509v3 Authority Key Identifier:
keyid:26:42:7A:26:0D:6D:96:CC:11:15:CC:CE:8A:91:4A:FF:B0:E1:D1:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:8d:b6:b6:96:71:06:ec:f4:81:63:6c:fe:43:3c:4a:14:d3:
e1:fc:5b:aa:60:82:4e:90:08:eb:55:34:ec:02:f0:fd:a7:f7:
0f:59:82:46:12:76:80:15:ec:2b:2c:0c:0c:92:8b:82:31:ad:
6b:73:e3:75:55:aa:63:d8:f0:28:f3:82:67:31:74:15:08:a5:
b1:e3:d7:90:be:06:c8:32:58:14:73:31:60:bc:e0:71:fb:53:
04:3a:59:be:0a:01:14:53:9b:38:14:42:4e:83:c3:fc:4a:80:
bf:65:2c:d4:87:cc:66:b5:b9:c5:ce:7c:0f:b3:a8:f4:a8:1c:
98:23:d3:44:23:5e:f4:95:08:6f:db:ef:38:54:ac:d9:1d:9d:
07:c3:51:1f:01:36:22:cd:f7:ff:69:16:53:06:9b:f4:6f:99:
c9:8e:f8:d9:b2:9c:14:6d:85:be:57:f5:38:e2:4f:c8:9a:33:
40:6a:26:51:c8:21:72:06:40:e1:a1:c5:c5:13:46:78:e9:c8:
a5:88:ef:63:9c:61:d8:32:b8:8a:f7:bb:9f:53:c4:cd:42:db:
b8:3f:e5:9e:c6:9b:51:bd:81:a1:71:ff:bb:a9:e5:b4:51:01:
32:54:85:65:c6:9d:7f:26:a7:84:89:ff:d1:ba:c5:5d:83:04:
15:b0:fc:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSij5xCo1TZ+OBO07oSZaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NDI3YTI2MGQ2ZDk2Y2MxMTE1Y2NjZThhOTE0YWZmYjBl
MWQxNmIwHhcNMjUxMTExMDUwMTE2WhcNMjUxMTEyMDUwMTE2WjAzMTEwLwYDVQQD
EygwOTg1ZjdlOGExOWM2OTk4M2JiMTk1ZjU4NjM4ZTMwYTY0NmY2YjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngUieBpCQ1EqIxIfgrWqTFIHXn3C
CIxzoIITJaeZZ+7jF0Ytw+Hvi69E+SvYT+elmFjDCGhD2jhm7BCEC5MMewDfOFJH
WPqQobuwfKEVhW87N0BNyB/n0KqQXDNCTFDMlJzz+yJP8KsG0knHM/XmJKMlia7o
f9rp/TRjfWSIHl8Qi2GeRpgnq9pRslvka0UdicTXWhmuM3vW+tDpgB6OmrwqWzKA
XJnusPpDhPc49eRIM8+hN1Z5ZXItSeA1f/GDEHzT28U8MZtoXI8pN0z6YSrYxlQO
VjVlhV7+CtjdUw1oXz7bV3l0/tv9lhcBBMzn2OsmcC46NNRb+fC9Fi2GCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAmF9+ihnGmYO7GV9YY44wpkb2sAMB8GA1UdIwQY
MBaAFCZCeiYNbZbMERXMzoqRSv+w4dFrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmtKNkpnMXRsc3dSRmN6T2lwRktfN0RoMFdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9mM2ZkZjAtYTFhNS00NWExLTgyNTIt
ODUyOGU1NTMyYzBlLzEvSmtKNkpnMXRsc3dSRmN6T2lwRktfN0RoMFdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9mM2ZkZjAtYTFhNS00NWExLTgyNTItODUyOGU1NTMyYzBl
LzEvSmtKNkpnMXRsc3dSRmN6T2lwRktfN0RoMFdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZo22tpZx
Buz0gWNs/kM8ShTT4fxbqmCCTpAI61U07ALw/af3D1mCRhJ2gBXsKywMDJKLgjGt
a3PjdVWqY9jwKPOCZzF0FQilsePXkL4GyDJYFHMxYLzgcftTBDpZvgoBFFObOBRC
ToPD/EqAv2Us1IfMZrW5xc58D7Oo9KgcmCPTRCNe9JUIb9vvOFSs2R2dB8NRHwE2
Is33/2kWUwab9G+ZyY742bKcFG2Fvlf1OOJPyJozQGomUcghcgZA4aHFxRNGeOnI
pYjvY5xh2DK4ive7n1PEzULbuD/lnsabUb2BoXH/u6nltFEBMlSFZcadfyanhIn/
0brFXYMEFbD8eQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:45 2025 by rpki-client