Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
File: xtEbZP_hjvpC9DpsdlY53uONAn4.mft (raw, json)
Hash identifier: kEI6nk1skBmRmsm/uby0BI9sxQ+yryaoVSCTHh0AxFE=
Subject key identifier: 6D:7A:6F:8F:B6:D4:AC:49:BC:1C:DD:8E:DD:4D:F7:08:0E:A3:C9:8C
Authority key identifier: C6:D1:1B:64:FF:E1:8E:FA:42:F4:3A:6C:76:56:39:DE:E3:8D:02:7E
Certificate issuer: /CN=c6d11b64ffe18efa42f43a6c765639dee38d027e
Certificate serial: 019A26D41C8D692842CDD227F67A3B88BFDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
Manifest number: 0F7F
Signing time: Mon 27 Oct 2025 18:00:26 +0000
Manifest this update: Mon 27 Oct 2025 18:00:26 +0000
Manifest next update: Tue 28 Oct 2025 18:00:26 +0000
Files and hashes: 1: 5stymyV2VXExRNfPDRHs0SsKv84.roa (hash: LAJy81D8Y1W3Al27GIYu76cE8aqvZvfTwIjGsrUN8O8=)
2: wX4zTXXZMo2WWHOKinMvyAiRYeE.roa (hash: dkBnWGmwxThQE3RCE6xz1EoswQLwUBpuloKrWzo2tUE=)
3: xtEbZP_hjvpC9DpsdlY53uONAn4.crl (hash: 9AljpfLdGY4mhwgqsYLLPgw9o7ZElfYM5q3xUapEF2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:d4:1c:8d:69:28:42:cd:d2:27:f6:7a:3b:88:bf:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6d11b64ffe18efa42f43a6c765639dee38d027e
Validity
Not Before: Oct 27 18:00:26 2025 GMT
Not After : Oct 28 18:00:26 2025 GMT
Subject: CN=6d7a6f8fb6d4ac49bc1cdd8edd4df7080ea3c98c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3f:8f:6a:5d:84:9d:82:0a:77:df:2b:b3:2a:
18:dc:e3:d7:52:49:b7:89:4b:b3:cd:62:a0:3c:33:
b9:92:70:e8:e7:71:ba:3d:27:69:d0:81:cc:73:a3:
90:1c:db:c0:15:a0:b2:1c:38:af:30:76:1c:13:dd:
6f:e7:d5:18:48:22:65:75:ff:10:61:8b:84:2d:81:
4d:45:e3:34:6b:fe:e2:88:c8:f2:17:02:70:37:d8:
c8:8b:9e:77:17:3e:90:cc:16:4d:60:ad:11:cd:68:
cc:2e:27:d5:9e:06:85:e1:a0:a5:80:1e:22:98:f2:
c7:f1:8c:8b:2d:51:c2:91:93:e1:c5:9a:fb:fc:fa:
fb:ad:06:3f:bc:ac:68:a7:8c:cf:98:0e:f7:86:ac:
bd:a0:96:d2:92:a1:cd:b1:68:b5:d2:65:2a:19:ee:
59:b6:63:3e:ca:0e:50:8d:b2:31:50:c0:eb:61:78:
fb:e2:f7:15:fa:ba:3b:67:88:54:0c:b5:92:af:20:
37:9f:ac:02:d1:42:df:01:65:55:5d:fd:a0:28:05:
e0:08:69:62:28:9d:d6:80:60:23:28:bd:8c:94:34:
fb:63:63:21:2e:93:2b:0c:cd:75:87:f5:d1:a3:01:
5d:b2:26:dc:94:8c:2d:f7:90:62:15:a9:13:23:15:
49:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:7A:6F:8F:B6:D4:AC:49:BC:1C:DD:8E:DD:4D:F7:08:0E:A3:C9:8C
X509v3 Authority Key Identifier:
keyid:C6:D1:1B:64:FF:E1:8E:FA:42:F4:3A:6C:76:56:39:DE:E3:8D:02:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:84:fd:d7:7d:68:26:93:d8:6f:f2:59:3e:c4:64:0a:54:26:
fd:18:96:23:4e:a4:97:38:5b:de:85:10:64:86:15:69:b5:4f:
39:9b:2c:17:5e:2d:61:a1:24:cd:19:84:a5:94:09:4b:84:f5:
76:cb:f6:e2:10:c6:fa:91:32:a0:34:38:32:9e:74:03:06:31:
bf:81:29:5a:c8:a9:5e:39:cb:6d:ff:1a:fa:3d:88:ce:12:df:
c0:d0:04:39:a6:77:0e:e4:f6:63:34:52:d5:16:03:3b:4b:78:
ad:ea:6d:55:b6:52:d4:0a:19:5c:4a:b3:66:31:d4:81:a8:bc:
03:f8:58:67:1b:b8:33:97:f1:c5:13:b8:b3:19:29:78:7f:f4:
2c:5d:d9:67:a9:98:20:9f:08:6c:5c:89:44:91:53:eb:df:a7:
fe:98:a4:cb:a9:3f:c3:45:a1:d1:7b:11:77:08:4b:82:db:a5:
41:23:1c:d3:81:40:c7:44:53:02:2c:a1:08:fa:64:44:56:af:
6a:86:3c:0c:0c:f3:bb:22:60:fa:05:00:0e:e3:00:27:e4:b0:
26:70:8c:3a:18:65:86:df:81:4e:e6:ba:38:43:d3:40:ac:90:
c0:d2:74:c0:6f:32:46:27:5d:04:65:e5:ce:44:f6:bf:b7:b2:
15:0b:d9:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZom1ByNaShCzdIn9no7iL/bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2ZDExYjY0ZmZlMThlZmE0MmY0M2E2Yzc2NTYzOWRlZTM4
ZDAyN2UwHhcNMjUxMDI3MTgwMDI2WhcNMjUxMDI4MTgwMDI2WjAzMTEwLwYDVQQD
Eyg2ZDdhNmY4ZmI2ZDRhYzQ5YmMxY2RkOGVkZDRkZjcwODBlYTNjOThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjj+Pal2EnYIKd98rsyoY3OPXUkm3
iUuzzWKgPDO5knDo53G6PSdp0IHMc6OQHNvAFaCyHDivMHYcE91v59UYSCJldf8Q
YYuELYFNReM0a/7iiMjyFwJwN9jIi553Fz6QzBZNYK0RzWjMLifVngaF4aClgB4i
mPLH8YyLLVHCkZPhxZr7/Pr7rQY/vKxop4zPmA73hqy9oJbSkqHNsWi10mUqGe5Z
tmM+yg5QjbIxUMDrYXj74vcV+ro7Z4hUDLWSryA3n6wC0ULfAWVVXf2gKAXgCGli
KJ3WgGAjKL2MlDT7Y2MhLpMrDM11h/XRowFdsibclIwt95BiFakTIxVJmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG16b4+21KxJvBzdjt1N9wgOo8mMMB8GA1UdIwQY
MBaAFMbRG2T/4Y76QvQ6bHZWOd7jjQJ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHRFYlpQX2hqdnBDOURwc2RsWTUzdU9OQW40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80Y2FjNmItOGUwNS00NDhhLTgzZjct
NjgzNTg1MjE1OGQ4LzEveHRFYlpQX2hqdnBDOURwc2RsWTUzdU9OQW40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy80Y2FjNmItOGUwNS00NDhhLTgzZjctNjgzNTg1MjE1OGQ4
LzEveHRFYlpQX2hqdnBDOURwc2RsWTUzdU9OQW40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGYT9131o
JpPYb/JZPsRkClQm/RiWI06klzhb3oUQZIYVabVPOZssF14tYaEkzRmEpZQJS4T1
dsv24hDG+pEyoDQ4Mp50AwYxv4EpWsipXjnLbf8a+j2IzhLfwNAEOaZ3DuT2YzRS
1RYDO0t4reptVbZS1AoZXEqzZjHUgai8A/hYZxu4M5fxxRO4sxkpeH/0LF3ZZ6mY
IJ8IbFyJRJFT69+n/piky6k/w0Wh0XsRdwhLgtulQSMc04FAx0RTAiyhCPpkRFav
aoY8DAzzuyJg+gUADuMAJ+SwJnCMOhhlht+BTua6OEPTQKyQwNJ0wG8yRiddBGXl
zkT2v7eyFQvZtg==
-----END CERTIFICATE-----
Generated at Tue Oct 28 03:50:41 2025 by rpki-client