Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.mft
File: T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.mft (raw, json)
Hash identifier: PUxRDmpAWuQ6MZLF9/kG41zl/0csi3wmxslH2gdGRgI=
Subject key identifier: 51:4B:B8:40:E8:00:56:7A:93:0F:51:B6:F6:9C:3B:62:AA:C4:42:6F
Authority key identifier: 4F:A5:CD:E5:24:F7:81:0D:58:68:BC:49:AB:0B:F6:62:1F:44:DC:21
Certificate issuer: /CN=4fa5cde524f7810d5868bc49ab0bf6621f44dc21
Certificate serial: 0199FC218E2ABFCBA7A0EEC97E2CCD3FCE26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.mft
Manifest number: 0E92
Signing time: Sun 19 Oct 2025 11:01:21 +0000
Manifest this update: Sun 19 Oct 2025 11:01:21 +0000
Manifest next update: Mon 20 Oct 2025 11:01:21 +0000
Files and hashes: 1: QBK8lPoVvs-33OqaHsy4GGD-WkU.roa (hash: 0GUBtBrdWkItfU5ir9EaRdqIIGetsONKxZfwhY7ap78=)
2: QjtOOOK5pwQKBGSkxklhdFksgp4.roa (hash: mBFc78U/Py4iQS+BrsEjELYMOU1hEEh06mY9X8mzPLw=)
3: T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.crl (hash: JY5tQJIeJwZ+e373b97L3lS7+hYjCqEyhsLBWNC+I+g=)
4: tdMNK9TEqxpF4VZ5o4_bR4yE7Hc.roa (hash: XOeW5f83fNYsxiZeF2CyzZjG5tuKR78BMMUdvSarePY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:8e:2a:bf:cb:a7:a0:ee:c9:7e:2c:cd:3f:ce:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fa5cde524f7810d5868bc49ab0bf6621f44dc21
Validity
Not Before: Oct 19 11:01:21 2025 GMT
Not After : Oct 20 11:01:21 2025 GMT
Subject: CN=514bb840e800567a930f51b6f69c3b62aac4426f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7c:50:e2:30:db:4f:df:7b:37:ed:3b:03:6b:
9c:6d:0b:92:70:53:81:56:6a:1a:89:26:5c:a5:42:
06:e6:aa:ed:95:a5:e8:75:95:14:01:da:2b:60:5c:
24:2f:51:83:3e:b1:2f:93:04:66:8e:04:20:02:e8:
2c:08:c9:4c:cf:6c:86:e1:fb:83:da:12:0c:8c:a7:
3a:5c:fe:9e:0f:84:99:24:5b:8d:5e:7b:13:4c:a8:
ee:2b:c0:7a:0c:76:ae:5e:2e:c8:1c:61:09:43:02:
c7:68:c1:24:9a:32:2c:5a:7a:8c:97:5d:17:42:05:
d9:95:ac:8b:1c:75:b1:18:b5:fa:83:27:a4:b4:ba:
f1:c3:7f:3a:e4:dc:d9:c0:5f:f5:20:53:d2:a1:44:
5e:26:da:d3:27:3f:51:62:f9:74:10:4a:d1:ce:9b:
ad:1d:28:be:35:69:47:26:2b:a2:2a:38:11:53:0c:
61:02:1e:de:bb:61:8a:89:b5:86:3b:04:52:3a:d6:
c5:7d:db:d3:47:4e:27:ce:2f:76:0d:bf:1d:bc:3e:
48:a5:6b:de:d4:f4:44:49:65:81:ac:82:9d:3e:d1:
56:6a:4e:5b:85:9c:d7:f8:99:62:c2:3b:d2:6b:0e:
2a:81:80:2b:c2:1e:84:62:d4:02:16:55:f5:af:31:
03:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:4B:B8:40:E8:00:56:7A:93:0F:51:B6:F6:9C:3B:62:AA:C4:42:6F
X509v3 Authority Key Identifier:
keyid:4F:A5:CD:E5:24:F7:81:0D:58:68:BC:49:AB:0B:F6:62:1F:44:DC:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:cf:ca:4a:89:38:b5:98:6b:cb:f1:15:ee:79:53:af:ee:6f:
60:48:27:17:be:ac:8e:db:64:12:7f:95:ca:78:27:aa:19:ce:
94:57:04:36:2f:5a:31:21:e6:9c:25:50:8f:bd:e6:86:5d:e8:
b2:2a:f2:76:5f:b5:a7:89:34:37:01:ba:90:e0:97:f7:de:2e:
91:fe:16:db:a3:f6:a4:a1:d6:b3:ca:47:01:43:1a:ec:17:e7:
22:5d:9b:f7:ae:6a:6d:27:d6:e0:0c:99:8d:66:76:fd:01:ab:
17:62:5b:d2:a2:26:24:44:0a:e9:3a:4c:78:92:e6:9b:01:67:
03:3d:20:77:c9:64:01:5e:6a:06:2f:be:ad:90:8e:27:60:d2:
92:7f:ae:29:e0:e5:a6:2f:d2:2e:cc:2e:5f:59:90:e2:b8:a7:
b1:d2:56:b0:86:b1:dd:28:20:01:31:ac:cb:a0:0d:62:ef:27:
01:04:22:53:a2:02:0c:b5:ca:e6:a3:fa:a8:1f:08:cc:cc:77:
0f:6f:d6:e4:27:97:98:0d:c7:09:38:2f:32:36:be:40:bb:cb:
56:a9:53:15:3a:50:b7:fb:1f:d6:40:af:71:56:0c:12:da:48:
cb:46:b5:07:c6:fd:d4:06:c7:b1:be:07:0f:c4:da:80:9b:3d:
85:de:e0:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IY4qv8unoO7JfizNP84mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYTVjZGU1MjRmNzgxMGQ1ODY4YmM0OWFiMGJmNjYyMWY0
NGRjMjEwHhcNMjUxMDE5MTEwMTIxWhcNMjUxMDIwMTEwMTIxWjAzMTEwLwYDVQQD
Eyg1MTRiYjg0MGU4MDA1NjdhOTMwZjUxYjZmNjljM2I2MmFhYzQ0MjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3xQ4jDbT997N+07A2ucbQuScFOB
VmoaiSZcpUIG5qrtlaXodZUUAdorYFwkL1GDPrEvkwRmjgQgAugsCMlMz2yG4fuD
2hIMjKc6XP6eD4SZJFuNXnsTTKjuK8B6DHauXi7IHGEJQwLHaMEkmjIsWnqMl10X
QgXZlayLHHWxGLX6gyektLrxw3865NzZwF/1IFPSoUReJtrTJz9RYvl0EErRzput
HSi+NWlHJiuiKjgRUwxhAh7eu2GKibWGOwRSOtbFfdvTR04nzi92Db8dvD5IpWve
1PRESWWBrIKdPtFWak5bhZzX+JliwjvSaw4qgYArwh6EYtQCFlX1rzEDswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFFLuEDoAFZ6kw9RtvacO2KqxEJvMB8GA1UdIwQY
MBaAFE+lzeUk94ENWGi8SasL9mIfRNwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDZYTjVTVDNnUTFZYUx4SnF3djJZaDlFM0NFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9kNjA4OGMtMzExMC00MWUxLWI5OTYt
MzJkNGFkOGY1NmRlLzEvVDZYTjVTVDNnUTFZYUx4SnF3djJZaDlFM0NFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9kNjA4OGMtMzExMC00MWUxLWI5OTYtMzJkNGFkOGY1NmRl
LzEvVDZYTjVTVDNnUTFZYUx4SnF3djJZaDlFM0NFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANs/KSok4
tZhry/EV7nlTr+5vYEgnF76sjttkEn+VyngnqhnOlFcENi9aMSHmnCVQj73mhl3o
sirydl+1p4k0NwG6kOCX994ukf4W26P2pKHWs8pHAUMa7BfnIl2b965qbSfW4AyZ
jWZ2/QGrF2Jb0qImJEQK6TpMeJLmmwFnAz0gd8lkAV5qBi++rZCOJ2DSkn+uKeDl
pi/SLswuX1mQ4rinsdJWsIax3SggATGsy6ANYu8nAQQiU6ICDLXK5qP6qB8IzMx3
D2/W5CeXmA3HCTgvMja+QLvLVqlTFTpQt/sf1kCvcVYMEtpIy0a1B8b91AbHsb4H
D8TagJs9hd7gOQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:02 2025 by rpki-client