
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft
File: 6sLBr9S97JgFBvoH33yGYtVU-kY.mft (raw, json)
Hash identifier: nk/glmJsrcjB3AjLFnXJzc4lKk7ZAsjt59S7kpPd1gc=
Subject key identifier: 60:25:B3:B8:05:71:3B:BD:AB:FA:83:66:CD:48:19:22:18:05:0D:EC
Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
Certificate issuer: /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Certificate serial: 019CAAC6F2592ECB9BE0FC22DFDECAC2591D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft
Manifest number: 127B
Signing time: Sun 01 Mar 2026 19:01:30 +0000
Manifest this update: Sun 01 Mar 2026 19:01:30 +0000
Manifest next update: Mon 02 Mar 2026 19:01:30 +0000
Files and hashes: 1: 1-4XTHBoNFNr1l-5DlJv7kCOEAsg.roa (hash: kxVoHYAy1StJ1GWwbeUY54WsYp9aXThsq2UtgssAUdE=)
2: 6sLBr9S97JgFBvoH33yGYtVU-kY.crl (hash: wm6tMr+5Nvon2CNebjW0Sq4aWIMV7O0sKpknARNrpRw=)
3: 8suHpidG1fhuELuUk5b3-OweTPg.roa (hash: 1eHJkoJhddFda4qCfEu1aQasvyxw+vlSo8SFBBVgpqU=)
4: FUuTK2fFAsqRcCumhRtIZo91RHY.roa (hash: sL7JcIGdywrGzv3v04y8pkGzCLFmkDsGBJu4wKma/MI=)
5: LXIlN5E_-7FwagFmPTLTkaa9y5c.roa (hash: 6fdLU7tUE6uJypDCFnhQj74QKiyWE5+++0HOzxZo/Ls=)
6: SiI2SweNuMw3Zh5hN0AodnHSZK4.roa (hash: Ja7prbcEfWRWN6iJlFWBHvB00+46h6yhrgI24su9Th0=)
7: UzApq6EOLSmo_f-FmHtKYMlNkG8.roa (hash: uaHU4qHF04fH5UL/VGo93ZAzSiASc8qoSn8SilcNKx8=)
8: Znfa73p9gykO0gBaOY96RVDKTWg.roa (hash: JqvrbwmWqW5i30K6jcxmqvrUWP4xj/VonoHZXAOdti8=)
9: dMLf7oZA2glUWPaPF66AFPs0ZGA.roa (hash: vhl1uNOJ5DqCqIxVZTtmK9gZafgqapXEKNDgMZ+kKHE=)
10: e-PI40mcmW_4qj2wj51dZytuRJ4.roa (hash: IWJbxQ32owD5Lwd1nR2dmmdsgfysZX9pSs6x+OurREE=)
11: rCtSQ7fOIAO3hF-dZmFyOrblm2s.roa (hash: JkQ7BSC0RdZovffT+QwWvb+UrSCXmLKi6BtijI7KA5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:f2:59:2e:cb:9b:e0:fc:22:df:de:ca:c2:59:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Validity
Not Before: Mar 1 19:01:30 2026 GMT
Not After : Mar 2 19:01:30 2026 GMT
Subject: CN=6025b3b805713bbdabfa8366cd48192218050dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1f:51:60:26:99:97:58:1c:6a:da:36:89:2b:
94:a9:86:d1:e9:40:47:e9:58:87:51:76:92:9e:ea:
37:15:22:c0:85:32:82:ae:d9:33:2a:57:7a:e7:40:
8d:d6:54:c1:2d:93:6e:44:6d:fa:fa:cc:4b:14:6b:
02:25:1c:50:75:3a:44:d2:a0:6f:48:ed:7e:3b:d2:
eb:90:16:d9:8e:02:ce:1a:29:66:cf:d7:7c:f6:3d:
d8:d3:aa:c9:a5:e3:2b:1a:e8:84:40:2f:74:af:3a:
f7:9b:e1:7c:5c:c0:b0:dc:0a:56:3f:fd:4f:b1:ec:
43:c6:19:d6:8d:84:47:05:d7:20:d1:7a:37:f3:62:
7c:6b:a7:a0:2f:1e:2c:b9:48:c3:a9:f6:56:26:65:
3a:91:1b:a9:4d:cb:38:59:20:84:3b:49:47:0c:7e:
f1:54:d1:75:c5:3c:b9:18:80:2a:3a:20:04:10:1d:
89:3d:56:ad:d5:26:1f:ce:2a:36:cc:3d:4c:81:1d:
63:5b:14:3c:64:f3:e9:65:37:a8:21:df:82:15:8c:
8b:ff:41:ea:df:67:d8:48:0a:61:e6:fc:6a:5f:86:
e9:c0:43:a7:e3:7b:bd:42:ac:f3:9f:14:2e:dc:04:
f4:da:11:47:af:a8:b1:d6:df:c7:79:66:7e:29:51:
35:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:25:B3:B8:05:71:3B:BD:AB:FA:83:66:CD:48:19:22:18:05:0D:EC
X509v3 Authority Key Identifier:
keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:de:ca:67:f0:0e:1a:41:78:0f:69:5b:d1:92:67:a2:fa:b7:
6d:4c:93:64:40:55:7b:a1:9a:27:74:82:f5:60:3b:52:41:79:
84:75:32:16:15:ed:bc:ff:54:ac:f9:56:84:13:b4:12:5c:01:
d8:60:ee:37:d8:80:43:d3:3f:b2:25:6f:62:13:f5:e0:f8:c6:
8f:59:e3:83:32:91:92:97:e8:e8:0d:f7:72:c8:bd:91:e8:fb:
eb:11:17:68:e9:7c:98:ad:f0:be:25:bb:a9:e9:8c:5d:5c:bb:
9e:e2:b9:51:9c:a8:62:79:2a:55:16:d9:5a:55:ee:96:f8:e9:
fd:68:e4:8e:33:d5:2b:b0:d3:69:32:44:02:61:cb:10:b2:06:
a1:d0:71:24:2c:9b:94:40:ff:51:5b:cd:8f:35:51:3b:ca:39:
c2:9a:8a:4c:b9:d6:05:ce:e6:09:83:6b:4a:ee:30:64:80:b2:
cc:9e:26:54:a4:c8:bb:87:61:49:d0:08:89:bf:b4:a6:a1:d5:
f9:e9:d7:8c:d9:d4:3a:1e:bb:cd:02:61:07:60:ff:46:40:4f:
00:28:35:3e:66:37:46:21:2e:75:42:3e:6d:fa:41:43:71:07:
5b:75:82:c0:4c:24:26:6a:68:5a:45:ae:c2:53:58:92:37:8d:
a8:3e:a6:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxvJZLsub4Pwi397KwlkdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYzJjMWFmZDRiZGVjOTgwNTA2ZmEwN2RmN2M4NjYyZDU1
NGZhNDYwHhcNMjYwMzAxMTkwMTMwWhcNMjYwMzAyMTkwMTMwWjAzMTEwLwYDVQQD
Eyg2MDI1YjNiODA1NzEzYmJkYWJmYTgzNjZjZDQ4MTkyMjE4MDUwZGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjh9RYCaZl1gcato2iSuUqYbR6UBH
6ViHUXaSnuo3FSLAhTKCrtkzKld650CN1lTBLZNuRG36+sxLFGsCJRxQdTpE0qBv
SO1+O9LrkBbZjgLOGilmz9d89j3Y06rJpeMrGuiEQC90rzr3m+F8XMCw3ApWP/1P
sexDxhnWjYRHBdcg0Xo382J8a6egLx4suUjDqfZWJmU6kRupTcs4WSCEO0lHDH7x
VNF1xTy5GIAqOiAEEB2JPVat1SYfzio2zD1MgR1jWxQ8ZPPpZTeoId+CFYyL/0Hq
32fYSAph5vxqX4bpwEOn43u9QqzznxQu3AT02hFHr6ix1t/HeWZ+KVE1bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGAls7gFcTu9q/qDZs1IGSIYBQ3sMB8GA1UdIwQY
MBaAFOrCwa/UveyYBQb6B998hmLVVPpGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnNMQnI5Uzk3SmdGQnZvSDMzeUdZdFZVLWtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS81ODlhNmItNGQ3ZS00MDEyLWEwZmMt
YzBjZWIwMzdhZDQyLzEvNnNMQnI5Uzk3SmdGQnZvSDMzeUdZdFZVLWtZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS81ODlhNmItNGQ3ZS00MDEyLWEwZmMtYzBjZWIwMzdhZDQy
LzEvNnNMQnI5Uzk3SmdGQnZvSDMzeUdZdFZVLWtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMN7KZ/AO
GkF4D2lb0ZJnovq3bUyTZEBVe6GaJ3SC9WA7UkF5hHUyFhXtvP9UrPlWhBO0ElwB
2GDuN9iAQ9M/siVvYhP14PjGj1njgzKRkpfo6A33csi9kej76xEXaOl8mK3wviW7
qemMXVy7nuK5UZyoYnkqVRbZWlXulvjp/WjkjjPVK7DTaTJEAmHLELIGodBxJCyb
lED/UVvNjzVRO8o5wpqKTLnWBc7mCYNrSu4wZICyzJ4mVKTIu4dhSdAIib+0pqHV
+enXjNnUOh67zQJhB2D/RkBPACg1PmY3RiEudUI+bfpBQ3EHW3WCwEwkJmpoWkWu
wlNYkjeNqD6mOA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:02:04 2026 by rpki-client