Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft
File: nMJvGM-WuGpFBrO4TMxE07NQaiA.mft (raw, json)
Hash identifier: xPddBvmVO0UYO9BlhAdNU+6V3RC72ovXy7Z2EiW4dJY=
Subject key identifier: A2:2E:90:CE:40:DB:F8:17:C2:E3:28:B6:08:51:1A:C8:9B:F6:EE:4F
Authority key identifier: 9C:C2:6F:18:CF:96:B8:6A:45:06:B3:B8:4C:CC:44:D3:B3:50:6A:20
Certificate issuer: /CN=9cc26f18cf96b86a4506b3b84ccc44d3b3506a20
Certificate serial: 0199FD3462E051E1D8AFE23830599DF423EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMJvGM-WuGpFBrO4TMxE07NQaiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft
Manifest number: 08AA
Signing time: Sun 19 Oct 2025 16:01:32 +0000
Manifest this update: Sun 19 Oct 2025 16:01:32 +0000
Manifest next update: Mon 20 Oct 2025 16:01:32 +0000
Files and hashes: 1: jYsRIvoDURhQER-g8gsgtrlE-uw.roa (hash: GoEsOPwpW5DP9dw5vT+vzZBcfSyAVzSYkZdL0zk1Xg8=)
2: nMJvGM-WuGpFBrO4TMxE07NQaiA.crl (hash: igIO94UxE7EUzkJXl5iS3wELz7dKejtGmw8t8rL6Tc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nMJvGM-WuGpFBrO4TMxE07NQaiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:62:e0:51:e1:d8:af:e2:38:30:59:9d:f4:23:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc26f18cf96b86a4506b3b84ccc44d3b3506a20
Validity
Not Before: Oct 19 16:01:32 2025 GMT
Not After : Oct 20 16:01:32 2025 GMT
Subject: CN=a22e90ce40dbf817c2e328b608511ac89bf6ee4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:f5:6e:55:28:74:9d:7d:da:10:ab:28:f0:0a:
00:00:65:26:a8:f4:ba:81:76:c0:42:b8:50:2e:f6:
6d:5f:ed:af:72:df:ac:c1:f5:66:70:b6:9c:d1:20:
5a:e9:96:18:b5:53:78:76:e2:a1:99:5c:3d:c0:da:
d8:91:43:a4:bb:d2:2e:bd:a8:73:64:c9:b5:67:5a:
ca:af:bd:27:89:cb:fa:a8:39:b6:10:43:26:79:84:
6c:dc:4b:cb:64:39:b6:42:0c:ef:8b:a0:66:0c:c3:
13:2e:98:ab:ab:39:86:06:93:f5:3e:3d:a1:0c:4a:
d2:00:7f:2c:46:4d:e2:29:b3:b2:63:cd:ca:43:a4:
26:07:8f:93:97:18:e8:e6:1c:e0:72:f2:4a:1a:86:
24:7f:92:7e:f9:40:9b:24:b5:70:d0:ea:b7:fc:56:
fb:31:ab:c1:16:e2:9c:1e:38:8a:99:54:78:7e:c5:
e9:28:18:8f:19:69:a2:60:de:5e:a2:81:cd:34:3b:
a3:5f:26:f6:e8:47:52:9b:bc:c8:96:35:0a:b2:b0:
9c:bf:4d:a1:9b:0f:fb:fa:45:f8:56:47:19:2b:64:
a0:09:ed:5d:0a:4e:11:09:87:1c:14:39:40:cf:a8:
6d:a7:63:35:c1:8e:ed:f2:5c:43:ba:cc:5f:a9:80:
3b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:2E:90:CE:40:DB:F8:17:C2:E3:28:B6:08:51:1A:C8:9B:F6:EE:4F
X509v3 Authority Key Identifier:
keyid:9C:C2:6F:18:CF:96:B8:6A:45:06:B3:B8:4C:CC:44:D3:B3:50:6A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMJvGM-WuGpFBrO4TMxE07NQaiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:20:b4:30:9a:f0:bc:e6:35:bf:13:74:97:1e:f4:cc:c8:e3:
2d:5c:4b:3b:f2:6c:45:f7:a9:06:1e:b7:38:3d:3b:ac:a3:19:
c3:5b:77:43:de:22:4c:38:6e:95:41:96:8d:2c:8f:0e:cd:e6:
b9:83:11:39:55:b0:f8:98:e1:cf:19:43:32:c2:78:39:f5:5d:
d0:61:4b:ac:47:e9:89:e4:18:cf:02:b6:74:64:c9:21:f6:cb:
9a:fd:5a:db:a1:72:24:f5:3e:ee:e4:4b:00:e2:4b:5b:c3:b2:
31:4f:fa:d7:92:46:e2:6d:ba:03:54:f3:24:d2:20:23:d5:51:
62:d0:53:17:81:f4:80:ae:d0:d0:a9:76:2f:97:65:c2:84:e0:
08:aa:ec:a6:b4:30:a6:f2:a4:de:66:4f:bf:6d:d5:08:c6:60:
e0:89:d1:78:09:ba:84:5b:8e:03:89:8d:c9:6b:07:99:a7:c6:
36:3e:05:38:21:9e:82:a4:33:87:ca:11:bd:ed:43:40:29:6f:
00:04:cc:b5:9d:a0:a0:64:97:ab:87:8b:b8:b7:a9:71:30:a8:
80:d6:58:79:84:0e:5c:5c:99:40:d4:a7:31:7e:99:32:00:a9:
b3:b3:e2:e3:cd:96:71:7e:2a:d2:c8:26:5e:0b:c6:07:6b:ba:
f8:79:00:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NGLgUeHYr+I4MFmd9CPrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYzI2ZjE4Y2Y5NmI4NmE0NTA2YjNiODRjY2M0NGQzYjM1
MDZhMjAwHhcNMjUxMDE5MTYwMTMyWhcNMjUxMDIwMTYwMTMyWjAzMTEwLwYDVQQD
EyhhMjJlOTBjZTQwZGJmODE3YzJlMzI4YjYwODUxMWFjODliZjZlZTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8vVuVSh0nX3aEKso8AoAAGUmqPS6
gXbAQrhQLvZtX+2vct+swfVmcLac0SBa6ZYYtVN4duKhmVw9wNrYkUOku9Iuvahz
ZMm1Z1rKr70nicv6qDm2EEMmeYRs3EvLZDm2Qgzvi6BmDMMTLpirqzmGBpP1Pj2h
DErSAH8sRk3iKbOyY83KQ6QmB4+Tlxjo5hzgcvJKGoYkf5J++UCbJLVw0Oq3/Fb7
MavBFuKcHjiKmVR4fsXpKBiPGWmiYN5eooHNNDujXyb26EdSm7zIljUKsrCcv02h
mw/7+kX4VkcZK2SgCe1dCk4RCYccFDlAz6htp2M1wY7t8lxDusxfqYA7nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKIukM5A2/gXwuMotghRGsib9u5PMB8GA1UdIwQY
MBaAFJzCbxjPlrhqRQazuEzMRNOzUGogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbk1KdkdNLVd1R3BGQnJPNFRNeEUwN05RYWlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8zNjI5NTgtMDZkZC00YzA0LTg4NjQt
MDEzOTg5NDJmYjVhLzEvbk1KdkdNLVd1R3BGQnJPNFRNeEUwN05RYWlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8zNjI5NTgtMDZkZC00YzA0LTg4NjQtMDEzOTg5NDJmYjVh
LzEvbk1KdkdNLVd1R3BGQnJPNFRNeEUwN05RYWlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAICC0MJrw
vOY1vxN0lx70zMjjLVxLO/JsRfepBh63OD07rKMZw1t3Q94iTDhulUGWjSyPDs3m
uYMROVWw+JjhzxlDMsJ4OfVd0GFLrEfpieQYzwK2dGTJIfbLmv1a26FyJPU+7uRL
AOJLW8OyMU/615JG4m26A1TzJNIgI9VRYtBTF4H0gK7Q0Kl2L5dlwoTgCKrsprQw
pvKk3mZPv23VCMZg4InReAm6hFuOA4mNyWsHmafGNj4FOCGegqQzh8oRve1DQClv
AATMtZ2goGSXq4eLuLepcTCogNZYeYQOXFyZQNSnMX6ZMgCps7Pi482WcX4q0sgm
XgvGB2u6+HkAgg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:48 2025 by rpki-client