
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.mft
File: 6T86Qea-UkEVxsK1WLwoAEOgIk4.mft (raw, json)
Hash identifier: bC5GI9P2qplneUcHCjCAeh+cCq9ZSarVfZErn57c0+c=
Subject key identifier: B4:B5:67:A1:89:A4:DD:47:71:63:01:D2:E4:53:5E:D7:C2:B1:E8:38
Authority key identifier: E9:3F:3A:41:E6:BE:52:41:15:C6:C2:B5:58:BC:28:00:43:A0:22:4E
Certificate issuer: /CN=e93f3a41e6be524115c6c2b558bc280043a0224e
Certificate serial: 019A2553E8D9DD4CEA1A5487D19AD4891DF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6T86Qea-UkEVxsK1WLwoAEOgIk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.mft
Manifest number: 16FB
Signing time: Mon 27 Oct 2025 11:00:47 +0000
Manifest this update: Mon 27 Oct 2025 11:00:47 +0000
Manifest next update: Tue 28 Oct 2025 11:00:47 +0000
Files and hashes: 1: 2NXfzQOX2yzR_1PZmnB4_Blj3Qs.roa (hash: Ak/GG6l8wter3UNq3QplQdRhCDB/vDLztI0yd4qCSKk=)
2: 53KqbajJkABxQADjbHVlPygTcKc.roa (hash: kwajHsXo697+03N+LHzWo8d+aEKRsJl5vDuyUDMyntE=)
3: 5UkoSBgwT2Qf3aFassiPq3Vf9Jg.roa (hash: t3qUJPhi+Poc2aWmH2JZX3lQ8LuDxwy2KrfiHtXlPiA=)
4: 6T86Qea-UkEVxsK1WLwoAEOgIk4.crl (hash: GYH4CtmIl47cxkg/LAULxqKVbQhfmdGYS699Ay83nIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/6T86Qea-UkEVxsK1WLwoAEOgIk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:53:e8:d9:dd:4c:ea:1a:54:87:d1:9a:d4:89:1d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e93f3a41e6be524115c6c2b558bc280043a0224e
Validity
Not Before: Oct 27 11:00:47 2025 GMT
Not After : Oct 28 11:00:47 2025 GMT
Subject: CN=b4b567a189a4dd47716301d2e4535ed7c2b1e838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d8:05:05:47:f1:cb:a2:a9:8d:18:8e:39:37:
df:f1:58:4d:bf:56:cd:94:ca:81:7e:80:fa:22:6f:
09:a5:ca:14:1c:57:0d:df:5a:7d:7d:70:6b:c8:77:
7c:3d:4d:fc:72:44:95:5e:75:0d:1f:4b:5f:5f:c3:
c5:86:62:0e:37:ac:05:db:76:25:c8:f6:75:9b:58:
98:d8:bd:ff:b9:9c:3b:ea:1a:ef:27:f1:38:58:52:
d1:58:81:3c:ad:9e:e0:c3:d7:68:38:a5:23:47:ea:
f5:69:c3:46:ff:96:c9:c6:36:54:84:c2:4f:48:95:
46:31:3c:ae:9e:62:d3:96:ab:65:30:50:1f:43:c7:
f5:c6:a7:3d:5c:2c:8d:92:d1:6b:40:59:46:8e:7c:
44:26:bf:aa:3d:42:f8:8c:69:9c:9e:1e:90:fd:9c:
f2:39:71:ac:85:75:63:a7:f9:7c:99:b5:90:1a:75:
e7:7d:f1:ec:1b:fd:f7:2d:ec:f9:1f:1f:36:c6:39:
7a:aa:f5:f5:85:e0:c9:43:ae:26:cd:af:7d:3a:36:
ff:e8:7d:e0:04:34:95:2e:c1:4b:25:c8:2d:9d:3f:
57:c1:52:89:47:59:66:b1:ea:3b:38:cf:b7:63:44:
59:8f:6c:2f:7e:83:4c:91:72:1f:75:5a:34:c8:5d:
8d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B5:67:A1:89:A4:DD:47:71:63:01:D2:E4:53:5E:D7:C2:B1:E8:38
X509v3 Authority Key Identifier:
keyid:E9:3F:3A:41:E6:BE:52:41:15:C6:C2:B5:58:BC:28:00:43:A0:22:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T86Qea-UkEVxsK1WLwoAEOgIk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:43:25:ea:2a:7f:e7:e1:4f:f6:13:a7:f6:ce:98:49:8b:8a:
d3:2c:75:17:81:10:71:74:4b:b5:58:de:d8:aa:45:ad:25:86:
d1:74:86:16:4c:de:7c:72:17:14:9f:77:4a:84:1d:4f:97:3f:
00:25:ad:56:3d:04:64:09:40:e8:f6:48:4f:96:5e:25:7d:34:
91:e3:cc:ef:ed:6f:37:66:47:25:e4:b4:db:ae:5d:2d:0f:0b:
a8:08:b9:30:c4:53:46:53:a0:eb:fd:f5:1f:da:1b:74:85:15:
77:d1:91:e4:24:b1:a7:89:75:c9:a0:27:45:01:c1:b9:79:b2:
e8:1b:7f:17:8b:55:0d:b9:9d:3d:8f:d6:48:2f:11:5f:bb:f5:
0a:26:e2:db:2d:12:26:42:c2:7f:f1:54:b0:9a:6a:50:8c:83:
d4:6d:6c:57:67:03:fa:11:8a:47:b0:53:fb:67:45:10:2e:d8:
d2:f7:6c:1b:cd:25:23:d7:cb:7e:a2:b0:c3:65:9c:44:f1:c6:
17:29:32:c9:0b:33:0a:39:dd:88:ed:17:ab:21:ee:05:4e:35:
92:95:e7:28:d5:96:ff:4c:4e:5a:bf:56:73:6a:d2:61:36:57:
da:9d:a4:49:74:c0:33:ad:64:44:98:09:d2:e5:e6:25:14:56:
5d:ac:47:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZolU+jZ3UzqGlSH0ZrUiR3yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5M2YzYTQxZTZiZTUyNDExNWM2YzJiNTU4YmMyODAwNDNh
MDIyNGUwHhcNMjUxMDI3MTEwMDQ3WhcNMjUxMDI4MTEwMDQ3WjAzMTEwLwYDVQQD
EyhiNGI1NjdhMTg5YTRkZDQ3NzE2MzAxZDJlNDUzNWVkN2MyYjFlODM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdgFBUfxy6KpjRiOOTff8VhNv1bN
lMqBfoD6Im8JpcoUHFcN31p9fXBryHd8PU38ckSVXnUNH0tfX8PFhmION6wF23Yl
yPZ1m1iY2L3/uZw76hrvJ/E4WFLRWIE8rZ7gw9doOKUjR+r1acNG/5bJxjZUhMJP
SJVGMTyunmLTlqtlMFAfQ8f1xqc9XCyNktFrQFlGjnxEJr+qPUL4jGmcnh6Q/Zzy
OXGshXVjp/l8mbWQGnXnffHsG/33Lez5Hx82xjl6qvX1heDJQ64mza99Ojb/6H3g
BDSVLsFLJcgtnT9XwVKJR1lmseo7OM+3Y0RZj2wvfoNMkXIfdVo0yF2NyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLS1Z6GJpN1HcWMB0uRTXtfCseg4MB8GA1UdIwQY
MBaAFOk/OkHmvlJBFcbCtVi8KABDoCJOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlQ4NlFlYS1Va0VWeHNLMVdMd29BRU9nSWs0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9hMTc0MGUtODQwNC00MmQyLWFmNWMt
MTBlMjQ2MjVhNGQ0LzEvNlQ4NlFlYS1Va0VWeHNLMVdMd29BRU9nSWs0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9hMTc0MGUtODQwNC00MmQyLWFmNWMtMTBlMjQ2MjVhNGQ0
LzEvNlQ4NlFlYS1Va0VWeHNLMVdMd29BRU9nSWs0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJkMl6ip/
5+FP9hOn9s6YSYuK0yx1F4EQcXRLtVje2KpFrSWG0XSGFkzefHIXFJ93SoQdT5c/
ACWtVj0EZAlA6PZIT5ZeJX00kePM7+1vN2ZHJeS0265dLQ8LqAi5MMRTRlOg6/31
H9obdIUVd9GR5CSxp4l1yaAnRQHBuXmy6Bt/F4tVDbmdPY/WSC8RX7v1Cibi2y0S
JkLCf/FUsJpqUIyD1G1sV2cD+hGKR7BT+2dFEC7Y0vdsG80lI9fLfqKww2WcRPHG
FykyyQszCjndiO0XqyHuBU41kpXnKNWW/0xOWr9Wc2rSYTZX2p2kSXTAM61kRJgJ
0uXmJRRWXaxH3Q==
-----END CERTIFICATE-----
Generated at Mon Oct 27 14:29:39 2025 by rpki-client