
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft
File: r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft (raw, json)
Hash identifier: fogXVjtZR4mVLPboGPVn/VHkHxBYxJ7p6k8Vc4UprHk=
Subject key identifier: DE:2C:D5:C3:CA:DD:AB:21:70:FD:85:26:62:EE:67:67:25:D7:05:47
Authority key identifier: AF:A9:29:BE:73:49:1A:CD:99:D5:90:37:2A:52:B8:15:FA:1F:23:F5
Certificate issuer: /CN=afa929be73491acd99d590372a52b815fa1f23f5
Certificate serial: 019A560918846C1A561E0A2082F3C3BC0A68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft
Manifest number: 126D
Signing time: Wed 05 Nov 2025 22:00:27 +0000
Manifest this update: Wed 05 Nov 2025 22:00:27 +0000
Manifest next update: Thu 06 Nov 2025 22:00:27 +0000
Files and hashes: 1: Qm0v2QB0N6w8qGQL8ta92rDkpA0.roa (hash: aEK3PYUQq1E1pzkJ/CLkmP6YwUe047cyT3qoeHQ2dn8=)
2: dS8Rkw8dzyED62hL_7OXnHLvH04.roa (hash: qEmro5fJia38aDC86kQ3vNKBrJLyPDYdvwDe7Qknl6I=)
3: jIx4n0qvGCMbvZ4nZHfe7AlAvc4.roa (hash: PbvVUSgN0dLFWz6bc4odaxxggERGNNwAo8M1AiayrEs=)
4: r6kpvnNJGs2Z1ZA3KlK4FfofI_U.crl (hash: N0T0Hew5itPrkaUvlEQHklBd9tG2IWP/SGAzx7MUTZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:56:09:18:84:6c:1a:56:1e:0a:20:82:f3:c3:bc:0a:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afa929be73491acd99d590372a52b815fa1f23f5
Validity
Not Before: Nov 5 22:00:27 2025 GMT
Not After : Nov 6 22:00:27 2025 GMT
Subject: CN=de2cd5c3caddab2170fd852662ee676725d70547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:58:e3:e1:36:cd:06:1c:f3:d5:43:8f:65:8d:
92:3a:31:1c:b4:0c:00:5a:5b:b8:cc:0f:cd:af:d9:
0b:70:a9:ea:de:60:36:db:9c:86:b3:ba:24:f2:7a:
bb:87:ca:70:4c:c3:f4:92:13:45:1f:26:f1:e0:44:
ba:3c:a9:1a:50:51:4d:3a:32:53:9a:cc:ab:12:75:
d5:0d:1b:94:34:a8:25:a6:d9:f9:80:12:f3:38:c3:
5e:8c:49:d8:6e:54:f0:02:7c:85:7d:d4:ad:35:1b:
ea:a1:7e:f8:fc:76:67:02:57:e5:6d:bd:de:c0:79:
2f:78:c6:b9:40:59:86:ae:7d:6c:4e:5d:71:5f:28:
ea:94:b1:ff:66:32:c0:ee:8e:9c:41:fa:09:46:6f:
26:4b:94:60:bb:7a:4a:d1:31:38:fc:3d:95:34:81:
39:15:aa:e0:6c:a3:45:be:85:42:37:dc:34:06:0b:
cd:9f:9c:66:7a:12:0b:9c:e0:76:0c:8a:f6:78:12:
9c:50:a1:19:c5:54:7d:7b:d1:72:f8:9a:5c:a8:5b:
04:b8:49:21:a9:98:0e:6e:94:24:4c:fd:88:d5:34:
d2:a9:22:bd:73:b0:27:b4:b5:87:cc:4b:e0:1e:1c:
85:15:42:24:6a:4f:4d:67:34:2a:ff:03:3b:b0:6f:
36:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:2C:D5:C3:CA:DD:AB:21:70:FD:85:26:62:EE:67:67:25:D7:05:47
X509v3 Authority Key Identifier:
keyid:AF:A9:29:BE:73:49:1A:CD:99:D5:90:37:2A:52:B8:15:FA:1F:23:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:29:18:c7:b6:4f:4a:95:ba:3b:20:77:43:bb:91:53:68:69:
1f:95:4e:d1:4c:a9:25:5f:b1:29:2a:96:5b:b5:38:ea:66:fa:
cc:c9:01:2d:dd:62:62:b7:69:4a:35:61:a1:88:ba:9c:16:b6:
0b:f0:b7:d4:25:07:d3:52:6e:2e:15:a4:83:14:ed:f9:84:b7:
8d:d5:1a:34:ef:7f:a5:00:5e:46:bb:8e:13:a2:b2:3c:f4:9a:
cc:26:cf:a8:47:57:4e:56:1d:2c:d8:75:a6:a4:ad:8f:61:36:
81:57:b1:51:bd:f9:f5:47:86:aa:51:14:0f:c9:a3:61:db:a7:
ab:17:05:11:78:38:86:dd:d7:c7:26:2c:ab:ed:9d:12:88:a5:
25:e6:9c:7a:9d:77:39:77:3f:50:41:87:cc:42:70:41:23:05:
46:d0:03:0f:13:c5:2e:c0:c9:05:da:99:64:2c:e6:96:b1:ca:
cb:98:c1:bc:16:34:73:28:6f:7a:b6:fe:76:91:6a:de:d8:12:
b9:14:f7:0a:2e:5b:9d:76:b6:c8:05:68:0a:c6:a0:c8:65:05:
30:71:98:7d:3a:c1:42:36:88:e6:76:86:7b:64:fc:4d:b4:6e:
b9:46:ba:aa:3f:a2:33:20:d1:f5:f5:ac:3b:eb:ac:f3:8c:aa:
63:17:02:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 06:11:12 2025 by rpki-client