
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft
File: 6aqxRGEAqPzgPfGddV4GMp7iRxM.mft (raw, json)
Hash identifier: PSHSldxfCXt2Hyib3KP0BJSkASNzlN52EFhrtJ+8EX4=
Subject key identifier: 6A:50:0B:72:12:45:E5:26:1C:E9:94:2A:4C:D1:DB:3F:E2:E1:C4:22
Authority key identifier: E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13
Certificate issuer: /CN=e9aab1446100a8fce03df19d755e06329ee24713
Certificate serial: 019E1FB5715E9FEA9E765EC92A1D2042DA90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft
Manifest number: 191E
Signing time: Wed 13 May 2026 05:00:45 +0000
Manifest this update: Wed 13 May 2026 05:00:45 +0000
Manifest next update: Thu 14 May 2026 05:00:45 +0000
Files and hashes: 1: 6aqxRGEAqPzgPfGddV4GMp7iRxM.crl (hash: pfKWmOoqzgpoj5jz5upRyWW+jzEkRA5GbS8I054Q/xU=)
2: JlHGBE70CjYUjMlPy-yN4dzG-cs.roa (hash: eJeCGZHCYQ5pmVVEGiFVOguyq7hsvoBtUeukZnmh3W4=)
3: _GwYJ0PKXJK6fqA4cXd9zGiQJsk.roa (hash: TYTF9XrM81uGdSP5QXPvN15cnh9G39fwkeUY9WQ9Rbg=)
4: cxDAVDgNr82cHnIJJB4UwFs2cGU.roa (hash: sgT8v5E2LVdbt2FX0DJ7W7uBv5rW5PIhx+eS3wQDvSs=)
5: dwRGeRiPxu8Ert93hewpcLQlQPs.roa (hash: EAiXOznjLfpEqp6yCwCN/ahYsHXDQcQqsmXEqqAl9Vo=)
6: nSCF5qcvbkhkVZeNhESQPgQzsYw.roa (hash: Y9RP3rduyUtto1z3zNhzoo4HTEI6paw2VNckcRzLK4g=)
7: vSQI8aeWI14r_sJ8b9o2QgEO_BI.roa (hash: oiaQsMRtgp1rem+ZyltK5SLqiX97thYBgEBpvq3aaYc=)
8: wyPR3DQqTcPeXSMxj_8q1QvGp98.roa (hash: gpZ7dcu9+au0qJAS/mbf494bt1LZl0k6YCG8tQBUn4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:71:5e:9f:ea:9e:76:5e:c9:2a:1d:20:42:da:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9aab1446100a8fce03df19d755e06329ee24713
Validity
Not Before: May 13 05:00:45 2026 GMT
Not After : May 14 05:00:45 2026 GMT
Subject: CN=6a500b721245e5261ce9942a4cd1db3fe2e1c422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:65:da:11:23:8c:3e:4b:5f:2d:b0:d0:a9:96:
88:97:d7:6b:f6:89:1d:ae:4b:25:77:f3:d1:f8:85:
73:eb:74:5e:6f:3b:40:0b:31:ec:cd:14:17:c7:45:
99:31:7a:e1:f9:44:fc:c7:5e:02:91:d1:8b:63:90:
eb:d9:d0:c0:d4:cb:d3:71:1f:0f:8d:04:e4:4b:31:
ab:be:48:ed:cf:f4:00:95:e2:b4:9d:9c:42:b7:c6:
ee:a7:92:90:f4:e4:29:d6:53:d6:54:0a:c3:2d:29:
05:7a:0f:cb:34:2c:9c:94:9f:75:79:26:bd:4f:17:
a8:90:9b:95:ea:66:11:d1:6c:7e:15:33:8a:49:df:
cc:91:97:e0:16:ce:67:30:b8:26:d2:cf:4b:82:ed:
53:40:d9:72:1c:41:ff:a8:50:ec:f8:44:d1:44:a9:
60:65:d3:a9:04:14:a7:dd:9b:2f:cf:8e:1c:2e:1e:
c5:a6:6c:6c:2b:c1:fe:eb:93:ae:05:74:a5:c2:c7:
60:91:e5:c2:bc:86:96:46:4c:c2:b2:57:f4:d0:78:
6e:cb:45:3b:40:c3:83:7f:63:95:49:9e:c6:a7:3a:
8d:45:f1:26:6d:5d:be:d0:b7:93:7e:d0:88:c9:7f:
6e:d2:cd:fb:27:7b:40:2d:a9:ff:be:8d:66:b8:e4:
bc:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:50:0B:72:12:45:E5:26:1C:E9:94:2A:4C:D1:DB:3F:E2:E1:C4:22
X509v3 Authority Key Identifier:
keyid:E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:2e:8f:91:fd:d7:7e:c8:cd:5d:cb:3a:ec:d8:06:a9:8d:ff:
46:79:94:7b:b6:24:89:16:7c:fd:a7:53:74:91:ba:c8:41:a4:
4d:11:b3:0b:48:d8:1e:31:f4:43:63:0a:07:60:e9:1f:ee:3c:
08:7d:4d:68:e8:c6:0e:65:b0:46:d1:bc:97:c4:76:a3:1f:46:
b1:ba:1e:eb:06:34:01:65:42:dd:b8:d8:9a:84:bc:9d:62:f9:
e2:f1:5a:8b:a5:bc:2b:b6:bc:41:49:d8:0d:86:8c:87:09:f8:
b5:60:42:df:92:72:54:7f:ce:06:4f:6a:c4:08:23:d7:4d:c5:
4a:50:1e:fd:4b:b7:07:a3:d0:ea:e8:fc:5d:24:f8:2b:cc:8b:
23:b1:2a:80:56:a0:9f:d8:90:ec:94:e5:77:98:c2:35:72:06:
fa:dc:b8:04:18:69:fa:3d:78:e1:b4:97:90:22:b7:c9:99:8a:
df:e8:2c:e2:d6:8c:14:a8:03:8d:e6:91:ee:51:85:24:04:7a:
92:b5:5f:0d:4e:3e:e2:5b:dd:20:8f:f0:cc:be:55:27:4c:2c:
2b:1c:6c:48:a5:46:b7:2e:8a:ef:42:23:0f:c1:5c:75:ae:33:
c4:db:3a:04:71:99:cc:9e:ed:2c:e5:e8:5b:ca:d3:6e:0e:ee:
5e:d5:d6:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ftXFen+qedl7JKh0gQtqQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5YWFiMTQ0NjEwMGE4ZmNlMDNkZjE5ZDc1NWUwNjMyOWVl
MjQ3MTMwHhcNMjYwNTEzMDUwMDQ1WhcNMjYwNTE0MDUwMDQ1WjAzMTEwLwYDVQQD
Eyg2YTUwMGI3MjEyNDVlNTI2MWNlOTk0MmE0Y2QxZGIzZmUyZTFjNDIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGXaESOMPktfLbDQqZaIl9dr9okd
rksld/PR+IVz63RebztACzHszRQXx0WZMXrh+UT8x14CkdGLY5Dr2dDA1MvTcR8P
jQTkSzGrvkjtz/QAleK0nZxCt8bup5KQ9OQp1lPWVArDLSkFeg/LNCyclJ91eSa9
TxeokJuV6mYR0Wx+FTOKSd/MkZfgFs5nMLgm0s9Lgu1TQNlyHEH/qFDs+ETRRKlg
ZdOpBBSn3Zsvz44cLh7FpmxsK8H+65OuBXSlwsdgkeXCvIaWRkzCslf00Hhuy0U7
QMODf2OVSZ7GpzqNRfEmbV2+0LeTftCIyX9u0s37J3tALan/vo1muOS87wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGpQC3ISReUmHOmUKkzR2z/i4cQiMB8GA1UdIwQY
MBaAFOmqsURhAKj84D3xnXVeBjKe4kcTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmFxeFJHRUFxUHpnUGZHZGRWNEdNcDdpUnhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS83MWUwOWMtMjhmMy00ODI1LTgwNmYt
YTBkYzM1NGY0Y2EzLzEvNmFxeFJHRUFxUHpnUGZHZGRWNEdNcDdpUnhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS83MWUwOWMtMjhmMy00ODI1LTgwNmYtYTBkYzM1NGY0Y2Ez
LzEvNmFxeFJHRUFxUHpnUGZHZGRWNEdNcDdpUnhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcC6Pkf3X
fsjNXcs67NgGqY3/RnmUe7YkiRZ8/adTdJG6yEGkTRGzC0jYHjH0Q2MKB2DpH+48
CH1NaOjGDmWwRtG8l8R2ox9Gsboe6wY0AWVC3bjYmoS8nWL54vFai6W8K7a8QUnY
DYaMhwn4tWBC35JyVH/OBk9qxAgj103FSlAe/Uu3B6PQ6uj8XST4K8yLI7EqgFag
n9iQ7JTld5jCNXIG+ty4BBhp+j144bSXkCK3yZmK3+gs4taMFKgDjeaR7lGFJAR6
krVfDU4+4lvdII/wzL5VJ0wsKxxsSKVGty6K70IjD8Fcda4zxNs6BHGZzJ7tLOXo
W8rTbg7uXtXWyw==
-----END CERTIFICATE-----
Generated at Wed May 13 15:22:35 2026 by rpki-client