Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
File: igGrbNRKej6kACwQapbEJ7UsgdU.mft (raw, json)
Hash identifier: 7ZPUH5Daiw4GryBCAAVTjHTKBPawiz0UFtiu5uSyLy8=
Subject key identifier: 6C:5B:5D:F8:0E:19:A3:0F:B9:55:55:3B:E0:B8:97:96:1A:BB:5A:CE
Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Certificate serial: 019A71EE79E2A379C6D6C1F040F6F7475849
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
Manifest number: 1466
Signing time: Tue 11 Nov 2025 08:00:45 +0000
Manifest this update: Tue 11 Nov 2025 08:00:45 +0000
Manifest next update: Wed 12 Nov 2025 08:00:45 +0000
Files and hashes: 1: 1UHsPnht93cnjqacHzDZGozstlU.roa (hash: sn6UImS2sxFUQqqQ+ntyQ/sKctqCKvWxNyVg5LKfCSk=)
2: 9fBlTpzE1JBsgOrrxy7zfs5HX8k.roa (hash: pZfUWEYp7quP4c2uEiu9XQOEIJS1Fn2BIiWse8+7UWw=)
3: igGrbNRKej6kACwQapbEJ7UsgdU.crl (hash: BJEKwVug5oVGHA4HVvwcJtu6DcHkI7U9I2tM7vUmQRM=)
4: m5xvyqWguiM9o_m2SNXo8CXYn_Y.roa (hash: L1ifCZ/lpcCqhfhywoza60yVvKF8HYMbgjCFz4+qb5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:79:e2:a3:79:c6:d6:c1:f0:40:f6:f7:47:58:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Validity
Not Before: Nov 11 08:00:45 2025 GMT
Not After : Nov 12 08:00:45 2025 GMT
Subject: CN=6c5b5df80e19a30fb955553be0b897961abb5ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:47:ab:86:ac:16:0e:b9:38:2d:9f:e8:ea:fa:
36:18:8e:84:d4:1a:ca:3b:86:80:4a:9c:5d:49:b3:
0f:31:83:df:eb:1a:41:e7:43:7b:0a:fe:89:58:7c:
ae:19:12:67:80:e1:8a:34:24:2e:5b:77:d5:4f:c8:
4e:1a:d9:b4:b3:72:d3:22:3d:c0:af:12:15:6a:86:
22:64:eb:15:0b:0d:43:7f:cd:ca:c4:ae:d1:0a:f4:
dc:4d:15:f8:fb:db:46:4b:7e:76:d9:a8:27:f0:05:
1b:a0:84:a5:1d:50:40:70:10:12:55:e2:f6:6b:38:
7d:9b:42:95:19:5c:84:13:b3:0a:e1:27:8d:11:f7:
63:2b:6b:a4:b8:bc:b3:db:67:82:a8:de:2d:a4:c4:
b0:2f:23:1a:de:66:f0:f8:2f:ac:c1:3f:11:6e:22:
c0:86:dc:f3:29:30:3e:41:f6:b0:c6:9b:98:24:7b:
06:bf:99:0b:2a:bf:c7:20:2d:9d:4e:3b:7a:0e:17:
6d:da:af:55:0b:7d:b9:6f:28:20:4c:12:3c:bd:68:
ac:54:de:be:53:59:bb:0b:c8:09:3b:21:b0:3e:35:
38:e7:35:df:fe:47:7a:82:8e:c5:2b:3a:8a:39:50:
df:24:47:2b:9e:be:7c:1c:6b:d4:de:a3:e7:19:a7:
3f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:5B:5D:F8:0E:19:A3:0F:B9:55:55:3B:E0:B8:97:96:1A:BB:5A:CE
X509v3 Authority Key Identifier:
keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:00:2c:19:76:99:31:3b:55:36:39:d6:fe:30:aa:2f:29:68:
b8:9e:7c:11:a5:8f:d4:23:60:a1:0f:f4:1e:fb:ee:3a:fa:8a:
94:c8:59:53:0a:fa:39:d1:82:9a:f7:7a:10:3f:17:3e:60:7a:
33:a6:13:30:0b:04:5a:86:fc:20:b5:07:09:2f:d5:ad:4b:8f:
a0:0e:3a:e8:35:45:88:80:ac:7d:04:94:81:d4:36:0b:f5:c6:
84:ab:f5:b8:68:f5:37:1c:fd:cd:8a:05:f9:a3:cf:5c:b5:75:
6f:ec:73:7c:92:95:98:1a:aa:a5:96:bc:c6:78:4b:02:8c:99:
ac:ea:8c:8a:e9:f1:d7:ac:da:71:5a:f0:b6:03:a0:c0:a2:d6:
c5:01:33:1e:00:d1:57:30:27:66:cd:4b:f4:9a:e0:14:ad:3b:
9e:19:7b:cc:36:e4:77:d7:e7:08:75:93:33:3e:b9:64:74:f6:
79:a4:35:ee:f7:1f:b3:5e:4f:81:27:e5:05:96:31:36:6f:6d:
ba:81:b8:6a:e1:6e:d7:23:41:c3:d2:0d:9b:49:e2:77:bc:33:
26:65:dc:ae:a2:43:82:b2:7b:17:1b:9d:68:6b:31:95:89:37:
7a:68:a1:d4:82:7e:e3:22:32:81:1e:ae:bf:b2:29:9e:0e:d6:
32:8a:44:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7nnio3nG1sHwQPb3R1hJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMDFhYjZjZDQ0YTdhM2VhNDAwMmMxMDZhOTZjNDI3YjUy
YzgxZDUwHhcNMjUxMTExMDgwMDQ1WhcNMjUxMTEyMDgwMDQ1WjAzMTEwLwYDVQQD
Eyg2YzViNWRmODBlMTlhMzBmYjk1NTU1M2JlMGI4OTc5NjFhYmI1YWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUerhqwWDrk4LZ/o6vo2GI6E1BrK
O4aASpxdSbMPMYPf6xpB50N7Cv6JWHyuGRJngOGKNCQuW3fVT8hOGtm0s3LTIj3A
rxIVaoYiZOsVCw1Df83KxK7RCvTcTRX4+9tGS3522agn8AUboISlHVBAcBASVeL2
azh9m0KVGVyEE7MK4SeNEfdjK2ukuLyz22eCqN4tpMSwLyMa3mbw+C+swT8RbiLA
htzzKTA+QfawxpuYJHsGv5kLKr/HIC2dTjt6Dhdt2q9VC325byggTBI8vWisVN6+
U1m7C8gJOyGwPjU45zXf/kd6go7FKzqKOVDfJEcrnr58HGvU3qPnGac/iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGxbXfgOGaMPuVVVO+C4l5Yau1rOMB8GA1UdIwQY
MBaAFIoBq2zUSno+pAAsEGqWxCe1LIHVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEt
OWZlYmY4YzNlMzNmLzEvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEtOWZlYmY4YzNlMzNm
LzEvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASgAsGXaZ
MTtVNjnW/jCqLylouJ58EaWP1CNgoQ/0HvvuOvqKlMhZUwr6OdGCmvd6ED8XPmB6
M6YTMAsEWob8ILUHCS/VrUuPoA466DVFiICsfQSUgdQ2C/XGhKv1uGj1Nxz9zYoF
+aPPXLV1b+xzfJKVmBqqpZa8xnhLAoyZrOqMiunx16zacVrwtgOgwKLWxQEzHgDR
VzAnZs1L9JrgFK07nhl7zDbkd9fnCHWTMz65ZHT2eaQ17vcfs15PgSflBZYxNm9t
uoG4auFu1yNBw9INm0nid7wzJmXcrqJDgrJ7FxudaGsxlYk3emih1IJ+4yIygR6u
v7Ipng7WMopEhQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:01 2025 by rpki-client