Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
File: c_9LHL6vndddO17z7pp11XmfcoA.mft (raw, json)
Hash identifier: D3saaesObL/TFlnKk5X7l8pVV8AJX5RaLk/ggHuWpYM=
Subject key identifier: 01:AD:E8:D1:2D:B5:B6:F5:1C:40:A1:8B:CB:27:C3:BB:47:84:0E:27
Authority key identifier: 73:FF:4B:1C:BE:AF:9D:D7:5D:3B:5E:F3:EE:9A:75:D5:79:9F:72:80
Certificate issuer: /CN=73ff4b1cbeaf9dd75d3b5ef3ee9a75d5799f7280
Certificate serial: 0199FFC7A2E74636E1D14C1A8D55359481EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
Manifest number: 0B26
Signing time: Mon 20 Oct 2025 04:01:37 +0000
Manifest this update: Mon 20 Oct 2025 04:01:37 +0000
Manifest next update: Tue 21 Oct 2025 04:01:37 +0000
Files and hashes: 1: ag-XVm500Ink_y9Z543W0cYT2e4.roa (hash: LTklb1ptuKPn0530SuHC20oeHYTlb0YVhREmYDi0qn8=)
2: c_9LHL6vndddO17z7pp11XmfcoA.crl (hash: 87aujArLI4UanwTdUJ34+XewrsudogGsv2QezwXrUGk=)
3: xqtuxbgfgKOQAXDLHhW5kYSASLM.roa (hash: Akx0xbIbgUFrWIKc+N3GbCju1aCG4ckavEzXznoEvO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:a2:e7:46:36:e1:d1:4c:1a:8d:55:35:94:81:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73ff4b1cbeaf9dd75d3b5ef3ee9a75d5799f7280
Validity
Not Before: Oct 20 04:01:37 2025 GMT
Not After : Oct 21 04:01:37 2025 GMT
Subject: CN=01ade8d12db5b6f51c40a18bcb27c3bb47840e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fd:f6:1b:ac:c0:81:c9:b2:ea:e2:0b:4c:e0:
a1:d1:ef:bc:50:7e:21:47:6d:b1:6e:fb:75:62:69:
3d:c9:5b:de:ef:cb:e0:aa:91:9c:02:27:d8:4f:6c:
5a:ef:c8:d0:b4:13:57:57:41:5a:50:46:28:4e:e8:
25:27:58:6c:0b:7a:bc:10:83:71:c3:9d:ae:4b:69:
6d:35:88:4b:cb:e0:9f:a7:33:bf:90:2a:48:c8:a4:
d0:b1:1f:13:4a:df:92:c9:59:aa:0a:da:bf:9f:1b:
88:7c:f1:3a:b3:e1:b5:93:e8:b8:cd:28:aa:30:82:
8f:23:de:aa:7e:95:60:fa:9e:ed:e3:54:16:5d:4f:
8a:81:39:a7:10:94:3f:e9:6a:77:05:f2:15:39:5b:
dc:62:e3:e3:2f:cb:41:20:e7:3c:bd:31:19:56:1c:
8a:f3:d8:ce:05:9a:68:8a:b3:9d:c8:4a:ba:46:d5:
3a:b7:92:8f:4e:0d:cc:0e:ce:33:6e:1b:df:85:b7:
29:37:b5:a4:ea:d5:3b:97:22:12:3c:66:62:29:86:
86:8f:9a:67:2f:a3:96:d5:26:67:b0:67:ef:89:5d:
91:3b:a0:87:0a:59:27:b4:a7:e8:7c:8e:66:5b:e0:
c0:bf:c3:cb:f1:fa:08:44:dc:59:af:3a:b3:f8:82:
73:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:AD:E8:D1:2D:B5:B6:F5:1C:40:A1:8B:CB:27:C3:BB:47:84:0E:27
X509v3 Authority Key Identifier:
keyid:73:FF:4B:1C:BE:AF:9D:D7:5D:3B:5E:F3:EE:9A:75:D5:79:9F:72:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:64:47:7e:25:e5:37:44:cd:10:37:0c:63:3a:8f:b3:48:8a:
d2:95:17:f1:fa:29:d8:80:a0:18:48:49:b3:ef:c2:dc:4e:18:
02:ca:36:6e:b1:70:e6:f3:3f:40:75:dd:e6:ef:4d:e0:45:57:
af:16:0d:fd:be:76:b5:ca:48:69:b7:eb:06:f2:a1:b8:68:03:
6f:1e:f8:bc:20:ee:2c:9a:d6:6f:c0:6f:c7:6b:e4:44:3d:c5:
61:d9:c5:b9:d5:f9:a6:d2:29:49:a7:2c:b4:24:33:9f:39:5a:
8f:ee:32:7a:0f:37:65:5e:f2:a7:40:af:93:59:0d:97:03:fc:
37:63:95:9e:40:09:5a:42:e7:81:7d:7b:dd:93:9b:73:6e:ad:
65:5c:2d:52:8c:ed:9f:78:8c:d1:3a:41:f2:ba:65:53:48:ca:
bc:31:07:ee:01:e0:9c:3d:ba:95:61:e0:91:a2:4a:07:ce:c6:
da:a1:03:41:17:d6:8e:fc:e5:b8:9c:a2:77:b5:f2:bf:4d:b8:
c1:da:e6:31:2e:b8:0d:a6:5e:8e:ac:22:78:de:8e:68:05:73:
af:1a:85:82:2f:6b:45:0b:bf:0f:57:81:24:fd:55:83:b8:47:
fc:c1:c7:1b:9f:4b:30:7e:f6:32:d4:50:71:58:c5:8c:1c:75:
9f:3c:f9:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/x6LnRjbh0UwajVU1lIHuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczZmY0YjFjYmVhZjlkZDc1ZDNiNWVmM2VlOWE3NWQ1Nzk5
ZjcyODAwHhcNMjUxMDIwMDQwMTM3WhcNMjUxMDIxMDQwMTM3WjAzMTEwLwYDVQQD
EygwMWFkZThkMTJkYjViNmY1MWM0MGExOGJjYjI3YzNiYjQ3ODQwZTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/32G6zAgcmy6uILTOCh0e+8UH4h
R22xbvt1Ymk9yVve78vgqpGcAifYT2xa78jQtBNXV0FaUEYoTuglJ1hsC3q8EINx
w52uS2ltNYhLy+CfpzO/kCpIyKTQsR8TSt+SyVmqCtq/nxuIfPE6s+G1k+i4zSiq
MIKPI96qfpVg+p7t41QWXU+KgTmnEJQ/6Wp3BfIVOVvcYuPjL8tBIOc8vTEZVhyK
89jOBZpoirOdyEq6RtU6t5KPTg3MDs4zbhvfhbcpN7Wk6tU7lyISPGZiKYaGj5pn
L6OW1SZnsGfviV2RO6CHClkntKfofI5mW+DAv8PL8foIRNxZrzqz+IJzCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAGt6NEttbb1HEChi8snw7tHhA4nMB8GA1UdIwQY
MBaAFHP/Sxy+r53XXTte8+6addV5n3KAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY185TEhMNnZuZGRkTzE3ejdwcDExWG1mY29BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yNmY0NGEtYWU1My00NzI3LTkwNzUt
NDM3YTM0NmIyMmY3LzEvY185TEhMNnZuZGRkTzE3ejdwcDExWG1mY29BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8yNmY0NGEtYWU1My00NzI3LTkwNzUtNDM3YTM0NmIyMmY3
LzEvY185TEhMNnZuZGRkTzE3ejdwcDExWG1mY29BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV2RHfiXl
N0TNEDcMYzqPs0iK0pUX8fop2ICgGEhJs+/C3E4YAso2brFw5vM/QHXd5u9N4EVX
rxYN/b52tcpIabfrBvKhuGgDbx74vCDuLJrWb8Bvx2vkRD3FYdnFudX5ptIpSacs
tCQznzlaj+4yeg83ZV7yp0Cvk1kNlwP8N2OVnkAJWkLngX173ZObc26tZVwtUozt
n3iM0TpB8rplU0jKvDEH7gHgnD26lWHgkaJKB87G2qEDQRfWjvzluJyid7Xyv024
wdrmMS64DaZejqwieN6OaAVzrxqFgi9rRQu/D1eBJP1Vg7hH/MHHG59LMH72MtRQ
cVjFjBx1nzz5kw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:45:01 2025 by rpki-client