Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.mft
File: exi86iJ6TqxhtTALME3u8UaU3JE.mft (raw, json)
Hash identifier: Vd0IcYVucUBfUyNNFMzI/C0AajcUM1/PoYPKxKvzLq4=
Subject key identifier: F3:29:CE:AE:10:61:E3:51:A7:0B:3B:27:C9:3D:1C:D8:2E:44:80:51
Authority key identifier: 7B:18:BC:EA:22:7A:4E:AC:61:B5:30:0B:30:4D:EE:F1:46:94:DC:91
Certificate issuer: /CN=7b18bcea227a4eac61b5300b304deef14694dc91
Certificate serial: 019A7226500545BFF7C4A8BC79A92666A064
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exi86iJ6TqxhtTALME3u8UaU3JE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.mft
Manifest number: 0C6B
Signing time: Tue 11 Nov 2025 09:01:44 +0000
Manifest this update: Tue 11 Nov 2025 09:01:44 +0000
Manifest next update: Wed 12 Nov 2025 09:01:44 +0000
Files and hashes: 1: exi86iJ6TqxhtTALME3u8UaU3JE.crl (hash: bQHnSxt8NtzJaLY22Rgq22iWg8W4IS7OSCAB5TdkTzg=)
2: lQ20cZ9OUrcSqb6gIxN40wQjpAk.roa (hash: WgCV5F0Lo1vsx71+iRrim7ywAzohxnYAfe2pxSvyfPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.mft
rsync://rpki.ripe.net/repository/DEFAULT/exi86iJ6TqxhtTALME3u8UaU3JE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:50:05:45:bf:f7:c4:a8:bc:79:a9:26:66:a0:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b18bcea227a4eac61b5300b304deef14694dc91
Validity
Not Before: Nov 11 09:01:44 2025 GMT
Not After : Nov 12 09:01:44 2025 GMT
Subject: CN=f329ceae1061e351a70b3b27c93d1cd82e448051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:70:c8:0a:31:87:86:5e:9d:27:10:83:0c:ce:
d1:b5:a5:a1:9b:c0:1b:cc:a1:25:1c:9e:92:10:b2:
0b:3e:47:82:8e:bd:64:f4:e5:7b:59:bb:05:45:02:
35:e5:58:2a:13:2c:75:ed:a2:5a:21:60:1e:83:23:
75:32:6f:1a:5c:ad:d8:2d:56:4e:14:a9:66:a9:a4:
7b:7c:38:13:91:27:43:9a:15:7b:a6:6b:62:59:77:
22:d0:66:5c:5b:85:bd:c5:8d:6d:9b:35:5b:5a:44:
25:5b:a9:5f:f9:56:5e:68:3f:34:f6:f3:64:9c:23:
ca:af:ac:d8:2a:a0:81:84:6a:68:29:6a:f0:18:c3:
e2:6e:e9:d9:e7:ae:06:37:84:65:95:ce:82:19:68:
cc:87:cd:e0:c2:68:3a:d7:63:32:da:bc:53:aa:bc:
bc:d3:ab:d6:30:88:54:fc:0d:55:5a:bd:3a:a3:d0:
4f:34:5d:1f:9f:0f:36:a3:c5:73:76:0e:3c:b3:1e:
08:f8:62:75:dd:71:81:03:28:a0:fa:06:ff:aa:14:
73:20:2a:4b:07:8a:63:f8:16:ca:2c:27:b2:bd:1d:
20:e6:5b:26:e8:a2:32:32:a6:f8:93:0d:24:65:1f:
cf:70:31:ee:eb:21:37:46:37:2f:d4:8a:20:4f:7d:
eb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:29:CE:AE:10:61:E3:51:A7:0B:3B:27:C9:3D:1C:D8:2E:44:80:51
X509v3 Authority Key Identifier:
keyid:7B:18:BC:EA:22:7A:4E:AC:61:B5:30:0B:30:4D:EE:F1:46:94:DC:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exi86iJ6TqxhtTALME3u8UaU3JE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:f4:29:1d:3b:de:a7:72:f4:61:14:ae:f0:c1:fc:22:da:ac:
65:75:c4:b8:02:74:39:90:1f:98:c0:b5:51:62:17:eb:07:2d:
0c:75:a2:d6:0b:08:71:f9:92:ab:33:15:26:85:fc:d2:e5:ce:
5b:80:2a:3e:c5:19:f8:98:70:04:60:c8:fd:8a:6c:cd:ea:61:
2a:eb:4a:48:79:94:d0:59:02:d6:cc:52:61:3d:e9:5e:a1:5e:
f0:43:2f:38:21:8b:44:1a:89:5f:f5:ed:14:36:76:90:e7:24:
b5:ff:dd:25:02:39:ac:f7:ac:5d:df:d8:cc:34:31:d9:04:5d:
8d:ae:da:68:0c:8e:ef:c1:cc:59:96:98:60:c4:59:ac:41:f6:
4b:9f:7f:b5:d9:a0:80:2a:30:8b:44:57:67:17:d0:b9:33:c8:
3b:fb:5a:05:f6:b9:a5:06:71:60:01:a1:16:35:de:eb:3a:c2:
eb:63:b1:a0:41:37:6b:f0:fe:ef:49:1b:ae:47:b7:6e:2d:bb:
4e:09:18:4e:7a:22:1c:81:ee:90:46:aa:2e:31:3d:ae:54:96:
91:17:25:00:fe:a1:67:50:ef:d6:af:78:3c:39:2a:24:b7:c1:
74:d3:18:0e:13:4c:d1:d9:28:30:43:a0:46:bd:b5:54:16:02:
83:a8:ce:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJlAFRb/3xKi8eakmZqBkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMThiY2VhMjI3YTRlYWM2MWI1MzAwYjMwNGRlZWYxNDY5
NGRjOTEwHhcNMjUxMTExMDkwMTQ0WhcNMjUxMTEyMDkwMTQ0WjAzMTEwLwYDVQQD
EyhmMzI5Y2VhZTEwNjFlMzUxYTcwYjNiMjdjOTNkMWNkODJlNDQ4MDUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnDICjGHhl6dJxCDDM7RtaWhm8Ab
zKElHJ6SELILPkeCjr1k9OV7WbsFRQI15VgqEyx17aJaIWAegyN1Mm8aXK3YLVZO
FKlmqaR7fDgTkSdDmhV7pmtiWXci0GZcW4W9xY1tmzVbWkQlW6lf+VZeaD809vNk
nCPKr6zYKqCBhGpoKWrwGMPibunZ564GN4Rllc6CGWjMh83gwmg612My2rxTqry8
06vWMIhU/A1VWr06o9BPNF0fnw82o8Vzdg48sx4I+GJ13XGBAyig+gb/qhRzICpL
B4pj+BbKLCeyvR0g5lsm6KIyMqb4kw0kZR/PcDHu6yE3Rjcv1IogT33rGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPMpzq4QYeNRpws7J8k9HNguRIBRMB8GA1UdIwQY
MBaAFHsYvOoiek6sYbUwCzBN7vFGlNyRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXhpODZpSjZUcXhodFRBTE1FM3U4VWFVM0pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9kYWMwNzItMGYxZC00NDliLWIzMGIt
MDliMTlkMjU1MjU0LzEvZXhpODZpSjZUcXhodFRBTE1FM3U4VWFVM0pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9kYWMwNzItMGYxZC00NDliLWIzMGItMDliMTlkMjU1MjU0
LzEvZXhpODZpSjZUcXhodFRBTE1FM3U4VWFVM0pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZfQpHTve
p3L0YRSu8MH8ItqsZXXEuAJ0OZAfmMC1UWIX6wctDHWi1gsIcfmSqzMVJoX80uXO
W4AqPsUZ+JhwBGDI/YpszephKutKSHmU0FkC1sxSYT3pXqFe8EMvOCGLRBqJX/Xt
FDZ2kOcktf/dJQI5rPesXd/YzDQx2QRdja7aaAyO78HMWZaYYMRZrEH2S59/tdmg
gCowi0RXZxfQuTPIO/taBfa5pQZxYAGhFjXe6zrC62OxoEE3a/D+70kbrke3bi27
TgkYTnoiHIHukEaqLjE9rlSWkRclAP6hZ1Dv1q94PDkqJLfBdNMYDhNM0dkoMEOg
Rr21VBYCg6jOjg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:38 2025 by rpki-client