
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
File: _3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft (raw, json)
Hash identifier: fN5emBVmL2UjLSas84KJCkFs6jqlNyXWG3AdpU+nWZg=
Subject key identifier: DE:2E:0D:F4:A9:26:BC:48:8F:3D:2F:91:B0:55:46:B5:ED:FA:12:E0
Authority key identifier: FF:72:76:C4:D8:CF:AF:C0:4C:26:F8:5F:B3:4F:D9:EC:E4:76:96:95
Certificate issuer: /CN=ff7276c4d8cfafc04c26f85fb34fd9ece4769695
Certificate serial: 0199FB7CB681DC7ABC49CEB33010B1CEDFDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 08:01:18 +0000
Manifest this update: Sun 19 Oct 2025 08:01:18 +0000
Manifest next update: Mon 20 Oct 2025 08:01:18 +0000
Files and hashes: 1: 6D6NbO4mpX3571YePb7wBqCbgBc.roa (hash: 360JpGFWi4fwKRE3FPgMGW/rJz0k3wsKNSQFnzGnVZI=)
2: _3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl (hash: MEbQufqASTlEeJ+sDTfBTzmdxZUNZKrE5z5Fyqn0Tbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:b6:81:dc:7a:bc:49:ce:b3:30:10:b1:ce:df:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff7276c4d8cfafc04c26f85fb34fd9ece4769695
Validity
Not Before: Oct 19 08:01:18 2025 GMT
Not After : Oct 20 08:01:18 2025 GMT
Subject: CN=de2e0df4a926bc488f3d2f91b05546b5edfa12e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7a:8e:a1:2a:c9:77:6f:c1:1c:f7:ec:67:8e:
f8:d4:24:50:2e:65:3b:87:fa:30:ba:a3:c6:87:c5:
f5:8f:1d:8c:96:4c:93:ae:31:cb:0e:75:b8:08:a0:
49:56:f0:b7:a4:7b:15:9d:8c:db:b8:05:b6:d8:3d:
71:2a:9b:a5:ee:c0:7f:66:cf:fb:2f:a6:7f:08:c0:
90:2a:11:57:09:4d:68:b7:fd:3b:28:0d:68:15:ac:
36:d7:f3:e8:6e:9a:fb:6e:54:86:de:6d:50:e3:dd:
4a:5f:59:a6:59:91:1d:68:f7:69:1c:a4:25:44:41:
aa:d6:ca:cf:76:0d:5a:7f:da:f8:8c:f5:b6:bb:62:
60:2b:e0:3f:79:e6:2d:c9:9e:7b:e9:29:35:3d:9a:
ac:e7:ad:da:95:8d:5b:c3:24:bb:21:6f:c7:cd:d7:
5d:48:38:a5:1a:9c:b2:a4:3c:79:5c:50:f8:c9:e2:
d1:35:56:31:9a:e2:50:bb:1a:b7:a6:bf:b8:8e:8c:
24:e5:56:27:cb:21:28:73:76:18:1d:85:b0:f8:03:
0e:45:9e:bf:a4:f1:cf:f0:0a:59:f5:84:93:5c:6a:
e6:9b:38:e9:97:3c:3a:36:e2:f0:c2:36:2f:59:b1:
d4:e1:24:bc:7b:09:00:1c:fb:43:31:14:ef:4d:8d:
aa:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:2E:0D:F4:A9:26:BC:48:8F:3D:2F:91:B0:55:46:B5:ED:FA:12:E0
X509v3 Authority Key Identifier:
keyid:FF:72:76:C4:D8:CF:AF:C0:4C:26:F8:5F:B3:4F:D9:EC:E4:76:96:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:be:7d:84:85:65:cd:ba:73:a9:0e:c9:71:cf:4e:64:8c:b6:
f0:68:75:be:64:cf:f6:92:9e:cb:af:e1:44:85:00:c8:95:7f:
a0:48:ed:8c:bf:54:f6:eb:bc:1b:6e:fd:f4:ab:b2:38:60:f4:
17:40:93:2b:d9:f5:6d:04:f8:07:67:aa:46:f3:39:05:d4:25:
b8:2e:a3:a1:6f:4e:40:9d:8d:6f:1d:37:49:2b:ab:e5:a0:87:
ff:c2:ad:c5:25:37:d5:0d:fd:a4:f0:e8:9d:26:05:59:73:5b:
73:6a:a1:cf:84:1c:6a:9c:6e:a2:a9:10:cc:71:ba:bc:c3:40:
69:2a:17:4a:71:1e:2b:03:14:a2:bf:2e:3f:aa:11:ee:6e:17:
2d:1a:c8:e7:a0:b0:bb:e2:8c:18:df:bb:dc:b8:ba:b4:a2:72:
03:d6:c1:ca:4a:44:c9:2d:3f:8b:6c:24:bf:31:bd:cb:25:48:
8c:a4:a1:82:20:c1:be:82:b9:1c:4c:9b:06:68:1f:fd:1a:e9:
ca:cd:76:c2:45:8c:74:b3:e2:f8:d5:9f:c2:63:1a:e9:58:ed:
af:25:2a:00:a4:60:4e:6e:9e:3e:77:6b:59:e8:83:5e:93:05:
b0:c8:ac:bf:2c:bf:f6:4a:c9:bc:fa:2b:30:0a:79:33:6c:a9:
11:68:a2:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:51 2025 by rpki-client