Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
File: yciBJHytvL9SqirXYsx0VKeocm4.mft (raw, json)
Hash identifier: kW9mSuPFlFh5GhI/3d8ngMivR3eiOa8SCCE1Qt5mBN0=
Subject key identifier: AA:66:B3:CE:A6:1F:25:3E:5E:84:2A:EE:B3:DA:1E:DC:94:96:F6:B0
Authority key identifier: C9:C8:81:24:7C:AD:BC:BF:52:AA:2A:D7:62:CC:74:54:A7:A8:72:6E
Certificate issuer: /CN=c9c881247cadbcbf52aa2ad762cc7454a7a8726e
Certificate serial: 019A729349399BE781BD315386C0AD29050A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
Manifest number: 15E6
Signing time: Tue 11 Nov 2025 11:00:46 +0000
Manifest this update: Tue 11 Nov 2025 11:00:46 +0000
Manifest next update: Wed 12 Nov 2025 11:00:46 +0000
Files and hashes: 1: jOZRDN_BFHgGfDMvwJ0jkJTVBko.roa (hash: v7urVrLJEvfyeck+EYvOP/ZepjN99wS4T6ZKWFITJzs=)
2: yciBJHytvL9SqirXYsx0VKeocm4.crl (hash: f+TJQExE+2dDefA6OTRHU5mKNtgi+A+gSFwHXIuFirA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:49:39:9b:e7:81:bd:31:53:86:c0:ad:29:05:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9c881247cadbcbf52aa2ad762cc7454a7a8726e
Validity
Not Before: Nov 11 11:00:46 2025 GMT
Not After : Nov 12 11:00:46 2025 GMT
Subject: CN=aa66b3cea61f253e5e842aeeb3da1edc9496f6b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:fd:0d:33:18:9b:59:e8:66:0e:0f:0f:0c:9e:
86:ec:b5:81:d2:6e:c5:8c:a5:06:16:17:ff:0f:62:
14:44:08:90:f9:6d:36:62:2c:20:c4:53:c5:47:68:
58:f5:86:91:2c:43:fb:12:e8:5f:68:82:93:1e:e8:
7c:f6:ac:7e:da:c0:5a:65:26:fd:6f:4c:91:b5:74:
74:7f:54:49:56:34:48:1f:c8:7f:2d:4a:1b:a2:95:
1b:9f:50:6d:df:9f:82:30:16:a1:66:97:ff:eb:c1:
22:f7:af:76:7e:49:05:5a:f4:e7:ce:87:fe:a7:17:
0a:8e:6c:03:86:83:9a:c7:96:af:62:16:d4:d8:a4:
42:eb:ce:80:82:64:9b:ec:f3:42:e4:01:ec:b2:09:
cd:8f:e8:68:b0:40:ed:08:3f:fa:01:15:12:03:06:
35:93:c6:d3:88:99:4a:17:ab:4e:51:bb:75:14:e0:
8f:15:2f:37:72:b2:77:06:03:89:37:16:49:dd:9a:
d8:cc:9c:26:ff:be:d2:f2:bf:38:ac:d6:f5:a6:47:
8a:da:c2:23:d6:4a:34:f9:4e:87:e6:60:00:38:92:
d1:75:41:7e:49:cc:d3:f6:96:47:36:59:a4:37:2b:
45:e4:26:d7:94:da:93:b6:77:8c:5d:41:f6:12:ab:
5f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:66:B3:CE:A6:1F:25:3E:5E:84:2A:EE:B3:DA:1E:DC:94:96:F6:B0
X509v3 Authority Key Identifier:
keyid:C9:C8:81:24:7C:AD:BC:BF:52:AA:2A:D7:62:CC:74:54:A7:A8:72:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:39:56:26:1b:58:02:68:b7:74:6a:cb:61:8e:3c:51:2f:3d:
f8:54:32:b8:6b:1f:35:76:8d:a0:b6:ae:bf:8c:89:85:6d:bb:
cc:06:a2:0a:08:7f:34:3a:0b:75:82:57:01:a5:26:7c:b2:4c:
7b:36:9e:d5:78:45:12:8e:b5:11:68:e3:0c:02:68:b4:5d:19:
5f:e0:a2:7b:6c:57:94:ec:26:c0:8a:e6:d8:ac:ac:61:6a:97:
07:e8:5c:9c:80:a1:d0:d5:d2:fc:86:21:3f:c3:50:ca:9c:59:
79:86:ab:7c:c7:49:4d:c3:31:09:f5:08:f8:c6:44:35:77:fc:
3c:ed:33:0f:56:04:a8:4b:0b:d7:11:04:15:62:b4:fe:5d:81:
a0:83:69:45:01:f9:8c:6e:21:1c:33:18:df:db:31:40:53:f1:
63:f5:48:21:cf:6e:1e:94:28:a5:dc:67:6e:2e:22:b3:0a:22:
65:39:f2:14:c8:53:b7:58:16:52:26:e1:87:f5:e6:52:5a:cd:
76:8c:26:9e:dd:de:88:d0:6c:8c:6a:2c:28:28:6d:a6:1e:a2:
e2:7b:af:f5:f2:b4:8d:b8:f9:86:c8:e3:5d:63:c4:85:e3:e3:
34:e0:b1:ad:f7:7f:5c:f4:11:14:7e:1e:81:c2:47:22:cc:fe:
88:11:f2:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk0k5m+eBvTFThsCtKQUKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5Yzg4MTI0N2NhZGJjYmY1MmFhMmFkNzYyY2M3NDU0YTdh
ODcyNmUwHhcNMjUxMTExMTEwMDQ2WhcNMjUxMTEyMTEwMDQ2WjAzMTEwLwYDVQQD
EyhhYTY2YjNjZWE2MWYyNTNlNWU4NDJhZWViM2RhMWVkYzk0OTZmNmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4f0NMxibWehmDg8PDJ6G7LWB0m7F
jKUGFhf/D2IURAiQ+W02YiwgxFPFR2hY9YaRLEP7EuhfaIKTHuh89qx+2sBaZSb9
b0yRtXR0f1RJVjRIH8h/LUobopUbn1Bt35+CMBahZpf/68Ei9692fkkFWvTnzof+
pxcKjmwDhoOax5avYhbU2KRC686AgmSb7PNC5AHssgnNj+hosEDtCD/6ARUSAwY1
k8bTiJlKF6tOUbt1FOCPFS83crJ3BgOJNxZJ3ZrYzJwm/77S8r84rNb1pkeK2sIj
1ko0+U6H5mAAOJLRdUF+SczT9pZHNlmkNytF5CbXlNqTtneMXUH2EqtfzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKpms86mHyU+XoQq7rPaHtyUlvawMB8GA1UdIwQY
MBaAFMnIgSR8rby/Uqoq12LMdFSnqHJuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWNpQkpIeXR2TDlTcWlyWFlzeDBWS2VvY200LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82ZDZiNTMtOTVhOS00ZDYwLWI0NmQt
N2VmZTkwNWZmMjkxLzEveWNpQkpIeXR2TDlTcWlyWFlzeDBWS2VvY200Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi82ZDZiNTMtOTVhOS00ZDYwLWI0NmQtN2VmZTkwNWZmMjkx
LzEveWNpQkpIeXR2TDlTcWlyWFlzeDBWS2VvY200LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbzlWJhtY
Ami3dGrLYY48US89+FQyuGsfNXaNoLauv4yJhW27zAaiCgh/NDoLdYJXAaUmfLJM
ezae1XhFEo61EWjjDAJotF0ZX+Cie2xXlOwmwIrm2KysYWqXB+hcnICh0NXS/IYh
P8NQypxZeYarfMdJTcMxCfUI+MZENXf8PO0zD1YEqEsL1xEEFWK0/l2BoINpRQH5
jG4hHDMY39sxQFPxY/VIIc9uHpQopdxnbi4iswoiZTnyFMhTt1gWUibhh/XmUlrN
dowmnt3eiNBsjGosKChtph6i4nuv9fK0jbj5hsjjXWPEhePjNOCxrfd/XPQRFH4e
gcJHIsz+iBHybg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:52 2025 by rpki-client