Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.mft
File: a6JrVs7pf2AglBuxfGp8bOoPgUo.mft (raw, json)
Hash identifier: Hf1gnfHP9A6qCCAb3zoSAuMjQRPwvTxiEnKLNfVS9MU=
Subject key identifier: B5:11:B8:52:D2:F0:E0:EC:5E:C9:EC:51:BF:69:68:BB:D1:A2:F0:74
Authority key identifier: 6B:A2:6B:56:CE:E9:7F:60:20:94:1B:B1:7C:6A:7C:6C:EA:0F:81:4A
Certificate issuer: /CN=6ba26b56cee97f6020941bb17c6a7c6cea0f814a
Certificate serial: 019A4D744EC8303F271FB6F439A0B9C95500
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6JrVs7pf2AglBuxfGp8bOoPgUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.mft
Manifest number: 13CC
Signing time: Tue 04 Nov 2025 06:00:59 +0000
Manifest this update: Tue 04 Nov 2025 06:00:59 +0000
Manifest next update: Wed 05 Nov 2025 06:00:59 +0000
Files and hashes: 1: Xv_k9B_Ol6KMXiDbnDdwE9msKgI.roa (hash: o2br+mpVDRPvcRh8PVchKStcPAlc6/q+ycf8CdzuWcA=)
2: a6JrVs7pf2AglBuxfGp8bOoPgUo.crl (hash: LTwMqiEXStm1vyikJ97p3VxyqB18vgYqSe2qI3iB7MI=)
3: j0LzYUhIgfi314lRG-UPK6juSV4.roa (hash: OB2pKs0VeSqp3qXLCAeqefAg0imNyv8nfRlrTm7jRsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a6JrVs7pf2AglBuxfGp8bOoPgUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:4e:c8:30:3f:27:1f:b6:f4:39:a0:b9:c9:55:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba26b56cee97f6020941bb17c6a7c6cea0f814a
Validity
Not Before: Nov 4 06:00:59 2025 GMT
Not After : Nov 5 06:00:59 2025 GMT
Subject: CN=b511b852d2f0e0ec5ec9ec51bf6968bbd1a2f074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:bb:eb:61:59:0d:fa:1b:89:5f:a5:df:8e:1e:
20:82:aa:61:27:4b:e7:c8:f5:21:e1:d3:96:af:f7:
0e:35:c0:88:f5:6d:88:67:c8:8e:2e:d4:31:07:1f:
40:fb:62:ef:cb:f7:0b:9b:48:e2:80:ce:e1:e8:fb:
eb:7d:d1:37:6f:30:c3:43:22:af:87:95:6e:31:9c:
66:ea:8f:a5:b1:d5:d4:a1:35:e3:f0:ed:d6:39:61:
1b:cb:66:b5:4e:70:05:a1:e1:39:e9:9d:14:ab:df:
74:00:31:e5:b0:b6:ed:41:66:e8:36:30:37:97:56:
a2:c9:da:53:0f:4b:1d:7d:17:bc:c5:33:92:16:29:
52:2a:61:f9:c9:34:42:d3:09:f7:3b:b7:c4:7d:2b:
ab:2c:c6:c4:02:d3:5a:22:91:03:c4:cf:f7:91:00:
1d:c5:7c:86:a0:c8:5b:a4:aa:4c:7b:f2:60:64:ed:
d5:0b:e3:7e:f0:aa:0e:0c:9a:55:f5:2d:86:30:97:
79:ae:c8:a0:91:0b:f0:ac:26:c2:9a:84:00:6e:ff:
16:94:37:62:92:ab:51:e2:c2:58:84:e4:2a:30:c5:
68:0b:3b:46:75:35:43:1a:78:2f:b0:ce:7c:3e:d9:
82:89:a3:f7:69:f5:c0:b8:04:fe:d6:80:85:2f:ac:
10:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:11:B8:52:D2:F0:E0:EC:5E:C9:EC:51:BF:69:68:BB:D1:A2:F0:74
X509v3 Authority Key Identifier:
keyid:6B:A2:6B:56:CE:E9:7F:60:20:94:1B:B1:7C:6A:7C:6C:EA:0F:81:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6JrVs7pf2AglBuxfGp8bOoPgUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:bd:54:46:20:b4:f1:ee:43:21:b1:b6:83:a4:74:36:74:68:
f1:f8:04:39:c8:76:e2:19:15:cf:db:f3:71:05:9d:43:a2:06:
93:24:b3:84:eb:72:c6:bc:a6:bc:d9:e2:81:bd:03:84:ec:0e:
7a:64:62:71:43:02:5e:b8:43:47:1e:e8:ae:01:a4:eb:82:2b:
28:82:a3:e9:d5:11:25:01:20:82:08:8a:c1:15:83:a0:ab:a3:
bb:fe:87:a0:11:a9:9d:65:1e:2d:df:d3:61:06:03:7a:11:4b:
34:05:0b:a5:95:31:e3:dc:0b:bf:df:23:40:cd:bd:be:1a:62:
57:05:8b:55:a9:29:8c:f5:30:71:09:46:7c:ef:44:de:2b:9d:
40:0e:84:4f:b7:ac:13:44:a0:48:93:22:ac:68:29:04:e6:df:
ae:cb:e9:0f:ee:eb:25:c6:9a:46:04:04:60:fa:8e:fb:11:39:
76:5a:c7:d1:76:f5:7c:7d:2c:8d:87:ab:6c:2d:0b:59:7c:b1:
b3:29:32:2c:2d:3a:d6:0c:ec:8e:28:55:09:36:c2:1f:96:4f:
eb:a9:fa:b0:61:9b:65:1b:a0:4f:61:53:ad:c0:2b:5a:b4:f0:
41:12:d0:46:a4:37:ad:ee:9d:34:05:0a:01:b7:7b:20:6b:87:
80:e9:cd:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNdE7IMD8nH7b0OaC5yVUAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYTI2YjU2Y2VlOTdmNjAyMDk0MWJiMTdjNmE3YzZjZWEw
ZjgxNGEwHhcNMjUxMTA0MDYwMDU5WhcNMjUxMTA1MDYwMDU5WjAzMTEwLwYDVQQD
EyhiNTExYjg1MmQyZjBlMGVjNWVjOWVjNTFiZjY5NjhiYmQxYTJmMDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6LvrYVkN+huJX6Xfjh4ggqphJ0vn
yPUh4dOWr/cONcCI9W2IZ8iOLtQxBx9A+2Lvy/cLm0jigM7h6PvrfdE3bzDDQyKv
h5VuMZxm6o+lsdXUoTXj8O3WOWEby2a1TnAFoeE56Z0Uq990ADHlsLbtQWboNjA3
l1aiydpTD0sdfRe8xTOSFilSKmH5yTRC0wn3O7fEfSurLMbEAtNaIpEDxM/3kQAd
xXyGoMhbpKpMe/JgZO3VC+N+8KoODJpV9S2GMJd5rsigkQvwrCbCmoQAbv8WlDdi
kqtR4sJYhOQqMMVoCztGdTVDGngvsM58PtmCiaP3afXAuAT+1oCFL6wQTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLURuFLS8ODsXsnsUb9paLvRovB0MB8GA1UdIwQY
MBaAFGuia1bO6X9gIJQbsXxqfGzqD4FKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTZKclZzN3BmMkFnbEJ1eGZHcDhiT29QZ1VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iOTAzZTktNmQwOS00ZTIwLWI5MjYt
MzY5MmY5NmUzM2E5LzEvYTZKclZzN3BmMkFnbEJ1eGZHcDhiT29QZ1VvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9iOTAzZTktNmQwOS00ZTIwLWI5MjYtMzY5MmY5NmUzM2E5
LzEvYTZKclZzN3BmMkFnbEJ1eGZHcDhiT29QZ1VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZb1URiC0
8e5DIbG2g6R0NnRo8fgEOch24hkVz9vzcQWdQ6IGkySzhOtyxrymvNnigb0DhOwO
emRicUMCXrhDRx7orgGk64IrKIKj6dURJQEgggiKwRWDoKuju/6HoBGpnWUeLd/T
YQYDehFLNAULpZUx49wLv98jQM29vhpiVwWLVakpjPUwcQlGfO9E3iudQA6ET7es
E0SgSJMirGgpBObfrsvpD+7rJcaaRgQEYPqO+xE5dlrH0Xb1fH0sjYerbC0LWXyx
sykyLC061gzsjihVCTbCH5ZP66n6sGGbZRugT2FTrcArWrTwQRLQRqQ3re6dNAUK
Abd7IGuHgOnN0w==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:25 2025 by rpki-client