Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.mft
File: am_dL9Qvq_hycglSRo0pY0xoydw.mft (raw, json)
Hash identifier: vO8aL6xORSj4XpXFni9iWufY/8A/BeDRYQpTOmzxG8Y=
Subject key identifier: 6E:B2:7C:3A:3A:AB:C5:B0:57:C4:B2:F4:52:CF:EB:68:6A:A9:11:29
Authority key identifier: 6A:6F:DD:2F:D4:2F:AB:F8:72:72:09:52:46:8D:29:63:4C:68:C9:DC
Certificate issuer: /CN=6a6fdd2fd42fabf872720952468d29634c68c9dc
Certificate serial: 019A71B92253CDCB0B60CCE14D9AA4074EEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/am_dL9Qvq_hycglSRo0pY0xoydw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.mft
Manifest number: 0A82
Signing time: Tue 11 Nov 2025 07:02:29 +0000
Manifest this update: Tue 11 Nov 2025 07:02:29 +0000
Manifest next update: Wed 12 Nov 2025 07:02:29 +0000
Files and hashes: 1: QZxCWcbwldfBbje2z7CU-dKZ2OQ.roa (hash: z3N51ZQ5F8Gr4zs53/jXBVGssP0tmVUaOonBzkRtl38=)
2: _od80ObLqomwGF2QQRW4qwheTZ4.roa (hash: CaYsbUoRWbmVInyGmVu/D6GkTzKF8+37wy3InRczmKA=)
3: am_dL9Qvq_hycglSRo0pY0xoydw.crl (hash: oTogNlAy2avSiZcs1o2BKC1/trPkEPBlopqqdL1eKxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.mft
rsync://rpki.ripe.net/repository/DEFAULT/am_dL9Qvq_hycglSRo0pY0xoydw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:22:53:cd:cb:0b:60:cc:e1:4d:9a:a4:07:4e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a6fdd2fd42fabf872720952468d29634c68c9dc
Validity
Not Before: Nov 11 07:02:29 2025 GMT
Not After : Nov 12 07:02:29 2025 GMT
Subject: CN=6eb27c3a3aabc5b057c4b2f452cfeb686aa91129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:29:a5:bb:be:9a:c0:59:43:a9:9c:6e:db:17:
7f:75:85:82:a5:30:83:25:82:da:71:e2:3d:e4:f4:
0e:d4:59:6d:e6:7a:25:d1:be:86:fd:6d:18:31:1a:
4f:f2:9c:c0:2a:bb:f4:95:e3:48:f6:38:de:6e:ea:
50:4f:86:da:80:4a:99:02:d6:f0:52:92:4a:68:64:
99:f9:63:b5:87:02:42:2a:10:97:78:a1:3b:46:5a:
13:9b:de:0f:f5:e5:51:e5:f6:b3:98:88:c9:be:5e:
28:db:e6:f1:6b:7c:54:5a:b6:78:67:a8:82:ec:67:
79:1d:f2:b5:ec:5a:32:8c:a6:19:6c:f9:1c:98:01:
d0:76:2c:a1:31:fc:51:70:c5:11:0c:7a:f7:b4:b5:
1e:b9:dc:9d:87:3c:b3:ab:77:11:13:de:b6:4f:0f:
99:e5:c2:f8:26:0c:a6:54:e8:fa:7c:79:e9:a1:95:
04:3c:30:db:f0:5c:9d:91:fa:ca:13:72:38:c0:d5:
96:e7:0f:45:d5:be:e5:56:4d:d4:c6:ee:7e:28:f8:
35:5e:b8:9f:37:42:d7:61:a9:16:f8:40:06:61:19:
ef:d6:89:80:da:27:bd:15:8b:90:0a:3a:47:bb:1e:
08:f1:63:28:43:5a:a8:fa:01:77:0c:50:9a:85:de:
a8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B2:7C:3A:3A:AB:C5:B0:57:C4:B2:F4:52:CF:EB:68:6A:A9:11:29
X509v3 Authority Key Identifier:
keyid:6A:6F:DD:2F:D4:2F:AB:F8:72:72:09:52:46:8D:29:63:4C:68:C9:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/am_dL9Qvq_hycglSRo0pY0xoydw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:67:d2:a1:69:dd:7c:ce:68:26:9b:05:44:8b:5b:58:b1:5c:
26:9b:5d:a0:f5:ce:0d:90:2b:7b:c1:46:49:ac:2e:0a:c7:02:
dd:43:57:5a:26:f6:6b:f8:96:8d:9a:dc:d4:14:ed:12:6f:6c:
fe:07:14:0b:60:94:e8:0e:c6:12:9e:9b:db:93:d4:7f:11:f9:
84:40:cc:11:d1:3c:01:bb:41:3d:2f:c3:16:66:84:e4:97:73:
31:09:0b:c5:2a:4a:0d:37:62:1c:28:2a:76:a1:0b:c1:92:d0:
ed:14:48:e8:1a:25:48:d2:88:91:09:79:55:ef:cd:4f:0a:bd:
0d:68:a2:06:22:99:24:6e:ac:9d:f4:d3:b4:12:03:61:b9:ab:
7a:20:5e:17:77:79:41:64:d5:bf:e9:b9:7c:b2:4f:47:2d:c9:
ff:41:8a:b7:50:67:34:0d:4c:7d:c7:0e:a8:fb:5e:93:9b:c2:
55:ac:c9:d6:d5:7e:84:d1:be:3b:26:ad:08:2d:99:a8:7c:26:
bb:66:4c:d9:92:e1:de:f4:6a:cc:38:13:c6:09:80:3f:18:14:
41:5d:85:e4:e0:7b:46:8e:ce:68:40:a4:26:95:be:86:22:28:
52:bb:a8:d3:dd:74:a6:f7:36:9b:5a:26:3f:4a:54:7e:a1:12:
56:6d:87:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuSJTzcsLYMzhTZqkB07sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhNmZkZDJmZDQyZmFiZjg3MjcyMDk1MjQ2OGQyOTYzNGM2
OGM5ZGMwHhcNMjUxMTExMDcwMjI5WhcNMjUxMTEyMDcwMjI5WjAzMTEwLwYDVQQD
Eyg2ZWIyN2MzYTNhYWJjNWIwNTdjNGIyZjQ1MmNmZWI2ODZhYTkxMTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoymlu76awFlDqZxu2xd/dYWCpTCD
JYLaceI95PQO1Flt5nol0b6G/W0YMRpP8pzAKrv0leNI9jjebupQT4bagEqZAtbw
UpJKaGSZ+WO1hwJCKhCXeKE7RloTm94P9eVR5fazmIjJvl4o2+bxa3xUWrZ4Z6iC
7Gd5HfK17FoyjKYZbPkcmAHQdiyhMfxRcMURDHr3tLUeudydhzyzq3cRE962Tw+Z
5cL4JgymVOj6fHnpoZUEPDDb8FydkfrKE3I4wNWW5w9F1b7lVk3Uxu5+KPg1Xrif
N0LXYakW+EAGYRnv1omA2ie9FYuQCjpHux4I8WMoQ1qo+gF3DFCahd6ovwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG6yfDo6q8WwV8Sy9FLP62hqqREpMB8GA1UdIwQY
MBaAFGpv3S/UL6v4cnIJUkaNKWNMaMncMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYW1fZEw5UXZxX2h5Y2dsU1JvMHBZMHhveWR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9kNWNjNGEtZDI2Ni00MGU2LTg4Zjkt
ZDkxNDg0ZWIwYzM4LzEvYW1fZEw5UXZxX2h5Y2dsU1JvMHBZMHhveWR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9kNWNjNGEtZDI2Ni00MGU2LTg4ZjktZDkxNDg0ZWIwYzM4
LzEvYW1fZEw5UXZxX2h5Y2dsU1JvMHBZMHhveWR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOmfSoWnd
fM5oJpsFRItbWLFcJptdoPXODZAre8FGSawuCscC3UNXWib2a/iWjZrc1BTtEm9s
/gcUC2CU6A7GEp6b25PUfxH5hEDMEdE8AbtBPS/DFmaE5JdzMQkLxSpKDTdiHCgq
dqELwZLQ7RRI6BolSNKIkQl5Ve/NTwq9DWiiBiKZJG6snfTTtBIDYbmreiBeF3d5
QWTVv+m5fLJPRy3J/0GKt1BnNA1MfccOqPtek5vCVazJ1tV+hNG+OyatCC2ZqHwm
u2ZM2ZLh3vRqzDgTxgmAPxgUQV2F5OB7Ro7OaECkJpW+hiIoUruo0910pvc2m1om
P0pUfqESVm2H2g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:11:16 2025 by rpki-client