Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft
File: nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft (raw, json)
Hash identifier: CGuMHoLAcSZDqZx2P1krgKTNJmLC8oOsR9jJ/BO1qjQ=
Subject key identifier: 54:12:46:BE:38:4A:A0:B0:B6:3C:9D:CE:09:92:07:00:14:E4:0F:23
Authority key identifier: 9D:9A:0C:84:B3:07:20:F4:D4:CE:4B:DB:A0:1D:D0:54:4D:02:8E:CD
Certificate issuer: /CN=9d9a0c84b30720f4d4ce4bdba01dd0544d028ecd
Certificate serial: 0199FC8F29870FC5A55850AF9B5E83B79D3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 13:01:04 +0000
Manifest this update: Sun 19 Oct 2025 13:01:04 +0000
Manifest next update: Mon 20 Oct 2025 13:01:04 +0000
Files and hashes: 1: 8vJ7ABj3xVyEwXenD9W0ncMrU1A.roa (hash: 5gnWjjNTmQRrWBLMz2vS6KZph20DEPN6rQfmfIVo1TE=)
2: 95tOWT20XUkoFBLGQGdVcwDGE0s.roa (hash: Qa6N16B2kLdBJuSQoLOln9hPwf+0/JSY++MAPTIofBc=)
3: D2QorAtAGpZ4DSilBt-gZlYU1WU.roa (hash: vpJGRRZzUNjxMRhoSrLA2Ov0y70mAO/SHEjk1etazfE=)
4: nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl (hash: pOXEu88VxljZlx8/thwgwZA1tthAotJYCbrkZiVhlBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:29:87:0f:c5:a5:58:50:af:9b:5e:83:b7:9d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d9a0c84b30720f4d4ce4bdba01dd0544d028ecd
Validity
Not Before: Oct 19 13:01:04 2025 GMT
Not After : Oct 20 13:01:04 2025 GMT
Subject: CN=541246be384aa0b0b63c9dce0992070014e40f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:93:68:9d:b0:1b:6a:f2:38:69:67:10:70:0c:
53:fe:b6:c8:b7:8b:b7:26:e4:a4:d0:5e:76:88:9c:
de:b1:05:a4:74:99:d2:cc:96:e3:ca:c9:09:2f:6e:
89:c8:34:d6:27:f6:6a:3b:9a:ba:8e:4e:f8:2a:62:
4b:59:6b:19:10:27:76:f3:66:3d:99:a6:4c:32:0a:
44:be:8e:4f:7a:13:b4:63:56:86:7a:58:05:5f:f9:
c6:97:ab:d6:02:ab:89:43:73:35:16:d5:19:5a:69:
8b:be:15:54:7c:b2:7d:83:da:fb:db:41:fb:48:27:
9e:0e:9a:0f:30:c0:ec:f0:c3:31:5b:62:6d:43:2b:
68:80:6a:20:f7:a9:d3:39:45:20:d4:60:37:c2:59:
05:f2:46:1b:33:6a:40:ae:0c:42:b1:16:83:ed:38:
8a:6b:23:21:71:2d:38:1c:a1:f3:a8:a9:31:ee:40:
42:87:31:ee:fa:20:13:9d:a5:3e:50:22:6c:ce:80:
14:70:31:0d:3d:1d:fe:5b:d5:f0:2f:c3:56:f5:2b:
9f:d6:ac:e8:ce:bf:97:f1:d4:4d:33:9c:92:49:75:
bc:d6:c4:d5:69:d9:d6:21:9a:e8:92:56:dd:c4:61:
aa:9e:41:4c:73:4e:8a:18:1e:c7:14:42:0c:f5:c8:
2e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:12:46:BE:38:4A:A0:B0:B6:3C:9D:CE:09:92:07:00:14:E4:0F:23
X509v3 Authority Key Identifier:
keyid:9D:9A:0C:84:B3:07:20:F4:D4:CE:4B:DB:A0:1D:D0:54:4D:02:8E:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:8a:19:02:17:b9:90:41:ba:ef:c5:8b:0f:b2:e9:55:6f:d5:
b9:2a:ac:f4:18:7a:59:c0:f7:c9:98:84:20:17:e5:2e:24:5e:
45:cd:da:dc:ef:93:8f:02:7a:3f:ef:1e:c2:48:d8:b7:75:a7:
be:80:3a:e5:f5:5a:d2:61:ea:a5:3c:fe:52:32:7d:85:37:20:
81:e7:de:60:9a:49:47:5c:3d:4c:9b:8c:0c:8a:12:e7:3b:a2:
cf:9c:8c:36:c6:df:d1:63:15:40:90:e6:2e:9d:3d:50:90:03:
0c:4c:26:b6:a1:06:94:7f:0e:71:f1:09:88:8d:30:26:e5:07:
3e:43:78:e1:6f:e8:e7:77:26:28:e7:ec:f2:e5:57:fd:5f:89:
31:5d:f6:56:35:d9:b3:a5:d0:cf:93:81:9d:69:48:eb:ef:91:
dc:90:50:a7:7a:c9:99:76:a2:ee:80:d9:98:b7:0d:33:7d:5c:
db:51:9d:7b:ef:8d:21:22:3e:73:8f:b0:64:47:22:60:f6:a2:
89:1f:e2:0e:b8:64:be:8c:96:98:93:66:e9:fe:1e:bc:97:47:
ff:49:6f:7e:75:a8:66:23:de:e9:1f:29:fa:94:a4:f7:bf:23:
e2:ad:0b:7e:8c:f0:13:9f:7a:eb:62:3f:d9:50:ce:28:14:b6:
ae:cb:5c:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8jymHD8WlWFCvm16Dt506MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkOWEwYzg0YjMwNzIwZjRkNGNlNGJkYmEwMWRkMDU0NGQw
MjhlY2QwHhcNMjUxMDE5MTMwMTA0WhcNMjUxMDIwMTMwMTA0WjAzMTEwLwYDVQQD
Eyg1NDEyNDZiZTM4NGFhMGIwYjYzYzlkY2UwOTkyMDcwMDE0ZTQwZjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZNonbAbavI4aWcQcAxT/rbIt4u3
JuSk0F52iJzesQWkdJnSzJbjyskJL26JyDTWJ/ZqO5q6jk74KmJLWWsZECd282Y9
maZMMgpEvo5PehO0Y1aGelgFX/nGl6vWAquJQ3M1FtUZWmmLvhVUfLJ9g9r720H7
SCeeDpoPMMDs8MMxW2JtQytogGog96nTOUUg1GA3wlkF8kYbM2pArgxCsRaD7TiK
ayMhcS04HKHzqKkx7kBChzHu+iATnaU+UCJszoAUcDENPR3+W9XwL8NW9Suf1qzo
zr+X8dRNM5ySSXW81sTVadnWIZroklbdxGGqnkFMc06KGB7HFEIM9cgunQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFQSRr44SqCwtjydzgmSBwAU5A8jMB8GA1UdIwQY
MBaAFJ2aDISzByD01M5L26Ad0FRNAo7NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblpvTWhMTUhJUFRVemt2Ym9CM1FWRTBDanMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8xZThkNGQtNTNiZi00YWNiLWJjMGMt
NTJjYWQ2Njc1ZmM2LzEvblpvTWhMTUhJUFRVemt2Ym9CM1FWRTBDanMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8xZThkNGQtNTNiZi00YWNiLWJjMGMtNTJjYWQ2Njc1ZmM2
LzEvblpvTWhMTUhJUFRVemt2Ym9CM1FWRTBDanMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM4oZAhe5
kEG678WLD7LpVW/VuSqs9Bh6WcD3yZiEIBflLiReRc3a3O+TjwJ6P+8ewkjYt3Wn
voA65fVa0mHqpTz+UjJ9hTcggefeYJpJR1w9TJuMDIoS5zuiz5yMNsbf0WMVQJDm
Lp09UJADDEwmtqEGlH8OcfEJiI0wJuUHPkN44W/o53cmKOfs8uVX/V+JMV32VjXZ
s6XQz5OBnWlI6++R3JBQp3rJmXai7oDZmLcNM31c21Gde++NISI+c4+wZEciYPai
iR/iDrhkvoyWmJNm6f4evJdH/0lvfnWoZiPe6R8p+pSk978j4q0LfozwE59662I/
2VDOKBS2rstczA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:31:52 2025 by rpki-client