Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
File: 9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft (raw, json)
Hash identifier: 9RRwbLPOYcR9x48JIVsFPauRWvEOULoSk288WHSJ5rU=
Subject key identifier: FF:B0:08:AB:7F:A5:26:F9:B3:6B:1E:D6:96:C6:29:85:B9:39:62:66
Authority key identifier: F4:E1:55:54:8E:C9:AB:E1:1E:F3:BE:70:60:6A:4B:98:7E:AE:38:25
Certificate issuer: /CN=f4e155548ec9abe11ef3be70606a4b987eae3825
Certificate serial: 0199FE476B6E9CA9499A6643F6A370E88A39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
Manifest number: 0936
Signing time: Sun 19 Oct 2025 21:01:57 +0000
Manifest this update: Sun 19 Oct 2025 21:01:57 +0000
Manifest next update: Mon 20 Oct 2025 21:01:57 +0000
Files and hashes: 1: 9-Ze941yMvb9PBtIsJ7Ycnpenh0.roa (hash: mLUd+UrxmldwwslKwjDeIf5bagEinj/YnRBNdn1A2Vk=)
2: 9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl (hash: +OaxzpoIs1KN3VgdMs0xWlmeFg4oLJSJhhBLxDeEQSU=)
3: dBTi9V6Lj09iolupOZhzala-GHE.roa (hash: XgE5C6MotJsfB/9tY52qQR/CvntbYT/9aocAmt0KwNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:6b:6e:9c:a9:49:9a:66:43:f6:a3:70:e8:8a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e155548ec9abe11ef3be70606a4b987eae3825
Validity
Not Before: Oct 19 21:01:57 2025 GMT
Not After : Oct 20 21:01:57 2025 GMT
Subject: CN=ffb008ab7fa526f9b36b1ed696c62985b9396266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d6:f3:c0:04:bc:61:c2:da:8d:28:fc:1c:92:
36:cc:5e:bb:a2:db:85:ed:3d:5f:b0:cf:14:13:cf:
9b:cd:a2:e5:43:53:3d:c4:98:20:4c:8e:d6:3f:2c:
b4:ca:46:b4:18:1d:54:c4:5e:1d:f6:88:81:3f:41:
09:5a:62:8c:c0:6e:05:25:07:92:56:3f:6d:e2:43:
e2:dc:96:a0:75:4d:28:fa:14:52:cb:8f:a3:e9:a5:
6c:a2:5e:41:ff:16:b8:98:db:0e:52:01:e9:aa:eb:
43:14:1b:2e:5b:8e:b9:aa:0c:17:d0:8f:be:ed:df:
e0:66:d0:a1:2c:62:29:6e:cf:b6:a1:a3:38:17:97:
1d:11:77:77:90:e9:0f:ca:b4:d6:7d:63:41:13:df:
3c:c5:8a:e1:e5:30:51:a0:14:53:f3:3f:55:10:56:
4e:68:9e:a7:89:34:09:81:71:56:98:47:00:8a:92:
67:18:f3:84:70:da:e9:da:d8:fb:44:b6:d8:d6:4d:
67:8a:f3:6b:4b:a8:26:46:1c:06:f6:8d:c7:d3:4b:
7e:ca:9c:a1:6f:3d:66:bc:34:c3:12:f4:db:ba:03:
7a:31:eb:66:fa:18:14:8c:9e:fd:5e:ee:17:0d:fb:
19:52:ca:66:ac:4b:5f:72:e7:b4:d7:60:3e:fb:ce:
8f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B0:08:AB:7F:A5:26:F9:B3:6B:1E:D6:96:C6:29:85:B9:39:62:66
X509v3 Authority Key Identifier:
keyid:F4:E1:55:54:8E:C9:AB:E1:1E:F3:BE:70:60:6A:4B:98:7E:AE:38:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:94:77:aa:43:1e:cd:b1:cb:1d:5f:85:f0:f9:88:5e:75:c2:
57:31:06:5a:47:92:7f:fb:70:aa:09:14:f5:6a:a7:70:c3:4e:
41:0a:86:fb:0e:57:46:9e:7c:b4:d1:8d:dd:6e:4b:b9:bd:e7:
26:21:fd:db:a6:da:59:df:75:a1:4a:95:ad:5d:9d:a4:07:67:
eb:a9:6e:15:63:28:2e:6c:bc:29:55:b6:62:7d:bf:d2:fc:d6:
ef:bb:62:b3:12:91:55:15:2f:2f:e1:a2:2a:39:6d:bd:08:04:
74:bf:c0:74:1b:6f:92:16:ca:66:7e:60:16:52:5b:4b:de:19:
c8:c5:ff:33:b7:a4:38:8b:80:00:b2:29:e1:a3:ee:4e:c1:8e:
96:5a:df:b9:b5:12:d2:13:f6:93:55:72:46:ce:d9:db:f9:20:
4d:71:f7:f6:77:00:38:47:27:19:ec:a8:53:e7:d7:7b:b5:3c:
e9:0d:e5:1f:d2:3c:a5:d2:b8:28:f7:c8:05:c5:26:6c:14:07:
72:e4:6a:4d:02:c4:16:77:a6:82:9c:49:52:f0:48:ed:b9:54:
d4:df:06:0f:e5:cf:98:73:ac:eb:2e:41:6e:c5:39:6d:71:f6:
88:51:22:0d:78:32:dd:ed:54:07:6c:3d:f6:41:e2:f1:7d:2c:
b6:77:6b:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+R2tunKlJmmZD9qNw6Io5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZTE1NTU0OGVjOWFiZTExZWYzYmU3MDYwNmE0Yjk4N2Vh
ZTM4MjUwHhcNMjUxMDE5MjEwMTU3WhcNMjUxMDIwMjEwMTU3WjAzMTEwLwYDVQQD
EyhmZmIwMDhhYjdmYTUyNmY5YjM2YjFlZDY5NmM2Mjk4NWI5Mzk2MjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNbzwAS8YcLajSj8HJI2zF67otuF
7T1fsM8UE8+bzaLlQ1M9xJggTI7WPyy0yka0GB1UxF4d9oiBP0EJWmKMwG4FJQeS
Vj9t4kPi3JagdU0o+hRSy4+j6aVsol5B/xa4mNsOUgHpqutDFBsuW465qgwX0I++
7d/gZtChLGIpbs+2oaM4F5cdEXd3kOkPyrTWfWNBE988xYrh5TBRoBRT8z9VEFZO
aJ6niTQJgXFWmEcAipJnGPOEcNrp2tj7RLbY1k1nivNrS6gmRhwG9o3H00t+ypyh
bz1mvDTDEvTbugN6Metm+hgUjJ79Xu4XDfsZUspmrEtfcue012A++86PRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+wCKt/pSb5s2se1pbGKYW5OWJmMB8GA1UdIwQY
MBaAFPThVVSOyavhHvO+cGBqS5h+rjglMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU9GVlZJN0pxLUVlODc1d1lHcExtSDZ1T0NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy80ZWRlOWQtY2RmOC00YzI4LTg4YjMt
YzlmMTZlODBiM2M0LzEvOU9GVlZJN0pxLUVlODc1d1lHcExtSDZ1T0NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy80ZWRlOWQtY2RmOC00YzI4LTg4YjMtYzlmMTZlODBiM2M0
LzEvOU9GVlZJN0pxLUVlODc1d1lHcExtSDZ1T0NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMJR3qkMe
zbHLHV+F8PmIXnXCVzEGWkeSf/twqgkU9WqncMNOQQqG+w5XRp58tNGN3W5Lub3n
JiH926baWd91oUqVrV2dpAdn66luFWMoLmy8KVW2Yn2/0vzW77tisxKRVRUvL+Gi
KjltvQgEdL/AdBtvkhbKZn5gFlJbS94ZyMX/M7ekOIuAALIp4aPuTsGOllrfubUS
0hP2k1VyRs7Z2/kgTXH39ncAOEcnGeyoU+fXe7U86Q3lH9I8pdK4KPfIBcUmbBQH
cuRqTQLEFnemgpxJUvBI7blU1N8GD+XPmHOs6y5BbsU5bXH2iFEiDXgy3e1UB2w9
9kHi8X0stndrWg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:18:45 2025 by rpki-client