
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/7f1a8c-48e4-4d97-b042-1d4246d7f155/1/6CLYReFTmSp46PRFIyZNJhSxe50.mft
File: 6CLYReFTmSp46PRFIyZNJhSxe50.mft (raw, json)
Hash identifier: MphsBc3NJKmd42DIa//kwSpuO+YcrX0xJ1zLNxmab54=
Subject key identifier: 9D:AF:75:CD:BE:40:B4:C4:EC:44:AC:EF:3B:B4:DB:0F:04:87:6A:E2
Authority key identifier: E8:22:D8:45:E1:53:99:2A:78:E8:F4:45:23:26:4D:26:14:B1:7B:9D
Certificate issuer: /CN=e822d845e153992a78e8f44523264d2614b17b9d
Certificate serial: 019A1FBF6039575604474DFB83337A7A5174
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6CLYReFTmSp46PRFIyZNJhSxe50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/7f1a8c-48e4-4d97-b042-1d4246d7f155/1/6CLYReFTmSp46PRFIyZNJhSxe50.mft
Manifest number: 0689
Signing time: Sun 26 Oct 2025 09:00:26 +0000
Manifest this update: Sun 26 Oct 2025 09:00:26 +0000
Manifest next update: Mon 27 Oct 2025 09:00:26 +0000
Files and hashes: 1: 6CLYReFTmSp46PRFIyZNJhSxe50.crl (hash: P3ZY9ax9AefmaV/osVnSSaE2thUgw3oKFvrNBa86APQ=)
2: KH0zl9xVnMF_15rIoZ2wT-co_AI.roa (hash: DoRE8smcciehWgwMQwu6I7Myolux2OWQiEW7g5i3MyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/7f1a8c-48e4-4d97-b042-1d4246d7f155/1/6CLYReFTmSp46PRFIyZNJhSxe50.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/7f1a8c-48e4-4d97-b042-1d4246d7f155/1/6CLYReFTmSp46PRFIyZNJhSxe50.mft
rsync://rpki.ripe.net/repository/DEFAULT/6CLYReFTmSp46PRFIyZNJhSxe50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:bf:60:39:57:56:04:47:4d:fb:83:33:7a:7a:51:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e822d845e153992a78e8f44523264d2614b17b9d
Validity
Not Before: Oct 26 09:00:26 2025 GMT
Not After : Oct 27 09:00:26 2025 GMT
Subject: CN=9daf75cdbe40b4c4ec44acef3bb4db0f04876ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:df:e9:b0:9e:b8:4a:3f:67:20:76:f7:b4:29:
19:cc:75:f9:af:51:8f:7e:04:14:a9:b5:2f:c9:52:
b8:1f:58:22:b7:c2:f0:10:e2:d1:24:b0:b6:64:d3:
48:4d:1e:0f:53:e8:0c:e5:41:e4:71:dd:60:4e:2f:
ae:26:03:dc:51:83:77:da:6a:bd:55:94:fd:4f:fd:
b8:79:ba:86:eb:aa:10:db:27:5e:ea:55:af:4a:f1:
c2:53:b6:b8:e4:8f:b1:ef:33:18:af:17:7f:37:9e:
82:66:c7:42:50:9d:6d:48:b3:48:96:64:64:09:a7:
3a:3e:8d:84:28:90:8f:5b:df:5e:1e:e0:18:25:9d:
6d:43:8a:4c:20:3a:fb:96:7d:b6:f7:75:49:91:82:
45:85:f0:8d:82:d1:44:80:06:e4:48:cd:40:7c:1e:
0c:41:84:f3:0d:ae:b3:84:9f:54:f0:97:c4:7a:72:
08:5f:6d:c3:bb:f4:ba:c3:f9:8e:5a:8e:c2:cb:35:
82:99:d4:6b:af:c3:82:a3:7e:b3:b7:e0:a8:e3:36:
d9:bf:df:52:46:7e:e7:86:4e:13:9f:3e:09:5e:19:
d4:b0:fc:5c:0f:5c:4f:52:bb:c7:73:42:0a:d8:0d:
58:65:63:2c:7f:f3:cb:8a:98:d2:8c:19:aa:7b:2d:
a9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AF:75:CD:BE:40:B4:C4:EC:44:AC:EF:3B:B4:DB:0F:04:87:6A:E2
X509v3 Authority Key Identifier:
keyid:E8:22:D8:45:E1:53:99:2A:78:E8:F4:45:23:26:4D:26:14:B1:7B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6CLYReFTmSp46PRFIyZNJhSxe50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7f1a8c-48e4-4d97-b042-1d4246d7f155/1/6CLYReFTmSp46PRFIyZNJhSxe50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7f1a8c-48e4-4d97-b042-1d4246d7f155/1/6CLYReFTmSp46PRFIyZNJhSxe50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:20:1f:d8:6b:cd:96:0f:64:25:e6:b2:3c:69:e6:87:1e:c0:
4b:12:d1:91:d7:3b:98:cc:78:39:29:20:cc:38:8a:49:b6:98:
e1:e0:e2:2c:42:bf:5a:55:e1:a1:0d:44:87:c1:e0:02:a8:5f:
4d:66:dc:ec:0c:65:61:b8:e7:9f:62:b1:26:cf:f0:50:fc:17:
7e:91:91:84:07:b6:7e:d8:13:78:bf:37:e0:42:ef:37:f6:90:
39:b3:a5:6e:bc:06:d4:8d:a3:54:f0:54:67:ef:46:4a:ea:c2:
29:a8:19:d7:9a:29:bc:4f:f9:b7:ed:84:61:ab:4d:0c:48:2a:
bd:dd:ee:a2:dd:99:fa:f8:9c:49:cb:85:b4:ab:a8:03:94:a1:
42:a0:3c:75:1b:00:5a:f7:1b:52:81:7e:a9:db:93:ae:92:c8:
cd:f6:ab:29:6a:05:60:a2:cb:24:4f:da:6e:8d:b8:25:8c:94:
50:69:91:9f:5a:d5:a9:ad:ce:3f:9c:c1:3e:d0:6e:ae:12:06:
47:fc:34:28:7e:d1:85:ad:7a:08:f9:53:28:66:13:e2:e5:81:
f2:42:37:67:72:eb:d9:72:b0:92:bd:ff:7d:fb:8b:10:03:ab:
16:40:90:50:df:04:88:f9:ff:89:22:a0:4b:40:f9:a3:9a:8d:
c7:86:9e:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZofv2A5V1YER037gzN6elF0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4MjJkODQ1ZTE1Mzk5MmE3OGU4ZjQ0NTIzMjY0ZDI2MTRi
MTdiOWQwHhcNMjUxMDI2MDkwMDI2WhcNMjUxMDI3MDkwMDI2WjAzMTEwLwYDVQQD
Eyg5ZGFmNzVjZGJlNDBiNGM0ZWM0NGFjZWYzYmI0ZGIwZjA0ODc2YWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9/psJ64Sj9nIHb3tCkZzHX5r1GP
fgQUqbUvyVK4H1git8LwEOLRJLC2ZNNITR4PU+gM5UHkcd1gTi+uJgPcUYN32mq9
VZT9T/24ebqG66oQ2yde6lWvSvHCU7a45I+x7zMYrxd/N56CZsdCUJ1tSLNIlmRk
Cac6Po2EKJCPW99eHuAYJZ1tQ4pMIDr7ln2293VJkYJFhfCNgtFEgAbkSM1AfB4M
QYTzDa6zhJ9U8JfEenIIX23Du/S6w/mOWo7CyzWCmdRrr8OCo36zt+Co4zbZv99S
Rn7nhk4Tnz4JXhnUsPxcD1xPUrvHc0IK2A1YZWMsf/PLipjSjBmqey2pdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ2vdc2+QLTE7ESs7zu02w8Eh2riMB8GA1UdIwQY
MBaAFOgi2EXhU5kqeOj0RSMmTSYUsXudMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkNMWVJlRlRtU3A0NlBSRkl5Wk5KaFN4ZTUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC83ZjFhOGMtNDhlNC00ZDk3LWIwNDIt
MWQ0MjQ2ZDdmMTU1LzEvNkNMWVJlRlRtU3A0NlBSRkl5Wk5KaFN4ZTUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC83ZjFhOGMtNDhlNC00ZDk3LWIwNDItMWQ0MjQ2ZDdmMTU1
LzEvNkNMWVJlRlRtU3A0NlBSRkl5Wk5KaFN4ZTUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgiAf2GvN
lg9kJeayPGnmhx7ASxLRkdc7mMx4OSkgzDiKSbaY4eDiLEK/WlXhoQ1Eh8HgAqhf
TWbc7AxlYbjnn2KxJs/wUPwXfpGRhAe2ftgTeL834ELvN/aQObOlbrwG1I2jVPBU
Z+9GSurCKagZ15opvE/5t+2EYatNDEgqvd3uot2Z+vicScuFtKuoA5ShQqA8dRsA
WvcbUoF+qduTrpLIzfarKWoFYKLLJE/abo24JYyUUGmRn1rVqa3OP5zBPtBurhIG
R/w0KH7Rha16CPlTKGYT4uWB8kI3Z3Lr2XKwkr3/ffuLEAOrFkCQUN8EiPn/iSKg
S0D5o5qNx4ae9A==
-----END CERTIFICATE-----
Generated at Sun Oct 26 17:36:34 2025 by rpki-client