Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.mft
File: 6-T90XLfhZdWyoUd3eE2cPSBfuA.mft (raw, json)
Hash identifier: 4vpNOXzqxG02qE3qTMeaf8hggZMq4+ZnF1iv4jEQfJw=
Subject key identifier: BF:43:70:01:9E:85:93:77:25:2C:63:BB:1F:94:91:3A:B2:6E:AE:C8
Authority key identifier: EB:E4:FD:D1:72:DF:85:97:56:CA:85:1D:DD:E1:36:70:F4:81:7E:E0
Certificate issuer: /CN=ebe4fdd172df859756ca851ddde13670f4817ee0
Certificate serial: 01A0CB5987F0BFB727F3B42559DB4271308B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-T90XLfhZdWyoUd3eE2cPSBfuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.mft
Manifest number: 1A6A
Signing time: Tue 22 Sep 2026 23:00:37 +0000
Manifest this update: Tue 22 Sep 2026 23:00:37 +0000
Manifest next update: Wed 23 Sep 2026 23:00:37 +0000
Files and hashes: 1: 6-T90XLfhZdWyoUd3eE2cPSBfuA.crl (hash: wkGTiHZBCN+N9mzfXJbJkK058jzt+S2jl3QLdfDvtj4=)
2: PMopp0pb43IV-3YVKympni_YLmU.roa (hash: mnvZQ9iKDyXCLi1UgHfqzHGFq14R47gSAsxmQmT/bNc=)
3: dLk4w45q8Owa8GDVR2RUTXOe0Co.asa (hash: nBWLBlLdoR8D7y1wJlZ6nlGbY1sTEjeLaxtL/KKtDcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6-T90XLfhZdWyoUd3eE2cPSBfuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:59:87:f0:bf:b7:27:f3:b4:25:59:db:42:71:30:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebe4fdd172df859756ca851ddde13670f4817ee0
Validity
Not Before: Sep 22 23:00:37 2026 GMT
Not After : Sep 23 23:00:37 2026 GMT
Subject: CN=bf4370019e859377252c63bb1f94913ab26eaec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:ff:43:f0:7e:22:96:fc:83:e5:49:21:88:e8:
69:1c:7e:ff:6a:a3:2b:a1:d9:41:de:14:a5:33:f6:
25:97:5d:90:dd:ac:2e:32:80:df:2a:9b:f8:00:db:
2e:92:47:a8:70:e3:05:5a:e0:41:a4:49:fd:4d:47:
78:ea:5d:b7:0e:23:b9:7f:73:7f:af:6d:94:85:90:
78:df:69:38:17:53:e9:b7:f1:c0:5b:7d:1d:16:67:
03:6d:8a:fc:22:45:2f:96:ce:e2:ec:ea:56:26:86:
d6:cd:36:d8:24:25:cf:42:dd:cc:22:2d:08:d9:6b:
43:9c:fb:8d:36:23:55:4b:6a:fe:6f:09:38:c1:25:
bb:7c:04:ea:f6:df:6e:45:0d:6a:fa:c9:bd:5e:f1:
bf:ec:ac:36:71:d9:44:02:2a:da:ba:1c:b5:db:af:
0b:cb:77:11:11:fd:08:f6:1b:1b:b4:c9:05:98:1a:
be:bc:92:8d:0c:27:c3:c9:e6:59:99:b4:1e:a2:9a:
d0:fa:bc:71:af:da:e2:ec:aa:5f:4d:e7:0c:a5:a2:
80:26:39:ce:85:d9:c0:6d:8e:5e:4f:dc:6c:7c:15:
59:80:c8:b2:e8:de:c5:f8:37:e2:00:22:15:9d:31:
bd:d5:1f:c3:39:13:4d:09:bc:2c:42:cf:4a:95:a5:
b1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:43:70:01:9E:85:93:77:25:2C:63:BB:1F:94:91:3A:B2:6E:AE:C8
X509v3 Authority Key Identifier:
keyid:EB:E4:FD:D1:72:DF:85:97:56:CA:85:1D:DD:E1:36:70:F4:81:7E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-T90XLfhZdWyoUd3eE2cPSBfuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:fb:58:8a:e0:88:b8:93:7c:b3:57:5e:7e:68:42:fa:53:e7:
73:5b:54:e6:0a:7b:ee:45:a3:3e:3b:a8:38:a7:5e:44:c0:12:
71:57:2f:ba:0b:d5:48:cb:d5:07:04:5c:78:a1:f7:db:39:51:
b7:1d:69:81:b4:3a:c0:1a:c5:b1:a3:d6:21:7f:b9:43:f7:0d:
77:a6:f9:d1:c5:72:d8:e1:92:f2:5c:61:90:95:2d:fc:7c:98:
44:f9:15:f7:66:aa:e0:bd:c8:00:0c:de:7a:48:c1:7f:f9:61:
27:9a:ae:4c:32:36:1e:d4:a9:d7:48:dd:9f:af:dd:0a:d5:d3:
5f:78:7a:c5:6a:81:0f:44:a5:a9:65:dc:27:38:fb:da:18:e6:
1a:5c:22:d9:20:7d:ad:8b:fa:8f:8f:fe:d7:d4:a8:ce:7f:07:
27:3c:fa:d6:87:bb:17:11:c3:7c:d7:06:06:ad:3f:5d:69:c6:
cd:fb:ac:43:24:d5:9b:ab:58:77:fe:24:ff:1b:b5:bc:fe:f7:
02:4b:f0:0c:26:05:38:6f:ab:0d:78:3a:b2:9c:96:3a:80:2f:
f9:07:53:c4:e2:c6:0b:01:16:4a:68:f3:a2:61:8c:ff:b6:43:
b2:91:69:6d:ae:a6:cb:8a:e7:3e:76:3d:5e:6e:52:cb:65:2b:
e0:3b:f7:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDLWYfwv7cn87QlWdtCcTCLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViZTRmZGQxNzJkZjg1OTc1NmNhODUxZGRkZTEzNjcwZjQ4
MTdlZTAwHhcNMjYwOTIyMjMwMDM3WhcNMjYwOTIzMjMwMDM3WjAzMTEwLwYDVQQD
EyhiZjQzNzAwMTllODU5Mzc3MjUyYzYzYmIxZjk0OTEzYWIyNmVhZWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/f9D8H4ilvyD5UkhiOhpHH7/aqMr
odlB3hSlM/Yll12Q3awuMoDfKpv4ANsukkeocOMFWuBBpEn9TUd46l23DiO5f3N/
r22UhZB432k4F1Ppt/HAW30dFmcDbYr8IkUvls7i7OpWJobWzTbYJCXPQt3MIi0I
2WtDnPuNNiNVS2r+bwk4wSW7fATq9t9uRQ1q+sm9XvG/7Kw2cdlEAirauhy1268L
y3cREf0I9hsbtMkFmBq+vJKNDCfDyeZZmbQeoprQ+rxxr9ri7KpfTecMpaKAJjnO
hdnAbY5eT9xsfBVZgMiy6N7F+DfiACIVnTG91R/DORNNCbwsQs9KlaWxIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL9DcAGehZN3JSxjux+UkTqybq7IMB8GA1UdIwQY
MBaAFOvk/dFy34WXVsqFHd3hNnD0gX7gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNi1UOTBYTGZoWmRXeW9VZDNlRTJjUFNCZnVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9hNTk2OWYtYzAxNi00NTMzLTljYmEt
Njk2NzAzNzM2NjIxLzEvNi1UOTBYTGZoWmRXeW9VZDNlRTJjUFNCZnVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9hNTk2OWYtYzAxNi00NTMzLTljYmEtNjk2NzAzNzM2NjIx
LzEvNi1UOTBYTGZoWmRXeW9VZDNlRTJjUFNCZnVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2ftYiuCI
uJN8s1defmhC+lPnc1tU5gp77kWjPjuoOKdeRMAScVcvugvVSMvVBwRceKH32zlR
tx1pgbQ6wBrFsaPWIX+5Q/cNd6b50cVy2OGS8lxhkJUt/HyYRPkV92aq4L3IAAze
ekjBf/lhJ5quTDI2HtSp10jdn6/dCtXTX3h6xWqBD0SlqWXcJzj72hjmGlwi2SB9
rYv6j4/+19Sozn8HJzz61oe7FxHDfNcGBq0/XWnGzfusQyTVm6tYd/4k/xu1vP73
AkvwDCYFOG+rDXg6spyWOoAv+QdTxOLGCwEWSmjzomGM/7ZDspFpba6my4rnPnY9
Xm5Sy2Ur4Dv39A==
-----END CERTIFICATE-----
Generated at Wed Sep 23 05:05:11 2026 by rpki-client