Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.mft
File: T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.mft (raw, json)
Hash identifier: Cj3UtIeOk4xN5V0GZrMU8Fr7Z5WlzS+z6NCWYFhwG8E=
Subject key identifier: BE:54:28:EC:47:DA:2E:DD:13:AC:FA:14:56:1B:E6:ED:DB:4D:67:C6
Authority key identifier: 4F:A5:CD:E5:24:F7:81:0D:58:68:BC:49:AB:0B:F6:62:1F:44:DC:21
Certificate issuer: /CN=4fa5cde524f7810d5868bc49ab0bf6621f44dc21
Certificate serial: 019A530842D3F08F8ECAE546671F1E4291B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.mft
Manifest number: 0EBF
Signing time: Wed 05 Nov 2025 08:00:41 +0000
Manifest this update: Wed 05 Nov 2025 08:00:41 +0000
Manifest next update: Thu 06 Nov 2025 08:00:41 +0000
Files and hashes: 1: QBK8lPoVvs-33OqaHsy4GGD-WkU.roa (hash: 0GUBtBrdWkItfU5ir9EaRdqIIGetsONKxZfwhY7ap78=)
2: QjtOOOK5pwQKBGSkxklhdFksgp4.roa (hash: mBFc78U/Py4iQS+BrsEjELYMOU1hEEh06mY9X8mzPLw=)
3: T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.crl (hash: kHvdkNOUHKr/xsbGjjBm/dQTEFnu/SX0Dv2qJYwbKRU=)
4: tdMNK9TEqxpF4VZ5o4_bR4yE7Hc.roa (hash: XOeW5f83fNYsxiZeF2CyzZjG5tuKR78BMMUdvSarePY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:42:d3:f0:8f:8e:ca:e5:46:67:1f:1e:42:91:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fa5cde524f7810d5868bc49ab0bf6621f44dc21
Validity
Not Before: Nov 5 08:00:41 2025 GMT
Not After : Nov 6 08:00:41 2025 GMT
Subject: CN=be5428ec47da2edd13acfa14561be6eddb4d67c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bb:74:d0:2c:87:cb:e3:99:4f:85:30:c2:a0:
f4:16:c6:3f:b8:58:7a:a0:d3:99:b6:88:3a:3c:df:
cf:c5:84:f9:49:02:7f:2c:e2:08:6f:4e:0a:78:8f:
50:ca:40:51:33:2f:db:b4:99:ea:b7:96:41:fe:f4:
97:d8:d7:f7:08:53:73:e2:f6:63:97:d9:fa:cb:13:
39:52:68:f2:b8:f4:1f:a6:7f:1c:94:27:fa:0d:91:
07:20:3f:ed:6c:7b:34:6c:83:3c:0a:79:4e:06:02:
ca:65:a6:d1:d6:f4:38:9a:c8:9c:da:3e:1a:02:71:
03:3c:35:19:c0:ee:50:fb:e9:6a:f8:0a:1e:23:ab:
b9:1d:40:68:6b:70:a5:4c:e6:da:93:0e:71:fc:95:
fe:91:e2:51:fc:81:d9:f4:0b:0d:8a:61:98:b8:91:
a4:8a:f4:f4:8d:98:05:8d:06:b6:e9:91:97:81:59:
21:14:da:b9:c0:e2:02:57:ea:61:26:0f:9e:66:b4:
a3:06:b0:53:24:83:30:2a:5f:13:7c:26:5c:d1:6b:
8f:d5:2a:d0:cd:55:99:e6:6d:61:c9:c6:3a:b6:f8:
07:93:23:9f:6e:ce:87:11:d6:e1:b9:75:07:cf:3f:
fa:4a:f0:f7:2b:2a:e9:d6:16:d8:65:18:21:5d:4e:
46:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:54:28:EC:47:DA:2E:DD:13:AC:FA:14:56:1B:E6:ED:DB:4D:67:C6
X509v3 Authority Key Identifier:
keyid:4F:A5:CD:E5:24:F7:81:0D:58:68:BC:49:AB:0B:F6:62:1F:44:DC:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:28:88:58:1b:4f:47:ea:7e:1a:77:3f:b9:35:54:78:0c:94:
ce:e3:16:8b:bb:a6:37:57:dd:38:ed:31:fc:38:59:40:86:eb:
6a:43:63:31:45:61:73:3b:8e:38:b3:eb:f9:ca:1d:c1:89:c4:
09:60:df:42:ff:87:23:ae:01:bd:07:10:a5:d1:84:bd:c6:4e:
d3:56:13:b1:38:3a:ea:2f:d6:9a:d7:c3:3c:ea:da:3e:02:11:
34:63:ce:02:5a:5e:ed:b8:e8:ec:3e:45:ab:3c:0c:51:da:c4:
2c:a2:8e:14:55:05:27:a2:92:cf:25:46:99:a2:5c:78:8f:2c:
33:c4:b9:7e:50:83:08:26:fc:fc:2d:82:b3:52:5a:17:93:e2:
be:ad:fa:02:81:5e:c9:8d:d3:59:b3:bf:b2:e7:74:3a:15:9f:
37:5c:db:e8:b8:ad:eb:84:d5:93:eb:7c:f4:6d:8f:5b:ef:85:
b4:66:97:c1:1c:25:eb:e5:b6:ba:a1:99:15:67:56:41:31:51:
4e:45:e9:83:35:cf:d2:1c:50:08:b4:64:5f:7d:33:cb:65:e9:
18:22:03:8e:e7:78:2d:5b:5e:cb:19:94:50:09:8a:7d:5f:ab:
46:45:6f:2c:25:38:9c:25:4b:57:26:fd:90:e6:44:a9:4a:07:
20:72:14:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTCELT8I+OyuVGZx8eQpG1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYTVjZGU1MjRmNzgxMGQ1ODY4YmM0OWFiMGJmNjYyMWY0
NGRjMjEwHhcNMjUxMTA1MDgwMDQxWhcNMjUxMTA2MDgwMDQxWjAzMTEwLwYDVQQD
EyhiZTU0MjhlYzQ3ZGEyZWRkMTNhY2ZhMTQ1NjFiZTZlZGRiNGQ2N2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbt00CyHy+OZT4UwwqD0FsY/uFh6
oNOZtog6PN/PxYT5SQJ/LOIIb04KeI9QykBRMy/btJnqt5ZB/vSX2Nf3CFNz4vZj
l9n6yxM5UmjyuPQfpn8clCf6DZEHID/tbHs0bIM8CnlOBgLKZabR1vQ4msic2j4a
AnEDPDUZwO5Q++lq+AoeI6u5HUBoa3ClTObakw5x/JX+keJR/IHZ9AsNimGYuJGk
ivT0jZgFjQa26ZGXgVkhFNq5wOICV+phJg+eZrSjBrBTJIMwKl8TfCZc0WuP1SrQ
zVWZ5m1hycY6tvgHkyOfbs6HEdbhuXUHzz/6SvD3Kyrp1hbYZRghXU5GrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL5UKOxH2i7dE6z6FFYb5u3bTWfGMB8GA1UdIwQY
MBaAFE+lzeUk94ENWGi8SasL9mIfRNwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDZYTjVTVDNnUTFZYUx4SnF3djJZaDlFM0NFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9kNjA4OGMtMzExMC00MWUxLWI5OTYt
MzJkNGFkOGY1NmRlLzEvVDZYTjVTVDNnUTFZYUx4SnF3djJZaDlFM0NFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9kNjA4OGMtMzExMC00MWUxLWI5OTYtMzJkNGFkOGY1NmRl
LzEvVDZYTjVTVDNnUTFZYUx4SnF3djJZaDlFM0NFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMiiIWBtP
R+p+Gnc/uTVUeAyUzuMWi7umN1fdOO0x/DhZQIbrakNjMUVhczuOOLPr+codwYnE
CWDfQv+HI64BvQcQpdGEvcZO01YTsTg66i/WmtfDPOraPgIRNGPOAlpe7bjo7D5F
qzwMUdrELKKOFFUFJ6KSzyVGmaJceI8sM8S5flCDCCb8/C2Cs1JaF5Pivq36AoFe
yY3TWbO/sud0OhWfN1zb6Lit64TVk+t89G2PW++FtGaXwRwl6+W2uqGZFWdWQTFR
TkXpgzXP0hxQCLRkX30zy2XpGCIDjud4LVteyxmUUAmKfV+rRkVvLCU4nCVLVyb9
kOZEqUoHIHIUfg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:17:57 2025 by rpki-client