Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.mft
File: 6zlyC79FBhEPkD017RJJvUkeqLs.mft (raw, json)
Hash identifier: YnYGpRTalk8WDhaasBVQoR5KILCjy1YZL3WLReKJ2CY=
Subject key identifier: AF:1F:69:E3:DC:BD:4F:A1:5F:C7:AA:50:56:6C:A5:1C:B2:33:AE:6A
Authority key identifier: EB:39:72:0B:BF:45:06:11:0F:90:3D:35:ED:12:49:BD:49:1E:A8:BB
Certificate issuer: /CN=eb39720bbf4506110f903d35ed1249bd491ea8bb
Certificate serial: 01A0CEC8146905C66F24C6507FC3634A4659
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zlyC79FBhEPkD017RJJvUkeqLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.mft
Manifest number: 0223
Signing time: Wed 23 Sep 2026 15:00:13 +0000
Manifest this update: Wed 23 Sep 2026 15:00:13 +0000
Manifest next update: Thu 24 Sep 2026 15:00:13 +0000
Files and hashes: 1: 03p-Qz6XRyJNNeVn4ckBquqSilU.roa (hash: ysNzZw8fmnL30nJOwCbMlcySw0Zqlls7bKqqA6kBPb4=)
2: 6zlyC79FBhEPkD017RJJvUkeqLs.crl (hash: 5FN4mN62gq3e83xLRWKUclwhtNp0xPFB51wtjzOH7/o=)
3: mAUXHWg9xwo5F85IXm5SVffTuuA.roa (hash: GCJWVxe5b23c6JrLrMVtSOWuGjfgn1uA/TJ0/8z7eXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zlyC79FBhEPkD017RJJvUkeqLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:14:69:05:c6:6f:24:c6:50:7f:c3:63:4a:46:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb39720bbf4506110f903d35ed1249bd491ea8bb
Validity
Not Before: Sep 23 15:00:13 2026 GMT
Not After : Sep 24 15:00:13 2026 GMT
Subject: CN=af1f69e3dcbd4fa15fc7aa50566ca51cb233ae6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:72:17:e4:94:04:36:a7:82:cb:b5:c5:27:63:
72:96:61:73:9a:89:50:bd:71:56:fe:91:ee:72:e3:
b2:da:e3:f6:a1:6a:cf:6c:fb:94:a4:28:55:de:53:
e1:19:0a:60:ff:73:56:f3:91:4a:cf:f8:66:75:21:
17:49:b7:18:d8:3c:bc:06:84:c3:a3:8d:f6:cd:be:
e8:63:35:06:5a:b4:00:c6:fb:95:1e:84:b1:6c:7d:
63:a0:82:2e:17:a0:62:05:65:65:1a:9f:9b:9f:43:
26:f2:d4:f0:4c:5f:2c:60:86:28:bb:e3:52:c5:2b:
23:59:ff:bd:78:73:e5:c4:71:9f:ce:9f:1f:ea:ca:
43:9d:11:22:2a:8c:b3:30:2d:e3:6e:d5:f4:90:6e:
ad:0e:ca:be:8e:54:dc:d5:33:e6:d2:fe:74:73:28:
68:09:85:f4:fb:0e:04:c9:9a:af:7e:c1:7d:20:01:
6f:03:4f:7e:a8:2c:85:0e:51:67:8d:d5:07:27:28:
6e:2c:8d:90:a0:53:d2:86:44:b4:ce:de:d1:04:27:
2e:e2:c8:82:47:05:7e:a1:85:07:51:f5:58:49:85:
d1:ef:5c:4f:5a:0a:4a:eb:1b:07:37:d8:4b:1c:94:
f8:64:a4:32:09:47:f8:34:02:22:e4:45:72:f0:4c:
f1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:1F:69:E3:DC:BD:4F:A1:5F:C7:AA:50:56:6C:A5:1C:B2:33:AE:6A
X509v3 Authority Key Identifier:
keyid:EB:39:72:0B:BF:45:06:11:0F:90:3D:35:ED:12:49:BD:49:1E:A8:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zlyC79FBhEPkD017RJJvUkeqLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f1:02:3d:3e:dd:03:4c:12:4c:e6:0e:11:6f:4c:22:b8:24:
70:fe:7d:61:db:16:22:72:be:d0:53:fa:e0:ff:e7:39:62:9a:
fd:3c:86:00:6f:ee:4b:00:b8:c5:55:2d:d5:85:5b:3a:68:b9:
2a:49:5e:77:40:d2:27:3a:fa:91:c7:08:ba:a5:ce:c3:be:b8:
8c:80:1a:ee:54:e0:5d:ad:a8:f0:c5:77:17:63:38:ce:be:12:
59:dc:f6:9c:c1:eb:84:73:03:66:c6:60:b2:98:38:74:92:ce:
51:be:ef:7c:ce:cd:e5:cb:05:0b:cc:75:69:ff:bd:c1:0c:7e:
27:cf:1f:1a:17:96:8c:e3:2e:7e:cc:a2:dd:2f:08:69:ad:91:
40:76:fc:a7:f8:78:2d:ed:2b:b7:53:1d:34:9e:ff:c7:99:fa:
4d:d6:34:30:83:88:2b:24:a1:9e:0d:2c:2d:61:59:5c:22:31:
b8:61:b7:5d:4b:c5:7b:b5:80:7d:41:50:77:b9:30:ee:14:02:
6f:93:f3:02:fe:be:1e:b9:c2:f0:a4:a9:4a:ac:17:6a:6c:de:
76:21:d3:c3:59:bc:2a:5d:3e:f8:6c:54:4a:f2:e0:24:dd:25:
09:2a:2e:3f:5c:70:8e:11:3c:11:15:a5:1a:d5:38:24:f8:ca:
f6:c5:13:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOyBRpBcZvJMZQf8NjSkZZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViMzk3MjBiYmY0NTA2MTEwZjkwM2QzNWVkMTI0OWJkNDkx
ZWE4YmIwHhcNMjYwOTIzMTUwMDEzWhcNMjYwOTI0MTUwMDEzWjAzMTEwLwYDVQQD
EyhhZjFmNjllM2RjYmQ0ZmExNWZjN2FhNTA1NjZjYTUxY2IyMzNhZTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3IX5JQENqeCy7XFJ2NylmFzmolQ
vXFW/pHucuOy2uP2oWrPbPuUpChV3lPhGQpg/3NW85FKz/hmdSEXSbcY2Dy8BoTD
o432zb7oYzUGWrQAxvuVHoSxbH1joIIuF6BiBWVlGp+bn0Mm8tTwTF8sYIYou+NS
xSsjWf+9eHPlxHGfzp8f6spDnREiKoyzMC3jbtX0kG6tDsq+jlTc1TPm0v50cyho
CYX0+w4EyZqvfsF9IAFvA09+qCyFDlFnjdUHJyhuLI2QoFPShkS0zt7RBCcu4siC
RwV+oYUHUfVYSYXR71xPWgpK6xsHN9hLHJT4ZKQyCUf4NAIi5EVy8EzxvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK8faePcvU+hX8eqUFZspRyyM65qMB8GA1UdIwQY
MBaAFOs5cgu/RQYRD5A9Ne0SSb1JHqi7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnpseUM3OUZCaEVQa0QwMTdSSkp2VWtlcUxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC80YWZlZTYtZDJkOS00ZTk2LThmMjMt
Yjg4N2UzMjIyMjllLzEvNnpseUM3OUZCaEVQa0QwMTdSSkp2VWtlcUxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC80YWZlZTYtZDJkOS00ZTk2LThmMjMtYjg4N2UzMjIyMjll
LzEvNnpseUM3OUZCaEVQa0QwMTdSSkp2VWtlcUxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARPECPT7d
A0wSTOYOEW9MIrgkcP59YdsWInK+0FP64P/nOWKa/TyGAG/uSwC4xVUt1YVbOmi5
Kkled0DSJzr6kccIuqXOw764jIAa7lTgXa2o8MV3F2M4zr4SWdz2nMHrhHMDZsZg
spg4dJLOUb7vfM7N5csFC8x1af+9wQx+J88fGheWjOMufsyi3S8Iaa2RQHb8p/h4
Le0rt1MdNJ7/x5n6TdY0MIOIKyShng0sLWFZXCIxuGG3XUvFe7WAfUFQd7kw7hQC
b5PzAv6+HrnC8KSpSqwXamzediHTw1m8Kl0++GxUSvLgJN0lCSouP1xwjhE8ERWl
GtU4JPjK9sUTaw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 00:15:13 2026 by rpki-client