
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
File: m6kNZtLd62RqYUBpEv_d-hTjmRA.mft (raw, json)
Hash identifier: QY9OyiBUQSlRx01yKehIK28sTnGeWplvRulrWt5sHFo=
Subject key identifier: 3B:A2:5C:B4:88:78:86:E0:DA:9D:89:6B:7B:80:32:9F:7C:DB:1E:7A
Authority key identifier: 9B:A9:0D:66:D2:DD:EB:64:6A:61:40:69:12:FF:DD:FA:14:E3:99:10
Certificate issuer: /CN=9ba90d66d2ddeb646a61406912ffddfa14e39910
Certificate serial: 01A0CEFF4B1BC82FF4E56744EDD544916FF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
Manifest number: 1A6E
Signing time: Wed 23 Sep 2026 16:00:32 +0000
Manifest this update: Wed 23 Sep 2026 16:00:32 +0000
Manifest next update: Thu 24 Sep 2026 16:00:32 +0000
Files and hashes: 1: HZ8AlFPzeSKwnlXCV6rGz71Kb2g.roa (hash: cBgiVMyfZ1wPdRLeBDUH3L49HCW6dnbKeTA2KaOoCyo=)
2: k9Qt8bd5mtUe8WkBxy0-PnZZYDQ.roa (hash: 4cUGdQJG54wz4ImSZGhzke5tGudVY4frq/07PWJo/ug=)
3: m6kNZtLd62RqYUBpEv_d-hTjmRA.crl (hash: SSjpm4ZIronEV6gma31a0hnKDkOEVI4v8ApgZ43cFjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:ff:4b:1b:c8:2f:f4:e5:67:44:ed:d5:44:91:6f:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ba90d66d2ddeb646a61406912ffddfa14e39910
Validity
Not Before: Sep 23 16:00:32 2026 GMT
Not After : Sep 24 16:00:32 2026 GMT
Subject: CN=3ba25cb4887886e0da9d896b7b80329f7cdb1e7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9c:d2:62:33:61:ae:fb:3b:ee:62:e4:94:b5:
18:e5:a2:ba:11:ae:4a:0b:48:2d:a9:8e:8d:76:d5:
61:21:5d:0c:4b:78:74:bb:f4:d6:17:c2:db:f4:7e:
d0:48:89:75:64:33:64:06:31:66:dc:37:27:1f:4e:
94:56:d6:1b:a8:1f:1a:0f:03:a7:17:18:dc:95:e0:
b6:17:9f:16:44:65:42:3f:06:bf:e7:ed:c3:c1:6a:
36:3b:ff:0c:38:d6:5c:08:98:60:59:06:1b:38:b5:
eb:cd:22:2a:6b:53:10:ef:20:86:85:e5:c8:dc:99:
85:da:c3:50:b6:10:e8:30:1f:a3:4b:ae:9b:c7:32:
5a:69:17:8c:11:49:be:cd:aa:e6:25:ca:73:69:81:
85:ec:9b:79:a4:38:3b:99:5e:12:de:11:89:22:4e:
4a:64:56:1d:9e:f6:ee:58:94:6d:92:d2:bb:a8:e4:
0d:01:3d:de:35:79:8e:56:26:05:52:0c:d5:dc:08:
ce:9d:5d:62:b9:be:14:ac:ad:59:a2:bd:e0:b0:52:
cc:6f:f9:02:79:dc:d8:8f:72:39:dc:5c:c0:78:f7:
ba:af:da:1b:d1:d7:95:ad:48:52:31:ac:b1:f1:f2:
36:94:ea:6d:1d:0b:3c:94:91:9f:8f:68:4a:f0:76:
7b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A2:5C:B4:88:78:86:E0:DA:9D:89:6B:7B:80:32:9F:7C:DB:1E:7A
X509v3 Authority Key Identifier:
keyid:9B:A9:0D:66:D2:DD:EB:64:6A:61:40:69:12:FF:DD:FA:14:E3:99:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:69:b8:39:eb:63:2b:db:9a:0b:7d:13:ca:e8:bf:3a:8e:37:
6c:01:e5:34:eb:39:13:68:af:17:8d:f1:11:30:6b:b3:8e:97:
e0:b6:9f:1e:3d:52:c6:95:9e:85:9d:e8:30:79:12:53:80:a2:
7f:21:6b:7b:d7:a5:25:69:b6:92:e6:57:92:3b:13:a1:be:1d:
ac:60:4c:60:2f:44:0d:c3:5b:9e:b0:bb:58:ca:a0:a3:78:9c:
b4:df:08:0f:0b:59:62:b3:81:a5:03:d5:b9:25:9d:bf:9b:8a:
af:98:80:00:5e:6f:87:94:4f:a0:9e:46:e7:26:96:2f:b3:b0:
aa:44:cf:75:00:c5:b1:ae:c2:69:c0:4a:b7:0d:5a:e4:fb:f8:
7e:29:f3:35:ca:99:96:87:d8:e0:98:c4:e1:47:06:f4:f7:fb:
aa:29:2b:51:41:cf:e9:21:27:78:05:00:75:d5:7d:3d:1d:eb:
fa:3a:0d:73:73:4d:d3:53:b1:bc:9d:89:c2:e2:33:2d:b9:c9:
ec:59:97:2b:a4:eb:95:6f:55:5e:21:ba:a9:64:e7:f6:31:91:
d6:21:2e:eb:d4:ed:2d:4c:1f:89:ed:a1:e7:54:1f:d5:91:29:
c5:bf:15:8e:2e:5a:f1:24:54:e2:a5:d9:83:eb:3f:5d:1f:8f:
61:22:cc:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:20:21 2026 by rpki-client