Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
File: n9aPGyQUI9qXZHuZIkUwOG0laYw.mft (raw, json)
Hash identifier: Exow3H7AmJNZfn4VVjwuIs+yxTgZPyMwIUBCf0dJvqA=
Subject key identifier: 9A:5B:3E:F8:3A:1A:66:90:92:E9:2E:06:26:22:26:D5:52:5D:F7:C9
Authority key identifier: 9F:D6:8F:1B:24:14:23:DA:97:64:7B:99:22:45:30:38:6D:25:69:8C
Certificate issuer: /CN=9fd68f1b241423da97647b99224530386d25698c
Certificate serial: 0199FB0EE12B570F6683F5341E22A1C75D1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n9aPGyQUI9qXZHuZIkUwOG0laYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 06:01:20 +0000
Manifest this update: Sun 19 Oct 2025 06:01:20 +0000
Manifest next update: Mon 20 Oct 2025 06:01:20 +0000
Files and hashes: 1: 6zp8k7ws-z1aCcsmWGLYmfVsv4E.roa (hash: bUIQEUVAIaujbjPg7okGrEKCeQdfL4efouwX9EGneXc=)
2: n9aPGyQUI9qXZHuZIkUwOG0laYw.crl (hash: 23+Zv5Z/9uADZkmCdLFUDQFW74W4bv/1dDupf6LoXRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/n9aPGyQUI9qXZHuZIkUwOG0laYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:e1:2b:57:0f:66:83:f5:34:1e:22:a1:c7:5d:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fd68f1b241423da97647b99224530386d25698c
Validity
Not Before: Oct 19 06:01:20 2025 GMT
Not After : Oct 20 06:01:20 2025 GMT
Subject: CN=9a5b3ef83a1a669092e92e06262226d5525df7c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cd:75:ec:12:a2:4f:78:64:e4:5a:3d:95:0e:
cd:f8:2a:83:c0:5a:e2:7d:3e:82:e2:a7:ac:3f:00:
d8:1c:34:98:75:b6:f6:d1:52:2a:57:9e:63:12:d8:
a1:04:b3:ed:0c:35:ad:dd:02:cc:fa:2c:81:b9:ff:
c8:a9:c3:6f:7e:14:6e:29:45:18:b3:0a:92:58:83:
0f:75:f1:f1:9f:bc:2f:83:74:a1:88:d0:d2:b7:40:
cf:d1:ec:71:61:e9:e6:ee:ba:61:70:94:5a:15:34:
84:bf:51:55:f8:2c:bd:bc:1b:87:43:89:a7:8c:75:
a5:28:fe:df:8d:50:ec:09:bb:ba:f9:95:2d:00:59:
b2:49:12:c9:c0:74:84:42:57:0e:ef:ef:1d:ef:a4:
94:ca:9c:a2:24:a8:73:96:db:71:63:46:9a:db:d5:
f7:89:f6:d5:f2:71:0c:0f:64:2f:c8:6d:b1:59:ec:
0f:1d:4a:de:2c:42:1c:bd:3e:e0:8f:27:96:2b:f9:
3d:28:e2:37:3c:ac:48:0d:95:ed:27:ed:fc:f6:f3:
68:bd:8e:5e:1e:40:43:a3:62:e2:84:55:f6:7e:9c:
17:47:ec:6a:b6:8c:44:8f:bb:b7:29:09:f2:e5:e9:
3c:1a:41:8b:9f:c3:5d:a2:be:7b:af:dc:a1:53:75:
cc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5B:3E:F8:3A:1A:66:90:92:E9:2E:06:26:22:26:D5:52:5D:F7:C9
X509v3 Authority Key Identifier:
keyid:9F:D6:8F:1B:24:14:23:DA:97:64:7B:99:22:45:30:38:6D:25:69:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9aPGyQUI9qXZHuZIkUwOG0laYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:bc:e1:97:4e:0f:e5:4f:3b:64:aa:1d:22:3d:7f:38:a1:ce:
bb:88:f7:48:59:25:78:a7:dc:c9:c2:7b:81:7f:f3:eb:db:07:
cb:61:df:39:05:33:ee:bf:55:f7:96:3e:5c:cf:10:05:29:fa:
71:f5:0e:81:d4:bb:b8:0a:aa:12:71:5f:ac:75:a0:90:7c:33:
09:62:c0:96:17:26:63:78:59:ca:6b:b3:26:fc:7b:32:7f:83:
3f:5a:da:99:8d:44:3a:e1:31:d0:eb:01:ca:9c:3b:67:cf:03:
62:a6:5e:3e:87:c2:ee:76:76:d7:04:9d:34:a6:4f:4c:33:70:
90:c0:69:cc:a5:95:5f:5f:1b:2f:aa:67:fa:6b:68:32:e4:be:
1b:38:e8:9b:1e:e7:04:a1:e3:bb:c0:0b:9b:21:91:27:92:f1:
a8:86:52:71:e5:bb:c2:0d:8f:51:a2:da:5f:44:c6:55:d6:4e:
db:67:40:0b:bc:9c:35:02:d4:6a:09:69:f9:d2:72:a6:99:4e:
b1:dd:d6:89:c5:06:fa:e5:08:60:a5:c2:bb:6a:b8:fe:ff:62:
8c:f9:fa:a8:7f:a1:f3:6c:f3:ad:e5:85:46:d1:1f:b9:da:6c:
a8:9a:87:b4:09:7a:81:2f:fd:c6:a0:72:ce:ae:4a:9e:90:8d:
fc:23:1e:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7DuErVw9mg/U0HiKhx10fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZDY4ZjFiMjQxNDIzZGE5NzY0N2I5OTIyNDUzMDM4NmQy
NTY5OGMwHhcNMjUxMDE5MDYwMTIwWhcNMjUxMDIwMDYwMTIwWjAzMTEwLwYDVQQD
Eyg5YTViM2VmODNhMWE2NjkwOTJlOTJlMDYyNjIyMjZkNTUyNWRmN2M5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxs117BKiT3hk5Fo9lQ7N+CqDwFri
fT6C4qesPwDYHDSYdbb20VIqV55jEtihBLPtDDWt3QLM+iyBuf/IqcNvfhRuKUUY
swqSWIMPdfHxn7wvg3ShiNDSt0DP0exxYenm7rphcJRaFTSEv1FV+Cy9vBuHQ4mn
jHWlKP7fjVDsCbu6+ZUtAFmySRLJwHSEQlcO7+8d76SUypyiJKhzlttxY0aa29X3
ifbV8nEMD2QvyG2xWewPHUreLEIcvT7gjyeWK/k9KOI3PKxIDZXtJ+389vNovY5e
HkBDo2LihFX2fpwXR+xqtoxEj7u3KQny5ek8GkGLn8Ndor57r9yhU3XMsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJpbPvg6GmaQkukuBiYiJtVSXffJMB8GA1UdIwQY
MBaAFJ/WjxskFCPal2R7mSJFMDhtJWmMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjlhUEd5UVVJOXFYWkh1WklrVXdPRzBsYVl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8zNWRlZTUtZDhkYi00OGUzLWI3YmIt
MDgxMGQxNmJjYzg3LzEvbjlhUEd5UVVJOXFYWkh1WklrVXdPRzBsYVl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8zNWRlZTUtZDhkYi00OGUzLWI3YmItMDgxMGQxNmJjYzg3
LzEvbjlhUEd5UVVJOXFYWkh1WklrVXdPRzBsYVl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkrzhl04P
5U87ZKodIj1/OKHOu4j3SFkleKfcycJ7gX/z69sHy2HfOQUz7r9V95Y+XM8QBSn6
cfUOgdS7uAqqEnFfrHWgkHwzCWLAlhcmY3hZymuzJvx7Mn+DP1ramY1EOuEx0OsB
ypw7Z88DYqZePofC7nZ21wSdNKZPTDNwkMBpzKWVX18bL6pn+mtoMuS+Gzjomx7n
BKHju8ALmyGRJ5LxqIZSceW7wg2PUaLaX0TGVdZO22dAC7ycNQLUaglp+dJypplO
sd3WicUG+uUIYKXCu2q4/v9ijPn6qH+h82zzreWFRtEfudpsqJqHtAl6gS/9xqBy
zq5KnpCN/CMefg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:05 2025 by rpki-client