
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
File: 6bEyD7wk1vQ2bLZPz17S17G2vfc.mft (raw, json)
Hash identifier: icqiHccDidf3kIM4bp7hvBSDrIZhwLhzk0mCkIzQtQw=
Subject key identifier: 9E:2C:08:03:EF:D9:F2:81:3C:E9:E0:9C:DC:FA:72:A0:93:33:E6:BC
Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
Certificate issuer: /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Certificate serial: 01A0CEC82CC4700E0859F351A447E0C3E166
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
Manifest number: 1AE3
Signing time: Wed 23 Sep 2026 15:00:20 +0000
Manifest this update: Wed 23 Sep 2026 15:00:20 +0000
Manifest next update: Thu 24 Sep 2026 15:00:20 +0000
Files and hashes: 1: 6bEyD7wk1vQ2bLZPz17S17G2vfc.crl (hash: Nbxue0rxjEyrRIzVoiTVtJHFfU1vYDnQ9fGrt5dL2mY=)
2: DJ6nN3NSd1YO8q5t_zT7bPuhQIQ.roa (hash: 5lkywxbhaLRKhID4/jyJTUETlBZ/IhU7RvT2pJBvhJo=)
3: Gv6v2CuTYSuw1fxGRbIukftGmrE.roa (hash: LzIPy5gAnB2m5Fwrsrc5loi4EBJfHWamJu0+xufW+gM=)
4: HmF9BlW0N9Gf90qlurIxvLh06Qk.roa (hash: ZSkQkLJR9FAk0rQTmxE9Q0nn/fbR18zVkksGDExkMjk=)
5: PrWnje5pwuyLLung5cAWo-Sdq5o.roa (hash: i3OyNFwt3PIeOGKHaRbK8pFHgXOUNE3Am1N1aLetXS8=)
6: am9wGnnaAwnbbl-GeKSLoRk_nTs.roa (hash: lT6hqTkoXScWiRJIwaGV6urFE0P+0XxY6z4DqV2dR4w=)
7: kDoooTn7_d9rJiLyXZVvZxYYDxY.roa (hash: OFQHZn0JA/oknUFklltDGx8uk2qRQsfn+A1b0e8eT3g=)
8: nhhkg_jIxt4rVXWEx9XQblCSEZ4.roa (hash: y1FUEKnJ06vvn88HA1FBYat4W4h49NECAE4Wk6psYL4=)
9: q3cJGJcUFmhZQxfVUYW7w5lnkIs.roa (hash: Na/vhBzQ6zuGC+WNUTNRWnoDoEf33ziXx8vOjXZ7zak=)
10: wmwwuc2J8lTkXFaf4tOjpW8KxnA.roa (hash: cU6AgM/v4ffZ1Oc0+CAzIkq1QF3SV3vuE/LeuVRBHyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:2c:c4:70:0e:08:59:f3:51:a4:47:e0:c3:e1:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Validity
Not Before: Sep 23 15:00:20 2026 GMT
Not After : Sep 24 15:00:20 2026 GMT
Subject: CN=9e2c0803efd9f2813ce9e09cdcfa72a09333e6bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:24:37:25:93:7a:04:05:0d:e1:a3:b1:aa:4e:
ce:92:fa:00:08:19:3a:c3:15:a0:75:e5:2d:3b:49:
9d:7e:a3:19:72:57:37:00:99:01:2e:0a:22:77:4f:
02:b7:f3:0e:9b:15:4e:a7:61:ce:f3:ee:65:c0:19:
4e:1b:e5:f5:b4:70:f3:ab:b3:9e:cd:23:bd:f2:1b:
f7:7f:98:c5:a3:6b:ac:3d:7f:5d:50:8a:f9:dc:22:
b7:ee:90:bc:ab:2c:c7:82:00:6e:14:89:9a:f6:16:
ef:c6:28:d8:e0:dc:be:56:b7:ff:e0:41:e2:c0:4d:
08:9a:49:2a:4c:76:b7:e3:bc:0f:89:f5:1b:a5:fd:
a3:b0:3b:20:44:0c:c0:91:1b:ca:53:10:a1:02:85:
1a:2f:37:08:db:fc:b9:b4:bd:b8:19:4a:35:d7:b4:
e7:ac:0d:37:37:07:e9:23:46:13:a7:8d:72:fb:48:
70:4d:c4:0d:88:47:a2:b7:a1:85:ee:95:47:b6:83:
10:ce:c5:c0:7c:d8:56:d8:9c:78:4e:2b:56:69:ae:
fa:c7:01:61:7f:5d:f6:5c:56:8b:67:3a:4d:6a:a5:
65:1f:72:dc:6c:d9:b2:87:c4:aa:33:7b:51:d8:a6:
ba:83:ed:4b:1e:8a:42:dd:6c:27:32:89:d8:29:d9:
8c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:2C:08:03:EF:D9:F2:81:3C:E9:E0:9C:DC:FA:72:A0:93:33:E6:BC
X509v3 Authority Key Identifier:
keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:d1:df:92:1e:3e:70:21:ff:75:9f:b5:c1:c3:ee:31:00:4a:
23:70:6e:7a:61:48:fd:3d:0d:99:24:fd:44:55:3f:2f:6f:a5:
20:d9:1d:e1:50:f6:df:88:e1:cf:a2:e5:13:0c:2a:68:28:f7:
39:8c:85:bf:7c:f8:9e:c3:8e:46:38:ab:1b:fe:79:8d:d8:d4:
ec:42:8e:6d:0a:f3:a7:68:fa:da:c1:93:c7:47:8f:06:7c:97:
89:da:9c:46:26:3f:82:13:7b:53:81:04:8a:c0:b9:3d:5c:38:
a6:43:5e:66:cc:b3:b3:03:8d:22:df:20:a4:92:70:7f:99:f5:
ac:c4:b8:06:4e:aa:83:f5:b5:70:2a:ba:6f:c2:f5:0d:96:e7:
81:b7:32:f6:d7:9d:f9:af:b5:ff:e9:21:71:17:34:15:91:7b:
aa:3e:ee:f9:fc:0b:03:4b:e3:42:09:10:14:09:8a:93:36:ab:
34:ab:d3:05:fd:f4:6e:fa:a5:ce:77:d5:fc:36:2d:5d:cd:32:
1a:71:45:f0:ba:24:eb:30:fc:37:38:b1:06:37:aa:c7:83:b2:
ca:e1:66:e9:ef:21:70:bf:12:ea:af:bc:0d:78:d0:e8:a3:28:
c9:7e:8f:c3:22:53:f7:83:20:d5:44:ef:d4:11:25:f3:62:a9:
f9:6e:91:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 18:06:28 2026 by rpki-client