
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft
File: m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft (raw, json)
Hash identifier: z+rNwv+BJuz9kcCYUC1+3pNj6x81n8X3zxM8hV4V4hs=
Subject key identifier: A3:84:DF:7C:00:74:0E:E6:FB:DD:64:7F:B8:47:0A:F1:27:D6:AF:5E
Authority key identifier: 9B:86:BD:88:2E:47:6E:46:98:31:8F:37:07:12:F7:1C:2B:F5:0D:FC
Certificate issuer: /CN=9b86bd882e476e4698318f370712f71c2bf50dfc
Certificate serial: 0199FBEB37FC0302202E62A8533CE82046F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4a9iC5HbkaYMY83BxL3HCv1Dfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft
Manifest number: 0B26
Signing time: Sun 19 Oct 2025 10:02:00 +0000
Manifest this update: Sun 19 Oct 2025 10:02:00 +0000
Manifest next update: Mon 20 Oct 2025 10:02:00 +0000
Files and hashes: 1: aOM8GgaoW1G7QCNU_L_vXRvAMEM.roa (hash: tukb95Gwd6x2BRzhLsZA0PSUEck+o+zvt8A2/7nuQh4=)
2: aeMnlDwxWIXe9I15QP1ZQEW4dL8.roa (hash: o539XDvH7v6Q1Bwgk0cJJENARzLE2fligJ+8v8cr/cU=)
3: m4a9iC5HbkaYMY83BxL3HCv1Dfw.crl (hash: XorBNJ7jhoStpD1CRoFVmuwQSyHaRAR3eX/MIJm+FNM=)
4: tI9ka3nY65XI0hS6cPovdv7yr60.roa (hash: +06LGDfkS/BJNhqCcOcJbY1vvOjfeeWWAoEc0fhS6DY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/m4a9iC5HbkaYMY83BxL3HCv1Dfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:37:fc:03:02:20:2e:62:a8:53:3c:e8:20:46:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b86bd882e476e4698318f370712f71c2bf50dfc
Validity
Not Before: Oct 19 10:02:00 2025 GMT
Not After : Oct 20 10:02:00 2025 GMT
Subject: CN=a384df7c00740ee6fbdd647fb8470af127d6af5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:58:5c:c4:ef:68:d5:54:8c:da:1d:32:27:e7:
ad:6f:95:f6:19:fe:f0:c8:0e:07:34:da:2e:fd:63:
1f:3d:8a:b4:45:53:95:66:92:04:32:b4:06:93:63:
bc:39:9b:8d:a2:e7:e3:ac:ae:f3:a5:b9:e0:20:f8:
72:68:22:90:c7:2e:a3:f0:81:2a:d8:ed:db:ec:56:
e6:f3:89:ec:49:29:10:67:79:54:20:79:69:18:c3:
21:23:1a:ab:20:06:e1:94:58:89:d7:a1:68:ce:35:
22:8b:84:6b:9f:e4:a9:89:73:64:5d:33:f9:89:8c:
31:2a:c1:cc:2e:2c:c3:a6:c4:63:de:19:b7:ac:2c:
b4:e7:ec:c2:62:9b:05:d4:8d:65:0d:e4:d8:cc:c9:
e6:d2:89:80:9d:10:69:56:87:d9:5f:db:50:d5:bf:
e9:b7:02:19:35:5d:25:f1:26:e2:5f:8f:46:22:97:
42:da:d7:80:b4:94:f6:68:a6:f2:5e:21:5a:c8:dd:
04:46:c6:30:08:ed:25:8a:c8:14:e9:e1:05:ab:09:
23:52:fb:5a:43:cc:47:cc:16:e9:ba:5b:fc:b8:c2:
15:82:9f:48:da:74:52:b3:30:07:4a:8e:0f:3e:a5:
43:a9:4a:ba:9a:20:f8:d0:81:7c:1b:06:40:5b:26:
a9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:84:DF:7C:00:74:0E:E6:FB:DD:64:7F:B8:47:0A:F1:27:D6:AF:5E
X509v3 Authority Key Identifier:
keyid:9B:86:BD:88:2E:47:6E:46:98:31:8F:37:07:12:F7:1C:2B:F5:0D:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4a9iC5HbkaYMY83BxL3HCv1Dfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:d3:de:86:fa:d3:d7:ad:d3:de:0c:0d:7b:34:40:6c:b5:0c:
9e:37:6a:1b:40:33:7b:f0:77:c1:c4:17:b3:86:e3:9e:f1:d7:
19:21:ea:76:a8:08:c8:d2:59:c6:c3:8f:12:b3:2f:97:0e:c4:
49:8b:35:d4:27:fd:12:4a:c4:aa:83:f4:62:7c:0b:b5:be:3a:
43:e0:78:4e:35:3c:26:3e:9f:ab:a3:2f:46:5a:77:87:82:a1:
d2:e9:2c:3b:23:24:af:cd:e6:e4:70:64:fc:83:1a:f1:50:67:
a8:5e:2e:fb:e4:f8:26:71:f4:de:19:e9:46:14:94:d8:75:01:
2e:c8:2e:70:91:cf:be:73:17:5b:a0:99:4d:51:a3:f6:1f:7a:
e9:96:1a:9e:70:1b:cb:92:86:dc:9a:56:b9:27:6f:10:ab:9c:
4e:36:ad:68:aa:4e:1f:da:16:56:03:af:51:67:00:cf:92:5e:
c8:ef:29:95:73:ea:b6:98:bd:55:67:54:e3:64:01:bb:12:77:
91:8a:3c:6f:56:c3:c0:42:7b:b2:3d:e0:55:39:c3:fd:0b:36:
79:97:26:60:8a:58:96:1a:c9:aa:cf:6d:a8:76:f0:be:d5:cc:
55:f1:67:2e:b9:2e:f8:8e:48:4a:f2:eb:fe:63:f6:9d:8c:09:
7b:7b:9b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:24 2025 by rpki-client