Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
File: k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft (raw, json)
Hash identifier: s3T4dWKpKXUImqcZMclKxm5w8h2A9MYHSb9gZCyCQoI=
Subject key identifier: 90:2C:02:0A:B1:12:54:B4:E2:65:52:95:F1:A1:6A:87:A6:53:F1:05
Authority key identifier: 93:50:10:77:DB:80:D5:2B:16:D4:9F:86:3A:61:EA:41:A1:24:BC:59
Certificate issuer: /CN=93501077db80d52b16d49f863a61ea41a124bc59
Certificate serial: 019A5262E9FCFC34C10E1D51670F0F4315B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
Manifest number: 0620
Signing time: Wed 05 Nov 2025 05:00:04 +0000
Manifest this update: Wed 05 Nov 2025 05:00:04 +0000
Manifest next update: Thu 06 Nov 2025 05:00:04 +0000
Files and hashes: 1: aWw5wJuzfBEHmyQaah8xYehdUG8.roa (hash: H2Jnmk/OanpEK56jJ8tSaxjK9R89WU3IiR7I7leXG38=)
2: cBmPaf2oGu0_AMcsbNoq5Hph_V4.roa (hash: 9oqeFK2Tn1tYym9cWphxU57OSdAjV+OS6dUAD4eSIdI=)
3: k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl (hash: Wm5QV/YbJpAQj1Ey5jFJ6KJvOiyBaaBgQiC1hGCauuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:62:e9:fc:fc:34:c1:0e:1d:51:67:0f:0f:43:15:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93501077db80d52b16d49f863a61ea41a124bc59
Validity
Not Before: Nov 5 05:00:04 2025 GMT
Not After : Nov 6 05:00:04 2025 GMT
Subject: CN=902c020ab11254b4e2655295f1a16a87a653f105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:48:54:dc:45:51:fe:0e:f4:5d:e0:b6:b2:de:
21:cd:d8:d8:81:e0:45:aa:95:ec:f2:e9:39:bc:ba:
7e:7b:0b:24:86:36:3b:a1:ca:a2:32:00:65:7e:36:
67:cf:f5:56:2f:35:17:55:c2:9c:57:f8:44:39:c0:
bf:e5:b8:6e:8d:36:71:09:58:1d:9d:21:e8:eb:b4:
6d:80:f7:6b:7b:73:1a:83:cd:35:4c:0b:a4:0c:72:
7c:47:d7:12:06:63:79:d2:60:45:2a:56:8b:96:f4:
63:2d:e6:65:1d:11:fa:c5:6a:72:e1:ed:1a:59:6e:
15:66:a4:7c:99:37:54:0a:8a:7a:c6:1c:51:ee:65:
17:8c:8c:81:34:0f:ad:56:67:93:d6:00:3d:68:27:
49:ed:be:66:30:fa:fd:e9:27:73:ec:7e:5c:3a:85:
c3:0d:8e:76:c5:1c:37:f1:8e:89:bd:d7:d9:53:8d:
2c:e9:b6:21:c2:7c:12:a6:35:62:bc:89:3e:95:9f:
3a:8b:1f:9c:30:1d:f4:ba:9e:70:2f:ea:6c:32:bb:
54:d5:02:8b:3d:ac:95:ff:47:c1:4d:6c:b8:f4:47:
fa:53:b1:03:49:74:8e:74:8a:15:ba:89:21:f6:1d:
72:9b:27:43:9e:c0:67:77:24:03:e8:0c:99:f4:b3:
f3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:2C:02:0A:B1:12:54:B4:E2:65:52:95:F1:A1:6A:87:A6:53:F1:05
X509v3 Authority Key Identifier:
keyid:93:50:10:77:DB:80:D5:2B:16:D4:9F:86:3A:61:EA:41:A1:24:BC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:12:dc:c4:88:07:d7:f3:df:a4:8d:c6:b7:d9:6d:4c:ad:f4:
d5:5f:28:c6:c2:af:23:c6:b4:68:1c:82:b7:7e:d6:64:37:15:
a5:99:59:11:ae:4b:f7:29:4e:28:6f:0c:e7:bc:4c:32:02:e1:
31:89:2f:a2:a2:38:43:8f:dd:e8:64:52:9f:16:60:f7:b1:05:
56:89:2f:0c:96:3d:89:9f:88:5e:15:a6:49:fe:06:e4:63:71:
b0:a6:9b:ad:00:27:41:08:1c:2f:f9:50:cc:3e:ce:bc:3b:09:
df:dc:7f:51:0b:0d:0f:b7:fe:87:a2:f9:ba:a4:1c:5c:c6:21:
ed:73:ba:8f:8e:a4:18:83:d6:1c:bc:71:6d:b6:66:6f:f9:79:
60:99:f4:ba:2e:4e:f9:35:fe:06:ea:f8:9b:a3:cf:23:b2:95:
63:25:79:4e:50:3f:35:94:69:9c:4d:3e:d6:b0:b0:7a:ad:6c:
94:35:b4:63:69:ef:fe:59:42:22:ed:df:9b:46:82:4d:3a:35:
29:6e:cb:24:1d:bb:6e:dc:e7:d3:6b:9e:df:90:27:27:40:1a:
40:ce:4f:b6:8f:42:ff:2d:91:99:5e:85:a5:15:a7:e1:e6:d9:
3d:93:f9:06:fb:84:85:94:14:0a:82:f7:fa:c1:2b:7c:b0:8e:
78:66:48:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSYun8/DTBDh1RZw8PQxW3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNTAxMDc3ZGI4MGQ1MmIxNmQ0OWY4NjNhNjFlYTQxYTEy
NGJjNTkwHhcNMjUxMTA1MDUwMDA0WhcNMjUxMTA2MDUwMDA0WjAzMTEwLwYDVQQD
Eyg5MDJjMDIwYWIxMTI1NGI0ZTI2NTUyOTVmMWExNmE4N2E2NTNmMTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0hU3EVR/g70XeC2st4hzdjYgeBF
qpXs8uk5vLp+ewskhjY7ocqiMgBlfjZnz/VWLzUXVcKcV/hEOcC/5bhujTZxCVgd
nSHo67RtgPdre3Mag801TAukDHJ8R9cSBmN50mBFKlaLlvRjLeZlHRH6xWpy4e0a
WW4VZqR8mTdUCop6xhxR7mUXjIyBNA+tVmeT1gA9aCdJ7b5mMPr96Sdz7H5cOoXD
DY52xRw38Y6JvdfZU40s6bYhwnwSpjVivIk+lZ86ix+cMB30up5wL+psMrtU1QKL
PayV/0fBTWy49Ef6U7EDSXSOdIoVuokh9h1ymydDnsBndyQD6AyZ9LPzNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJAsAgqxElS04mVSlfGhaoemU/EFMB8GA1UdIwQY
MBaAFJNQEHfbgNUrFtSfhjph6kGhJLxZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazFBUWQ5dUExU3NXMUotR09tSHFRYUVrdkZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9kMGJjZjMtNGIyMS00MTYxLWI4MmUt
NzlkMWEyN2NkOTkzLzEvazFBUWQ5dUExU3NXMUotR09tSHFRYUVrdkZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9kMGJjZjMtNGIyMS00MTYxLWI4MmUtNzlkMWEyN2NkOTkz
LzEvazFBUWQ5dUExU3NXMUotR09tSHFRYUVrdkZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADhLcxIgH
1/PfpI3Gt9ltTK301V8oxsKvI8a0aByCt37WZDcVpZlZEa5L9ylOKG8M57xMMgLh
MYkvoqI4Q4/d6GRSnxZg97EFVokvDJY9iZ+IXhWmSf4G5GNxsKabrQAnQQgcL/lQ
zD7OvDsJ39x/UQsND7f+h6L5uqQcXMYh7XO6j46kGIPWHLxxbbZmb/l5YJn0ui5O
+TX+Bur4m6PPI7KVYyV5TlA/NZRpnE0+1rCweq1slDW0Y2nv/llCIu3fm0aCTTo1
KW7LJB27btzn02ue35AnJ0AaQM5Pto9C/y2RmV6FpRWn4ebZPZP5BvuEhZQUCoL3
+sErfLCOeGZIRg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:34:41 2025 by rpki-client