
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft
File: 6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft (raw, json)
Hash identifier: Nhm2st3+AgXjEWDjl8q0B5C81lSzOo9KJxxgZuyenwo=
Subject key identifier: DD:1A:EE:F9:D1:A7:A6:D2:75:B9:43:0C:85:34:8E:26:3F:A9:81:00
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 01A0D64C35600DB72AA1F26A230E64B9325E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft
Manifest number: 1A95
Signing time: Fri 25 Sep 2026 02:01:53 +0000
Manifest this update: Fri 25 Sep 2026 02:01:53 +0000
Manifest next update: Sat 26 Sep 2026 02:01:53 +0000
Files and hashes: 1: 3QvNaBTxs1PjLqnE1VOIhI45V7c.roa (hash: WFmXAUAeTAg/52UhkkFJsciHEc280mGsBIoSVtzTk+c=)
2: 5ERvaJCjijofjZEEyshS2DN7G8w.roa (hash: L0qBBv8W1SeaQxwY+yM3qe9nhTQXTw1BhXzcHvSUW8A=)
3: 6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl (hash: YVVQ3K16BHD072uShoeRrFe3SaIg6yiTOKNI9yWXCJ8=)
4: 9FTrqsCyEAUkh4YPrtnvXY_X4l0.roa (hash: NsC3+Fupa1mo3BaWG6ctFYcneaqQ6slJ0dPljJ/QMXI=)
5: 9aKkqtdGa1ABukMG_yLakFtZfm8.roa (hash: KrI6Pr1fZmvsqfb7nSDh5Zvb9gr8g8QjzGikzHidhBA=)
6: Ewp2ty2AesH2Jd9VIJPXFtxGGxY.roa (hash: ZxzzP3F2j7XnslqpQi6FYUYx4xkKMdzCPqasRFAy5H4=)
7: Kg1pxmiChPV6fz5fVLcqDVZPGVA.roa (hash: SRNE2+sx9FNGp2a8VnJm35Y0pORouHxk0y7BXf1WH74=)
8: LD-3cK94EujojZ7ZiN9ZmU7leBA.roa (hash: cS7YGfmXGTnX+pBKgNWgV7kZw2s1r4jfbn1oYwmWhSE=)
9: LDB6M5jKAUAX0pW_Ow6Al3r3TVc.roa (hash: 0871MmeimwA3qa6fuNCLnFf75uwna79ZP/U6WsupA/A=)
10: N9SJly_iVwmkDpbj9fIuOkPtA8E.roa (hash: OOmuPWfaQlIoeFuc06EF+wS2RKHaEW6adcFSP2176rs=)
11: QwRlOQcYxSvdN2FJpOpcXHAZE5I.roa (hash: JFqMAVJTjeNtNUVkPs0ekqTe1vs1PCY+bp6cGNGb31A=)
12: RVyoE2mNMNeL3FMAr2YC6ZIeUpc.roa (hash: Mpj7iy2/6clWPzb2aVRARaYOeEI5SbFcnwOqd9+kHL4=)
13: Sjw15gl8TsiPxYWGxwle5yVmVpI.roa (hash: KyfTMSv87/ffxlDqBdVXEjJETz4cQjnD5+jWHw/lzng=)
14: SvEm-yXVhiOKZ90phjAW_AA8ALc.roa (hash: 7Oq7qPwBODUfGC8UgiLRJC3+bMOGG/2kfdhFT0x3Ngw=)
15: UOozdgMWkk0RJwT79mq5mSwdurM.roa (hash: fJ4sYv6ZeyusyQL5urhnyr1YZ9IQ2Da9R2oWQOCYu0A=)
16: W80Mf4_ivkezZ0bshb3ksFAV6PY.roa (hash: GvDsjIe4MFxa+3NX/qnfQlgFppPBUAANoYbReZaXdUk=)
17: aWg21xYS3AUVunbtCCZYY0IE-qA.roa (hash: FfCb8eVmyUDpcRLrhqbLVf0Nu60pvL/vFuk4kk28e1o=)
18: dNvl41gDXbZfsDZ9RFpBvP6cYow.roa (hash: NaucFK+oQglGEexzweska9RmpWnDV2Wpe/l4R51xpK0=)
19: eToy7Dy86gp6pNPMymfDqa4MdTI.roa (hash: dTIlaV1AqccCy+1JNiT8jHC2RbOVH0ledpyPTc9PFZo=)
20: gb92OyPtFV8ggf63vEi-KCDdf-s.roa (hash: +rhI/ux5CfxH5KWi60cOU2i3sB6AO/30yOzY/E/1xts=)
21: hQ2GFL3dnEKzJSAPLs1axACh1nE.roa (hash: XfsYyUXshVaU5kesRq6m5zdn9J6jCqEigoDtxpwvnck=)
22: iHwdh7RQbqHYXi1tV5PT6-9KMZc.roa (hash: Vt5thfBB9WwucwEL2pJBtrKMfJA6iF3TBVYycl0yvI0=)
23: m5mX7hMQbCWq-GlbxcSu3T6pYEk.roa (hash: iTzlGtzNibw71SECgWWAtWLsGGjMg9WIxNFV2xfi6y4=)
24: mdu1Exn0vcwhf2D-oUz3A06rLz0.roa (hash: dkzkWhkhgt5FRBH7GshJAC2Twq+nZCCBlUCXlmzP+Ks=)
25: nVYscJl5lSrsIHBCJc12P0YYc1I.roa (hash: Qaq790oVJnBvnSmkP1Q9R1yIhbQhRqgrmHzuuPyL64c=)
26: quu8bKvWsrapvb9agdJWOzx8vCU.roa (hash: GuhXE2SWFgsGNwW07uZU74XAQZgfH3lzNUDa1zFBJKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:4c:35:60:0d:b7:2a:a1:f2:6a:23:0e:64:b9:32:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Sep 25 02:01:53 2026 GMT
Not After : Sep 26 02:01:53 2026 GMT
Subject: CN=dd1aeef9d1a7a6d275b9430c85348e263fa98100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d1:b2:68:45:7e:dd:52:60:80:d1:85:8f:ce:
0c:3c:2f:57:2a:df:1a:ce:f5:0b:06:f9:f7:f4:55:
c4:de:28:1d:e4:71:5f:c6:d4:98:c2:d1:b1:c4:34:
c3:5b:bf:48:c6:7f:f7:24:37:12:25:3b:84:3c:13:
8c:7a:2a:41:52:1b:32:77:89:b2:d6:9f:e9:16:5d:
e3:7c:27:c7:b8:56:2c:5a:df:4f:60:80:6e:dc:e3:
eb:36:96:76:4e:1b:18:79:18:4d:70:4b:f9:9c:81:
85:53:9a:5b:8c:5d:93:79:bc:4a:e8:18:27:d0:ff:
68:1f:1c:4e:15:2d:89:fb:80:20:2b:53:c9:ea:da:
09:8b:b4:19:ad:08:83:c8:81:ee:60:d6:7e:60:59:
b4:ca:d6:59:c6:1b:19:90:6d:9c:4b:bb:bb:4c:f2:
a3:c3:81:42:54:ff:dd:58:37:30:49:5c:b0:cd:05:
f5:dc:b9:71:c8:57:e9:00:0c:42:d0:cf:30:4a:ba:
0a:95:36:22:c1:a1:e7:c9:ef:40:d5:a6:74:c7:6f:
57:61:85:bd:34:49:5e:75:b5:31:cd:0d:3a:3d:aa:
88:f8:97:16:10:95:b2:87:17:43:8e:0c:e9:69:64:
82:c5:74:4f:f9:c5:27:0a:c0:aa:8a:7a:13:15:a9:
66:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:1A:EE:F9:D1:A7:A6:D2:75:B9:43:0C:85:34:8E:26:3F:A9:81:00
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:d0:ea:96:00:62:03:d7:d9:d9:c9:4f:2f:e7:d8:fe:32:1c:
68:dc:3d:be:2d:9e:ac:ae:5a:8d:81:dc:e8:8a:2f:a1:67:c3:
ed:22:b4:91:33:7c:2e:08:7a:20:63:b9:76:5e:c5:22:51:f9:
17:35:1c:cc:e7:d1:bd:23:4e:a5:d0:bb:ed:66:40:4a:f7:ab:
19:fc:c8:4d:e0:4a:93:9a:50:4c:66:24:4b:15:af:3e:52:72:
82:b6:c2:bb:7c:3c:fd:6e:02:0a:ba:bc:76:be:20:90:78:9a:
84:4a:71:7d:85:7b:2c:47:d7:f8:db:00:11:ef:1f:84:ba:cb:
ce:b0:17:4e:ac:04:f3:b4:f5:45:b1:e1:de:12:07:d5:f6:e1:
e3:32:37:2a:e9:ad:9f:52:16:f8:66:6a:73:9a:84:ce:d8:d0:
c2:9a:17:dd:f8:bf:65:ab:50:6b:38:fb:47:46:f9:e5:69:ca:
ff:1d:00:26:28:66:05:37:86:34:52:f0:fe:92:40:73:a6:8a:
82:27:cb:55:2e:8b:f1:97:89:91:0e:0c:0d:42:48:7f:ba:b4:
de:96:d8:a3:a1:2c:a1:48:38:0b:48:42:9a:86:be:ea:71:0f:
79:36:b0:c2:df:a5:15:5a:3c:84:91:7d:48:55:55:ca:75:89:
fe:9a:a7:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDWTDVgDbcqofJqIw5kuTJeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViZWM5MDMwYzcwYTNkNDE5MmQ1OWMyOGRjYzhkNTQ3Njk0
MzQwYjMwHhcNMjYwOTI1MDIwMTUzWhcNMjYwOTI2MDIwMTUzWjAzMTEwLwYDVQQD
EyhkZDFhZWVmOWQxYTdhNmQyNzViOTQzMGM4NTM0OGUyNjNmYTk4MTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNGyaEV+3VJggNGFj84MPC9XKt8a
zvULBvn39FXE3igd5HFfxtSYwtGxxDTDW79Ixn/3JDcSJTuEPBOMeipBUhsyd4my
1p/pFl3jfCfHuFYsWt9PYIBu3OPrNpZ2ThsYeRhNcEv5nIGFU5pbjF2TebxK6Bgn
0P9oHxxOFS2J+4AgK1PJ6toJi7QZrQiDyIHuYNZ+YFm0ytZZxhsZkG2cS7u7TPKj
w4FCVP/dWDcwSVywzQX13LlxyFfpAAxC0M8wSroKlTYiwaHnye9A1aZ0x29XYYW9
NEledbUxzQ06PaqI+JcWEJWyhxdDjgzpaWSCxXRP+cUnCsCqinoTFalm8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN0a7vnRp6bSdblDDIU0jiY/qYEAMB8GA1UdIwQY
MBaAFOvskDDHCj1BktWcKNzI1UdpQ0CzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQt
NGE2Zjg2ODMyNjVjLzEvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQtNGE2Zjg2ODMyNjVj
LzEvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArNDqlgBi
A9fZ2clPL+fY/jIcaNw9vi2erK5ajYHc6IovoWfD7SK0kTN8Lgh6IGO5dl7FIlH5
FzUczOfRvSNOpdC77WZASverGfzITeBKk5pQTGYkSxWvPlJygrbCu3w8/W4CCrq8
dr4gkHiahEpxfYV7LEfX+NsAEe8fhLrLzrAXTqwE87T1RbHh3hIH1fbh4zI3Kumt
n1IW+GZqc5qEztjQwpoX3fi/ZatQazj7R0b55WnK/x0AJihmBTeGNFLw/pJAc6aK
gifLVS6L8ZeJkQ4MDUJIf7q03pbYo6EsoUg4C0hCmoa+6nEPeTawwt+lFVo8hJF9
SFVVynWJ/pqntg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 11:05:14 2026 by rpki-client