
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/53d0f5-7c16-400f-8e2e-52018b45fad1/1/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.mft
File: 1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.mft (raw, json)
Hash identifier: sEVo+6MXU6F3NKCCaRQmlqKOScSYLI2KZwdSve941XY=
Subject key identifier: 5A:2F:92:15:93:8E:BD:A2:B8:7F:B2:AF:75:1D:C5:30:C3:AE:61:3D
Authority key identifier: F9:5A:C4:B2:47:27:48:CE:B2:7B:F8:C5:43:E1:6D:B7:BB:36:95:86
Certificate issuer: /CN=f95ac4b2472748ceb27bf8c543e16db7bb369586
Certificate serial: 019A71B7C53AB27E5A911931B12E5950E7B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/53d0f5-7c16-400f-8e2e-52018b45fad1/1/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.mft
Manifest number: 06F9
Signing time: Tue 11 Nov 2025 07:01:00 +0000
Manifest this update: Tue 11 Nov 2025 07:01:00 +0000
Manifest next update: Wed 12 Nov 2025 07:01:00 +0000
Files and hashes: 1: 0_5G3WRzshlLEZ0xV-9i-mzzvJU.roa (hash: lKrDP0bITSxhK9qROQpQt1df+rqNUNqNFLiSE61PZ7c=)
2: 1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.crl (hash: ncpX4zsaYQ+cmWPDA8Aq/bxM0VZq9udFQMH8iHRJ4gA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/53d0f5-7c16-400f-8e2e-52018b45fad1/1/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/53d0f5-7c16-400f-8e2e-52018b45fad1/1/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:c5:3a:b2:7e:5a:91:19:31:b1:2e:59:50:e7:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f95ac4b2472748ceb27bf8c543e16db7bb369586
Validity
Not Before: Nov 11 07:01:00 2025 GMT
Not After : Nov 12 07:01:00 2025 GMT
Subject: CN=5a2f9215938ebda2b87fb2af751dc530c3ae613d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ca:0b:6a:cc:74:8e:db:08:59:5c:1a:b8:44:
db:8b:6c:9f:07:49:49:b6:49:bc:0b:e1:34:13:25:
85:f5:9f:51:51:18:89:e1:35:55:6d:ac:88:a7:14:
31:e0:f9:40:42:bf:fb:6e:95:65:df:14:d3:2e:29:
05:45:ae:c4:ec:32:80:53:e7:83:2c:12:4d:aa:3f:
69:37:8b:ec:77:08:c3:5d:2e:f6:43:52:9f:d4:6d:
f9:54:20:dc:31:36:19:df:62:1b:12:db:a3:0a:e2:
08:e1:15:48:f6:1c:80:41:fa:6b:74:df:7e:77:7f:
61:89:79:c2:5b:11:eb:d3:25:ec:e2:c4:1a:e0:23:
19:c3:77:18:62:06:c8:36:06:17:02:27:85:53:29:
e8:c8:81:48:73:21:68:96:97:4a:36:a4:ac:2b:de:
47:47:21:7c:f0:a6:bc:6d:3f:c6:ed:64:3f:08:71:
ab:c0:b7:65:51:61:a8:8a:69:03:28:55:d7:e8:32:
e1:db:18:7f:ff:1e:ef:51:28:65:7d:82:2a:a8:87:
46:4c:e0:69:5f:c5:7f:d6:fe:9d:0b:eb:f2:e6:1a:
e8:eb:39:53:55:b0:2a:ca:97:cd:dc:5d:1f:c7:4b:
13:ca:58:c4:9d:87:7b:72:85:0e:5a:d3:a7:9c:02:
6d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2F:92:15:93:8E:BD:A2:B8:7F:B2:AF:75:1D:C5:30:C3:AE:61:3D
X509v3 Authority Key Identifier:
keyid:F9:5A:C4:B2:47:27:48:CE:B2:7B:F8:C5:43:E1:6D:B7:BB:36:95:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/53d0f5-7c16-400f-8e2e-52018b45fad1/1/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/53d0f5-7c16-400f-8e2e-52018b45fad1/1/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:98:8d:af:28:20:41:f7:29:30:42:a9:ab:dd:e9:d0:01:5c:
8a:e0:15:20:8b:51:25:dc:6d:f2:86:e3:63:2e:9c:72:52:a3:
60:1e:d6:92:8e:68:a4:cd:bb:0c:39:89:4c:32:9b:02:e8:9f:
78:6f:f3:62:a3:6d:79:50:45:10:55:07:f6:f2:89:3e:df:3c:
29:99:e8:33:6b:a8:f3:c5:59:71:27:66:70:0e:30:bd:54:a4:
22:a2:4c:81:55:39:bd:08:c3:28:0f:06:52:5a:f1:ab:fe:e2:
77:7f:9c:c4:c6:b6:f2:94:7e:e4:34:ca:6c:6b:56:6b:72:1d:
28:08:6b:de:8c:c8:dd:27:65:4a:42:0f:4f:fa:09:fc:ca:8c:
7e:47:77:4d:eb:88:41:14:0a:1c:ff:e6:d8:03:19:77:da:dd:
59:47:87:77:02:95:75:e9:44:af:b2:44:bc:4f:59:f2:52:df:
b6:e6:fa:42:d3:4a:83:b0:a0:33:62:72:75:ee:22:2d:ea:d7:
f2:7b:78:4e:e6:a5:07:10:db:80:14:6f:46:d7:62:c7:71:94:
3d:6c:4b:c4:bf:fe:f4:cb:1d:a1:1a:77:fc:90:10:52:f8:a9:
43:b5:2e:06:a8:1e:ee:fa:bf:79:37:c6:45:90:38:27:40:46:
cd:d5:ff:69
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZpxt8U6sn5akRkxsS5ZUOe5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NWFjNGIyNDcyNzQ4Y2ViMjdiZjhjNTQzZTE2ZGI3YmIz
Njk1ODYwHhcNMjUxMTExMDcwMTAwWhcNMjUxMTEyMDcwMTAwWjAzMTEwLwYDVQQD
Eyg1YTJmOTIxNTkzOGViZGEyYjg3ZmIyYWY3NTFkYzUzMGMzYWU2MTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8oLasx0jtsIWVwauETbi2yfB0lJ
tkm8C+E0EyWF9Z9RURiJ4TVVbayIpxQx4PlAQr/7bpVl3xTTLikFRa7E7DKAU+eD
LBJNqj9pN4vsdwjDXS72Q1Kf1G35VCDcMTYZ32IbEtujCuII4RVI9hyAQfprdN9+
d39hiXnCWxHr0yXs4sQa4CMZw3cYYgbINgYXAieFUynoyIFIcyFolpdKNqSsK95H
RyF88Ka8bT/G7WQ/CHGrwLdlUWGoimkDKFXX6DLh2xh//x7vUShlfYIqqIdGTOBp
X8V/1v6dC+vy5hro6zlTVbAqypfN3F0fx0sTyljEnYd7coUOWtOnnAJtLQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFFovkhWTjr2iuH+yr3UdxTDDrmE9MB8GA1UdIwQY
MBaAFPlaxLJHJ0jOsnv4xUPhbbe7NpWGMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1WckVza2NuU002eWVfakZRLUZ0dDdzMmxZWS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjYvNTNkMGY1LTdjMTYtNDAwZi04ZTJl
LTUyMDE4YjQ1ZmFkMS8xLzEtVnJFc2tjblNNNnllX2pGUS1GdHQ3czJsWVkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzY2LzUzZDBmNS03YzE2LTQwMGYtOGUyZS01MjAxOGI0NWZh
ZDEvMS8xLVZyRXNrY25TTTZ5ZV9qRlEtRnR0N3MybFlZLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXZiN
ryggQfcpMEKpq93p0AFciuAVIItRJdxt8objYy6cclKjYB7Wko5opM27DDmJTDKb
AuifeG/zYqNteVBFEFUH9vKJPt88KZnoM2uo88VZcSdmcA4wvVSkIqJMgVU5vQjD
KA8GUlrxq/7id3+cxMa28pR+5DTKbGtWa3IdKAhr3ozI3SdlSkIPT/oJ/MqMfkd3
TeuIQRQKHP/m2AMZd9rdWUeHdwKVdelEr7JEvE9Z8lLftub6QtNKg7CgM2Jyde4i
LerX8nt4TualBxDbgBRvRtdix3GUPWxLxL/+9MsdoRp3/JAQUvipQ7UuBqge7vq/
eTfGRZA4J0BGzdX/aQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:35:06 2025 by rpki-client