Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.mft
File: UHeXmaO44PDx48dJjAWjP4X7u80.mft (raw, json)
Hash identifier: bTPl/xBoKOmaQb99Z2EvlqHZMlLs8NVdfvFoYt8SYII=
Subject key identifier: B6:81:4B:FC:9D:0E:C3:D7:FC:CB:F5:3D:43:5F:4F:47:13:85:E1:8D
Authority key identifier: 50:77:97:99:A3:B8:E0:F0:F1:E3:C7:49:8C:05:A3:3F:85:FB:BB:CD
Certificate issuer: /CN=50779799a3b8e0f0f1e3c7498c05a33f85fbbbcd
Certificate serial: 019A7293F576F797ECFACC595DCAE27A588B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UHeXmaO44PDx48dJjAWjP4X7u80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.mft
Manifest number: 15E6
Signing time: Tue 11 Nov 2025 11:01:30 +0000
Manifest this update: Tue 11 Nov 2025 11:01:30 +0000
Manifest next update: Wed 12 Nov 2025 11:01:30 +0000
Files and hashes: 1: Sy9MkTO2BPRvKPMpsGDN-2TnmTk.roa (hash: Zvh1o0q4voreyVSKOLfHlxnIapN8G7OyPz3tE/wp4Tg=)
2: UHeXmaO44PDx48dJjAWjP4X7u80.crl (hash: b1urzWyuOq9JdaH95bkwLihzS2d7V1hhR77hXUjpoSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.mft
rsync://rpki.ripe.net/repository/DEFAULT/UHeXmaO44PDx48dJjAWjP4X7u80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:f5:76:f7:97:ec:fa:cc:59:5d:ca:e2:7a:58:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50779799a3b8e0f0f1e3c7498c05a33f85fbbbcd
Validity
Not Before: Nov 11 11:01:30 2025 GMT
Not After : Nov 12 11:01:30 2025 GMT
Subject: CN=b6814bfc9d0ec3d7fccbf53d435f4f471385e18d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a0:aa:cf:b6:07:d2:b7:1f:85:4b:7d:3a:30:
25:b1:82:eb:cd:9e:37:66:03:5e:ed:9f:99:16:6b:
34:54:a9:67:ad:69:89:d0:46:b7:90:ea:a2:c2:90:
ca:60:2c:28:50:8d:79:74:da:3e:d5:bc:5b:a4:73:
a9:a3:72:0e:bc:ab:5b:10:18:ab:a6:4a:dd:51:44:
70:67:8e:4d:e9:49:53:30:cf:42:10:b3:41:f4:d3:
15:b6:dd:17:b4:7d:d6:19:5a:cc:12:a9:89:44:fe:
f4:dc:48:79:0c:dd:6c:cf:04:82:16:56:70:ae:4f:
9d:88:d1:a2:1b:32:69:eb:4d:ff:f9:13:f1:ab:7e:
ae:9d:24:1b:0b:74:f2:ca:07:d9:8f:cb:f1:02:8d:
f3:03:62:8a:1b:f8:ce:4e:ee:93:1c:4b:ca:4f:df:
5d:44:8b:51:b4:24:06:dc:13:bb:94:28:a1:54:28:
03:8d:ea:fb:01:08:bb:38:77:0f:56:3a:b9:20:ff:
48:73:22:42:7d:d6:58:dd:c5:e4:16:2c:3d:ff:75:
c3:09:b9:45:f3:22:35:29:de:2b:80:ab:46:34:11:
94:d9:36:46:38:f0:94:5e:25:a7:61:25:25:9b:d5:
11:2a:ac:60:cc:43:63:60:96:b6:02:90:5d:d1:45:
c5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:81:4B:FC:9D:0E:C3:D7:FC:CB:F5:3D:43:5F:4F:47:13:85:E1:8D
X509v3 Authority Key Identifier:
keyid:50:77:97:99:A3:B8:E0:F0:F1:E3:C7:49:8C:05:A3:3F:85:FB:BB:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHeXmaO44PDx48dJjAWjP4X7u80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:63:75:3a:1c:4b:2a:64:51:57:38:8a:3f:66:71:f0:3c:33:
4d:f0:ba:82:19:90:56:f1:b2:d6:f5:00:4a:91:51:5b:cd:24:
d9:5d:f6:82:c2:42:cc:0f:71:66:5f:7c:af:c9:72:e1:30:57:
21:82:f1:bc:f9:e6:69:09:8d:7d:98:28:64:8e:fe:f8:0b:14:
2e:2b:b1:18:3c:c9:e1:57:ed:b3:20:e4:03:17:65:68:7a:c0:
27:c4:eb:31:3d:cd:86:a7:66:1f:7f:95:b7:be:6c:2b:73:fc:
15:cd:0a:6d:c0:32:d7:44:52:5f:bc:35:bc:f0:b0:51:47:06:
82:59:c8:11:e0:d5:af:20:4a:a3:88:e2:1e:b1:69:65:70:bf:
27:d9:23:80:cd:5c:6e:af:a7:c1:eb:67:2e:b8:ec:e4:18:22:
3c:06:1e:89:c4:7f:6e:f6:92:62:87:c8:ae:d7:ef:a5:7b:cf:
03:09:6d:ba:85:26:37:33:26:89:0a:d0:6c:9e:3d:e4:85:40:
d0:5d:47:13:c2:a6:55:c5:2e:fc:4a:b9:35:66:e9:c5:f6:c3:
ca:69:37:06:dd:7f:cf:dd:c5:71:bf:bc:da:b1:fa:bc:d8:3e:
b9:4e:4a:b0:0e:37:6e:c8:27:05:a1:66:6e:e1:36:15:8c:48:
05:c4:03:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk/V295fs+sxZXcrieliLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNzc5Nzk5YTNiOGUwZjBmMWUzYzc0OThjMDVhMzNmODVm
YmJiY2QwHhcNMjUxMTExMTEwMTMwWhcNMjUxMTEyMTEwMTMwWjAzMTEwLwYDVQQD
EyhiNjgxNGJmYzlkMGVjM2Q3ZmNjYmY1M2Q0MzVmNGY0NzEzODVlMThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6Cqz7YH0rcfhUt9OjAlsYLrzZ43
ZgNe7Z+ZFms0VKlnrWmJ0Ea3kOqiwpDKYCwoUI15dNo+1bxbpHOpo3IOvKtbEBir
pkrdUURwZ45N6UlTMM9CELNB9NMVtt0XtH3WGVrMEqmJRP703Eh5DN1szwSCFlZw
rk+diNGiGzJp603/+RPxq36unSQbC3TyygfZj8vxAo3zA2KKG/jOTu6THEvKT99d
RItRtCQG3BO7lCihVCgDjer7AQi7OHcPVjq5IP9IcyJCfdZY3cXkFiw9/3XDCblF
8yI1Kd4rgKtGNBGU2TZGOPCUXiWnYSUlm9URKqxgzENjYJa2ApBd0UXFqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLaBS/ydDsPX/Mv1PUNfT0cTheGNMB8GA1UdIwQY
MBaAFFB3l5mjuODw8ePHSYwFoz+F+7vNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUhlWG1hTzQ0UER4NDhkSmpBV2pQNFg3dTgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8yNDQ5NTgtYWEyZC00NzhjLWIwZmYt
NjllZmFkNmMzYTgwLzEvVUhlWG1hTzQ0UER4NDhkSmpBV2pQNFg3dTgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS8yNDQ5NTgtYWEyZC00NzhjLWIwZmYtNjllZmFkNmMzYTgw
LzEvVUhlWG1hTzQ0UER4NDhkSmpBV2pQNFg3dTgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdmN1OhxL
KmRRVziKP2Zx8DwzTfC6ghmQVvGy1vUASpFRW80k2V32gsJCzA9xZl98r8ly4TBX
IYLxvPnmaQmNfZgoZI7++AsULiuxGDzJ4VftsyDkAxdlaHrAJ8TrMT3NhqdmH3+V
t75sK3P8Fc0KbcAy10RSX7w1vPCwUUcGglnIEeDVryBKo4jiHrFpZXC/J9kjgM1c
bq+nwetnLrjs5BgiPAYeicR/bvaSYofIrtfvpXvPAwltuoUmNzMmiQrQbJ495IVA
0F1HE8KmVcUu/Eq5NWbpxfbDymk3Bt1/z93Fcb+82rH6vNg+uU5KsA43bsgnBaFm
buE2FYxIBcQDYw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:37 2025 by rpki-client