Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.mft
File: u2MubMSrZyETUbUpP4Fdfl8JOr0.mft (raw, json)
Hash identifier: 6yuek6WX3I+PrMCcI/jIqwpUGGDQOa7mYsuRLUTK34E=
Subject key identifier: 24:EF:59:72:73:69:D6:9D:27:10:B1:E1:6E:CC:D0:00:0A:86:CF:DD
Authority key identifier: BB:63:2E:6C:C4:AB:67:21:13:51:B5:29:3F:81:5D:7E:5F:09:3A:BD
Certificate issuer: /CN=bb632e6cc4ab67211351b5293f815d7e5f093abd
Certificate serial: 019A733892DA76861D3879EAECE85D8372BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u2MubMSrZyETUbUpP4Fdfl8JOr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.mft
Manifest number: 040E
Signing time: Tue 11 Nov 2025 14:01:18 +0000
Manifest this update: Tue 11 Nov 2025 14:01:18 +0000
Manifest next update: Wed 12 Nov 2025 14:01:18 +0000
Files and hashes: 1: u2MubMSrZyETUbUpP4Fdfl8JOr0.crl (hash: bbQaXSujbjQxAkPm/bvnmigbVB4CUpnc03+UfT8m3sI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u2MubMSrZyETUbUpP4Fdfl8JOr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:92:da:76:86:1d:38:79:ea:ec:e8:5d:83:72:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb632e6cc4ab67211351b5293f815d7e5f093abd
Validity
Not Before: Nov 11 14:01:18 2025 GMT
Not After : Nov 12 14:01:18 2025 GMT
Subject: CN=24ef59727369d69d2710b1e16eccd0000a86cfdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:40:d4:a0:b9:44:fa:b2:38:b1:cc:2e:23:cc:
be:18:e7:9b:34:f8:bc:d2:40:29:49:da:f8:3d:65:
dc:8a:51:f4:ad:85:f6:b0:fd:1b:23:27:47:ad:2d:
f7:3e:51:e4:48:78:1f:57:5f:82:09:56:03:e6:9b:
fa:56:3b:27:8d:71:70:a4:e9:b4:8e:42:6e:af:6e:
41:07:13:b9:ba:20:05:16:18:7b:b0:a5:80:4f:a0:
19:20:b1:cb:f8:a0:99:48:d2:59:35:44:1f:f3:7c:
66:1b:b2:b5:32:e8:29:9a:1c:aa:d3:0c:61:00:02:
6b:6b:fe:f4:d7:f2:1a:e5:e2:92:35:5a:b1:92:f2:
d8:09:51:60:cc:ea:9b:27:2c:49:48:e4:2d:14:1d:
fb:c3:69:05:27:7e:30:9b:a8:72:5a:a2:80:af:02:
0b:63:8e:04:df:3d:f3:d4:b6:dd:22:b1:e5:cd:50:
df:4d:a2:22:76:04:ac:cf:5e:70:35:05:9e:d8:4c:
fd:13:76:73:45:65:2b:2b:25:dd:5e:d2:76:a0:f8:
68:4f:57:c6:db:2c:2f:bc:f6:59:42:58:b7:06:af:
9a:fd:ff:51:69:b4:93:2e:f8:49:7b:c7:54:42:6b:
88:b5:a7:83:e3:f0:5e:51:0c:47:06:1b:15:83:e1:
6e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:EF:59:72:73:69:D6:9D:27:10:B1:E1:6E:CC:D0:00:0A:86:CF:DD
X509v3 Authority Key Identifier:
keyid:BB:63:2E:6C:C4:AB:67:21:13:51:B5:29:3F:81:5D:7E:5F:09:3A:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u2MubMSrZyETUbUpP4Fdfl8JOr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:cd:cd:01:df:e3:ab:84:35:e0:f5:5e:7e:a6:e7:02:e8:61:
fc:12:39:8b:03:37:f8:f5:f9:75:bf:f7:f2:77:45:02:69:9d:
46:35:e3:7c:ed:3f:54:37:b6:11:e7:b8:bf:bd:a4:dc:be:9a:
11:b4:00:05:d4:e6:a2:7b:06:9d:d3:79:91:21:d6:58:c7:eb:
c1:8f:fd:e7:1a:ca:7e:d1:62:42:ac:e2:17:66:cc:d2:22:b4:
b5:30:80:e2:92:5c:99:9a:77:bc:85:9c:5e:ca:d7:73:ab:52:
ec:4b:39:84:13:39:79:0b:f2:24:af:24:ba:96:09:7b:d3:67:
c9:ad:08:97:89:dd:5b:29:20:b5:04:9d:54:83:25:bf:4c:7b:
4d:e9:05:01:24:b7:22:0d:56:ae:51:cd:14:86:6d:06:2d:99:
5a:7d:66:c0:6a:7b:55:51:3c:fe:a0:f2:f5:f4:3d:94:b2:c1:
e2:e9:1f:90:c9:4c:fd:bb:f0:bf:a1:55:54:df:0b:a5:56:3c:
9b:1f:ac:c5:ea:da:d0:e3:1d:92:d2:47:00:86:99:a7:eb:fa:
aa:ec:5f:44:e8:59:db:f4:0a:3f:db:d7:8f:5f:11:29:e3:e1:
fd:fe:59:f9:2d:29:36:6c:30:a2:9c:fb:8a:53:d8:e3:12:6b:
81:5e:f1:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzOJLadoYdOHnq7Ohdg3K+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiNjMyZTZjYzRhYjY3MjExMzUxYjUyOTNmODE1ZDdlNWYw
OTNhYmQwHhcNMjUxMTExMTQwMTE4WhcNMjUxMTEyMTQwMTE4WjAzMTEwLwYDVQQD
EygyNGVmNTk3MjczNjlkNjlkMjcxMGIxZTE2ZWNjZDAwMDBhODZjZmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0DUoLlE+rI4scwuI8y+GOebNPi8
0kApSdr4PWXcilH0rYX2sP0bIydHrS33PlHkSHgfV1+CCVYD5pv6VjsnjXFwpOm0
jkJur25BBxO5uiAFFhh7sKWAT6AZILHL+KCZSNJZNUQf83xmG7K1Mugpmhyq0wxh
AAJra/701/Ia5eKSNVqxkvLYCVFgzOqbJyxJSOQtFB37w2kFJ34wm6hyWqKArwIL
Y44E3z3z1LbdIrHlzVDfTaIidgSsz15wNQWe2Ez9E3ZzRWUrKyXdXtJ2oPhoT1fG
2ywvvPZZQli3Bq+a/f9RabSTLvhJe8dUQmuItaeD4/BeUQxHBhsVg+Fu6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCTvWXJzadadJxCx4W7M0AAKhs/dMB8GA1UdIwQY
MBaAFLtjLmzEq2chE1G1KT+BXX5fCTq9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTJNdWJNU3JaeUVUVWJVcFA0RmRmbDhKT3IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iMTM4NGMtNGI1Yy00MmM3LWEzY2Qt
ZmI4YWQyZGIxZjIwLzEvdTJNdWJNU3JaeUVUVWJVcFA0RmRmbDhKT3IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9iMTM4NGMtNGI1Yy00MmM3LWEzY2QtZmI4YWQyZGIxZjIw
LzEvdTJNdWJNU3JaeUVUVWJVcFA0RmRmbDhKT3IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMc3NAd/j
q4Q14PVefqbnAuhh/BI5iwM3+PX5db/38ndFAmmdRjXjfO0/VDe2Eee4v72k3L6a
EbQABdTmonsGndN5kSHWWMfrwY/95xrKftFiQqziF2bM0iK0tTCA4pJcmZp3vIWc
XsrXc6tS7Es5hBM5eQvyJK8kupYJe9Nnya0Il4ndWykgtQSdVIMlv0x7TekFASS3
Ig1WrlHNFIZtBi2ZWn1mwGp7VVE8/qDy9fQ9lLLB4ukfkMlM/bvwv6FVVN8LpVY8
mx+sxera0OMdktJHAIaZp+v6quxfROhZ2/QKP9vXj18RKePh/f5Z+S0pNmwwopz7
ilPY4xJrgV7x/Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:23:58 2025 by rpki-client