Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
File: kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft (raw, json)
Hash identifier: GOrOiEP34qEwCyvOAqLvSZkdVOKXbulbeOFV/L+uSp8=
Subject key identifier: A8:DC:9E:2D:E0:5A:75:7F:E3:AF:AC:92:34:8C:C1:B4:37:32:8E:95
Authority key identifier: 92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A
Certificate issuer: /CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
Certificate serial: 019A52636B42993D7D2695F4E0629D4659FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
Manifest number: 15E7
Signing time: Wed 05 Nov 2025 05:00:38 +0000
Manifest this update: Wed 05 Nov 2025 05:00:38 +0000
Manifest next update: Thu 06 Nov 2025 05:00:38 +0000
Files and hashes: 1: YV0LpnxtBTAq4lz06bEpbCvyfLw.roa (hash: 9MkObNOUwLuOccH80DPJr9LOnHYQQUzirjuDL+0jWhk=)
2: kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl (hash: LHrvTeCbwoLb+VtNmZKzC4ch7aTvmR8GEZ0OKXlDCH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:6b:42:99:3d:7d:26:95:f4:e0:62:9d:46:59:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
Validity
Not Before: Nov 5 05:00:38 2025 GMT
Not After : Nov 6 05:00:38 2025 GMT
Subject: CN=a8dc9e2de05a757fe3afac92348cc1b437328e95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:94:b6:e4:02:78:b0:23:15:13:5a:bb:e4:e8:
d2:c2:b7:22:16:e7:de:83:95:a8:f6:bf:8d:33:37:
f8:69:8a:29:64:7f:78:92:53:d3:4b:61:44:03:77:
90:34:79:cb:de:dd:72:16:c0:52:e8:19:bc:76:01:
fc:7d:46:c4:e2:75:17:26:95:6b:42:2d:a2:d0:49:
c4:61:5e:35:0b:87:d4:86:8d:bf:3e:f5:04:d4:7d:
87:2d:d6:d6:48:50:50:1c:4b:ce:10:80:88:47:ac:
08:f8:6b:97:7a:e8:85:af:4e:eb:93:a5:cd:11:2a:
7d:f5:56:ba:3e:42:de:23:10:00:ca:cb:7c:cc:ef:
04:e4:50:c7:5f:1b:b5:be:e1:3c:af:42:8c:35:63:
ba:99:b4:9d:db:f7:60:cd:da:f1:d7:ae:7e:36:96:
cf:78:e6:db:6c:93:5b:06:f1:8b:ca:1b:df:4b:6d:
84:c9:33:92:cc:ca:48:ca:5c:a1:69:ae:dc:6b:65:
c6:53:2c:1b:f4:94:18:b9:63:f6:fc:ff:7d:83:b2:
fc:fb:01:61:d4:97:a7:ea:26:e8:77:68:0d:5f:c6:
86:08:14:cf:20:3e:5f:46:ad:b0:5a:da:94:d6:f2:
57:ed:34:db:5e:62:eb:38:28:cf:be:b4:d3:87:fe:
5f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DC:9E:2D:E0:5A:75:7F:E3:AF:AC:92:34:8C:C1:B4:37:32:8E:95
X509v3 Authority Key Identifier:
keyid:92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:78:2e:a6:fe:b9:8c:c4:df:ae:50:57:f6:27:4a:15:3d:3a:
b9:29:c1:58:6e:89:da:57:f5:39:cc:6f:76:fe:86:57:ec:3e:
06:38:d5:77:1d:4a:7a:cf:d0:e9:03:d6:2e:03:72:e9:dd:42:
bf:ce:46:2c:ea:7a:72:eb:9d:d4:84:d0:e5:a0:ac:cc:a1:09:
ad:a9:62:fe:c1:3a:73:9f:36:c1:1d:ba:2a:6f:e5:54:86:a4:
2a:ff:3e:65:91:4c:e9:23:7f:a2:0d:73:ec:85:13:ee:76:0a:
63:19:c0:ec:bf:07:cf:eb:29:a4:32:03:f1:64:c9:03:05:de:
37:29:66:f0:a0:a2:26:bd:db:d9:75:2a:86:b7:8d:be:41:f5:
8a:e7:99:da:ab:c1:0e:e7:cc:5d:a7:7d:5b:ba:c0:69:0f:47:
8f:49:f8:30:f7:25:0d:88:43:de:97:02:36:69:4c:0e:e1:e2:
68:cd:f6:70:2a:dd:ae:72:2d:9e:26:69:2b:0f:8b:f0:b9:9b:
95:0a:14:ae:6e:3e:aa:79:82:1e:c0:2c:7c:6d:86:99:31:4e:
88:9b:8e:47:be:84:ed:af:fd:59:c2:ce:fe:91:5e:81:e2:df:
6d:f5:d1:b2:8b:7a:d4:76:81:f3:e2:52:a4:b5:c4:00:cb:6d:
f2:70:ee:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSY2tCmT19JpX04GKdRln8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDhiNzZiMjE2NDc2OTZjOWY0ZDYzODJiNTI1ZDgzYTA1
ODBmNGEwHhcNMjUxMTA1MDUwMDM4WhcNMjUxMTA2MDUwMDM4WjAzMTEwLwYDVQQD
EyhhOGRjOWUyZGUwNWE3NTdmZTNhZmFjOTIzNDhjYzFiNDM3MzI4ZTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZS25AJ4sCMVE1q75OjSwrciFufe
g5Wo9r+NMzf4aYopZH94klPTS2FEA3eQNHnL3t1yFsBS6Bm8dgH8fUbE4nUXJpVr
Qi2i0EnEYV41C4fUho2/PvUE1H2HLdbWSFBQHEvOEICIR6wI+GuXeuiFr07rk6XN
ESp99Va6PkLeIxAAyst8zO8E5FDHXxu1vuE8r0KMNWO6mbSd2/dgzdrx165+NpbP
eObbbJNbBvGLyhvfS22EyTOSzMpIylyhaa7ca2XGUywb9JQYuWP2/P99g7L8+wFh
1Jen6ibod2gNX8aGCBTPID5fRq2wWtqU1vJX7TTbXmLrOCjPvrTTh/5fDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKjcni3gWnV/46+skjSMwbQ3Mo6VMB8GA1UdIwQY
MBaAFJLYt2shZHaWyfTWOCtSXYOgWA9KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RpM2F5RmtkcGJKOU5ZNEsxSmRnNkJZRDBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi82ZjFmMmQtOTliYi00NGUwLWFkYzUt
OGRmZDViMTUyZjc5LzEva3RpM2F5RmtkcGJKOU5ZNEsxSmRnNkJZRDBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi82ZjFmMmQtOTliYi00NGUwLWFkYzUtOGRmZDViMTUyZjc5
LzEva3RpM2F5RmtkcGJKOU5ZNEsxSmRnNkJZRDBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbHgupv65
jMTfrlBX9idKFT06uSnBWG6J2lf1Ocxvdv6GV+w+BjjVdx1Kes/Q6QPWLgNy6d1C
v85GLOp6cuud1ITQ5aCszKEJrali/sE6c582wR26Km/lVIakKv8+ZZFM6SN/og1z
7IUT7nYKYxnA7L8Hz+sppDID8WTJAwXeNylm8KCiJr3b2XUqhreNvkH1iueZ2qvB
DufMXad9W7rAaQ9Hj0n4MPclDYhD3pcCNmlMDuHiaM32cCrdrnItniZpKw+L8Lmb
lQoUrm4+qnmCHsAsfG2GmTFOiJuOR76E7a/9WcLO/pFegeLfbfXRsot61HaB8+JS
pLXEAMtt8nDu+Q==
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:34:06 2025 by rpki-client