Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft
File: kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft (raw, json)
Hash identifier: tkIZGFdIQLmSfR/sDTbsncVwO7qeAs1kM9MR0wAkZts=
Subject key identifier: E7:11:6A:ED:39:A5:B8:38:20:A2:64:52:7E:85:32:B2:A4:88:C0:99
Authority key identifier: 90:F7:65:37:FF:74:58:93:E3:14:2F:A0:98:4F:44:9B:72:5B:8F:D3
Certificate issuer: /CN=90f76537ff745893e3142fa0984f449b725b8fd3
Certificate serial: 019A73011C041B27340496D6B7F8D2F66FED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPdlN_90WJPjFC-gmE9Em3Jbj9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 13:00:43 +0000
Manifest this update: Tue 11 Nov 2025 13:00:43 +0000
Manifest next update: Wed 12 Nov 2025 13:00:43 +0000
Files and hashes: 1: 4h8beUu4miiEn1n13esJcxX7gpc.roa (hash: 33+qj2eaRd7O8N5EQLS3e9QL955CTXDuq4VOYW0my7E=)
2: kPdlN_90WJPjFC-gmE9Em3Jbj9M.crl (hash: FZa21lCjmJerRncPpQBJvVzYjqKSnMbNbeSR+LTCqh4=)
3: zcJuMPKqinNoidJ9rHaaDdmdVvA.roa (hash: 9UsWhn4/INB/JJvJuTs6CMag+GLrqc1ZuXSO78kkqu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPdlN_90WJPjFC-gmE9Em3Jbj9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:1c:04:1b:27:34:04:96:d6:b7:f8:d2:f6:6f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f76537ff745893e3142fa0984f449b725b8fd3
Validity
Not Before: Nov 11 13:00:43 2025 GMT
Not After : Nov 12 13:00:43 2025 GMT
Subject: CN=e7116aed39a5b83820a264527e8532b2a488c099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:69:95:d0:0d:0a:7d:72:07:b8:cc:01:bc:05:
32:a8:28:4a:1d:ff:18:a4:72:5f:fb:50:cb:1b:18:
17:7e:ad:cd:ca:1a:d2:16:24:c8:3d:ac:0c:f2:e0:
48:dc:1a:23:db:b8:4c:d7:b5:55:99:0c:90:87:64:
e2:53:07:73:71:61:cf:8d:e3:08:06:81:24:ab:ad:
28:e8:80:7e:3e:8f:d5:a8:71:b0:8c:9e:5c:1b:b0:
38:ab:18:5d:f3:df:05:7a:20:eb:17:37:ff:e9:29:
ed:26:89:d5:93:39:72:09:c2:9f:ce:c0:a2:0b:d2:
f6:8d:cb:b0:72:68:e7:c1:86:10:f0:f6:95:7b:d2:
8b:97:af:78:fa:63:59:ea:7c:73:65:c1:17:4a:21:
3b:0d:28:55:9e:a0:70:25:f8:4b:ff:d7:78:51:9c:
7e:be:3c:af:ea:d0:54:68:ed:5d:47:f0:32:fd:31:
1b:31:ba:c9:46:cc:75:7e:31:7a:76:19:88:3d:18:
94:86:a9:71:57:43:39:a6:6f:fb:96:fe:94:c2:6d:
7f:9d:01:db:92:44:3f:00:a1:94:cf:cf:d9:9e:29:
72:86:ec:6a:51:af:3d:07:98:47:1a:c5:fe:7b:89:
12:3a:b7:2b:e2:b7:d8:77:bc:55:95:8c:64:ce:b6:
d7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:11:6A:ED:39:A5:B8:38:20:A2:64:52:7E:85:32:B2:A4:88:C0:99
X509v3 Authority Key Identifier:
keyid:90:F7:65:37:FF:74:58:93:E3:14:2F:A0:98:4F:44:9B:72:5B:8F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPdlN_90WJPjFC-gmE9Em3Jbj9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:c2:25:1d:aa:2b:71:e3:7d:7b:16:31:a8:de:2f:64:47:42:
60:07:91:c5:c9:66:ed:8a:a5:ca:58:ca:57:78:b9:a6:c8:ec:
bf:39:5f:1d:bf:1a:ad:ed:6a:ff:ef:58:f6:d6:48:bd:68:0b:
17:72:d5:75:27:c8:b7:d2:03:3f:b0:03:4f:cd:f9:d4:e9:9c:
ec:0f:a4:dc:b8:b7:05:57:6d:4a:53:e3:28:2d:db:39:1a:9a:
bd:48:19:b1:2c:f4:d2:db:17:75:7c:74:4f:9a:4e:fb:40:46:
95:df:27:f5:e4:d1:6e:ab:e1:10:39:94:53:42:e3:40:81:fe:
3b:29:ce:e3:42:29:a3:24:1f:be:65:23:14:ba:2b:a4:ac:78:
b7:84:bf:f6:63:d2:64:bd:b3:a6:e1:10:88:67:25:04:b2:99:
97:8c:40:6d:25:82:c2:e3:56:02:c2:e7:1c:48:7e:8f:f6:ea:
50:e7:52:97:c4:8a:c3:92:a3:14:1a:9c:a2:c2:e9:c2:35:bf:
6e:86:0f:23:71:58:6e:61:76:d9:ad:85:44:84:68:b7:a9:b4:
57:37:d3:3c:3d:c5:e9:38:b2:aa:78:3f:03:41:96:de:e1:48:
d5:2b:4d:0b:1b:e9:07:73:e3:93:3d:8c:38:22:3f:9e:ca:12:
52:6f:55:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzARwEGyc0BJbWt/jS9m/tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwZjc2NTM3ZmY3NDU4OTNlMzE0MmZhMDk4NGY0NDliNzI1
YjhmZDMwHhcNMjUxMTExMTMwMDQzWhcNMjUxMTEyMTMwMDQzWjAzMTEwLwYDVQQD
EyhlNzExNmFlZDM5YTViODM4MjBhMjY0NTI3ZTg1MzJiMmE0ODhjMDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGmV0A0KfXIHuMwBvAUyqChKHf8Y
pHJf+1DLGxgXfq3NyhrSFiTIPawM8uBI3Boj27hM17VVmQyQh2TiUwdzcWHPjeMI
BoEkq60o6IB+Po/VqHGwjJ5cG7A4qxhd898FeiDrFzf/6SntJonVkzlyCcKfzsCi
C9L2jcuwcmjnwYYQ8PaVe9KLl694+mNZ6nxzZcEXSiE7DShVnqBwJfhL/9d4UZx+
vjyv6tBUaO1dR/Ay/TEbMbrJRsx1fjF6dhmIPRiUhqlxV0M5pm/7lv6Uwm1/nQHb
kkQ/AKGUz8/ZnilyhuxqUa89B5hHGsX+e4kSOrcr4rfYd7xVlYxkzrbXZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOcRau05pbg4IKJkUn6FMrKkiMCZMB8GA1UdIwQY
MBaAFJD3ZTf/dFiT4xQvoJhPRJtyW4/TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1BkbE5fOTBXSlBqRkMtZ21FOUVtM0piajlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi80Zjc2ODAtODFhYi00YzFmLWEwN2It
N2M2MmQ1YzMxNWJmLzEva1BkbE5fOTBXSlBqRkMtZ21FOUVtM0piajlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi80Zjc2ODAtODFhYi00YzFmLWEwN2ItN2M2MmQ1YzMxNWJm
LzEva1BkbE5fOTBXSlBqRkMtZ21FOUVtM0piajlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm8IlHaor
ceN9exYxqN4vZEdCYAeRxclm7YqlyljKV3i5psjsvzlfHb8are1q/+9Y9tZIvWgL
F3LVdSfIt9IDP7ADT8351Omc7A+k3Li3BVdtSlPjKC3bORqavUgZsSz00tsXdXx0
T5pO+0BGld8n9eTRbqvhEDmUU0LjQIH+OynO40IpoyQfvmUjFLorpKx4t4S/9mPS
ZL2zpuEQiGclBLKZl4xAbSWCwuNWAsLnHEh+j/bqUOdSl8SKw5KjFBqcosLpwjW/
boYPI3FYbmF22a2FRIRot6m0VzfTPD3F6Tiyqng/A0GW3uFI1StNCxvpB3Pjkz2M
OCI/nsoSUm9V2A==
-----END CERTIFICATE-----
Generated at Tue Nov 11 16:51:41 2025 by rpki-client