Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
File: m6kNZtLd62RqYUBpEv_d-hTjmRA.mft (raw, json)
Hash identifier: HwXUOKXCcVwDV+hRJWet5GTpp7GvbiNegIj1NT9VDuo=
Subject key identifier: 07:72:B2:51:F2:3D:E0:50:57:42:50:D3:CC:F6:39:68:66:74:05:88
Authority key identifier: 9B:A9:0D:66:D2:DD:EB:64:6A:61:40:69:12:FF:DD:FA:14:E3:99:10
Certificate issuer: /CN=9ba90d66d2ddeb646a61406912ffddfa14e39910
Certificate serial: 01A0D4CAF8C8A1863E66BD5775DD8F38A676
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
Manifest number: 1A71
Signing time: Thu 24 Sep 2026 19:01:06 +0000
Manifest this update: Thu 24 Sep 2026 19:01:06 +0000
Manifest next update: Fri 25 Sep 2026 19:01:06 +0000
Files and hashes: 1: HZ8AlFPzeSKwnlXCV6rGz71Kb2g.roa (hash: cBgiVMyfZ1wPdRLeBDUH3L49HCW6dnbKeTA2KaOoCyo=)
2: k9Qt8bd5mtUe8WkBxy0-PnZZYDQ.roa (hash: 4cUGdQJG54wz4ImSZGhzke5tGudVY4frq/07PWJo/ug=)
3: m6kNZtLd62RqYUBpEv_d-hTjmRA.crl (hash: x4YTNGK8lQl/zu1OkklwQmxuU7Q3b2dGJpoorDPRYuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:ca:f8:c8:a1:86:3e:66:bd:57:75:dd:8f:38:a6:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ba90d66d2ddeb646a61406912ffddfa14e39910
Validity
Not Before: Sep 24 19:01:06 2026 GMT
Not After : Sep 25 19:01:06 2026 GMT
Subject: CN=0772b251f23de050574250d3ccf6396866740588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:7f:f2:46:cb:ee:b2:34:bb:9f:1d:bc:d8:6d:
e0:f7:d0:db:b9:83:db:3e:cc:95:00:68:d1:3d:d6:
8c:b3:87:50:af:bc:d2:5c:94:59:ee:a8:74:51:2b:
1a:04:4f:eb:7f:9c:44:e9:d4:8e:2e:d3:70:c2:ae:
28:c8:67:10:35:a8:c3:1b:57:5a:f6:a6:af:7b:58:
36:35:95:46:90:d1:8b:6a:97:44:e3:d9:88:39:a5:
a2:53:2d:b2:0b:56:d6:d9:19:0b:6b:a7:5f:18:14:
62:53:07:87:ec:ea:42:75:9b:fb:ad:c8:cb:f2:18:
4a:75:dc:ec:fb:33:41:70:42:dc:10:81:f6:08:6a:
7c:2b:84:d4:e2:a6:a4:ed:39:51:78:98:01:a5:57:
f7:ac:27:24:3b:c7:78:0f:d6:df:4e:84:7c:5c:83:
45:41:39:08:06:d3:c4:59:f3:ad:fd:8f:66:18:e0:
42:86:0d:b7:96:ac:d5:21:1b:a6:91:50:10:68:c0:
7c:24:f4:3c:16:91:df:7b:bc:a5:44:14:4c:1b:a8:
75:f5:ee:8e:e6:f5:ff:13:97:12:68:fc:1b:46:73:
78:5d:c8:b5:28:b7:68:f0:a0:85:a9:fe:57:ef:e1:
4a:e0:39:11:7c:b3:a3:7f:20:38:50:f3:36:3b:40:
74:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:72:B2:51:F2:3D:E0:50:57:42:50:D3:CC:F6:39:68:66:74:05:88
X509v3 Authority Key Identifier:
keyid:9B:A9:0D:66:D2:DD:EB:64:6A:61:40:69:12:FF:DD:FA:14:E3:99:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:a0:e8:da:30:2e:52:35:08:d6:e1:cd:c1:c7:6e:89:28:c4:
d8:43:ac:de:12:37:c6:99:a5:85:6b:c3:68:40:71:79:71:1f:
45:0c:a8:bc:a4:15:c8:95:f7:ea:ef:56:7e:1b:5a:be:88:5c:
cf:65:7a:cd:00:57:09:f2:46:33:5a:20:49:33:76:49:15:8a:
4b:28:b7:b1:c5:43:e4:ad:5f:18:68:84:bc:dc:7d:fc:8f:9e:
4c:d0:2d:68:b7:11:40:18:f8:f1:1c:ee:6d:0a:28:63:5d:55:
38:81:68:6d:3d:91:25:f2:c6:8c:37:1c:fe:e0:2e:7b:a5:ef:
46:c2:f0:28:d6:5e:d4:8b:78:ed:ff:f2:57:95:1a:be:1d:98:
49:df:a2:9c:23:61:33:67:d0:57:09:b2:f5:82:e0:ec:ea:9a:
12:ba:bf:00:6f:d4:e4:bd:3c:ea:53:a9:de:8e:b7:ec:7d:80:
c3:35:d9:6e:a5:a4:8f:6b:d2:bb:e3:a8:93:f8:53:4e:14:4a:
03:73:9f:0b:f4:8d:21:c8:40:df:c8:07:db:b9:c7:5d:e2:18:
52:32:19:03:0a:fd:e4:85:9c:0b:41:5a:9c:50:d5:5b:d7:cb:
cf:1e:fd:5b:b8:b8:1a:53:95:c8:d0:46:bb:c9:b7:e7:6f:8d:
89:d4:e5:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDUyvjIoYY+Zr1Xdd2POKZ2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliYTkwZDY2ZDJkZGViNjQ2YTYxNDA2OTEyZmZkZGZhMTRl
Mzk5MTAwHhcNMjYwOTI0MTkwMTA2WhcNMjYwOTI1MTkwMTA2WjAzMTEwLwYDVQQD
EygwNzcyYjI1MWYyM2RlMDUwNTc0MjUwZDNjY2Y2Mzk2ODY2NzQwNTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43/yRsvusjS7nx282G3g99DbuYPb
PsyVAGjRPdaMs4dQr7zSXJRZ7qh0USsaBE/rf5xE6dSOLtNwwq4oyGcQNajDG1da
9qave1g2NZVGkNGLapdE49mIOaWiUy2yC1bW2RkLa6dfGBRiUweH7OpCdZv7rcjL
8hhKddzs+zNBcELcEIH2CGp8K4TU4qak7TlReJgBpVf3rCckO8d4D9bfToR8XINF
QTkIBtPEWfOt/Y9mGOBChg23lqzVIRumkVAQaMB8JPQ8FpHfe7ylRBRMG6h19e6O
5vX/E5cSaPwbRnN4Xci1KLdo8KCFqf5X7+FK4DkRfLOjfyA4UPM2O0B0xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAdyslHyPeBQV0JQ08z2OWhmdAWIMB8GA1UdIwQY
MBaAFJupDWbS3etkamFAaRL/3foU45kQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTZrTlp0TGQ2MlJxWVVCcEV2X2QtaFRqbVJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xYjc2MzUtZTZmZi00OTY5LWIyYzAt
ODlmYjhmZTY5NjMzLzEvbTZrTlp0TGQ2MlJxWVVCcEV2X2QtaFRqbVJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8xYjc2MzUtZTZmZi00OTY5LWIyYzAtODlmYjhmZTY5NjMz
LzEvbTZrTlp0TGQ2MlJxWVVCcEV2X2QtaFRqbVJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiKDo2jAu
UjUI1uHNwcduiSjE2EOs3hI3xpmlhWvDaEBxeXEfRQyovKQVyJX36u9Wfhtavohc
z2V6zQBXCfJGM1ogSTN2SRWKSyi3scVD5K1fGGiEvNx9/I+eTNAtaLcRQBj48Rzu
bQooY11VOIFobT2RJfLGjDcc/uAue6XvRsLwKNZe1It47f/yV5Uavh2YSd+inCNh
M2fQVwmy9YLg7OqaErq/AG/U5L086lOp3o637H2AwzXZbqWkj2vSu+Ook/hTThRK
A3OfC/SNIchA38gH27nHXeIYUjIZAwr95IWcC0FanFDVW9fLzx79W7i4GlOVyNBG
u8m352+NidTlYw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 22:27:37 2026 by rpki-client