
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.mft
File: iXN4Em9V2WUZVT2qSOAuMoISFkQ.mft (raw, json)
Hash identifier: TTaRT7rHu5g16V5R9FBvJdWoCcXmgfoM8QlxTaeLqwY=
Subject key identifier: E3:4F:61:8D:96:C7:BE:DC:C3:B7:57:5C:43:24:17:66:5D:E7:94:9F
Authority key identifier: 89:73:78:12:6F:55:D9:65:19:55:3D:AA:48:E0:2E:32:82:12:16:44
Certificate issuer: /CN=897378126f55d96519553daa48e02e3282121644
Certificate serial: 0199FDD9651F2CF3FE6FD750625EC9B79C8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXN4Em9V2WUZVT2qSOAuMoISFkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.mft
Manifest number: 0F3E
Signing time: Sun 19 Oct 2025 19:01:46 +0000
Manifest this update: Sun 19 Oct 2025 19:01:46 +0000
Manifest next update: Mon 20 Oct 2025 19:01:46 +0000
Files and hashes: 1: gGw6ft1sLBQmsJ-vRfx6KJXkhbk.roa (hash: S1p9cVSO3FaBQReociITznoI/L2Cqm4kk12uycY2TsA=)
2: iXN4Em9V2WUZVT2qSOAuMoISFkQ.crl (hash: 4fPEmmA5L7xlMCE/8IzFKXaOsAuH3ZTg6toFbFFIMfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/iXN4Em9V2WUZVT2qSOAuMoISFkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:65:1f:2c:f3:fe:6f:d7:50:62:5e:c9:b7:9c:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=897378126f55d96519553daa48e02e3282121644
Validity
Not Before: Oct 19 19:01:46 2025 GMT
Not After : Oct 20 19:01:46 2025 GMT
Subject: CN=e34f618d96c7bedcc3b7575c432417665de7949f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8b:21:ec:10:8d:40:7a:1f:49:bf:10:3e:3a:
71:5d:fa:26:f5:8b:11:d0:23:55:cd:05:27:4d:d0:
10:8b:31:b3:2d:ab:3f:3f:9c:21:33:22:70:62:f3:
6b:4b:6f:19:e9:f0:0f:bc:5a:d6:41:9c:13:ed:8c:
86:68:f3:f9:37:83:9b:ce:c2:00:62:78:a7:76:77:
3c:11:e7:3f:6d:39:34:3c:18:82:81:76:3a:01:e8:
ec:e9:ac:e3:01:6e:17:f3:6f:6a:64:1e:c5:92:07:
1d:06:63:2d:fa:72:89:7d:0e:48:71:d2:e3:ce:6f:
26:ee:53:54:59:bf:78:1e:49:7d:a2:d1:2d:57:23:
1f:c4:b3:81:5b:65:99:ea:86:0c:c9:50:24:13:a0:
dd:e6:69:bf:dd:f1:8a:0e:dd:07:89:ce:88:1e:db:
47:b1:2c:81:18:df:5e:7a:2b:92:35:a3:2b:1d:f1:
5b:db:f8:1d:92:d0:20:3a:cd:31:cd:be:28:ed:ad:
5b:0e:a7:a8:a0:20:95:cb:d1:6d:d4:ae:36:94:c8:
40:2a:dc:d1:6b:de:f5:51:63:be:62:92:a9:32:44:
4b:7e:22:30:63:af:fd:da:78:c3:c7:fb:72:6f:23:
c6:96:c3:6e:d8:d2:61:05:d3:32:5d:67:75:2c:17:
05:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:4F:61:8D:96:C7:BE:DC:C3:B7:57:5C:43:24:17:66:5D:E7:94:9F
X509v3 Authority Key Identifier:
keyid:89:73:78:12:6F:55:D9:65:19:55:3D:AA:48:E0:2E:32:82:12:16:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXN4Em9V2WUZVT2qSOAuMoISFkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:9b:ef:3f:04:cd:23:ed:95:d7:87:e7:b8:06:02:a9:e0:89:
52:8e:63:8f:cf:62:e3:56:cd:88:65:fd:d2:04:a7:8b:f3:1a:
3a:65:79:57:4e:06:1c:13:44:f9:4d:14:4b:85:c4:22:fe:08:
6a:89:41:71:30:fc:24:9f:0d:22:35:65:e4:b2:dc:37:0a:ee:
49:90:f9:b2:cb:cb:d1:7d:4a:e7:24:2b:a4:95:81:db:ef:97:
60:7e:e3:c2:4d:82:d9:a6:d5:57:a9:5e:4f:8d:e3:38:05:8c:
50:fe:7f:8f:e0:cf:93:7b:1c:34:f9:7a:f9:52:ad:8f:f2:c9:
e3:c0:6d:70:60:32:a6:f6:93:5a:28:a4:ea:85:36:b6:55:c0:
87:f4:02:68:bd:ec:a2:22:52:62:2c:f2:8b:f9:dc:86:bd:8c:
a5:59:1c:9c:c3:b6:a7:01:6c:ae:de:81:1a:75:01:26:39:41:
40:e3:d3:f9:1f:95:c6:79:7d:d1:55:5f:a7:b8:98:66:8c:38:
72:d1:66:f0:56:dc:8b:40:c0:48:e3:4d:eb:bb:0d:fb:04:e6:
7f:6b:56:f2:46:60:82:23:8d:32:9b:64:28:a6:21:0d:75:44:
aa:5b:91:3c:3e:22:bd:bb:36:8e:69:a2:f0:02:06:fd:1b:4e:
63:c7:d6:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92WUfLPP+b9dQYl7Jt5yLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5NzM3ODEyNmY1NWQ5NjUxOTU1M2RhYTQ4ZTAyZTMyODIx
MjE2NDQwHhcNMjUxMDE5MTkwMTQ2WhcNMjUxMDIwMTkwMTQ2WjAzMTEwLwYDVQQD
EyhlMzRmNjE4ZDk2YzdiZWRjYzNiNzU3NWM0MzI0MTc2NjVkZTc5NDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYsh7BCNQHofSb8QPjpxXfom9YsR
0CNVzQUnTdAQizGzLas/P5whMyJwYvNrS28Z6fAPvFrWQZwT7YyGaPP5N4ObzsIA
Ynindnc8Eec/bTk0PBiCgXY6Aejs6azjAW4X829qZB7FkgcdBmMt+nKJfQ5IcdLj
zm8m7lNUWb94Hkl9otEtVyMfxLOBW2WZ6oYMyVAkE6Dd5mm/3fGKDt0Hic6IHttH
sSyBGN9eeiuSNaMrHfFb2/gdktAgOs0xzb4o7a1bDqeooCCVy9Ft1K42lMhAKtzR
a971UWO+YpKpMkRLfiIwY6/92njDx/tybyPGlsNu2NJhBdMyXWd1LBcFaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFONPYY2Wx77cw7dXXEMkF2Zd55SfMB8GA1UdIwQY
MBaAFIlzeBJvVdllGVU9qkjgLjKCEhZEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVhONEVtOVYyV1VaVlQycVNPQXVNb0lTRmtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9mMmQwY2ItYzNkNC00OWJlLWIwZjIt
MzA1ZmIwOTU1NmM5LzEvaVhONEVtOVYyV1VaVlQycVNPQXVNb0lTRmtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9mMmQwY2ItYzNkNC00OWJlLWIwZjItMzA1ZmIwOTU1NmM5
LzEvaVhONEVtOVYyV1VaVlQycVNPQXVNb0lTRmtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJZvvPwTN
I+2V14fnuAYCqeCJUo5jj89i41bNiGX90gSni/MaOmV5V04GHBNE+U0US4XEIv4I
aolBcTD8JJ8NIjVl5LLcNwruSZD5ssvL0X1K5yQrpJWB2++XYH7jwk2C2abVV6le
T43jOAWMUP5/j+DPk3scNPl6+VKtj/LJ48BtcGAypvaTWiik6oU2tlXAh/QCaL3s
oiJSYizyi/nchr2MpVkcnMO2pwFsrt6BGnUBJjlBQOPT+R+Vxnl90VVfp7iYZow4
ctFm8Fbci0DASONN67sN+wTmf2tW8kZggiONMptkKKYhDXVEqluRPD4ivbs2jmmi
8AIG/RtOY8fWZQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:34:15 2025 by rpki-client