Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft
File: 6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft (raw, json)
Hash identifier: HL0IV1a8DBBE6jdDlnEFq8rrFuBDxonI36HaDZvfUH0=
Subject key identifier: 55:F5:86:34:BC:29:E1:79:D1:31:23:97:88:85:6E:87:A6:12:81:D3
Authority key identifier: E8:D6:72:FA:60:AE:E4:C2:73:A1:15:07:F4:9B:58:4D:C5:52:C4:72
Certificate issuer: /CN=e8d672fa60aee4c273a11507f49b584dc552c472
Certificate serial: 01A12BB22F356E73F3C3C5DD89996B6261D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6NZy-mCu5MJzoRUH9JtYTcVSxHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft
Manifest number: 09E4
Signing time: Sun 11 Oct 2026 16:01:00 +0000
Manifest this update: Sun 11 Oct 2026 16:01:00 +0000
Manifest next update: Mon 12 Oct 2026 16:01:00 +0000
Files and hashes: 1: 6NZy-mCu5MJzoRUH9JtYTcVSxHI.crl (hash: TwzM6S+NQ4vbRQBGUygroc+tR7OKhi0PvLifJoex04o=)
2: evJpn_uhP0CfvPL00DkyDflggJI.roa (hash: bV9kL+d96gYalZ7ome+Dj8zLnrOvtqAnogknD9DHj3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6NZy-mCu5MJzoRUH9JtYTcVSxHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:b2:2f:35:6e:73:f3:c3:c5:dd:89:99:6b:62:61:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8d672fa60aee4c273a11507f49b584dc552c472
Validity
Not Before: Oct 11 16:01:00 2026 GMT
Not After : Oct 12 16:01:00 2026 GMT
Subject: CN=55f58634bc29e179d131239788856e87a61281d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:65:e5:06:8b:b9:56:79:98:c4:d9:a4:11:6d:
8b:a8:d4:cd:8f:b8:71:e4:a5:e9:6a:cd:21:7d:49:
b3:bf:dd:82:2a:2e:1a:59:5a:8a:88:2f:c8:23:30:
86:11:91:ed:4d:16:26:7b:e2:5d:3c:e5:f0:32:01:
19:33:a9:b0:66:2d:f6:8d:bc:93:53:c9:fb:85:91:
ba:8b:2d:64:11:e0:a1:e3:2d:e5:14:82:1a:d5:6d:
77:d9:0b:20:d6:80:94:8c:85:51:93:b1:7b:58:1d:
b2:c9:38:c5:aa:d2:35:eb:06:83:44:25:d1:c1:27:
9e:c5:8d:b1:28:94:3d:f4:7d:42:94:7f:1b:74:e4:
a4:1f:6a:77:83:92:dd:3e:2c:e5:b8:50:4e:11:69:
4d:28:04:65:94:69:b3:74:10:e4:2a:3b:14:67:0a:
85:b9:c1:b5:c7:c2:2a:fe:57:e8:b3:c2:ff:60:7e:
94:2c:97:71:23:5f:61:6d:e1:83:bf:f2:a6:f9:d2:
4c:5f:4a:11:89:b2:9b:fd:e2:8a:f6:3f:52:dc:f4:
d7:2d:27:29:d4:62:03:ea:47:d7:2a:ec:e1:8b:65:
78:68:fd:d6:46:1b:4e:38:bf:a3:21:f3:8d:15:54:
11:f4:13:0d:33:55:81:04:e9:22:7d:4b:d6:24:26:
25:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F5:86:34:BC:29:E1:79:D1:31:23:97:88:85:6E:87:A6:12:81:D3
X509v3 Authority Key Identifier:
keyid:E8:D6:72:FA:60:AE:E4:C2:73:A1:15:07:F4:9B:58:4D:C5:52:C4:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6NZy-mCu5MJzoRUH9JtYTcVSxHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:04:1a:4e:30:9f:32:0c:59:55:bd:62:92:d0:92:d7:b6:1f:
eb:aa:59:a1:7e:da:23:36:91:1d:cc:90:97:27:93:b2:cb:d0:
a6:11:22:f9:e3:79:eb:be:4c:8c:43:f3:2b:e7:e8:ea:fc:78:
c0:e2:d7:da:a4:26:11:3b:d8:27:7a:bc:4d:ad:e8:ef:ee:65:
d9:91:61:bb:21:0c:06:34:89:b2:ac:b5:49:06:90:bf:f1:d7:
dc:3c:fc:ad:4b:e5:f7:fb:d2:7c:5e:37:b6:8c:1a:e0:62:d3:
b1:b4:f2:44:9b:59:f1:9d:9a:2d:9c:1b:ac:20:1e:76:0e:51:
9c:4b:07:49:b7:3a:bc:7c:ac:4d:e5:1e:90:02:25:2c:66:a7:
61:ee:33:e2:60:e3:e7:6a:58:c3:47:61:62:97:7d:76:1a:7d:
41:2e:fd:c8:1d:65:bc:95:a1:d2:ce:e9:aa:5a:b3:be:26:a8:
de:f5:75:33:2b:3e:46:f8:36:d7:09:75:cb:1f:76:ec:32:59:
91:48:6c:d2:ee:fa:b1:de:11:e7:44:fc:ed:2c:6a:f4:62:53:
58:86:88:6b:5a:38:04:07:c5:6d:09:a5:67:0a:94:41:0a:0d:
ca:58:42:22:17:33:bb:80:50:b4:c6:b1:4e:8f:2c:8c:77:6e:
10:9a:ad:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaErsi81bnPzw8XdiZlrYmHVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4ZDY3MmZhNjBhZWU0YzI3M2ExMTUwN2Y0OWI1ODRkYzU1
MmM0NzIwHhcNMjYxMDExMTYwMTAwWhcNMjYxMDEyMTYwMTAwWjAzMTEwLwYDVQQD
Eyg1NWY1ODYzNGJjMjllMTc5ZDEzMTIzOTc4ODg1NmU4N2E2MTI4MWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWXlBou5VnmYxNmkEW2LqNTNj7hx
5KXpas0hfUmzv92CKi4aWVqKiC/IIzCGEZHtTRYme+JdPOXwMgEZM6mwZi32jbyT
U8n7hZG6iy1kEeCh4y3lFIIa1W132Qsg1oCUjIVRk7F7WB2yyTjFqtI16waDRCXR
wSeexY2xKJQ99H1ClH8bdOSkH2p3g5LdPizluFBOEWlNKARllGmzdBDkKjsUZwqF
ucG1x8Iq/lfos8L/YH6ULJdxI19hbeGDv/Km+dJMX0oRibKb/eKK9j9S3PTXLScp
1GID6kfXKuzhi2V4aP3WRhtOOL+jIfONFVQR9BMNM1WBBOkifUvWJCYlUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFX1hjS8KeF50TEjl4iFboemEoHTMB8GA1UdIwQY
MBaAFOjWcvpgruTCc6EVB/SbWE3FUsRyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk5aeS1tQ3U1TUp6b1JVSDlKdFlUY1ZTeEhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9jNDE2MGQtNzcyYi00NTY3LWE1NGUt
NzUxYWM2ODA3YjA0LzEvNk5aeS1tQ3U1TUp6b1JVSDlKdFlUY1ZTeEhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9jNDE2MGQtNzcyYi00NTY3LWE1NGUtNzUxYWM2ODA3YjA0
LzEvNk5aeS1tQ3U1TUp6b1JVSDlKdFlUY1ZTeEhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqQQaTjCf
MgxZVb1iktCS17Yf66pZoX7aIzaRHcyQlyeTssvQphEi+eN5675MjEPzK+fo6vx4
wOLX2qQmETvYJ3q8Ta3o7+5l2ZFhuyEMBjSJsqy1SQaQv/HX3Dz8rUvl9/vSfF43
towa4GLTsbTyRJtZ8Z2aLZwbrCAedg5RnEsHSbc6vHysTeUekAIlLGanYe4z4mDj
52pYw0dhYpd9dhp9QS79yB1lvJWh0s7pqlqzviao3vV1Mys+Rvg21wl1yx927DJZ
kUhs0u76sd4R50T87Sxq9GJTWIaIa1o4BAfFbQmlZwqUQQoNylhCIhczu4BQtMax
To8sjHduEJqt9Q==
-----END CERTIFICATE-----
Generated at Sun Oct 11 18:06:53 2026 by rpki-client