
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
File: 6bEyD7wk1vQ2bLZPz17S17G2vfc.mft (raw, json)
Hash identifier: 6u93IXA2IAOKe54fboM1PXCEQftUKDEFySsB9d2xhY8=
Subject key identifier: BA:05:97:F0:3F:50:1A:AA:1D:CF:E2:EE:A6:37:20:B5:D4:B8:89:A5
Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
Certificate issuer: /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Certificate serial: 019F9135ADB509F60B8BFA0AE631794A7CC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
Manifest number: 1A3E
Signing time: Thu 23 Jul 2026 23:00:41 +0000
Manifest this update: Thu 23 Jul 2026 23:00:41 +0000
Manifest next update: Fri 24 Jul 2026 23:00:41 +0000
Files and hashes: 1: 3ECfTnF2jy4Lx0SgykcvPdioIUc.roa (hash: WGeuGHVpKmhXgxHYaicCadOFtfsO1M/9XAEIzpGhdMs=)
2: 6bEyD7wk1vQ2bLZPz17S17G2vfc.crl (hash: bgGZTH5v8fm4+rvbRmHOplRwhlFJf7ngmk4B8Vs6WZM=)
3: DJ6nN3NSd1YO8q5t_zT7bPuhQIQ.roa (hash: 5lkywxbhaLRKhID4/jyJTUETlBZ/IhU7RvT2pJBvhJo=)
4: Gv6v2CuTYSuw1fxGRbIukftGmrE.roa (hash: LzIPy5gAnB2m5Fwrsrc5loi4EBJfHWamJu0+xufW+gM=)
5: PrWnje5pwuyLLung5cAWo-Sdq5o.roa (hash: i3OyNFwt3PIeOGKHaRbK8pFHgXOUNE3Am1N1aLetXS8=)
6: am9wGnnaAwnbbl-GeKSLoRk_nTs.roa (hash: lT6hqTkoXScWiRJIwaGV6urFE0P+0XxY6z4DqV2dR4w=)
7: kDoooTn7_d9rJiLyXZVvZxYYDxY.roa (hash: OFQHZn0JA/oknUFklltDGx8uk2qRQsfn+A1b0e8eT3g=)
8: nhhkg_jIxt4rVXWEx9XQblCSEZ4.roa (hash: y1FUEKnJ06vvn88HA1FBYat4W4h49NECAE4Wk6psYL4=)
9: q3cJGJcUFmhZQxfVUYW7w5lnkIs.roa (hash: Na/vhBzQ6zuGC+WNUTNRWnoDoEf33ziXx8vOjXZ7zak=)
10: wmwwuc2J8lTkXFaf4tOjpW8KxnA.roa (hash: cU6AgM/v4ffZ1Oc0+CAzIkq1QF3SV3vuE/LeuVRBHyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:ad:b5:09:f6:0b:8b:fa:0a:e6:31:79:4a:7c:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Validity
Not Before: Jul 23 23:00:41 2026 GMT
Not After : Jul 24 23:00:41 2026 GMT
Subject: CN=ba0597f03f501aaa1dcfe2eea63720b5d4b889a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:dc:ea:2e:6e:81:11:a9:30:72:8c:1e:9c:6f:
c6:40:25:6c:ab:91:42:dc:e6:17:06:60:af:41:49:
8b:b8:96:07:b0:85:9c:a3:b3:b7:30:b0:40:2b:fd:
c7:5a:12:de:84:5b:e5:0f:30:88:1a:a4:ce:df:3d:
db:0e:d2:2e:90:a6:1d:24:46:2c:98:37:e9:b9:be:
03:d7:16:28:ba:b5:da:4b:02:a6:6c:15:51:26:38:
6d:8b:7f:80:1a:c0:53:2a:c1:0d:5f:a8:40:1a:55:
ec:7f:e0:b2:77:c6:8e:ac:80:9d:48:05:3a:9e:bc:
e4:9c:e9:a0:bf:7b:cf:cf:ee:7a:1b:bc:59:09:fa:
10:a3:68:6a:6b:b4:02:29:80:ec:73:12:50:5f:a9:
54:20:ad:64:ca:72:e8:17:5f:62:51:bb:ad:4e:c8:
7d:1f:9b:35:48:d4:07:fe:41:31:f6:01:55:ee:54:
34:d0:83:f9:4d:7f:a6:7b:8b:1e:28:ee:db:7f:bc:
4d:ed:a2:7d:38:25:8c:0b:3e:49:ff:1f:0f:bd:ea:
f7:b9:b5:49:a2:2b:94:55:9c:6f:ca:6e:c9:12:29:
5f:c1:f0:f2:52:40:86:55:60:ab:3b:08:fb:56:0e:
3e:71:86:15:17:67:83:f6:3b:2c:c9:04:92:22:d7:
9e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:05:97:F0:3F:50:1A:AA:1D:CF:E2:EE:A6:37:20:B5:D4:B8:89:A5
X509v3 Authority Key Identifier:
keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:d5:25:0c:e8:0f:16:5c:0e:03:e2:30:4e:5d:e5:0d:2a:ad:
d1:23:4d:6c:11:3e:11:85:a6:d9:60:47:9f:3f:14:4f:da:d3:
d5:da:a4:7d:36:79:3d:a4:6f:c7:71:3a:2b:25:67:5e:87:9d:
01:49:c4:28:7c:fc:9d:45:dd:88:3f:bf:dd:46:10:ad:4b:7c:
a2:58:56:32:33:71:32:c9:23:5d:92:95:e4:ae:aa:ef:12:63:
5e:30:2e:0f:08:4a:98:1d:b2:2a:b1:b8:a9:c4:51:df:29:88:
20:a4:2d:a1:76:00:1a:1d:43:fa:00:99:d0:7f:62:fc:bc:91:
bb:30:bc:4b:1e:b1:f0:70:8b:f5:f5:5e:63:43:b2:27:e4:80:
c5:2a:71:75:97:f7:23:3f:78:4d:59:79:d9:03:fc:67:e6:20:
60:f2:9d:cb:69:32:9c:4d:6f:32:27:38:f6:26:8e:ae:4d:ff:
8f:55:8c:02:12:38:51:5c:0a:43:46:37:98:9c:a7:b4:c8:e4:
54:84:36:b1:b0:11:6e:3b:51:b2:4f:90:39:54:6e:fe:93:10:
a1:fe:e2:80:b9:20:47:9d:9d:5a:88:d4:7b:0b:01:86:b7:a7:
2e:19:f8:9e:92:62:c9:0f:7f:a3:31:0f:64:18:2c:c2:b0:be:
e8:b1:29:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:57:17 2026 by rpki-client