Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/581e68-4d45-40eb-89d9-8816fba8be12/1/PqmfAAAL7rnxsoVLpQ7HuIEm26k.mft
File: PqmfAAAL7rnxsoVLpQ7HuIEm26k.mft (raw, json)
Hash identifier: GvHB6PBW70DuulqN/y+3Ve8ZZJ73D3RO6OiWksSPvZo=
Subject key identifier: C4:0C:ED:C5:6A:C8:DD:D5:1C:5B:0C:52:1D:F4:C7:AA:EA:CE:C7:34
Authority key identifier: 3E:A9:9F:00:00:0B:EE:B9:F1:B2:85:4B:A5:0E:C7:B8:81:26:DB:A9
Certificate issuer: /CN=3ea99f00000beeb9f1b2854ba50ec7b88126dba9
Certificate serial: 0199FBEA93C0AA0690B65D872089F9677E4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqmfAAAL7rnxsoVLpQ7HuIEm26k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/581e68-4d45-40eb-89d9-8816fba8be12/1/PqmfAAAL7rnxsoVLpQ7HuIEm26k.mft
Manifest number: 0875
Signing time: Sun 19 Oct 2025 10:01:18 +0000
Manifest this update: Sun 19 Oct 2025 10:01:18 +0000
Manifest next update: Mon 20 Oct 2025 10:01:18 +0000
Files and hashes: 1: FNcoFmyMsrmKFW3pVuTLoiKb9Y0.roa (hash: L2M1ZIYqNE7da9VzHmMG0LiaV1K9e8NQgXmk4Xn6knE=)
2: PqmfAAAL7rnxsoVLpQ7HuIEm26k.crl (hash: +fA0HFOMaaRb5HT6neGAlJaVnRGwH0HFeS8+oZrGXQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/581e68-4d45-40eb-89d9-8816fba8be12/1/PqmfAAAL7rnxsoVLpQ7HuIEm26k.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/581e68-4d45-40eb-89d9-8816fba8be12/1/PqmfAAAL7rnxsoVLpQ7HuIEm26k.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqmfAAAL7rnxsoVLpQ7HuIEm26k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:93:c0:aa:06:90:b6:5d:87:20:89:f9:67:7e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea99f00000beeb9f1b2854ba50ec7b88126dba9
Validity
Not Before: Oct 19 10:01:18 2025 GMT
Not After : Oct 20 10:01:18 2025 GMT
Subject: CN=c40cedc56ac8ddd51c5b0c521df4c7aaeacec734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:91:6f:66:51:ea:19:78:bc:a1:a4:11:8b:55:
de:67:1b:62:a1:dc:ab:8a:a7:3b:93:2e:de:df:ab:
20:c6:43:95:95:71:e8:a1:92:44:8f:23:ca:d9:bb:
2c:90:c3:d3:91:3b:85:9d:12:03:af:46:6e:26:87:
f4:05:5a:54:a7:d4:36:3a:c0:70:ca:74:f8:90:bd:
a8:6b:f2:05:5d:e7:e1:41:d9:46:d2:85:10:aa:37:
bf:39:e8:16:31:25:29:68:1e:2e:0e:83:4e:4e:3d:
65:62:61:e3:f5:31:c9:3d:58:0f:a1:6b:96:c4:2d:
b3:f7:89:64:74:e8:ab:65:04:f9:a4:83:3e:61:7d:
d3:b3:75:f8:f8:12:0d:06:8a:a5:d7:23:48:ec:1d:
0b:3a:28:60:c2:b5:d9:68:30:4a:b2:0c:e4:c5:5d:
87:16:fb:9d:6b:9d:28:2c:c5:61:e7:fc:77:d8:5b:
4f:8d:35:8f:50:db:60:de:47:7b:9b:84:db:a8:66:
71:ce:58:3a:34:c9:94:f2:e9:e1:e0:d1:9f:4d:89:
86:d1:00:35:81:a3:76:b7:c5:64:26:b5:68:de:90:
2e:b0:01:56:f8:4c:dc:63:c3:5b:f7:94:31:96:e6:
42:fd:a3:7b:a7:84:e3:3e:5f:39:7e:1f:35:fe:cd:
ca:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:0C:ED:C5:6A:C8:DD:D5:1C:5B:0C:52:1D:F4:C7:AA:EA:CE:C7:34
X509v3 Authority Key Identifier:
keyid:3E:A9:9F:00:00:0B:EE:B9:F1:B2:85:4B:A5:0E:C7:B8:81:26:DB:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqmfAAAL7rnxsoVLpQ7HuIEm26k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/581e68-4d45-40eb-89d9-8816fba8be12/1/PqmfAAAL7rnxsoVLpQ7HuIEm26k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/581e68-4d45-40eb-89d9-8816fba8be12/1/PqmfAAAL7rnxsoVLpQ7HuIEm26k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:a5:68:9c:f0:6b:4c:72:b3:19:ab:72:a8:5f:14:15:7f:5e:
e6:0b:69:32:9f:db:f8:9c:e8:b4:b7:80:53:18:fa:0c:12:75:
f4:11:dd:cc:82:3f:0d:4c:3a:0b:4a:02:64:56:8d:c7:f8:6a:
b9:4b:92:3b:55:0c:93:66:ab:eb:c2:29:43:cd:ed:37:7d:9c:
da:45:d6:d1:0a:a4:48:22:0e:60:9c:33:00:18:11:f8:85:31:
1b:69:19:49:8a:f4:2f:76:c3:47:88:2c:bf:92:3c:6d:14:4d:
28:99:a6:4a:7e:a0:bb:39:e7:f6:be:ee:9e:5e:12:53:8a:90:
c9:f2:f8:4d:07:bb:b1:81:35:57:82:25:da:bb:7f:24:24:65:
d5:e0:92:a3:b0:e5:fc:9e:d9:55:27:62:ad:61:30:5c:8f:d7:
66:9f:35:5f:b7:e4:99:9f:91:43:5d:29:e2:72:d9:cc:56:97:
a7:cc:85:58:cb:50:52:77:89:ff:e1:79:85:66:9e:6e:b2:2f:
1b:75:bd:c9:bf:ec:de:d1:dc:3c:f9:ff:ad:66:4f:53:c9:bc:
98:86:1c:a4:ce:0c:b7:90:88:26:cc:01:00:71:f0:7f:6c:6b:
1e:96:36:25:9c:d0:94:22:80:83:dc:ab:58:60:48:00:b9:a5:
77:81:75:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:40 2025 by rpki-client