Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
File: ncKK6ZN_9-SexPEjTlPYud1pRUE.mft (raw, json)
Hash identifier: o3gkXIWTo9bfhVie2y2h5KbOOmmMztPNzLonOSG1Pqw=
Subject key identifier: A5:7A:8C:33:C2:EB:66:F9:23:1E:88:C3:DF:57:71:41:19:3A:B9:2B
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial: 0199FC586461D0DD5BDFF888561FBB58A792
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
Manifest number: 100C
Signing time: Sun 19 Oct 2025 12:01:15 +0000
Manifest this update: Sun 19 Oct 2025 12:01:15 +0000
Manifest next update: Mon 20 Oct 2025 12:01:15 +0000
Files and hashes: 1: 1-0vipuRl0AJvwZtEBk-maQes6Cg.roa (hash: DSWGxdza7oD2/3uUVZoXyDrmHTWT++tTuwdDtQTvs4k=)
2: Dp9S7DtPUM200gi6O6yBPEaasas.roa (hash: nHFRQ6xLBtePKwuFF9sGQ8KR62EZEyHkOj5R88bM4qI=)
3: F6eX9oz_j-ZT8QfPBURiHjJkBos.roa (hash: 9C2+49g0ve8uLFJHYFMwlwYj/+2J3SnLoalOE2MN4Mk=)
4: Hiu-YkREzGKKTtSRBgf6M5S0mUM.roa (hash: fxvguMnjN9xF6RFcgtEIfOjUPdwUBHDkuyyelgRCorQ=)
5: U4lJvipYbr4AZQbw3vQ4rpXfXN4.roa (hash: J4umHHc1mv/sPeURzjqZJEkjClmBGK0Hvn8O5Rexq5Y=)
6: YhZQFWzwDUGT-HjSfFHnpvcFMTY.roa (hash: /ssHfW4YZnp/Q+YD/IpItVTTmqCd5HemhWXsBRiqt1A=)
7: ZeYihmicLm5VKfWSSFIon1HTDC4.roa (hash: skxZCw+YKxKcl1188es30U08xjm3mZlLt8pygJEcJ10=)
8: jdKmvZ_WGiUDxDAHKJg_Wed6rVo.roa (hash: CRiOfMtNCT5H0OJU8c1YHET8V3YfGy03z8wKH951O6Y=)
9: ncKK6ZN_9-SexPEjTlPYud1pRUE.crl (hash: AezgiNpG4MM/bMM1F8gkSr0TWWc+lFOODKLZKYWgrQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:64:61:d0:dd:5b:df:f8:88:56:1f:bb:58:a7:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Validity
Not Before: Oct 19 12:01:15 2025 GMT
Not After : Oct 20 12:01:15 2025 GMT
Subject: CN=a57a8c33c2eb66f9231e88c3df577141193ab92b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0c:25:c7:3a:14:46:5d:a5:6a:1c:34:31:b9:
c6:10:aa:f7:7e:55:5a:27:b7:46:25:f1:22:5c:1c:
2f:be:ac:f5:f7:65:94:c5:fd:a0:5b:45:64:08:17:
14:c6:b0:91:03:18:45:2b:e8:48:89:6e:3a:5f:11:
6d:d3:5f:b4:ad:d2:5a:ec:5a:8a:ce:3d:ff:a5:58:
51:ba:9a:0d:40:72:c1:f4:fe:e8:85:ff:e4:90:03:
9f:38:e5:fd:49:cc:f8:e2:9f:f4:49:dc:02:1e:6c:
cb:52:e3:00:8e:35:36:2e:6a:cc:dc:46:f0:1e:b1:
56:79:6e:01:8f:91:12:9e:e5:83:1f:1e:f6:88:68:
43:d3:61:ae:e8:c7:9b:5a:52:45:76:e2:9a:8a:2f:
cf:43:00:de:9c:39:ab:a9:f2:c8:87:0e:00:46:7e:
62:7f:0b:10:89:bf:21:8b:2b:41:71:07:a5:36:b6:
29:be:42:7a:41:a2:32:2d:bb:f5:a7:f3:46:84:d5:
9d:ed:c1:7d:9f:cc:cb:b0:1a:97:e1:24:61:b7:57:
7b:af:e7:b4:fe:31:fe:4e:22:51:45:c7:6c:93:ae:
a6:57:85:2b:6d:ee:2d:ba:2f:a4:b3:c0:6c:f0:0a:
90:52:97:83:ee:da:2a:cc:24:12:77:87:3d:9f:a9:
f5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7A:8C:33:C2:EB:66:F9:23:1E:88:C3:DF:57:71:41:19:3A:B9:2B
X509v3 Authority Key Identifier:
keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:7e:ae:23:b9:a5:2f:0b:0c:9f:18:7a:86:07:67:08:ac:08:
db:ed:ed:22:6f:b8:cd:f6:78:60:4a:00:53:a9:fd:77:0d:81:
97:e2:79:4d:7d:05:8b:e1:ed:e2:ac:59:9c:91:37:52:5c:4e:
80:1b:04:91:22:38:f4:75:48:a4:11:c4:6e:78:5b:4d:e5:e0:
59:f4:0c:e6:0d:10:84:34:30:c1:9b:58:87:d4:35:30:e1:61:
c2:57:d3:75:23:19:67:a7:89:f9:0b:95:39:bb:0b:ef:54:c5:
33:71:5b:43:08:45:7c:20:17:c6:77:9d:21:bb:1d:b6:a3:4d:
03:4d:75:be:02:b8:ac:e4:82:6c:07:d9:d3:46:cf:bc:a5:07:
73:d3:d5:fa:4e:98:25:94:00:49:84:ff:16:99:d1:80:23:ac:
9d:1a:cd:b5:8e:a3:82:39:c4:48:e1:df:02:22:75:e6:04:42:
9f:3a:f0:8d:a0:65:b3:d9:19:99:10:96:40:97:b4:54:c9:89:
5e:f8:3a:7d:d5:ad:95:6c:a6:1a:6f:48:d8:7b:84:85:dd:fc:
4e:64:8f:9f:e9:3a:9f:9a:5c:f5:10:52:19:f7:3d:3a:3a:81:
21:c6:4d:41:28:56:bc:6c:45:e1:0e:6e:12:b0:ca:e4:f1:24:
3b:13:c1:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WGRh0N1b3/iIVh+7WKeSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkYzI4YWU5OTM3ZmY3ZTQ5ZWM0ZjEyMzRlNTNkOGI5ZGQ2
OTQ1NDEwHhcNMjUxMDE5MTIwMTE1WhcNMjUxMDIwMTIwMTE1WjAzMTEwLwYDVQQD
EyhhNTdhOGMzM2MyZWI2NmY5MjMxZTg4YzNkZjU3NzE0MTE5M2FiOTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQwlxzoURl2lahw0MbnGEKr3flVa
J7dGJfEiXBwvvqz192WUxf2gW0VkCBcUxrCRAxhFK+hIiW46XxFt01+0rdJa7FqK
zj3/pVhRupoNQHLB9P7ohf/kkAOfOOX9Scz44p/0SdwCHmzLUuMAjjU2LmrM3Ebw
HrFWeW4Bj5ESnuWDHx72iGhD02Gu6MebWlJFduKaii/PQwDenDmrqfLIhw4ARn5i
fwsQib8hiytBcQelNrYpvkJ6QaIyLbv1p/NGhNWd7cF9n8zLsBqX4SRht1d7r+e0
/jH+TiJRRcdsk66mV4Urbe4tui+ks8Bs8AqQUpeD7toqzCQSd4c9n6n1RwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKV6jDPC62b5Ix6Iw99XcUEZOrkrMB8GA1UdIwQY
MBaAFJ3CiumTf/fknsTxI05T2LndaUVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMt
MTkyY2JkMDhkYjUxLzEvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMtMTkyY2JkMDhkYjUx
LzEvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsH6uI7ml
LwsMnxh6hgdnCKwI2+3tIm+4zfZ4YEoAU6n9dw2Bl+J5TX0Fi+Ht4qxZnJE3UlxO
gBsEkSI49HVIpBHEbnhbTeXgWfQM5g0QhDQwwZtYh9Q1MOFhwlfTdSMZZ6eJ+QuV
ObsL71TFM3FbQwhFfCAXxnedIbsdtqNNA011vgK4rOSCbAfZ00bPvKUHc9PV+k6Y
JZQASYT/FpnRgCOsnRrNtY6jgjnESOHfAiJ15gRCnzrwjaBls9kZmRCWQJe0VMmJ
Xvg6fdWtlWymGm9I2HuEhd38TmSPn+k6n5pc9RBSGfc9OjqBIcZNQShWvGxF4Q5u
ErDK5PEkOxPBWg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:44 2025 by rpki-client