Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft
File: H6rKuORWuykZeac1enAk8AvrqvU.mft (raw, json)
Hash identifier: MCn6pTe/KHO0zSgCaCVesVwkGPofGPEoRGIVRYjeHKQ=
Subject key identifier: 17:7E:0E:4B:59:C8:66:7C:ED:90:69:87:15:4C:C6:78:00:11:9A:D0
Authority key identifier: 1F:AA:CA:B8:E4:56:BB:29:19:79:A7:35:7A:70:24:F0:0B:EB:AA:F5
Certificate issuer: /CN=1faacab8e456bb291979a7357a7024f00bebaaf5
Certificate serial: 019A725CD303B94C6261994BAD9DD1CF9604
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft
Manifest number: 0607
Signing time: Tue 11 Nov 2025 10:01:17 +0000
Manifest this update: Tue 11 Nov 2025 10:01:17 +0000
Manifest next update: Wed 12 Nov 2025 10:01:17 +0000
Files and hashes: 1: H6rKuORWuykZeac1enAk8AvrqvU.crl (hash: ijOkWT6/0HJ7CzY0vJQ/Avu7eRJPzbFVPHlYRsEeoJQ=)
2: VgX2YIG6L_L8c5HWMPiqq1n_S1o.roa (hash: BRlNIKeJrtOTaA3OLFtig45D6GjYy7gWY1CCeaiI+5U=)
3: sDqZRTbZvAQQTn6KJoc_Vm9WzY4.roa (hash: iL19VOkv+2+1Ma+y58+a49a0z0arTyOufs85rap+38w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:d3:03:b9:4c:62:61:99:4b:ad:9d:d1:cf:96:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1faacab8e456bb291979a7357a7024f00bebaaf5
Validity
Not Before: Nov 11 10:01:17 2025 GMT
Not After : Nov 12 10:01:17 2025 GMT
Subject: CN=177e0e4b59c8667ced906987154cc67800119ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c6:a9:90:ec:e4:8d:40:35:19:41:59:7c:1a:
6b:a7:5c:1b:e7:11:5b:95:31:5a:22:20:53:52:95:
ef:6f:85:f1:36:9f:41:87:f5:74:bb:ea:2f:56:96:
34:88:ba:f3:20:f1:c0:5e:d3:62:67:48:1b:a4:5d:
c4:43:e6:d2:5e:1d:4e:e9:f3:95:3f:e6:61:04:b9:
a8:a7:c9:9b:9f:a3:47:90:1a:b1:e1:87:fa:b3:41:
95:71:b0:c8:25:35:53:76:ed:ad:5c:5e:b4:73:77:
0b:fe:e6:c2:0c:eb:f0:5d:bf:ef:98:56:25:8d:be:
d8:49:3d:2b:d0:50:6b:4b:5d:8b:61:00:d1:23:5b:
e8:57:b5:12:52:40:5d:6d:4e:eb:60:27:7e:bd:55:
e9:16:b2:61:60:e0:83:61:8a:85:11:14:a7:3d:3c:
20:a2:89:2c:cf:fa:8d:f5:2f:82:eb:af:bb:38:4f:
7b:09:ef:ac:05:38:18:c9:16:91:ae:dc:61:94:a4:
87:d4:e7:26:cf:31:9b:6b:a3:b4:03:23:bb:44:56:
e0:67:33:64:0b:a3:58:7e:db:96:a0:d7:74:49:0a:
57:41:3b:a4:64:85:10:13:d0:be:e7:88:b6:45:5f:
97:04:1e:ac:14:a8:61:b8:88:97:7e:13:75:32:2a:
df:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:7E:0E:4B:59:C8:66:7C:ED:90:69:87:15:4C:C6:78:00:11:9A:D0
X509v3 Authority Key Identifier:
keyid:1F:AA:CA:B8:E4:56:BB:29:19:79:A7:35:7A:70:24:F0:0B:EB:AA:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:22:3a:3d:93:83:20:04:30:46:3b:e7:39:d3:29:5f:ee:47:
b7:77:e1:17:95:e2:96:98:8f:5b:d3:81:8d:47:c3:82:a3:d1:
4c:14:8a:09:58:76:c1:b8:fc:26:1f:93:e9:9d:de:ca:59:8d:
ba:34:c5:e0:a9:a7:73:fb:e3:4a:bc:ef:d3:23:ba:07:52:c2:
84:7e:f2:a0:9d:ac:9b:85:2f:25:8c:5b:cf:ef:88:97:3e:09:
46:5b:4d:41:09:70:4f:2e:7a:07:57:da:b9:43:20:a7:56:74:
4c:5c:cf:84:14:56:d7:fa:e8:9e:20:c8:5e:92:60:45:e1:c4:
d4:13:2b:30:bd:fc:0f:be:f2:bc:cc:9a:6d:11:e2:61:df:90:
fc:4c:8b:ff:7e:7e:a3:27:b9:22:0f:cc:0d:8f:db:90:22:bb:
e6:fd:4b:94:9f:e0:5d:b9:05:1c:f3:e1:72:9c:f1:70:4c:37:
a4:e0:34:c9:7b:d8:3f:4b:eb:07:8f:a2:11:86:10:4b:c8:d4:
22:ba:ea:ea:6a:b0:ea:d5:8d:09:a6:b3:c3:bf:66:4c:65:69:
6c:40:7f:ad:cb:7f:f5:0e:0b:1a:22:41:e2:6a:0b:86:a9:e2:
72:62:9b:56:46:1e:9c:a7:5c:fa:b4:10:98:1e:eb:a6:53:18:
d8:1a:2d:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXNMDuUxiYZlLrZ3Rz5YEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmYWFjYWI4ZTQ1NmJiMjkxOTc5YTczNTdhNzAyNGYwMGJl
YmFhZjUwHhcNMjUxMTExMTAwMTE3WhcNMjUxMTEyMTAwMTE3WjAzMTEwLwYDVQQD
EygxNzdlMGU0YjU5Yzg2NjdjZWQ5MDY5ODcxNTRjYzY3ODAwMTE5YWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8apkOzkjUA1GUFZfBprp1wb5xFb
lTFaIiBTUpXvb4XxNp9Bh/V0u+ovVpY0iLrzIPHAXtNiZ0gbpF3EQ+bSXh1O6fOV
P+ZhBLmop8mbn6NHkBqx4Yf6s0GVcbDIJTVTdu2tXF60c3cL/ubCDOvwXb/vmFYl
jb7YST0r0FBrS12LYQDRI1voV7USUkBdbU7rYCd+vVXpFrJhYOCDYYqFERSnPTwg
ooksz/qN9S+C66+7OE97Ce+sBTgYyRaRrtxhlKSH1OcmzzGba6O0AyO7RFbgZzNk
C6NYftuWoNd0SQpXQTukZIUQE9C+54i2RV+XBB6sFKhhuIiXfhN1MirfyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBd+DktZyGZ87ZBphxVMxngAEZrQMB8GA1UdIwQY
MBaAFB+qyrjkVrspGXmnNXpwJPAL66r1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDZyS3VPUld1eWtaZWFjMWVuQWs4QXZycXZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My81MDFmZDMtYThjZC00ZTJkLTlkMzIt
MmZiNzJhMGFlZjZkLzEvSDZyS3VPUld1eWtaZWFjMWVuQWs4QXZycXZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My81MDFmZDMtYThjZC00ZTJkLTlkMzItMmZiNzJhMGFlZjZk
LzEvSDZyS3VPUld1eWtaZWFjMWVuQWs4QXZycXZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhiI6PZOD
IAQwRjvnOdMpX+5Ht3fhF5XilpiPW9OBjUfDgqPRTBSKCVh2wbj8Jh+T6Z3eylmN
ujTF4Kmnc/vjSrzv0yO6B1LChH7yoJ2sm4UvJYxbz++Ilz4JRltNQQlwTy56B1fa
uUMgp1Z0TFzPhBRW1/roniDIXpJgReHE1BMrML38D77yvMyabRHiYd+Q/EyL/35+
oye5Ig/MDY/bkCK75v1LlJ/gXbkFHPPhcpzxcEw3pOA0yXvYP0vrB4+iEYYQS8jU
Irrq6mqw6tWNCaazw79mTGVpbEB/rct/9Q4LGiJB4moLhqnicmKbVkYenKdc+rQQ
mB7rplMY2Botbg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:01 2025 by rpki-client