Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft
File: h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft (raw, json)
Hash identifier: F7JLe+Icn4S7v5qH68UNQMTFJrKYS3+MTUjF2q4g1Eg=
Subject key identifier: BA:9B:8D:9D:DC:67:53:E3:5B:31:FA:48:75:46:CD:73:43:46:5B:34
Authority key identifier: 87:75:E6:40:8B:8E:05:AA:91:4B:87:46:35:A4:7B:7B:82:0C:6C:32
Certificate issuer: /CN=8775e6408b8e05aa914b874635a47b7b820c6c32
Certificate serial: 019A7112ABD5DFDA48ECF5E5F8B6F076645D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3XmQIuOBaqRS4dGNaR7e4IMbDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft
Manifest number: 02FA
Signing time: Tue 11 Nov 2025 04:00:39 +0000
Manifest this update: Tue 11 Nov 2025 04:00:39 +0000
Manifest next update: Wed 12 Nov 2025 04:00:39 +0000
Files and hashes: 1: JY1Ry82sD4kNWhz4gQuDnSIFpN8.roa (hash: 8elrrlaE2J0H4bGnc8sBg7PwEFKBgdvohUzIrvCFh2E=)
2: h3XmQIuOBaqRS4dGNaR7e4IMbDI.crl (hash: 6LGFeD9ux/6ShqcPrOUqwKZXN42dSyKUG4E1g/MIBw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3XmQIuOBaqRS4dGNaR7e4IMbDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:ab:d5:df:da:48:ec:f5:e5:f8:b6:f0:76:64:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8775e6408b8e05aa914b874635a47b7b820c6c32
Validity
Not Before: Nov 11 04:00:39 2025 GMT
Not After : Nov 12 04:00:39 2025 GMT
Subject: CN=ba9b8d9ddc6753e35b31fa487546cd7343465b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:38:3f:1d:ef:79:0f:68:57:40:a0:e9:02:90:
3b:03:84:12:a7:e4:cb:14:6d:d0:0c:a8:81:93:f0:
56:56:7e:87:12:47:8f:9d:b3:c6:46:d4:df:83:98:
79:f8:c9:ee:57:b5:6f:1f:97:7c:13:65:db:bf:c7:
80:cf:d3:81:07:32:46:d6:63:7b:4c:f6:1b:0c:59:
fa:0d:f7:84:c1:10:fa:53:5c:3a:75:a1:d8:0b:75:
ea:67:f6:37:ac:4f:fa:d3:ec:5a:65:76:66:26:6c:
3e:55:bb:f4:e1:b2:b5:37:67:aa:b2:67:e9:90:f2:
4d:76:92:b8:58:7a:a2:f1:e5:02:83:3a:4f:8f:64:
7e:fc:ff:a0:61:09:1e:16:71:db:58:0d:7a:d1:b2:
15:bc:cf:ac:e9:79:7d:0b:51:66:8b:40:e8:3c:20:
42:78:f4:f7:82:9c:90:01:f2:91:a5:c0:59:ef:a9:
6e:5c:af:27:d2:5f:22:4f:5d:2b:6a:38:16:1f:92:
b5:8a:c9:64:a4:d0:ee:8f:02:61:c0:88:9e:e3:ac:
e2:57:55:72:9f:39:09:1c:54:20:33:10:e1:54:bb:
9b:20:0c:d5:52:1f:7e:a3:3e:62:0e:15:94:21:ee:
30:41:90:41:af:13:44:f0:fb:75:77:d6:96:79:be:
77:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:9B:8D:9D:DC:67:53:E3:5B:31:FA:48:75:46:CD:73:43:46:5B:34
X509v3 Authority Key Identifier:
keyid:87:75:E6:40:8B:8E:05:AA:91:4B:87:46:35:A4:7B:7B:82:0C:6C:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3XmQIuOBaqRS4dGNaR7e4IMbDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:7d:e4:86:91:cc:88:2a:f7:04:13:e0:41:da:94:fb:7a:05:
1e:50:8f:f7:cd:79:a8:e9:cf:30:17:bf:42:ca:e7:f3:1b:29:
a3:a7:e8:3e:95:d8:21:6b:51:98:3f:7d:30:30:cc:1b:11:b5:
45:b1:e2:35:47:15:28:8b:90:69:f5:1e:cf:0a:4c:5c:78:ee:
7a:28:93:91:3e:37:f0:39:1f:48:c9:ac:80:b2:18:29:b9:68:
a3:61:f1:88:4e:97:e8:e4:7e:95:aa:ad:f7:e1:be:9e:5f:4c:
99:22:bd:50:9c:4d:4a:ef:b2:2d:c8:11:1b:0b:20:03:0f:74:
95:6c:62:7b:22:c9:bf:8b:54:89:cd:9a:ed:f4:b7:cc:43:ec:
b0:90:22:46:27:76:a0:a2:a5:e1:73:4e:dd:c0:39:b6:ed:c9:
44:a9:b6:69:50:d0:4e:58:fe:92:ae:66:b3:ed:50:a1:11:c5:
3a:55:78:bd:da:cb:cc:07:6e:58:82:2c:cd:85:d5:ac:ad:94:
c7:55:1f:cc:07:46:6a:dc:0c:5b:f2:7f:4b:00:9d:90:98:00:
cd:8f:ad:d3:4c:37:ba:01:e1:55:8f:76:2a:e1:9c:03:f8:67:
b9:17:41:37:f9:32:93:67:9c:85:f9:36:dd:d0:85:4b:71:75:
a5:90:13:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxEqvV39pI7PXl+LbwdmRdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NzVlNjQwOGI4ZTA1YWE5MTRiODc0NjM1YTQ3YjdiODIw
YzZjMzIwHhcNMjUxMTExMDQwMDM5WhcNMjUxMTEyMDQwMDM5WjAzMTEwLwYDVQQD
EyhiYTliOGQ5ZGRjNjc1M2UzNWIzMWZhNDg3NTQ2Y2Q3MzQzNDY1YjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzg/He95D2hXQKDpApA7A4QSp+TL
FG3QDKiBk/BWVn6HEkePnbPGRtTfg5h5+MnuV7VvH5d8E2Xbv8eAz9OBBzJG1mN7
TPYbDFn6DfeEwRD6U1w6daHYC3XqZ/Y3rE/60+xaZXZmJmw+Vbv04bK1N2eqsmfp
kPJNdpK4WHqi8eUCgzpPj2R+/P+gYQkeFnHbWA160bIVvM+s6Xl9C1Fmi0DoPCBC
ePT3gpyQAfKRpcBZ76luXK8n0l8iT10rajgWH5K1islkpNDujwJhwIie46ziV1Vy
nzkJHFQgMxDhVLubIAzVUh9+oz5iDhWUIe4wQZBBrxNE8Pt1d9aWeb53fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLqbjZ3cZ1PjWzH6SHVGzXNDRls0MB8GA1UdIwQY
MBaAFId15kCLjgWqkUuHRjWke3uCDGwyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDNYbVFJdU9CYXFSUzRkR05hUjdlNElNYkRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8zNmUwNjUtYTFmNi00ZTE0LWIyZDct
NjFlNTRjZmMyYWJjLzEvaDNYbVFJdU9CYXFSUzRkR05hUjdlNElNYkRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8zNmUwNjUtYTFmNi00ZTE0LWIyZDctNjFlNTRjZmMyYWJj
LzEvaDNYbVFJdU9CYXFSUzRkR05hUjdlNElNYkRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUn3khpHM
iCr3BBPgQdqU+3oFHlCP9815qOnPMBe/Qsrn8xspo6foPpXYIWtRmD99MDDMGxG1
RbHiNUcVKIuQafUezwpMXHjueiiTkT438DkfSMmsgLIYKbloo2HxiE6X6OR+laqt
9+G+nl9MmSK9UJxNSu+yLcgRGwsgAw90lWxieyLJv4tUic2a7fS3zEPssJAiRid2
oKKl4XNO3cA5tu3JRKm2aVDQTlj+kq5ms+1QoRHFOlV4vdrLzAduWIIszYXVrK2U
x1UfzAdGatwMW/J/SwCdkJgAzY+t00w3ugHhVY92KuGcA/hnuRdBN/kyk2echfk2
3dCFS3F1pZATgA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:41 2025 by rpki-client