
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
File: 6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft (raw, json)
Hash identifier: dNIVyO85aVOX0UDoD/ezaRkF+cF2dfweR3bpFm9sxm0=
Subject key identifier: 31:52:90:AD:92:3A:82:DF:B7:5F:4F:3B:68:56:C2:32:0A:17:1F:0A
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 01A0CEC8C4C7D1B28BAC34D31787F3E1238A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
Manifest number: 067E
Signing time: Wed 23 Sep 2026 15:00:59 +0000
Manifest this update: Wed 23 Sep 2026 15:00:59 +0000
Manifest next update: Thu 24 Sep 2026 15:00:59 +0000
Files and hashes: 1: 0P6vuH7hkdIwIR9PInvR-Cs644U.roa (hash: OZr+B9OcOvVrH/NKnVTHPgP5Ns3nzCsnwCI7oatFz10=)
2: 2hUNqAaLAxlTuvxBbQp3Ny8ZRBg.roa (hash: JHzxdaWvVLDKSsd26QrH87bLuJsRLjXCmgemIpABYco=)
3: 6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl (hash: uTF3Rh459Oz580Lvm5cXmdJpm/lgH/IqTsVy8X9n5M4=)
4: 8WcyMQ3lOVTIvSKFas5ExgPsbZU.roa (hash: EjdtSKq3M9+llOwbGunPdh03wK0+aZ0al1pXW1HzzXw=)
5: CXZdBW73P1sigZtPmmClSIVanYo.roa (hash: 4v+9CCQ8FNhXj3JWX6pp/XQ9nrD0wz+4HUXlx805a0k=)
6: EIcG2tRM0hEnCUbXBXwn4F2K_RU.roa (hash: CzCHk+1EoYkn3OF7WD2BogtQF0fxYDolBFo6xDdWuh8=)
7: FGXwoit8a4sabQ5C7V91KCVEisg.roa (hash: snmXzF1yCkwjQV6I20Cp2hZS6KrdvqWPo0SPQih8C7o=)
8: Frt4_waqB7h9y7h03HUd1hb1VLw.roa (hash: T0QirUdAWIQNuXFxpDq5mL/vxg3a4wXdlbXAqkvIb1U=)
9: ICSYGrMnvnf78IG-U4_z8_jIgxk.roa (hash: PcqXGcbd3Xoq/GKGzWlEbDkeYUaghyHnlFBBkfXfCeU=)
10: IqXXDZ3GgnjRd1G0jTr1HmAi2zI.roa (hash: MyeVCpdqzkiX8RhyNgrhg2wt8+fZNtCSYjKXeFPq0mo=)
11: KVTaTVaCviOMdjZzS4Zc0zBw4OM.roa (hash: rWuvCKTHTIyhv2L4Mlx4/iHLNmlWT5ONGdBrJkW48EA=)
12: VhCRfcvEjNM89gcOi0JP5Q7Zclo.roa (hash: w2JGUitloSyikURERlpElaAKN10Q3H4X48EmpiyZxlk=)
13: X9PhdYm3cU2xqHBhnAPbju75a5E.roa (hash: t6eqgGoHBtyYMFMOQpDHiu5ZIGINQ/XOCXPww6urBS0=)
14: XG45-dkrjZwdFgIEASudJhYYqA8.roa (hash: djWr/s32as+sKlSv5ersJGirbqj8zQDuitFpGIaAl/k=)
15: YzoWDviTcBF18c7YY75_s0rgVC8.roa (hash: a+ezIrDuUga0lwuC+JgGZCJue+rFDaLbRWFGCk60R4k=)
16: cN4TjAl3meHdzGkGOjGUxxdyto0.roa (hash: KF4CYHM3MslLTwdsfB1zjWIGDa34pn1bkGZHIyfriJk=)
17: cZdoFIof6I27GQcjytPY0R3i3js.roa (hash: pRv2+sxETB2uUE4tr3TfMEgzvPUHUWoGW9QMt9CyFD4=)
18: fLhrOgEH14ZtDnY2a-kcypEw4TA.roa (hash: IrBPByCkmrLWzYOki6hhtel2dQO8ugJUMzMYgBXFBL8=)
19: g2qonlFSaTFnlLgNQc6hp2NNvNQ.roa (hash: p9VO6IlkdKLB8UZin5VIX7axFJ8RMhBVLWx58aqiXPg=)
20: j-latFhScd5PKEr2AScvhG1Bz8c.roa (hash: UhswVaY1Iy7gRFrL9BjrtRDuuM3Z2CMtnSrc6eScFQ0=)
21: j3qq4MvojOFaV3piUARhww5SfkI.roa (hash: 5ZhQV4dh6a6da+ERWvVWZKdaaZu/HC8oF5bb59nJCtE=)
22: n3qL0U5O59kTYO8i_VapSoASKmc.roa (hash: tsbQUSxeZLoxmMggAB9U1UA5AvqgQHEoy4fl+w478ME=)
23: neBBgA0odZn9GDyZaXqqlQXbshQ.roa (hash: SS0fdHDxh+zKYI6XDqiq1C8iUD2E0IhJks3vTraThww=)
24: p11TeDMm0uMplq6QnnT6a0h_yrw.roa (hash: xmy1s06ovFLtUr1mbZMaGtqrWwFvo5nSDSbPj7EtqcI=)
25: s2ybeZT5rNVQIBebgD5HdN1AWlw.roa (hash: QrYBLYtzcPg8r33UGPdDC/yuaM0LspPms6lZA29qbO0=)
26: vG4PNdPCpmsHlpbXODU_YK6E-fc.roa (hash: mX5cRML8Dc4pk4M7hpiHQwZERgzsoyWou0tgh8xR65Q=)
27: wMA9EYd6XnQNkBbE9YqLguhIGv8.roa (hash: 9lZpPveHeBWq4KzHowRRHzV6Laqxgjf+4n1ipLFAM/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:c4:c7:d1:b2:8b:ac:34:d3:17:87:f3:e1:23:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: Sep 23 15:00:59 2026 GMT
Not After : Sep 24 15:00:59 2026 GMT
Subject: CN=315290ad923a82dfb75f4f3b6856c2320a171f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:30:50:46:91:d1:e6:17:8f:33:d6:ad:e4:12:
a0:33:1b:4d:ef:6f:ef:5a:f1:b6:0b:97:5c:79:3d:
8e:ba:c9:d5:12:ef:82:b1:13:73:1a:77:b8:df:71:
a8:c8:e0:ef:79:85:49:b3:ce:1c:cf:f4:1d:46:b0:
18:a3:65:6f:f7:20:18:e3:86:f5:8b:4c:c3:97:98:
bc:b0:78:b6:11:52:9e:f6:02:90:55:3e:7e:67:6c:
b5:4f:e8:9b:d4:36:96:1d:a7:72:2e:53:87:6f:75:
93:57:73:69:cc:50:34:2d:ed:89:20:e7:c8:60:47:
f4:3a:5f:7e:19:04:1d:df:6d:46:ee:de:b6:25:fc:
c9:39:66:63:d6:6a:72:51:d5:86:19:4e:1e:54:9c:
88:18:27:ea:4b:54:55:eb:c8:6b:a2:88:e5:68:bc:
37:89:f9:a5:19:41:94:09:f4:2e:ab:df:b6:00:65:
a8:a8:57:0a:11:47:ae:fe:4d:85:f0:8a:0e:77:b0:
f7:9c:b7:b2:4b:92:4c:2d:b6:42:01:f2:b2:c4:d0:
c1:9e:17:b1:0f:93:88:56:ab:bd:6d:28:bb:22:02:
9f:ae:02:3b:70:a6:14:c4:7a:dc:bd:24:53:dc:6f:
0a:33:af:bc:65:88:79:39:16:45:ee:2c:cd:4f:ee:
1f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:52:90:AD:92:3A:82:DF:B7:5F:4F:3B:68:56:C2:32:0A:17:1F:0A
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:8d:86:a3:be:7a:6b:1f:b8:b2:d4:68:7d:f0:f2:6f:ca:11:
9f:0f:0b:a5:ee:e1:b4:18:5f:2f:77:14:0f:4f:57:a8:fa:81:
6b:27:e9:53:fb:8c:8b:2b:40:65:7d:43:76:6f:30:51:68:90:
ec:45:3c:0b:24:96:70:a2:ac:11:a9:01:74:81:9a:c5:d8:ca:
46:bb:e5:40:fd:cc:1b:ab:58:01:77:ed:2d:a6:b9:f9:76:36:
dd:c3:a6:61:25:30:3b:22:63:c7:58:56:8f:72:81:8f:b1:2c:
a5:2f:ff:71:46:38:4d:87:4c:13:5b:b7:21:6f:bd:e7:94:d6:
fd:ff:7c:81:50:61:8b:f9:10:ce:70:13:73:c1:28:0b:00:f0:
46:ab:8e:df:22:a2:da:cb:33:64:91:56:6f:1d:01:18:18:19:
b2:d4:49:b4:61:f7:a0:ab:12:3c:09:01:7c:af:91:12:ca:c4:
f6:66:00:2c:1c:6b:0a:8b:cd:6a:25:ba:cb:3d:66:d1:77:67:
a3:d0:40:19:63:b5:b7:b1:88:f9:b1:a6:a5:4b:3f:33:1c:5f:
d6:a5:43:aa:63:03:92:a1:7c:6b:ed:55:f9:14:56:7e:a5:fe:
31:c3:79:de:1f:ac:87:23:d7:f7:d2:92:05:ec:19:2d:09:97:
72:8f:d7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:20:02 2026 by rpki-client