Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/6RwUX3wqthPwliJW6LohEFY3nK0.mft
File: 6RwUX3wqthPwliJW6LohEFY3nK0.mft (raw, json)
Hash identifier: eZSfoMPTCOsaKu+rewmtij6QY2Z88qFxbGvXUzESpeg=
Subject key identifier: 8F:79:48:88:D5:B3:9A:B9:86:F4:DA:5C:EA:C5:AB:AC:E1:B9:44:41
Authority key identifier: E9:1C:14:5F:7C:2A:B6:13:F0:96:22:56:E8:BA:21:10:56:37:9C:AD
Certificate issuer: /CN=e91c145f7c2ab613f0962256e8ba211056379cad
Certificate serial: 01A0C858C99CA195415B33D81DC15F82447D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6RwUX3wqthPwliJW6LohEFY3nK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/6RwUX3wqthPwliJW6LohEFY3nK0.mft
Manifest number: E1
Signing time: Tue 22 Sep 2026 09:00:56 +0000
Manifest this update: Tue 22 Sep 2026 09:00:56 +0000
Manifest next update: Wed 23 Sep 2026 09:00:56 +0000
Files and hashes: 1: 1Lgu1-zB9ylsTLQ_zJFV2x5QBtc.roa (hash: 9Mjx66ZRNBzOgezobspQ/N2rC12olhMnxONbq/i+6C8=)
2: 6RwUX3wqthPwliJW6LohEFY3nK0.crl (hash: 4mu6dV8UC+vqSOVefl4mJUfH5O3nLaG7PxiYV19F4B0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/6RwUX3wqthPwliJW6LohEFY3nK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/6RwUX3wqthPwliJW6LohEFY3nK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6RwUX3wqthPwliJW6LohEFY3nK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:58:c9:9c:a1:95:41:5b:33:d8:1d:c1:5f:82:44:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e91c145f7c2ab613f0962256e8ba211056379cad
Validity
Not Before: Sep 22 09:00:56 2026 GMT
Not After : Sep 23 09:00:56 2026 GMT
Subject: CN=8f794888d5b39ab986f4da5ceac5abace1b94441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ce:ba:74:78:3b:35:f7:5b:bf:c6:73:6e:e6:
b3:e0:8e:85:c7:bf:9b:0b:fd:39:0d:ea:cf:cf:88:
e9:60:67:e1:6b:56:f3:b6:3e:ee:b8:c2:75:09:3e:
83:08:12:cf:13:86:85:ba:b2:4c:d0:68:0e:a3:bb:
33:4a:00:f2:92:48:27:24:d0:d9:a2:3b:af:53:23:
0c:4f:77:75:09:36:bd:e8:9c:11:e1:eb:61:87:40:
00:8f:2c:19:4b:36:49:d8:c1:e3:92:e2:9e:f1:66:
2c:36:23:e2:a4:91:bb:3e:4d:69:a7:ae:47:e0:3b:
f5:5c:0a:9f:ad:29:bb:00:2a:f5:9b:94:6a:de:7f:
a6:f2:8a:8c:ea:98:04:90:02:71:8c:1f:e5:ca:0e:
65:bc:88:2a:52:c3:43:cd:3a:ee:00:44:8b:e2:16:
ae:d4:55:ff:76:b7:94:33:4f:3c:37:d6:c0:fb:4b:
04:0b:43:ae:66:8b:cc:cf:12:32:bf:43:02:e4:94:
84:c1:0f:3a:44:29:cf:c1:97:a0:88:b1:77:1d:65:
a1:2d:2c:6a:43:f6:16:98:41:77:d5:a2:2c:34:fa:
d9:bc:a2:89:4c:4a:d6:47:cb:ed:5b:40:4a:5c:47:
05:06:c2:fd:81:3a:d3:b4:ab:1f:61:8a:6f:1d:8d:
25:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:79:48:88:D5:B3:9A:B9:86:F4:DA:5C:EA:C5:AB:AC:E1:B9:44:41
X509v3 Authority Key Identifier:
keyid:E9:1C:14:5F:7C:2A:B6:13:F0:96:22:56:E8:BA:21:10:56:37:9C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6RwUX3wqthPwliJW6LohEFY3nK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/6RwUX3wqthPwliJW6LohEFY3nK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/6RwUX3wqthPwliJW6LohEFY3nK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:be:0c:8f:cd:f6:1d:8d:71:3c:3a:9f:c8:fe:d2:da:67:35:
54:3f:a8:0e:00:1e:2c:81:5f:f6:2a:bc:b6:f6:8e:ec:a4:e9:
94:5d:d1:b6:34:d1:9d:e2:2f:25:e7:76:f9:b9:97:2a:f2:cf:
bc:0b:67:ae:da:7c:0c:b6:98:6e:c2:d1:c8:7c:1b:7a:96:f5:
c7:84:12:2e:36:fc:4b:b5:8f:ad:1c:8f:14:d1:88:73:0d:d8:
b5:7c:9f:93:11:03:43:13:d9:a0:af:86:2b:57:6d:fd:c0:b8:
ac:24:fd:b2:cc:9f:5b:58:31:44:e1:82:e7:e5:52:b4:b6:04:
6e:f4:a1:28:8b:6e:09:8c:6b:97:ba:8c:29:af:24:07:6f:6f:
67:26:e8:7b:c9:b9:1f:8a:d8:42:81:d1:42:52:09:8d:e5:1d:
40:49:18:93:07:51:01:2f:99:c1:13:a2:d3:4d:48:c9:60:8c:
79:8e:07:40:e4:ca:ef:01:70:f5:d0:63:e9:f4:69:55:54:9d:
a5:f3:16:67:c6:ce:d6:81:31:a3:50:7d:53:0b:1b:77:91:7b:
0f:e7:1f:73:aa:a4:2d:7b:cf:cc:4a:a0:d6:7c:29:9d:25:ee:
60:19:8f:cb:b5:bf:e3:db:7b:e3:fe:16:8b:a2:96:17:d6:c8:
21:79:7f:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDIWMmcoZVBWzPYHcFfgkR9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MWMxNDVmN2MyYWI2MTNmMDk2MjI1NmU4YmEyMTEwNTYz
NzljYWQwHhcNMjYwOTIyMDkwMDU2WhcNMjYwOTIzMDkwMDU2WjAzMTEwLwYDVQQD
Eyg4Zjc5NDg4OGQ1YjM5YWI5ODZmNGRhNWNlYWM1YWJhY2UxYjk0NDQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAls66dHg7Nfdbv8Zzbuaz4I6Fx7+b
C/05DerPz4jpYGfha1bztj7uuMJ1CT6DCBLPE4aFurJM0GgOo7szSgDykkgnJNDZ
ojuvUyMMT3d1CTa96JwR4ethh0AAjywZSzZJ2MHjkuKe8WYsNiPipJG7Pk1pp65H
4Dv1XAqfrSm7ACr1m5Rq3n+m8oqM6pgEkAJxjB/lyg5lvIgqUsNDzTruAESL4hau
1FX/dreUM088N9bA+0sEC0OuZovMzxIyv0MC5JSEwQ86RCnPwZegiLF3HWWhLSxq
Q/YWmEF31aIsNPrZvKKJTErWR8vtW0BKXEcFBsL9gTrTtKsfYYpvHY0lEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI95SIjVs5q5hvTaXOrFq6zhuURBMB8GA1UdIwQY
MBaAFOkcFF98KrYT8JYiVui6IRBWN5ytMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlJ3VVgzd3F0aFB3bGlKVzZMb2hFRlkzbkswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9jM2Y5OTUtODZlZi00YTY3LWFjYWMt
ZTQzOTFmYmNhZjE0LzEvNlJ3VVgzd3F0aFB3bGlKVzZMb2hFRlkzbkswLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9jM2Y5OTUtODZlZi00YTY3LWFjYWMtZTQzOTFmYmNhZjE0
LzEvNlJ3VVgzd3F0aFB3bGlKVzZMb2hFRlkzbkswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN74Mj832
HY1xPDqfyP7S2mc1VD+oDgAeLIFf9iq8tvaO7KTplF3RtjTRneIvJed2+bmXKvLP
vAtnrtp8DLaYbsLRyHwbepb1x4QSLjb8S7WPrRyPFNGIcw3YtXyfkxEDQxPZoK+G
K1dt/cC4rCT9ssyfW1gxROGC5+VStLYEbvShKItuCYxrl7qMKa8kB29vZyboe8m5
H4rYQoHRQlIJjeUdQEkYkwdRAS+ZwROi001IyWCMeY4HQOTK7wFw9dBj6fRpVVSd
pfMWZ8bO1oExo1B9Uwsbd5F7D+cfc6qkLXvPzEqg1nwpnSXuYBmPy7W/49t74/4W
i6KWF9bIIXl/tQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 17:18:59 2026 by rpki-client