Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.mft
File: KB1PRjcTq5qSe37joQEFKxS6zDE.mft (raw, json)
Hash identifier: ZbpvPMiB5DicsZfu9iKd4/uHf/dYJP90PILXGf44kuA=
Subject key identifier: A6:77:6D:F9:92:4B:DF:35:6F:A9:8D:CF:43:EA:C0:82:39:6B:1F:84
Authority key identifier: 28:1D:4F:46:37:13:AB:9A:92:7B:7E:E3:A1:01:05:2B:14:BA:CC:31
Certificate issuer: /CN=281d4f463713ab9a927b7ee3a101052b14bacc31
Certificate serial: 019A1E3F23B0E65BC45C4FCBE2EB76FB9FE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KB1PRjcTq5qSe37joQEFKxS6zDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.mft
Manifest number: 06E6
Signing time: Sun 26 Oct 2025 02:00:45 +0000
Manifest this update: Sun 26 Oct 2025 02:00:45 +0000
Manifest next update: Mon 27 Oct 2025 02:00:45 +0000
Files and hashes: 1: 8xc5T7ury5KMF2VHztRlqOAeusg.roa (hash: x55hxfreszTrIIkybXdPS6uk26DUagMuBTackSU0wLE=)
2: KB1PRjcTq5qSe37joQEFKxS6zDE.crl (hash: dkrV8FZ4tXQ2WUbCeHViDCYHMcKDEJj7Xh1wpQGaKiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KB1PRjcTq5qSe37joQEFKxS6zDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 20:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:3f:23:b0:e6:5b:c4:5c:4f:cb:e2:eb:76:fb:9f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=281d4f463713ab9a927b7ee3a101052b14bacc31
Validity
Not Before: Oct 26 02:00:45 2025 GMT
Not After : Oct 27 02:00:45 2025 GMT
Subject: CN=a6776df9924bdf356fa98dcf43eac082396b1f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2e:e2:be:f5:ee:00:f2:fa:d0:be:15:ad:c3:
d2:d7:d3:0c:66:f0:a7:21:ec:23:7c:bd:bb:7a:fe:
06:72:53:f8:33:d9:2d:43:0d:56:75:07:ca:ed:17:
73:12:7a:f7:c8:76:c1:40:66:42:4e:88:96:68:1e:
29:dc:0a:52:86:b1:d5:35:ad:1c:e1:22:34:51:aa:
52:fb:cf:d9:96:45:8e:5c:60:fe:2a:09:97:f1:9d:
53:46:ef:19:eb:f5:af:cc:4c:94:5a:83:77:4d:0f:
26:0d:83:30:2b:68:d7:aa:a0:61:0e:e9:b4:16:9c:
41:d6:37:3e:84:b3:99:be:0e:54:13:8d:c2:ff:e1:
81:02:1b:5d:d7:92:40:15:7c:a9:3e:5f:2e:7a:a0:
f2:bb:07:ce:26:2c:39:61:d2:5b:72:07:68:cc:7e:
16:f2:52:bd:c2:94:b1:ad:63:2c:88:e9:cf:98:25:
15:cc:5a:b1:09:e9:c0:78:68:e7:06:75:70:63:c1:
c5:05:f9:03:ca:3d:81:28:6d:4e:a7:60:f1:33:ed:
b0:b8:47:6d:8c:a6:bb:99:52:cf:8a:91:8a:77:42:
e3:4f:eb:03:f3:f2:8b:93:0b:e3:00:6b:1f:33:5a:
0d:db:3c:66:7d:12:12:34:0b:40:03:83:cc:1a:3b:
5e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:77:6D:F9:92:4B:DF:35:6F:A9:8D:CF:43:EA:C0:82:39:6B:1F:84
X509v3 Authority Key Identifier:
keyid:28:1D:4F:46:37:13:AB:9A:92:7B:7E:E3:A1:01:05:2B:14:BA:CC:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KB1PRjcTq5qSe37joQEFKxS6zDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:98:2e:b6:69:1d:8b:ea:23:4f:f1:39:31:2a:bf:6b:2e:9d:
d7:1c:d4:84:e1:b1:f4:4c:4d:4b:a6:7f:8c:f0:20:ef:36:20:
d8:b0:c3:14:d0:78:b1:d6:ac:cc:4e:00:7b:78:8d:79:23:2f:
5e:07:49:80:0e:e1:80:fa:c5:76:2c:e7:84:96:4e:73:b3:f5:
85:a7:49:e1:60:21:34:5e:4f:c6:05:28:a0:fe:b1:46:09:d9:
4f:b4:fb:5e:4d:0f:f2:97:3d:89:70:34:5c:43:c7:01:6d:1f:
c8:81:72:f9:5c:ca:2c:98:46:75:8f:f8:1f:ea:6c:44:14:8e:
fa:b5:3f:1b:86:7c:82:02:96:5a:48:7a:87:2c:d4:27:01:10:
5d:71:f0:0a:37:a9:32:6c:04:2c:8f:4e:a1:f9:aa:95:34:00:
2c:cc:93:a6:ae:8d:73:78:32:8e:7e:82:1b:7f:92:76:98:8f:
73:23:a4:10:3c:a6:63:ab:f8:18:87:bf:97:74:86:74:44:26:
b9:b3:94:ef:3b:2a:c3:69:98:8e:12:a3:78:61:e4:7f:19:90:
ec:98:31:86:1e:40:d1:5c:d1:5a:6b:d5:ee:03:be:21:bd:6d:
75:70:6b:d8:a7:be:82:a5:3b:64:b0:b9:fc:19:75:77:cb:86:
0a:f9:b8:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoePyOw5lvEXE/L4ut2+5/mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MWQ0ZjQ2MzcxM2FiOWE5MjdiN2VlM2ExMDEwNTJiMTRi
YWNjMzEwHhcNMjUxMDI2MDIwMDQ1WhcNMjUxMDI3MDIwMDQ1WjAzMTEwLwYDVQQD
EyhhNjc3NmRmOTkyNGJkZjM1NmZhOThkY2Y0M2VhYzA4MjM5NmIxZjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxS7ivvXuAPL60L4VrcPS19MMZvCn
IewjfL27ev4GclP4M9ktQw1WdQfK7RdzEnr3yHbBQGZCToiWaB4p3ApShrHVNa0c
4SI0UapS+8/ZlkWOXGD+KgmX8Z1TRu8Z6/WvzEyUWoN3TQ8mDYMwK2jXqqBhDum0
FpxB1jc+hLOZvg5UE43C/+GBAhtd15JAFXypPl8ueqDyuwfOJiw5YdJbcgdozH4W
8lK9wpSxrWMsiOnPmCUVzFqxCenAeGjnBnVwY8HFBfkDyj2BKG1Op2DxM+2wuEdt
jKa7mVLPipGKd0LjT+sD8/KLkwvjAGsfM1oN2zxmfRISNAtAA4PMGjte0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKZ3bfmSS981b6mNz0PqwII5ax+EMB8GA1UdIwQY
MBaAFCgdT0Y3E6uaknt+46EBBSsUuswxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0IxUFJqY1RxNXFTZTM3am9RRUZLeFM2ekRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9mZmZmNmMtYzQ0NC00MjdlLTg3MTYt
MmVkMmZlYTIxZTNlLzEvS0IxUFJqY1RxNXFTZTM3am9RRUZLeFM2ekRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9mZmZmNmMtYzQ0NC00MjdlLTg3MTYtMmVkMmZlYTIxZTNl
LzEvS0IxUFJqY1RxNXFTZTM3am9RRUZLeFM2ekRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVJgutmkd
i+ojT/E5MSq/ay6d1xzUhOGx9ExNS6Z/jPAg7zYg2LDDFNB4sdaszE4Ae3iNeSMv
XgdJgA7hgPrFdiznhJZOc7P1hadJ4WAhNF5PxgUooP6xRgnZT7T7Xk0P8pc9iXA0
XEPHAW0fyIFy+VzKLJhGdY/4H+psRBSO+rU/G4Z8ggKWWkh6hyzUJwEQXXHwCjep
MmwELI9OofmqlTQALMyTpq6Nc3gyjn6CG3+SdpiPcyOkEDymY6v4GIe/l3SGdEQm
ubOU7zsqw2mYjhKjeGHkfxmQ7Jgxhh5A0VzRWmvV7gO+Ib1tdXBr2Ke+gqU7ZLC5
/Bl1d8uGCvm4rg==
-----END CERTIFICATE-----
Generated at Sun Oct 26 06:18:09 2025 by rpki-client