
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/6krZNBGOZSbIlPRp-GqjIME-CPQ.mft
File: 6krZNBGOZSbIlPRp-GqjIME-CPQ.mft (raw, json)
Hash identifier: UYU6/Qn/+m5bHQorAMYoanaTTcwJDwkiMAqVrda1hzU=
Subject key identifier: 9F:55:8F:6B:78:58:A6:EA:5B:D6:6C:29:CC:78:2C:5C:3F:54:5A:33
Authority key identifier: EA:4A:D9:34:11:8E:65:26:C8:94:F4:69:F8:6A:A3:20:C1:3E:08:F4
Certificate issuer: /CN=ea4ad934118e6526c894f469f86aa320c13e08f4
Certificate serial: 01A0D011AF2725723A1B81987BDFEBD185BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6krZNBGOZSbIlPRp-GqjIME-CPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/6krZNBGOZSbIlPRp-GqjIME-CPQ.mft
Manifest number: E5
Signing time: Wed 23 Sep 2026 21:00:14 +0000
Manifest this update: Wed 23 Sep 2026 21:00:14 +0000
Manifest next update: Thu 24 Sep 2026 21:00:14 +0000
Files and hashes: 1: 2ICA_jT8gH0SqY4DMPAhLBe-a3g.roa (hash: bQhPgBki/83xZpaETZB5bitS9JPACummJNBn28qxStg=)
2: 6krZNBGOZSbIlPRp-GqjIME-CPQ.crl (hash: KPCVxErM7hnKQZQOgqtMJXXfDNuR2BijWLx/+R7CYiw=)
3: BvgqH8EAXVWJotlokwrOIHxbYAE.roa (hash: CGihJpuAyd/wpD77regwALXMCxjzHShjZBJCu5oF9Vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/6krZNBGOZSbIlPRp-GqjIME-CPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/6krZNBGOZSbIlPRp-GqjIME-CPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/6krZNBGOZSbIlPRp-GqjIME-CPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:11:af:27:25:72:3a:1b:81:98:7b:df:eb:d1:85:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea4ad934118e6526c894f469f86aa320c13e08f4
Validity
Not Before: Sep 23 21:00:14 2026 GMT
Not After : Sep 24 21:00:14 2026 GMT
Subject: CN=9f558f6b7858a6ea5bd66c29cc782c5c3f545a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4b:29:fa:46:28:3b:c9:3b:43:a3:d1:89:14:
fb:d7:0c:f7:ee:58:b5:a8:88:4b:35:62:cd:54:d2:
7c:93:02:12:a3:6f:82:48:18:0c:89:d0:fa:8d:7d:
95:77:78:c9:0c:1f:4a:3d:cc:c5:d1:3a:86:9e:02:
68:9a:91:c5:6d:ef:1b:6e:98:30:16:95:b8:e7:9b:
a3:58:6d:4e:24:d2:68:1f:7c:85:10:e0:a1:09:b5:
b2:96:ec:d4:a0:1a:6f:a1:aa:da:78:2e:20:4c:ac:
96:cd:f5:64:76:60:1b:80:0b:60:6d:dd:11:36:0a:
c2:53:73:17:3e:4f:f1:f3:f1:ba:34:9f:b2:76:1c:
a5:05:29:a1:c6:59:b0:85:cf:3c:be:8b:27:34:32:
cf:21:07:8b:6a:ce:7f:67:01:d1:bf:78:05:04:25:
76:8f:c5:5b:f7:32:c1:3f:2b:11:71:17:88:35:c5:
4c:07:c4:ee:88:2c:07:e9:b9:4d:4e:9c:04:98:2c:
a7:f5:5d:e1:19:f8:93:53:61:64:d6:d6:04:65:56:
ee:bd:68:f0:c9:18:e4:16:f8:b0:be:c5:90:17:d3:
61:4a:98:7c:c1:5a:b9:23:a4:bf:08:5c:3e:ff:e5:
8a:5b:52:8a:76:07:69:3c:36:34:58:dc:74:e2:8e:
64:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:55:8F:6B:78:58:A6:EA:5B:D6:6C:29:CC:78:2C:5C:3F:54:5A:33
X509v3 Authority Key Identifier:
keyid:EA:4A:D9:34:11:8E:65:26:C8:94:F4:69:F8:6A:A3:20:C1:3E:08:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6krZNBGOZSbIlPRp-GqjIME-CPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/6krZNBGOZSbIlPRp-GqjIME-CPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/6krZNBGOZSbIlPRp-GqjIME-CPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:bb:01:9f:3f:06:c3:73:72:f2:6f:38:b2:be:bf:5b:d6:59:
88:49:e6:93:eb:57:c9:36:45:ba:37:86:73:f2:85:45:14:1b:
3c:a1:bc:d2:31:f0:9d:c7:47:7f:fc:cd:90:f5:28:c3:cf:d6:
56:96:aa:96:89:5b:40:59:18:fb:b5:8c:96:9f:6e:4d:b0:f0:
7c:02:65:b8:32:40:96:c7:b0:ea:03:0a:3b:9a:6f:a2:4d:a3:
e6:c8:43:89:a5:40:56:68:f8:82:1a:69:53:30:62:c4:4e:00:
3c:64:fc:e2:a5:e1:e3:4e:89:6e:a3:27:94:56:92:e4:d0:70:
db:ec:52:5b:02:c9:60:f1:68:b7:e7:d0:93:bf:63:88:cd:98:
f9:f2:ba:69:e4:56:49:b9:4e:b7:20:b8:24:df:c9:cf:ae:c9:
53:45:2b:f0:b9:2b:06:62:e8:18:0e:60:88:a6:1c:a0:35:5f:
b3:b5:d5:db:b8:e5:83:b4:e7:6a:51:53:af:93:0d:4e:2c:cf:
c7:cb:13:fd:e4:97:04:8d:53:4f:8f:b2:5f:43:a0:86:9d:2b:
12:64:c1:0a:69:bc:3f:80:9c:fd:53:ec:30:e4:e3:67:39:b3:
10:45:86:13:a4:c0:f7:0c:23:f5:1f:7c:8e:65:bc:14:b3:39:
c3:20:94:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQEa8nJXI6G4GYe9/r0YW8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhNGFkOTM0MTE4ZTY1MjZjODk0ZjQ2OWY4NmFhMzIwYzEz
ZTA4ZjQwHhcNMjYwOTIzMjEwMDE0WhcNMjYwOTI0MjEwMDE0WjAzMTEwLwYDVQQD
Eyg5ZjU1OGY2Yjc4NThhNmVhNWJkNjZjMjljYzc4MmM1YzNmNTQ1YTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUsp+kYoO8k7Q6PRiRT71wz37li1
qIhLNWLNVNJ8kwISo2+CSBgMidD6jX2Vd3jJDB9KPczF0TqGngJompHFbe8bbpgw
FpW455ujWG1OJNJoH3yFEOChCbWyluzUoBpvoaraeC4gTKyWzfVkdmAbgAtgbd0R
NgrCU3MXPk/x8/G6NJ+ydhylBSmhxlmwhc88vosnNDLPIQeLas5/ZwHRv3gFBCV2
j8Vb9zLBPysRcReINcVMB8TuiCwH6blNTpwEmCyn9V3hGfiTU2Fk1tYEZVbuvWjw
yRjkFviwvsWQF9NhSph8wVq5I6S/CFw+/+WKW1KKdgdpPDY0WNx04o5kbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ9Vj2t4WKbqW9ZsKcx4LFw/VFozMB8GA1UdIwQY
MBaAFOpK2TQRjmUmyJT0afhqoyDBPgj0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmtyWk5CR09aU2JJbFBScC1HcWpJTUUtQ1BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC82MzQxNzItYmIzNy00ZDgyLTg4YTIt
OTQyZDJjNmM1ODU2LzEvNmtyWk5CR09aU2JJbFBScC1HcWpJTUUtQ1BRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC82MzQxNzItYmIzNy00ZDgyLTg4YTItOTQyZDJjNmM1ODU2
LzEvNmtyWk5CR09aU2JJbFBScC1HcWpJTUUtQ1BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJLsBnz8G
w3Ny8m84sr6/W9ZZiEnmk+tXyTZFujeGc/KFRRQbPKG80jHwncdHf/zNkPUow8/W
VpaqlolbQFkY+7WMlp9uTbDwfAJluDJAlsew6gMKO5pvok2j5shDiaVAVmj4ghpp
UzBixE4APGT84qXh406JbqMnlFaS5NBw2+xSWwLJYPFot+fQk79jiM2Y+fK6aeRW
SblOtyC4JN/Jz67JU0Ur8LkrBmLoGA5giKYcoDVfs7XV27jlg7TnalFTr5MNTizP
x8sT/eSXBI1TT4+yX0Oghp0rEmTBCmm8P4Cc/VPsMOTjZzmzEEWGE6TA9wwj9R98
jmW8FLM5wyCU9g==
-----END CERTIFICATE-----
Generated at Thu Sep 24 03:47:29 2026 by rpki-client