Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.mft
File: 6-T90XLfhZdWyoUd3eE2cPSBfuA.mft (raw, json)
Hash identifier: NK8mLWhhTQsP4pJ4tkcGeOYukFb2Nl+Uw8INOcuMuTI=
Subject key identifier: F1:06:96:C0:3A:94:7E:70:D6:0F:58:C3:5A:AE:E3:F5:FD:F9:74:60
Authority key identifier: EB:E4:FD:D1:72:DF:85:97:56:CA:85:1D:DD:E1:36:70:F4:81:7E:E0
Certificate issuer: /CN=ebe4fdd172df859756ca851ddde13670f4817ee0
Certificate serial: 01A0C3A0439C5C18532232684592B7346FF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-T90XLfhZdWyoUd3eE2cPSBfuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.mft
Manifest number: 1A66
Signing time: Mon 21 Sep 2026 11:00:55 +0000
Manifest this update: Mon 21 Sep 2026 11:00:55 +0000
Manifest next update: Tue 22 Sep 2026 11:00:55 +0000
Files and hashes: 1: 6-T90XLfhZdWyoUd3eE2cPSBfuA.crl (hash: MRAi6nQz/Rl7HuFSLUKMplfhjM2pU/SAT/6qDL1ReGA=)
2: PMopp0pb43IV-3YVKympni_YLmU.roa (hash: mnvZQ9iKDyXCLi1UgHfqzHGFq14R47gSAsxmQmT/bNc=)
3: dLk4w45q8Owa8GDVR2RUTXOe0Co.asa (hash: nBWLBlLdoR8D7y1wJlZ6nlGbY1sTEjeLaxtL/KKtDcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6-T90XLfhZdWyoUd3eE2cPSBfuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:a0:43:9c:5c:18:53:22:32:68:45:92:b7:34:6f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebe4fdd172df859756ca851ddde13670f4817ee0
Validity
Not Before: Sep 21 11:00:55 2026 GMT
Not After : Sep 22 11:00:55 2026 GMT
Subject: CN=f10696c03a947e70d60f58c35aaee3f5fdf97460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9e:89:ba:ab:9a:27:7e:b1:85:90:d6:07:9e:
33:e8:16:e1:6e:be:fa:94:a5:24:6e:22:59:bd:ec:
6e:da:43:4c:04:cd:c3:be:40:3c:2e:4a:6d:59:f9:
83:a1:b8:b7:5d:1e:67:5b:4c:75:23:a0:db:1e:d7:
26:a1:f3:a2:74:6d:70:b8:c2:ff:3b:07:c7:ea:92:
56:1a:d8:c4:3c:6a:e3:15:a0:5c:5e:b3:f7:18:5a:
89:f4:75:56:5f:3b:42:98:7c:4e:34:b8:c1:d1:f2:
9d:a4:dc:86:74:95:31:6f:9c:f5:32:b9:a6:d4:d9:
e4:cb:ee:26:e2:19:86:4b:94:fe:ce:25:ab:4b:15:
5b:be:ce:20:cc:09:16:e3:e0:e9:5c:41:d4:a5:be:
67:a7:e3:15:32:76:9a:4c:fd:a4:37:ed:e5:98:e4:
58:23:f7:3b:85:18:56:41:f9:0f:d0:9f:5f:fc:89:
59:ca:ae:e1:ec:57:2c:ba:19:c8:54:91:38:e0:63:
e1:1a:3c:25:7c:55:31:42:13:91:fb:a3:8b:b2:09:
e1:dd:d6:88:41:3d:58:36:91:93:28:a6:ac:2c:39:
48:74:47:bf:21:96:16:97:0f:c6:a2:5c:c9:e7:b3:
67:85:10:9b:40:69:da:bc:f1:6a:d4:3a:67:dc:cd:
f8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:06:96:C0:3A:94:7E:70:D6:0F:58:C3:5A:AE:E3:F5:FD:F9:74:60
X509v3 Authority Key Identifier:
keyid:EB:E4:FD:D1:72:DF:85:97:56:CA:85:1D:DD:E1:36:70:F4:81:7E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-T90XLfhZdWyoUd3eE2cPSBfuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:0e:63:02:d3:b2:36:fe:cb:5b:be:57:f0:a2:9f:30:4c:7d:
38:28:2f:c8:0c:d5:85:c9:f7:8f:95:c2:6c:3b:8c:1a:85:b0:
b2:7b:7d:bc:3c:71:2d:0d:ba:0e:0d:62:78:00:57:2b:d4:a6:
db:e8:f2:d1:bd:ea:d6:3c:6e:76:3b:b0:8c:f1:0e:0c:4e:fd:
ac:9e:ab:90:a0:0e:13:56:0b:00:ac:a7:cc:56:d2:00:d2:1f:
ea:33:13:c1:d7:d5:ac:7c:09:27:d4:83:a7:66:7a:e6:02:aa:
c6:36:dd:d5:0b:7f:e1:15:04:ec:49:81:53:e4:43:73:4f:96:
f4:51:3c:d6:5c:59:d3:93:c4:a6:73:0e:c4:95:0b:16:21:7b:
de:87:06:0f:36:00:96:a2:79:e2:71:03:e4:9d:67:bb:e5:50:
fa:0e:ce:e7:30:f6:bc:61:01:bf:63:f4:ea:91:c3:d9:a0:11:
0b:0e:b4:2e:b7:d8:fc:ec:a2:3c:08:b1:03:7b:1c:c9:a5:69:
5b:00:54:4c:b2:f8:8f:b6:22:1d:d4:7c:c2:dd:ad:8d:58:72:
af:73:41:47:4a:97:82:de:40:e2:6a:fc:0c:b3:5b:63:0c:ce:
c0:55:b6:62:fa:ec:8e:aa:d9:39:10:7a:a2:41:48:c5:9d:ae:
9a:1f:8a:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDDoEOcXBhTIjJoRZK3NG/zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViZTRmZGQxNzJkZjg1OTc1NmNhODUxZGRkZTEzNjcwZjQ4
MTdlZTAwHhcNMjYwOTIxMTEwMDU1WhcNMjYwOTIyMTEwMDU1WjAzMTEwLwYDVQQD
EyhmMTA2OTZjMDNhOTQ3ZTcwZDYwZjU4YzM1YWFlZTNmNWZkZjk3NDYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZ6JuquaJ36xhZDWB54z6Bbhbr76
lKUkbiJZvexu2kNMBM3DvkA8LkptWfmDobi3XR5nW0x1I6DbHtcmofOidG1wuML/
OwfH6pJWGtjEPGrjFaBcXrP3GFqJ9HVWXztCmHxONLjB0fKdpNyGdJUxb5z1Mrmm
1Nnky+4m4hmGS5T+ziWrSxVbvs4gzAkW4+DpXEHUpb5np+MVMnaaTP2kN+3lmORY
I/c7hRhWQfkP0J9f/IlZyq7h7FcsuhnIVJE44GPhGjwlfFUxQhOR+6OLsgnh3daI
QT1YNpGTKKasLDlIdEe/IZYWlw/GolzJ57NnhRCbQGnavPFq1Dpn3M34BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPEGlsA6lH5w1g9Yw1qu4/X9+XRgMB8GA1UdIwQY
MBaAFOvk/dFy34WXVsqFHd3hNnD0gX7gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNi1UOTBYTGZoWmRXeW9VZDNlRTJjUFNCZnVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9hNTk2OWYtYzAxNi00NTMzLTljYmEt
Njk2NzAzNzM2NjIxLzEvNi1UOTBYTGZoWmRXeW9VZDNlRTJjUFNCZnVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9hNTk2OWYtYzAxNi00NTMzLTljYmEtNjk2NzAzNzM2NjIx
LzEvNi1UOTBYTGZoWmRXeW9VZDNlRTJjUFNCZnVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2A5jAtOy
Nv7LW75X8KKfMEx9OCgvyAzVhcn3j5XCbDuMGoWwsnt9vDxxLQ26Dg1ieABXK9Sm
2+jy0b3q1jxudjuwjPEODE79rJ6rkKAOE1YLAKynzFbSANIf6jMTwdfVrHwJJ9SD
p2Z65gKqxjbd1Qt/4RUE7EmBU+RDc0+W9FE81lxZ05PEpnMOxJULFiF73ocGDzYA
lqJ54nED5J1nu+VQ+g7O5zD2vGEBv2P06pHD2aARCw60LrfY/OyiPAixA3scyaVp
WwBUTLL4j7YiHdR8wt2tjVhyr3NBR0qXgt5A4mr8DLNbYwzOwFW2YvrsjqrZORB6
okFIxZ2umh+KZg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 19:46:21 2026 by rpki-client