Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft
File: pe6Sbx8VN7m-detLnXkt9B0lzZk.mft (raw, json)
Hash identifier: 6goGYwi27weyj2jAx3/fZMbSfEFrSTY0sv5r6SGgqhU=
Subject key identifier: 55:78:D7:F7:DF:00:44:7E:47:87:09:FB:3A:39:A4:73:A4:B7:63:EF
Authority key identifier: A5:EE:92:6F:1F:15:37:B9:BE:75:EB:4B:9D:79:2D:F4:1D:25:CD:99
Certificate issuer: /CN=a5ee926f1f1537b9be75eb4b9d792df41d25cd99
Certificate serial: 019A7293EA6CFF49AC9BBF2627EF3602FEA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pe6Sbx8VN7m-detLnXkt9B0lzZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft
Manifest number: 0DF6
Signing time: Tue 11 Nov 2025 11:01:27 +0000
Manifest this update: Tue 11 Nov 2025 11:01:27 +0000
Manifest next update: Wed 12 Nov 2025 11:01:27 +0000
Files and hashes: 1: WDPyyXGbTlVNzNvHMt_u6jFAfDs.roa (hash: Io6wRfSHyznIog5I1/syrGcc1ZOg6epQfuj3AIJAZhg=)
2: pe6Sbx8VN7m-detLnXkt9B0lzZk.crl (hash: L+bpbt1iRWXyt0JYjUW6gGTqVDR5Yx9tmc/YfUUOjvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pe6Sbx8VN7m-detLnXkt9B0lzZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:ea:6c:ff:49:ac:9b:bf:26:27:ef:36:02:fe:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ee926f1f1537b9be75eb4b9d792df41d25cd99
Validity
Not Before: Nov 11 11:01:27 2025 GMT
Not After : Nov 12 11:01:27 2025 GMT
Subject: CN=5578d7f7df00447e478709fb3a39a473a4b763ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:52:db:d4:fa:01:59:13:44:d3:0d:b5:70:c9:
37:f6:86:a4:be:f4:e1:a7:08:55:b8:87:1d:dc:3b:
1d:ff:f0:ae:98:f7:36:a0:c1:b1:8b:1f:13:e1:f3:
1f:e2:b4:10:64:1f:be:87:b5:db:c4:c3:21:e9:f9:
8d:20:c7:1f:f5:ea:50:7a:20:a8:a2:92:b8:36:07:
a8:56:6d:e3:f8:c3:8b:e4:7e:b5:58:c4:70:cd:dd:
b9:e1:63:69:04:ed:04:77:2d:d0:af:8c:cb:b7:6e:
1b:85:9b:76:76:29:97:bb:b9:2a:1e:a8:df:1f:18:
f3:7b:ef:14:fd:a9:0f:4d:85:54:4d:fa:43:71:e0:
a4:c8:16:0f:47:17:0c:b9:4c:26:06:f5:8b:45:15:
74:2c:90:7b:37:49:c2:38:58:da:7d:ef:da:70:09:
07:c4:55:0c:65:06:ce:8b:1a:84:ea:76:f8:62:6b:
74:f5:2c:73:89:49:6a:84:a0:c5:7d:72:22:98:66:
e1:3b:d9:34:03:96:5a:d8:d3:27:7b:0c:8b:6e:4e:
45:08:93:c5:eb:50:5c:7a:66:13:d5:88:f7:9a:f7:
65:74:27:5d:14:da:fa:bc:be:a3:87:c9:9d:71:e8:
12:e6:a5:f3:36:b2:ba:06:5e:65:a3:6e:0c:a1:24:
04:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:78:D7:F7:DF:00:44:7E:47:87:09:FB:3A:39:A4:73:A4:B7:63:EF
X509v3 Authority Key Identifier:
keyid:A5:EE:92:6F:1F:15:37:B9:BE:75:EB:4B:9D:79:2D:F4:1D:25:CD:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pe6Sbx8VN7m-detLnXkt9B0lzZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:25:78:08:45:6a:fc:94:cf:f4:58:e5:a3:e6:4a:14:28:81:
8d:a1:24:0e:3c:07:f9:fd:5f:10:4e:d5:11:ae:67:ad:ce:6f:
88:4f:3a:93:85:f8:9d:da:1f:aa:54:04:57:b9:eb:67:96:81:
6d:f1:54:fa:c8:ab:c4:11:69:5b:2a:cd:c4:19:fd:f8:55:44:
5f:e5:65:63:60:d7:b9:1d:6b:c2:ca:b1:12:1f:af:67:98:62:
07:80:8e:5b:df:73:7f:88:db:d2:ff:02:b1:61:9c:f0:0e:f3:
d1:19:c2:22:cf:e5:24:2d:ac:64:c0:e8:3b:ab:53:60:ec:dc:
22:7e:1e:cc:0d:4b:6d:f2:3b:6a:38:ed:52:ed:0e:fd:b1:78:
b6:1a:46:08:49:27:5c:97:17:b5:65:e9:d1:9e:44:ba:ba:51:
f6:0a:75:2c:2b:0b:55:3b:94:02:22:5f:39:79:58:1e:6b:fa:
1b:49:5e:1a:32:58:74:7f:b6:9d:34:c5:a9:92:3c:b4:bc:b8:
14:69:b4:a8:58:00:18:d9:1f:52:8f:0c:dd:cf:84:39:c7:7a:
e8:2b:4d:92:4e:ef:f1:48:84:38:ec:9f:c4:59:2f:01:20:9b:
32:33:7f:33:50:02:be:cd:40:59:03:e0:6f:3a:c9:30:d2:92:
55:0d:ff:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk+ps/0msm78mJ+82Av6nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1ZWU5MjZmMWYxNTM3YjliZTc1ZWI0YjlkNzkyZGY0MWQy
NWNkOTkwHhcNMjUxMTExMTEwMTI3WhcNMjUxMTEyMTEwMTI3WjAzMTEwLwYDVQQD
Eyg1NTc4ZDdmN2RmMDA0NDdlNDc4NzA5ZmIzYTM5YTQ3M2E0Yjc2M2VmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7FLb1PoBWRNE0w21cMk39oakvvTh
pwhVuIcd3Dsd//CumPc2oMGxix8T4fMf4rQQZB++h7XbxMMh6fmNIMcf9epQeiCo
opK4NgeoVm3j+MOL5H61WMRwzd254WNpBO0Edy3Qr4zLt24bhZt2dimXu7kqHqjf
Hxjze+8U/akPTYVUTfpDceCkyBYPRxcMuUwmBvWLRRV0LJB7N0nCOFjafe/acAkH
xFUMZQbOixqE6nb4Ymt09SxziUlqhKDFfXIimGbhO9k0A5Za2NMnewyLbk5FCJPF
61BcemYT1Yj3mvdldCddFNr6vL6jh8mdcegS5qXzNrK6Bl5lo24MoSQEKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFV41/ffAER+R4cJ+zo5pHOkt2PvMB8GA1UdIwQY
MBaAFKXukm8fFTe5vnXrS515LfQdJc2ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGU2U2J4OFZON20tZGV0TG5Ya3Q5QjBselprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9hODdhZWMtYmVhYS00YWViLWE0OGUt
OGYzNGJkMzkxZDE4LzEvcGU2U2J4OFZON20tZGV0TG5Ya3Q5QjBselprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9hODdhZWMtYmVhYS00YWViLWE0OGUtOGYzNGJkMzkxZDE4
LzEvcGU2U2J4OFZON20tZGV0TG5Ya3Q5QjBselprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoiV4CEVq
/JTP9Fjlo+ZKFCiBjaEkDjwH+f1fEE7VEa5nrc5viE86k4X4ndofqlQEV7nrZ5aB
bfFU+sirxBFpWyrNxBn9+FVEX+VlY2DXuR1rwsqxEh+vZ5hiB4COW99zf4jb0v8C
sWGc8A7z0RnCIs/lJC2sZMDoO6tTYOzcIn4ezA1LbfI7ajjtUu0O/bF4thpGCEkn
XJcXtWXp0Z5EurpR9gp1LCsLVTuUAiJfOXlYHmv6G0leGjJYdH+2nTTFqZI8tLy4
FGm0qFgAGNkfUo8M3c+EOcd66CtNkk7v8UiEOOyfxFkvASCbMjN/M1ACvs1AWQPg
bzrJMNKSVQ3/pw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:00 2025 by rpki-client