Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/8da5e8-8544-49d9-a83f-8c91f96be625/1/9rkcLAjwDWdj0unmosRCETDz3b0.mft
File: 9rkcLAjwDWdj0unmosRCETDz3b0.mft (raw, json)
Hash identifier: VIdIY/AS4ltkO83aUYZdybh+1EiVZlHrJxgjpHQ17k0=
Subject key identifier: FA:96:E2:10:F1:F8:7E:24:F1:DE:E4:4F:91:9D:8F:23:FA:73:86:A8
Authority key identifier: F6:B9:1C:2C:08:F0:0D:67:63:D2:E9:E6:A2:C4:42:11:30:F3:DD:BD
Certificate issuer: /CN=f6b91c2c08f00d6763d2e9e6a2c4421130f3ddbd
Certificate serial: 0199FB45EEF3E21B4B8CEA9D09FCF58771A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rkcLAjwDWdj0unmosRCETDz3b0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/8da5e8-8544-49d9-a83f-8c91f96be625/1/9rkcLAjwDWdj0unmosRCETDz3b0.mft
Manifest number: 038F
Signing time: Sun 19 Oct 2025 07:01:28 +0000
Manifest this update: Sun 19 Oct 2025 07:01:28 +0000
Manifest next update: Mon 20 Oct 2025 07:01:28 +0000
Files and hashes: 1: 9rkcLAjwDWdj0unmosRCETDz3b0.crl (hash: sew2etPCRzMQh+KbG3yENBaR3w4MphZ0u0xzAewZ78Y=)
2: qWCmFtsXHG35E1fSvLwIlYexFOQ.roa (hash: DZEUcJBHB58OY/U7lPR8QQCuA+d6j3m8DCG3gbMXeLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/8da5e8-8544-49d9-a83f-8c91f96be625/1/9rkcLAjwDWdj0unmosRCETDz3b0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/8da5e8-8544-49d9-a83f-8c91f96be625/1/9rkcLAjwDWdj0unmosRCETDz3b0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9rkcLAjwDWdj0unmosRCETDz3b0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:ee:f3:e2:1b:4b:8c:ea:9d:09:fc:f5:87:71:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6b91c2c08f00d6763d2e9e6a2c4421130f3ddbd
Validity
Not Before: Oct 19 07:01:28 2025 GMT
Not After : Oct 20 07:01:28 2025 GMT
Subject: CN=fa96e210f1f87e24f1dee44f919d8f23fa7386a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e8:e5:90:32:c3:67:15:23:3b:90:c8:53:f0:
53:ef:6c:1a:e2:14:d3:42:41:b4:a4:61:6e:6d:15:
49:fc:a7:f2:76:5a:62:8b:e9:cd:85:1f:3b:cc:f3:
ec:42:64:2f:13:cf:6a:ea:6f:c8:00:26:16:61:4d:
03:89:e2:cd:10:80:41:a3:67:52:1b:d8:05:75:f9:
10:78:6b:dd:de:b5:40:7c:8c:9f:32:af:97:38:7c:
77:6e:2e:e6:44:4b:57:3f:0c:1c:96:4a:e9:3f:ef:
ac:fa:68:dc:6d:d1:53:90:32:f3:41:a8:c4:7b:bb:
5d:c6:df:57:89:68:0e:78:ca:28:c6:ea:5e:c6:2b:
c1:66:b5:df:c4:59:23:6f:9b:c2:44:5c:a8:9d:5e:
62:4d:be:7f:87:b0:51:82:72:1f:b5:18:ca:63:80:
a3:3e:ab:49:01:17:bd:58:4f:db:49:ce:8e:a0:7d:
9e:44:9c:83:00:d0:f6:e7:37:23:a6:24:4b:00:5c:
17:f5:8e:f2:d4:c8:c8:8c:58:2f:6b:3e:44:f5:9f:
88:28:fa:f9:f8:40:e0:1c:dd:62:fc:c4:0d:94:f1:
e1:5d:90:76:06:fa:cc:96:ce:f4:92:2e:33:cc:41:
f4:62:20:97:bb:a2:d9:5d:42:45:86:51:61:8d:7e:
45:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:96:E2:10:F1:F8:7E:24:F1:DE:E4:4F:91:9D:8F:23:FA:73:86:A8
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:2C:08:F0:0D:67:63:D2:E9:E6:A2:C4:42:11:30:F3:DD:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rkcLAjwDWdj0unmosRCETDz3b0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/8da5e8-8544-49d9-a83f-8c91f96be625/1/9rkcLAjwDWdj0unmosRCETDz3b0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/8da5e8-8544-49d9-a83f-8c91f96be625/1/9rkcLAjwDWdj0unmosRCETDz3b0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:f8:2d:8a:a3:70:dd:f6:1b:7e:ce:c8:f5:dd:77:80:50:70:
98:54:23:a6:c1:c0:f1:17:d0:85:35:ee:e8:3b:14:73:7f:28:
f9:22:65:16:a1:fc:0d:c2:ac:35:72:2b:fa:e9:96:55:27:ae:
b6:c6:64:28:f1:83:74:0d:68:c4:86:43:1a:71:4d:a8:c9:f2:
c7:3f:27:03:19:de:47:78:cc:63:fb:e4:9b:bb:fa:ce:17:a7:
db:de:3b:85:ed:8b:ee:59:e3:a5:81:33:3f:84:2d:6a:fd:ac:
ff:4e:59:7d:06:bf:3b:3e:90:dc:fb:ad:ef:b2:0f:0a:f6:d1:
ec:f5:46:2a:8c:27:8c:6d:b4:28:dd:58:b8:d9:5d:31:54:5d:
fd:4c:d7:6c:ed:97:4a:1e:18:21:64:b5:9e:c2:29:e1:7b:cd:
8b:c3:55:5c:4a:26:d9:16:d5:6a:aa:dd:44:6c:5b:0d:3b:31:
b9:bf:02:14:09:4b:66:f0:e4:f6:20:72:57:3a:56:3a:81:f3:
aa:32:fe:2e:69:b7:82:da:fc:f5:9c:3e:7f:d0:d8:7b:f5:a9:
a7:17:d5:cb:4f:ee:89:90:e0:bd:17:d1:c9:c9:ee:15:d9:9d:
07:de:85:39:32:fe:4e:7f:95:c1:75:91:44:db:d3:a7:91:4c:
2b:8b:75:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7Re7z4htLjOqdCfz1h3GoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2YjkxYzJjMDhmMDBkNjc2M2QyZTllNmEyYzQ0MjExMzBm
M2RkYmQwHhcNMjUxMDE5MDcwMTI4WhcNMjUxMDIwMDcwMTI4WjAzMTEwLwYDVQQD
EyhmYTk2ZTIxMGYxZjg3ZTI0ZjFkZWU0NGY5MTlkOGYyM2ZhNzM4NmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+jlkDLDZxUjO5DIU/BT72wa4hTT
QkG0pGFubRVJ/Kfydlpii+nNhR87zPPsQmQvE89q6m/IACYWYU0DieLNEIBBo2dS
G9gFdfkQeGvd3rVAfIyfMq+XOHx3bi7mREtXPwwclkrpP++s+mjcbdFTkDLzQajE
e7tdxt9XiWgOeMooxupexivBZrXfxFkjb5vCRFyonV5iTb5/h7BRgnIftRjKY4Cj
PqtJARe9WE/bSc6OoH2eRJyDAND25zcjpiRLAFwX9Y7y1MjIjFgvaz5E9Z+IKPr5
+EDgHN1i/MQNlPHhXZB2BvrMls70ki4zzEH0YiCXu6LZXUJFhlFhjX5FvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPqW4hDx+H4k8d7kT5GdjyP6c4aoMB8GA1UdIwQY
MBaAFPa5HCwI8A1nY9Lp5qLEQhEw8929MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXJrY0xBandEV2RqMHVubW9zUkNFVER6M2IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS84ZGE1ZTgtODU0NC00OWQ5LWE4M2Yt
OGM5MWY5NmJlNjI1LzEvOXJrY0xBandEV2RqMHVubW9zUkNFVER6M2IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS84ZGE1ZTgtODU0NC00OWQ5LWE4M2YtOGM5MWY5NmJlNjI1
LzEvOXJrY0xBandEV2RqMHVubW9zUkNFVER6M2IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyvgtiqNw
3fYbfs7I9d13gFBwmFQjpsHA8RfQhTXu6DsUc38o+SJlFqH8DcKsNXIr+umWVSeu
tsZkKPGDdA1oxIZDGnFNqMnyxz8nAxneR3jMY/vkm7v6zhen2947he2L7lnjpYEz
P4Qtav2s/05ZfQa/Oz6Q3Put77IPCvbR7PVGKownjG20KN1YuNldMVRd/UzXbO2X
Sh4YIWS1nsIp4XvNi8NVXEom2RbVaqrdRGxbDTsxub8CFAlLZvDk9iByVzpWOoHz
qjL+Lmm3gtr89Zw+f9DYe/WppxfVy0/uiZDgvRfRycnuFdmdB96FOTL+Tn+VwXWR
RNvTp5FMK4t1oA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:18 2025 by rpki-client