
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
File: 6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft (raw, json)
Hash identifier: TndJp93yIMhlQzk+WXP+iz4cx1xE87XVYkiC5WSUJJg=
Subject key identifier: D8:79:90:6E:AE:0D:F3:63:A8:C7:3A:C7:79:E6:A1:09:8D:13:D0:C6
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 019D27DFFE3CB4D7E4CEF8808439BA0020B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
Manifest number: 0458
Signing time: Thu 26 Mar 2026 02:01:23 +0000
Manifest this update: Thu 26 Mar 2026 02:01:23 +0000
Manifest next update: Fri 27 Mar 2026 02:01:23 +0000
Files and hashes: 1: 6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl (hash: LADDpJQo4j9/kjaJsZf6BUTZbmWONR0jTPrtTkdY4Cw=)
2: 9IeVl12aUhba2Emfsn2fBTAFUAs.roa (hash: XK8m1Iay7rzWVYWcJ+cMdfUsonXHcQUc6/GSyCW/CfU=)
3: DhKLRJT2ltwYLgRl7D0eF7S8IJc.roa (hash: wkzDuQvhRxps3W9y9aLTCG32Rt6wi9M/E0GhrUrmoNo=)
4: EIcG2tRM0hEnCUbXBXwn4F2K_RU.roa (hash: CzCHk+1EoYkn3OF7WD2BogtQF0fxYDolBFo6xDdWuh8=)
5: FGXwoit8a4sabQ5C7V91KCVEisg.roa (hash: snmXzF1yCkwjQV6I20Cp2hZS6KrdvqWPo0SPQih8C7o=)
6: Fjwh_xe98NLC_NhYm0MDb-WiDn8.roa (hash: PIt7e72kgyCo74un3u52sqzROHoMmxmWZGgzptnTe7c=)
7: ICSYGrMnvnf78IG-U4_z8_jIgxk.roa (hash: PcqXGcbd3Xoq/GKGzWlEbDkeYUaghyHnlFBBkfXfCeU=)
8: IqXXDZ3GgnjRd1G0jTr1HmAi2zI.roa (hash: MyeVCpdqzkiX8RhyNgrhg2wt8+fZNtCSYjKXeFPq0mo=)
9: VhCRfcvEjNM89gcOi0JP5Q7Zclo.roa (hash: w2JGUitloSyikURERlpElaAKN10Q3H4X48EmpiyZxlk=)
10: Z-99bBhSzjJ0Kg9aGobemtBeDJw.roa (hash: pvxDBRck2bWfMsW7dovzPou9uNU8Gr9hr6lVhmhkx9Y=)
11: cZdoFIof6I27GQcjytPY0R3i3js.roa (hash: pRv2+sxETB2uUE4tr3TfMEgzvPUHUWoGW9QMt9CyFD4=)
12: fLhrOgEH14ZtDnY2a-kcypEw4TA.roa (hash: IrBPByCkmrLWzYOki6hhtel2dQO8ugJUMzMYgBXFBL8=)
13: j-latFhScd5PKEr2AScvhG1Bz8c.roa (hash: UhswVaY1Iy7gRFrL9BjrtRDuuM3Z2CMtnSrc6eScFQ0=)
14: j3qq4MvojOFaV3piUARhww5SfkI.roa (hash: 5ZhQV4dh6a6da+ERWvVWZKdaaZu/HC8oF5bb59nJCtE=)
15: kG5r4M7vL0g0ERFaBEW96gIBEvc.roa (hash: kKKMoGzt2uOeJqgdnHsPG56fjNKaGYn/UtCz+xqiuPc=)
16: n3qL0U5O59kTYO8i_VapSoASKmc.roa (hash: tsbQUSxeZLoxmMggAB9U1UA5AvqgQHEoy4fl+w478ME=)
17: n_XEvDYqTMYmcDklyEEQZAapP4U.roa (hash: FRPCi8BHfC2b2LCmr4vX6DGUlH6IkNK9297U+Ab7+bo=)
18: nu2apDqXy-iino7G3nWPhPWkDqo.roa (hash: ixg3Ryv/Bp0pzXwcZFr4U5J1gnEXjS591im7CKO4sTg=)
19: p11TeDMm0uMplq6QnnT6a0h_yrw.roa (hash: xmy1s06ovFLtUr1mbZMaGtqrWwFvo5nSDSbPj7EtqcI=)
20: qAYx45nxlYDnnw3FPj8rqLwYawc.roa (hash: cnuzs/IA+tUXp6BKmh6rTk0mw2s6mh24Bdz+61FbEwc=)
21: r53oyYolcOu-UfgcT_tdtf7-39c.roa (hash: 0h3BGKzWIs5UPZjIeVM1ksoF8ZK9Q6Fzsphmnty3gCM=)
22: s2ybeZT5rNVQIBebgD5HdN1AWlw.roa (hash: QrYBLYtzcPg8r33UGPdDC/yuaM0LspPms6lZA29qbO0=)
23: vG4PNdPCpmsHlpbXODU_YK6E-fc.roa (hash: mX5cRML8Dc4pk4M7hpiHQwZERgzsoyWou0tgh8xR65Q=)
24: wMA9EYd6XnQNkBbE9YqLguhIGv8.roa (hash: 9lZpPveHeBWq4KzHowRRHzV6Laqxgjf+4n1ipLFAM/I=)
25: wMI5BXOT_BgN0uxpsGRRZRnKSkM.roa (hash: Oxrdhr1ss/JbqLMgdIsQwdWtrWAJAiM83gHMKnZe/Lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:fe:3c:b4:d7:e4:ce:f8:80:84:39:ba:00:20:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: Mar 26 02:01:23 2026 GMT
Not After : Mar 27 02:01:23 2026 GMT
Subject: CN=d879906eae0df363a8c73ac779e6a1098d13d0c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:78:d3:70:5f:6d:1b:03:fc:5a:3b:67:48:96:
d4:c8:48:01:f4:d0:97:35:28:c3:92:b0:7d:92:1a:
43:3b:0f:3b:b7:bb:69:a2:51:21:7d:bb:ca:33:b4:
ec:15:d8:55:ac:22:08:08:ad:0f:47:ae:3e:6b:41:
71:cd:58:32:e0:fd:e1:9a:f7:38:c3:5c:78:3a:a9:
b9:56:5c:e6:67:f3:7d:a8:1a:86:c6:06:14:c1:e9:
ec:32:9f:b7:fa:44:bd:7d:3e:63:2f:46:3d:68:6a:
ab:2c:99:51:39:cc:7e:68:a4:92:c8:49:9e:ce:67:
71:d8:61:fd:4f:fb:0a:cc:3b:77:3d:27:58:56:9c:
1e:93:f4:62:1c:9b:5d:19:77:04:ad:cb:e4:67:65:
56:62:6a:04:a5:0f:2a:73:2e:7f:9b:6a:d9:13:7f:
cb:df:84:27:77:14:43:68:d5:fd:a3:cc:da:9a:05:
28:3c:f9:54:85:35:44:8f:f6:90:c4:33:3d:5e:97:
b7:f5:15:88:f2:12:b6:0a:0d:27:a0:74:30:8c:2c:
b4:ab:ca:6d:05:6a:63:58:e3:19:67:4f:ae:ab:b1:
ba:11:8d:b5:cf:08:1b:90:a7:31:dc:23:9f:39:02:
70:2e:fd:46:d0:07:12:96:c5:ec:f4:ec:e2:89:ad:
cb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:79:90:6E:AE:0D:F3:63:A8:C7:3A:C7:79:E6:A1:09:8D:13:D0:C6
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:6a:c3:5c:ac:55:71:d0:a1:8c:92:8f:93:49:74:4e:4c:bf:
e8:aa:49:99:c8:0b:0e:80:5a:55:a8:39:bc:ef:8a:d8:85:79:
97:bb:2d:89:0c:71:b8:65:c4:ba:d9:6d:c7:f9:66:1b:41:66:
e7:17:9f:c0:af:cc:3d:7d:36:bf:dd:56:6c:41:92:a5:07:b4:
58:8d:6f:99:e8:12:b0:2b:88:20:4f:35:b7:f2:f3:e1:a6:99:
4f:ca:8d:a5:60:a7:96:21:41:49:81:d5:a7:26:4a:96:a2:db:
2e:a5:94:3f:e4:21:0e:5f:f8:fd:ea:7f:81:94:7b:38:a4:47:
8c:b3:10:ce:f9:9c:e9:b9:48:d5:95:a8:77:57:a6:9c:74:9d:
bd:42:6a:80:13:26:04:cd:a8:60:27:86:6c:bc:a5:b5:13:c2:
d0:40:53:3c:da:da:80:51:30:26:1e:54:ed:a0:1e:f4:1e:4b:
9a:4c:ce:fd:aa:12:d8:52:d9:69:ba:6e:b0:01:16:01:19:d2:
d5:3b:cc:23:51:9e:dc:41:ed:74:16:41:82:6b:b4:44:0d:7e:
8e:e9:59:23:2c:a1:d4:2f:4e:87:d2:47:a2:96:50:aa:f3:4e:
02:f8:43:ac:64:6c:62:b7:bd:c0:91:c0:cb:34:74:98:53:17:
7a:f5:d1:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:19:09 2026 by rpki-client