
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.mft
File: 6SxBXRd1rpmT6QCnU2tGqxRKmqI.mft (raw, json)
Hash identifier: jqZlbV1Qf3+RMK41U4ZPnE4s7j4vEUgN8HshBb0Ttqg=
Subject key identifier: E6:B9:71:ED:F3:FF:37:1E:2F:FF:E0:CD:2C:09:49:25:AA:55:CA:D2
Authority key identifier: E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2
Certificate issuer: /CN=e92c415d1775ae9993e900a7536b46ab144a9aa2
Certificate serial: 019CAE35EB6576F1D9F81A8F3ED76C8D7085
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.mft
Manifest number: 1854
Signing time: Mon 02 Mar 2026 11:01:35 +0000
Manifest this update: Mon 02 Mar 2026 11:01:35 +0000
Manifest next update: Tue 03 Mar 2026 11:01:35 +0000
Files and hashes: 1: 0OaaKkS63755SpYhx6kJMGc7jsk.roa (hash: yp83fzMHWtdzvYdJOYBhZdlBYbmjJSMrdOBnbSCBBV0=)
2: 0gfBZ2nkA_aLudP3O3P5s-KdgXU.roa (hash: gvj32J95khO6lKXoLY+MtPbkkgmfJusWvgloAUZdcEw=)
3: 6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl (hash: Kamyc+6LeWvWbtXwDJmWb1BTlGLhZo7nChVPQPQ6rKc=)
4: 861nedPN3phwQWTx-Y3YBAxRMVE.roa (hash: ERm1FnDrwh1xZ/A8rPaxVuHVGwJdfsBJ3Ujj0zNys+4=)
5: 96i-W8uHQfELumiyoD8KgUwjEqk.roa (hash: okWOkWFs1Dluipq3KfyuSGfnv1ZB6ULtQt87WU+u/6M=)
6: PEdeolhoIkzE4SikXyvr00NuL-M.roa (hash: xgoG+6pl+LCeGvwW7fq5QtfJTv5CaqjKKcOaYnCKPqA=)
7: T0iqjs9CkRPBgC6oTuTASwwLQBA.roa (hash: Q90Lq0syuhBK1/bm/BJJncCiwqmrsvZhqk9lxUir/3I=)
8: V_N2zZpFUh_jU5hVB-9KfNEepdA.roa (hash: F0gzOL4EyLJL5B+JsRxqs5zs7pl4bKpVfJSp9poZP8g=)
9: Z_CiSK55gizRlmUBAQqWDkAsjSA.roa (hash: ZtijwttgCm0QiPAlfL22m300Zqs50WEunsAW/5Jt8Fg=)
10: ZrDJgLArZHytatC5Ncvg5XZJ0L0.roa (hash: ulXA8t+3AsLSNeVGGGbJLh38H9YpiJMgj/n7hk5vfj0=)
11: _-6JSjmUimh08CjqKCxWw4-rHNE.roa (hash: +nCDi9UjpJd+hQvMDC1IUEgJRdQMfkefNt0DA5Y2kVs=)
12: aVOKvpwocFPOybKu2HArVNos6VE.roa (hash: 0a73eKWIb1Dki0lByBB+mR2gYiKoEVUop3iszyB1pNk=)
13: cHg7aBuqWRBHGyjgLUvz_x7fmKU.roa (hash: C49PgeT/JLVMAXMoZTAwnDLdQC/24IQFKGkMPm9+JDM=)
14: qg0FwZYThoJPEEVuEPuXUoqRZhQ.roa (hash: vLVUscpAnWQjrZiBQs7cgVM6cDYZNsv2RGlwep1lIic=)
15: t5g9JJgTeTxlzlS2-l4KatgQqhI.roa (hash: i6WKydZbQwmwygFZkL0wGJ79C8EFlVc8aiS0Dhfq4Io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:eb:65:76:f1:d9:f8:1a:8f:3e:d7:6c:8d:70:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e92c415d1775ae9993e900a7536b46ab144a9aa2
Validity
Not Before: Mar 2 11:01:35 2026 GMT
Not After : Mar 3 11:01:35 2026 GMT
Subject: CN=e6b971edf3ff371e2fffe0cd2c094925aa55cad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b5:5a:f7:8f:8b:01:e4:c8:ca:18:be:e5:11:
2e:27:8a:e9:c8:8e:2d:18:91:b8:45:e9:ce:ef:64:
e5:9e:f1:47:28:7b:f7:e4:45:bc:af:a0:fa:bd:2d:
df:d6:35:ea:73:d8:2a:ba:d3:5b:5c:ee:81:74:12:
33:97:cd:71:fa:42:71:d6:44:86:ed:29:82:37:f5:
4f:09:07:a0:6d:94:b8:e9:05:06:ca:fb:a5:02:1f:
b7:fa:f3:6d:d7:05:81:43:9e:18:88:54:3a:94:45:
ba:d8:3b:4c:57:03:c8:0c:06:00:be:e4:2b:ad:6a:
d6:0e:b0:a5:01:74:fb:da:7d:a7:0a:41:03:69:e0:
75:f8:cd:c6:06:e8:af:0f:50:f3:8e:7d:db:26:56:
be:bb:fa:92:63:1b:75:9b:21:71:de:19:c1:d5:20:
cb:31:85:b6:4b:ef:d6:c6:c7:1b:3b:dd:02:e6:a7:
15:1c:71:b4:7f:95:a3:f6:8c:a5:80:99:6a:51:2b:
76:14:a1:62:44:37:5b:fb:04:25:5d:3c:be:0e:84:
82:96:90:8a:e6:a3:30:4d:26:76:8a:16:fa:39:df:
24:0d:3a:bf:a5:60:f4:52:41:24:76:8b:ab:de:8b:
6a:9e:1d:04:9f:df:58:42:a5:c0:e4:41:e4:c4:aa:
e9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B9:71:ED:F3:FF:37:1E:2F:FF:E0:CD:2C:09:49:25:AA:55:CA:D2
X509v3 Authority Key Identifier:
keyid:E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:85:df:90:38:13:b6:a0:e9:87:90:72:c7:30:92:0c:d4:6c:
16:36:4f:31:fe:bd:84:11:15:d9:47:43:60:9f:06:9c:9a:71:
2c:29:9d:09:c2:09:d2:81:b3:80:35:d9:54:7a:a6:71:54:2f:
7b:da:99:00:61:ba:de:19:bc:5e:c5:eb:ed:48:73:72:9f:1f:
db:8e:cd:2d:aa:ae:f9:be:21:05:04:ba:f6:27:d0:f8:fb:20:
5c:20:05:c6:bc:c9:42:c6:8e:0e:b2:ae:12:7d:49:ab:a4:6e:
a0:f2:27:0c:c1:64:3a:97:bb:fb:b2:5e:92:99:5d:2b:18:72:
4b:b1:6d:0e:30:a7:14:5b:03:68:fe:df:d7:c5:f9:4d:e0:99:
33:7a:d0:ec:fc:60:36:ef:83:bd:bd:a7:6f:5a:0b:f6:89:21:
1a:95:38:cc:bd:56:4b:9d:31:a4:17:f2:28:b8:87:a7:db:5e:
61:21:09:2a:4e:53:35:b1:48:bf:ea:54:be:f7:82:a4:f7:bb:
5d:fb:79:96:90:72:fe:70:4e:7b:f7:77:1a:fe:18:61:a6:50:
f6:b0:48:de:6c:fe:54:37:9b:93:d6:a3:a9:b9:86:ea:e3:e5:
64:6b:6c:22:6f:76:9b:4a:b2:ea:27:1b:d9:17:87:1c:b1:6e:
fe:c0:f1:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuNetldvHZ+BqPPtdsjXCFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MmM0MTVkMTc3NWFlOTk5M2U5MDBhNzUzNmI0NmFiMTQ0
YTlhYTIwHhcNMjYwMzAyMTEwMTM1WhcNMjYwMzAzMTEwMTM1WjAzMTEwLwYDVQQD
EyhlNmI5NzFlZGYzZmYzNzFlMmZmZmUwY2QyYzA5NDkyNWFhNTVjYWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrVa94+LAeTIyhi+5REuJ4rpyI4t
GJG4RenO72TlnvFHKHv35EW8r6D6vS3f1jXqc9gqutNbXO6BdBIzl81x+kJx1kSG
7SmCN/VPCQegbZS46QUGyvulAh+3+vNt1wWBQ54YiFQ6lEW62DtMVwPIDAYAvuQr
rWrWDrClAXT72n2nCkEDaeB1+M3GBuivD1Dzjn3bJla+u/qSYxt1myFx3hnB1SDL
MYW2S+/WxscbO90C5qcVHHG0f5Wj9oylgJlqUSt2FKFiRDdb+wQlXTy+DoSClpCK
5qMwTSZ2ihb6Od8kDTq/pWD0UkEkdour3otqnh0En99YQqXA5EHkxKrpjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOa5ce3z/zceL//gzSwJSSWqVcrSMB8GA1UdIwQY
MBaAFOksQV0Xda6Zk+kAp1NrRqsUSpqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlN4QlhSZDFycG1UNlFDblUydEdxeFJLbXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wODk4YmUtYjAzNy00MjlmLWI1MDQt
MWQ5MzRhMDQ4NDc0LzEvNlN4QlhSZDFycG1UNlFDblUydEdxeFJLbXFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8wODk4YmUtYjAzNy00MjlmLWI1MDQtMWQ5MzRhMDQ4NDc0
LzEvNlN4QlhSZDFycG1UNlFDblUydEdxeFJLbXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvYXfkDgT
tqDph5ByxzCSDNRsFjZPMf69hBEV2UdDYJ8GnJpxLCmdCcIJ0oGzgDXZVHqmcVQv
e9qZAGG63hm8XsXr7Uhzcp8f247NLaqu+b4hBQS69ifQ+PsgXCAFxrzJQsaODrKu
En1Jq6RuoPInDMFkOpe7+7JekpldKxhyS7FtDjCnFFsDaP7f18X5TeCZM3rQ7Pxg
Nu+Dvb2nb1oL9okhGpU4zL1WS50xpBfyKLiHp9teYSEJKk5TNbFIv+pUvveCpPe7
Xft5lpBy/nBOe/d3Gv4YYaZQ9rBI3mz+VDebk9ajqbmG6uPlZGtsIm92m0qy6icb
2ReHHLFu/sDxPg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:59:41 2026 by rpki-client