
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft
File: kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft (raw, json)
Hash identifier: NOFgwrbp+NyHno3Zb/IaD7ZTENwwjYHnJwU3IK794Dk=
Subject key identifier: 0A:42:F0:DE:A6:1E:18:25:95:37:FE:94:4E:0F:54:B3:17:C2:4C:4E
Authority key identifier: 90:F7:65:37:FF:74:58:93:E3:14:2F:A0:98:4F:44:9B:72:5B:8F:D3
Certificate issuer: /CN=90f76537ff745893e3142fa0984f449b725b8fd3
Certificate serial: 0199FD34498363149C96E0EC79863C2B7869
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPdlN_90WJPjFC-gmE9Em3Jbj9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 16:01:26 +0000
Manifest this update: Sun 19 Oct 2025 16:01:26 +0000
Manifest next update: Mon 20 Oct 2025 16:01:26 +0000
Files and hashes: 1: 4h8beUu4miiEn1n13esJcxX7gpc.roa (hash: 33+qj2eaRd7O8N5EQLS3e9QL955CTXDuq4VOYW0my7E=)
2: kPdlN_90WJPjFC-gmE9Em3Jbj9M.crl (hash: bFM/Ztw6xbJRI78f1cu0saQtpxrTmbI0+0StlNT7Zz8=)
3: zcJuMPKqinNoidJ9rHaaDdmdVvA.roa (hash: 9UsWhn4/INB/JJvJuTs6CMag+GLrqc1ZuXSO78kkqu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPdlN_90WJPjFC-gmE9Em3Jbj9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:49:83:63:14:9c:96:e0:ec:79:86:3c:2b:78:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f76537ff745893e3142fa0984f449b725b8fd3
Validity
Not Before: Oct 19 16:01:26 2025 GMT
Not After : Oct 20 16:01:26 2025 GMT
Subject: CN=0a42f0dea61e18259537fe944e0f54b317c24c4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a6:b4:21:55:b1:88:9f:a8:f4:3e:9b:48:af:
58:31:b5:a2:47:27:c4:07:3e:2d:e7:a9:c0:99:38:
cc:20:77:fc:c7:25:bb:f8:72:f3:59:44:b6:99:ac:
fd:00:6a:8a:c8:58:9b:9c:cd:78:9c:72:7b:40:19:
35:6a:8d:18:73:44:5a:48:b7:60:58:41:be:2f:8b:
26:73:11:1d:e0:1c:a8:8e:1f:84:7e:3a:46:75:0d:
0d:28:2c:53:71:4c:21:67:0e:67:27:1d:f8:5f:a0:
b4:dc:0e:cd:86:76:ff:da:aa:99:2d:b0:a0:f5:1c:
99:dc:3c:15:79:86:c6:97:94:b7:a8:92:19:76:ad:
54:8c:ef:da:8b:56:91:e6:0a:cb:d2:ff:b1:65:47:
0d:86:c6:ea:0f:0f:78:d0:54:a9:79:47:c8:03:a9:
a9:95:e6:5a:08:0a:61:dd:91:8f:b1:93:2d:23:dc:
00:56:0e:29:d4:f2:67:85:82:d4:3e:38:b1:06:a2:
e2:37:41:c4:21:ea:50:a3:61:8e:86:5b:3f:a8:bd:
d5:38:70:57:4e:cc:4d:a5:f3:d7:5b:b7:1d:22:7f:
bf:ba:01:0b:e5:31:4f:a5:3b:d9:00:df:fc:8d:4e:
32:17:a3:d6:fe:40:10:05:fe:83:8f:de:15:31:cc:
b1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:42:F0:DE:A6:1E:18:25:95:37:FE:94:4E:0F:54:B3:17:C2:4C:4E
X509v3 Authority Key Identifier:
keyid:90:F7:65:37:FF:74:58:93:E3:14:2F:A0:98:4F:44:9B:72:5B:8F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPdlN_90WJPjFC-gmE9Em3Jbj9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:90:d7:0c:cf:5a:40:14:59:d4:65:70:5d:72:48:37:9e:c9:
13:a7:7d:45:d2:b1:82:26:30:31:3d:e2:07:70:18:51:99:0b:
72:09:02:63:d5:1b:84:db:fe:6a:ae:60:2a:5f:6c:b7:9d:11:
3e:f3:bd:07:37:54:40:f9:9a:f4:42:d0:04:b9:28:fd:23:02:
8a:4e:58:76:c9:6f:9c:87:00:22:7a:52:79:7b:69:25:7d:d3:
f0:b8:55:76:fe:9e:5c:1b:1b:1b:5f:c2:68:58:a5:f9:c6:dc:
26:4f:4b:7b:31:ba:54:22:a0:af:5b:e2:d3:93:b4:00:77:e8:
1a:2b:2a:60:51:0b:c2:05:87:46:b7:f3:17:97:48:2b:27:f1:
5d:56:23:c1:9a:43:60:1a:d7:4e:b6:e4:95:05:e8:94:d6:fb:
e2:5e:92:50:d4:31:87:9e:20:da:10:ca:c2:42:aa:7a:f6:90:
d6:6f:c2:9b:8a:41:55:d5:4f:97:fa:47:88:31:99:00:78:ab:
e4:ac:f1:82:66:41:4f:28:90:c6:1d:05:f9:9b:b9:48:9f:36:
c9:67:fa:7f:ce:7b:29:7d:08:66:b1:8f:17:b5:28:51:52:83:
b2:d0:5c:b3:0c:82:ff:ef:83:58:cd:c1:2b:bf:d5:7b:57:b0:
1b:da:f6:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NEmDYxScluDseYY8K3hpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwZjc2NTM3ZmY3NDU4OTNlMzE0MmZhMDk4NGY0NDliNzI1
YjhmZDMwHhcNMjUxMDE5MTYwMTI2WhcNMjUxMDIwMTYwMTI2WjAzMTEwLwYDVQQD
EygwYTQyZjBkZWE2MWUxODI1OTUzN2ZlOTQ0ZTBmNTRiMzE3YzI0YzRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Ka0IVWxiJ+o9D6bSK9YMbWiRyfE
Bz4t56nAmTjMIHf8xyW7+HLzWUS2maz9AGqKyFibnM14nHJ7QBk1ao0Yc0RaSLdg
WEG+L4smcxEd4Byojh+EfjpGdQ0NKCxTcUwhZw5nJx34X6C03A7Nhnb/2qqZLbCg
9RyZ3DwVeYbGl5S3qJIZdq1UjO/ai1aR5grL0v+xZUcNhsbqDw940FSpeUfIA6mp
leZaCAph3ZGPsZMtI9wAVg4p1PJnhYLUPjixBqLiN0HEIepQo2GOhls/qL3VOHBX
TsxNpfPXW7cdIn+/ugEL5TFPpTvZAN/8jU4yF6PW/kAQBf6Dj94VMcyxyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFApC8N6mHhgllTf+lE4PVLMXwkxOMB8GA1UdIwQY
MBaAFJD3ZTf/dFiT4xQvoJhPRJtyW4/TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1BkbE5fOTBXSlBqRkMtZ21FOUVtM0piajlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi80Zjc2ODAtODFhYi00YzFmLWEwN2It
N2M2MmQ1YzMxNWJmLzEva1BkbE5fOTBXSlBqRkMtZ21FOUVtM0piajlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi80Zjc2ODAtODFhYi00YzFmLWEwN2ItN2M2MmQ1YzMxNWJm
LzEva1BkbE5fOTBXSlBqRkMtZ21FOUVtM0piajlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdpDXDM9a
QBRZ1GVwXXJIN57JE6d9RdKxgiYwMT3iB3AYUZkLcgkCY9UbhNv+aq5gKl9st50R
PvO9BzdUQPma9ELQBLko/SMCik5YdslvnIcAInpSeXtpJX3T8LhVdv6eXBsbG1/C
aFil+cbcJk9LezG6VCKgr1vi05O0AHfoGisqYFELwgWHRrfzF5dIKyfxXVYjwZpD
YBrXTrbklQXolNb74l6SUNQxh54g2hDKwkKqevaQ1m/Cm4pBVdVPl/pHiDGZAHir
5KzxgmZBTyiQxh0F+Zu5SJ82yWf6f857KX0IZrGPF7UoUVKDstBcswyC/++DWM3B
K7/Ve1ewG9r2cw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:55:20 2025 by rpki-client