
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.mft
File: nCy3-coO_XK-JYpKCTWIBjdLRmI.mft (raw, json)
Hash identifier: lSv++2+QvRRU9aEde0RCU100mrJVJwgLm1VdI1xF7YI=
Subject key identifier: 13:C1:2B:9B:1D:3A:37:ED:E4:EB:91:E0:AE:1E:52:9F:4F:46:A5:8C
Authority key identifier: 9C:2C:B7:F9:CA:0E:FD:72:BE:25:8A:4A:09:35:88:06:37:4B:46:62
Certificate issuer: /CN=9c2cb7f9ca0efd72be258a4a09358806374b4662
Certificate serial: 0199FF59B5450897499A22E8493198D9B188
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCy3-coO_XK-JYpKCTWIBjdLRmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.mft
Manifest number: 0D37
Signing time: Mon 20 Oct 2025 02:01:33 +0000
Manifest this update: Mon 20 Oct 2025 02:01:33 +0000
Manifest next update: Tue 21 Oct 2025 02:01:33 +0000
Files and hashes: 1: Dotq45i-CIL8miP4blqY3J6J13s.roa (hash: AeEyJtBFVLSGPDiSeedlZidCthzwYAlppOftvZd9mwo=)
2: nCy3-coO_XK-JYpKCTWIBjdLRmI.crl (hash: uq9ID9lqtQPgD9chM7llFfVsvTI18JK2XtILCfQimFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nCy3-coO_XK-JYpKCTWIBjdLRmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:b5:45:08:97:49:9a:22:e8:49:31:98:d9:b1:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c2cb7f9ca0efd72be258a4a09358806374b4662
Validity
Not Before: Oct 20 02:01:33 2025 GMT
Not After : Oct 21 02:01:33 2025 GMT
Subject: CN=13c12b9b1d3a37ede4eb91e0ae1e529f4f46a58c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:58:1b:65:2a:ee:a1:8f:cd:be:0d:ba:12:24:
84:24:d4:5f:a7:93:8a:2f:07:bc:56:19:c2:bb:d6:
b7:e3:23:e0:95:e3:aa:2e:d4:43:7f:2b:8d:a1:95:
51:c0:b0:47:79:1f:28:d7:0a:88:12:34:49:44:16:
33:a8:36:5d:f9:d1:ca:71:ca:28:28:8d:c0:10:6c:
15:3e:d9:d9:a4:ae:b6:48:d7:dd:44:9a:e2:b9:31:
6d:ad:59:43:5b:76:20:a9:73:3c:a0:40:69:db:97:
73:fd:29:fe:86:5a:bd:0a:f6:a0:64:4f:89:c8:c1:
be:94:a2:44:32:a6:2d:38:e6:95:f8:b5:64:f2:5e:
17:6f:04:1d:30:1b:3b:84:39:03:4b:a1:ec:00:e9:
d7:d9:20:57:67:ed:04:0f:d6:25:b9:48:a3:35:55:
e1:e0:04:b5:2a:cf:c9:7d:3b:46:26:19:4f:f7:ff:
c4:52:0d:c3:f4:cf:46:1d:b1:1d:2b:b0:e5:25:c5:
ee:2a:70:cc:4c:d5:cb:38:3c:a6:19:c3:7f:73:ee:
1b:4b:15:56:bc:eb:9c:01:56:32:39:f7:de:c2:c8:
58:02:a1:a4:dc:a0:de:bd:fe:24:5a:bc:ce:b3:a6:
a2:26:be:d3:cd:d7:66:c1:dc:cd:cd:02:bc:52:3f:
3b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C1:2B:9B:1D:3A:37:ED:E4:EB:91:E0:AE:1E:52:9F:4F:46:A5:8C
X509v3 Authority Key Identifier:
keyid:9C:2C:B7:F9:CA:0E:FD:72:BE:25:8A:4A:09:35:88:06:37:4B:46:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCy3-coO_XK-JYpKCTWIBjdLRmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:18:e9:9a:1c:99:14:63:19:fb:68:0d:40:e8:d6:83:c8:b3:
a5:7f:4d:f0:e9:23:07:d1:59:21:8e:cf:76:ff:af:e9:6b:5a:
ab:85:11:94:ab:4b:8a:09:b8:39:93:6d:a4:b4:66:fe:92:ce:
ec:36:80:8d:8f:01:22:39:38:2e:f6:a3:5f:44:e4:13:d8:f6:
34:fc:64:47:92:a3:05:14:14:cf:0c:f8:0c:49:14:c1:ae:db:
c3:4e:23:42:8d:cc:b4:a8:1a:de:bf:94:8e:8d:17:93:96:5c:
54:9c:47:3c:2f:0a:c8:70:d4:ba:e6:34:84:d6:ad:d6:1c:3c:
5f:41:83:5a:2b:25:47:5a:f9:db:0c:16:7d:5b:2d:f4:6a:b4:
d3:39:ae:6c:5b:8f:84:ef:4d:29:8c:a0:24:f9:a4:86:c4:6a:
9f:3f:37:8d:d5:9a:3f:db:4b:4b:ba:07:f5:88:73:4d:83:52:
75:89:15:3f:e1:1c:52:b1:eb:6d:77:9d:1d:5a:85:f9:25:b9:
15:bb:fd:ee:d4:bd:07:8f:47:f1:e2:43:4c:17:8f:37:fc:4a:
9d:79:95:3d:6a:2c:61:45:71:c9:1d:44:ed:01:5f:70:73:79:
99:51:ee:b6:80:75:54:ae:17:02:bb:88:04:f5:a2:af:72:3e:
b8:68:8a:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/WbVFCJdJmiLoSTGY2bGIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljMmNiN2Y5Y2EwZWZkNzJiZTI1OGE0YTA5MzU4ODA2Mzc0
YjQ2NjIwHhcNMjUxMDIwMDIwMTMzWhcNMjUxMDIxMDIwMTMzWjAzMTEwLwYDVQQD
EygxM2MxMmI5YjFkM2EzN2VkZTRlYjkxZTBhZTFlNTI5ZjRmNDZhNThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1gbZSruoY/Nvg26EiSEJNRfp5OK
Lwe8VhnCu9a34yPgleOqLtRDfyuNoZVRwLBHeR8o1wqIEjRJRBYzqDZd+dHKccoo
KI3AEGwVPtnZpK62SNfdRJriuTFtrVlDW3YgqXM8oEBp25dz/Sn+hlq9CvagZE+J
yMG+lKJEMqYtOOaV+LVk8l4XbwQdMBs7hDkDS6HsAOnX2SBXZ+0ED9YluUijNVXh
4AS1Ks/JfTtGJhlP9//EUg3D9M9GHbEdK7DlJcXuKnDMTNXLODymGcN/c+4bSxVW
vOucAVYyOffewshYAqGk3KDevf4kWrzOs6aiJr7TzddmwdzNzQK8Uj87lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBPBK5sdOjft5OuR4K4eUp9PRqWMMB8GA1UdIwQY
MBaAFJwst/nKDv1yviWKSgk1iAY3S0ZiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkN5My1jb09fWEstSllwS0NUV0lCamRMUm1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC84NmE0MjYtNTZlZS00NmRkLTk0MjUt
N2Y5MmMzNGViMDdjLzEvbkN5My1jb09fWEstSllwS0NUV0lCamRMUm1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC84NmE0MjYtNTZlZS00NmRkLTk0MjUtN2Y5MmMzNGViMDdj
LzEvbkN5My1jb09fWEstSllwS0NUV0lCamRMUm1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXhjpmhyZ
FGMZ+2gNQOjWg8izpX9N8OkjB9FZIY7Pdv+v6Wtaq4URlKtLigm4OZNtpLRm/pLO
7DaAjY8BIjk4LvajX0TkE9j2NPxkR5KjBRQUzwz4DEkUwa7bw04jQo3MtKga3r+U
jo0Xk5ZcVJxHPC8KyHDUuuY0hNat1hw8X0GDWislR1r52wwWfVst9Gq00zmubFuP
hO9NKYygJPmkhsRqnz83jdWaP9tLS7oH9YhzTYNSdYkVP+EcUrHrbXedHVqF+SW5
Fbv97tS9B49H8eJDTBePN/xKnXmVPWosYUVxyR1E7QFfcHN5mVHutoB1VK4XAruI
BPWir3I+uGiKrw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:58:32 2025 by rpki-client