
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
File: 6bEyD7wk1vQ2bLZPz17S17G2vfc.mft (raw, json)
Hash identifier: /SLV2/Bllrf8uvbXp/68GqVuXxPGSuPN5tfI/aLnHMU=
Subject key identifier: A5:3A:AB:C2:36:14:54:1E:24:6B:92:5B:96:60:4A:4E:36:58:15:34
Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
Certificate issuer: /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Certificate serial: 01A1C40BB8EF9E1E5C097438365488FAC078
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
Manifest number: 1B62
Signing time: Tue 10 Nov 2026 06:01:04 +0000
Manifest this update: Tue 10 Nov 2026 06:01:04 +0000
Manifest next update: Wed 11 Nov 2026 06:01:04 +0000
Files and hashes: 1: 6bEyD7wk1vQ2bLZPz17S17G2vfc.crl (hash: gLYMXbCgHA41IZfstzNNOCvl3R2+jKIyY7Gu9aXtyDo=)
2: DJ6nN3NSd1YO8q5t_zT7bPuhQIQ.roa (hash: 5lkywxbhaLRKhID4/jyJTUETlBZ/IhU7RvT2pJBvhJo=)
3: Gv6v2CuTYSuw1fxGRbIukftGmrE.roa (hash: LzIPy5gAnB2m5Fwrsrc5loi4EBJfHWamJu0+xufW+gM=)
4: HmF9BlW0N9Gf90qlurIxvLh06Qk.roa (hash: ZSkQkLJR9FAk0rQTmxE9Q0nn/fbR18zVkksGDExkMjk=)
5: PrWnje5pwuyLLung5cAWo-Sdq5o.roa (hash: i3OyNFwt3PIeOGKHaRbK8pFHgXOUNE3Am1N1aLetXS8=)
6: am9wGnnaAwnbbl-GeKSLoRk_nTs.roa (hash: lT6hqTkoXScWiRJIwaGV6urFE0P+0XxY6z4DqV2dR4w=)
7: kDoooTn7_d9rJiLyXZVvZxYYDxY.roa (hash: OFQHZn0JA/oknUFklltDGx8uk2qRQsfn+A1b0e8eT3g=)
8: nhhkg_jIxt4rVXWEx9XQblCSEZ4.roa (hash: y1FUEKnJ06vvn88HA1FBYat4W4h49NECAE4Wk6psYL4=)
9: q3cJGJcUFmhZQxfVUYW7w5lnkIs.roa (hash: Na/vhBzQ6zuGC+WNUTNRWnoDoEf33ziXx8vOjXZ7zak=)
10: wmwwuc2J8lTkXFaf4tOjpW8KxnA.roa (hash: cU6AgM/v4ffZ1Oc0+CAzIkq1QF3SV3vuE/LeuVRBHyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 06:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c4:0b:b8:ef:9e:1e:5c:09:74:38:36:54:88:fa:c0:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Validity
Not Before: Nov 10 06:01:04 2026 GMT
Not After : Nov 11 06:01:04 2026 GMT
Subject: CN=a53aabc23614541e246b925b96604a4e36581534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:89:bf:ca:97:44:a2:81:1a:f2:5a:1d:4b:30:
0d:f5:32:03:de:7f:93:4a:1c:b7:29:5f:5c:1d:66:
3c:6a:55:b8:da:cd:5a:16:75:80:05:33:4a:4b:ff:
d6:6d:67:8e:38:35:a6:37:ab:cc:03:bd:e2:ed:8a:
4c:ec:05:be:24:32:44:b7:86:87:8a:1a:c0:9e:3d:
32:06:dc:b3:d0:c1:34:b7:98:b4:90:d9:8f:90:da:
29:18:c5:83:c4:21:e5:d7:1b:b5:f3:4a:4e:43:8c:
c2:4a:cc:aa:2f:16:f2:a3:75:90:0b:6f:94:0d:3e:
0e:82:30:62:dc:fe:9d:5e:d6:ac:93:53:d7:41:e5:
a1:28:92:80:ce:22:3d:a3:66:98:ef:09:5b:f7:e2:
62:82:a7:49:3e:79:0a:32:4f:4a:9b:c1:26:2f:82:
3e:d2:a2:d6:99:10:e4:59:e3:b9:55:9d:e7:37:68:
fc:b0:77:6c:a3:17:d2:e7:61:55:db:fd:c1:a6:6c:
c2:72:65:7d:37:74:96:a2:89:41:62:38:7b:1f:4d:
48:0e:e4:35:8f:67:98:b3:1a:36:b2:14:9d:f5:61:
31:be:de:41:c0:65:5a:7f:63:1d:ab:c7:f6:8b:4e:
99:45:54:c4:4b:94:9b:88:09:83:44:08:3f:2d:03:
1d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:3A:AB:C2:36:14:54:1E:24:6B:92:5B:96:60:4A:4E:36:58:15:34
X509v3 Authority Key Identifier:
keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:33:86:71:aa:a3:e6:1d:42:f0:83:bb:55:e2:bc:b1:f7:66:
38:54:23:0c:05:95:b1:10:56:1c:3a:10:28:13:49:69:06:9e:
d6:e1:75:3a:54:cc:ec:a1:54:70:b0:63:a3:c3:b7:08:16:1c:
3d:38:44:06:e6:18:4f:07:d8:53:4d:59:4c:32:a7:5f:27:4b:
fa:dc:60:3f:4e:36:81:50:48:1b:a8:97:0e:57:d9:b0:56:be:
ba:c0:a9:b4:38:8a:1e:97:20:d8:ca:40:bf:25:05:5a:04:ad:
a3:73:ca:7a:57:94:ea:42:e8:fb:79:74:17:49:d9:b6:f9:30:
86:11:1d:41:bc:20:f1:7a:fd:49:5e:3e:0c:e7:35:57:d8:d1:
02:c4:dd:b7:81:c0:d0:6a:04:38:3e:eb:1d:59:e0:c2:27:61:
3d:d4:1d:0d:70:34:0b:7a:3e:e9:95:3c:8c:54:61:0b:cd:b3:
ae:5b:ff:69:52:e9:0d:c0:30:6a:bd:c6:5a:52:25:ee:e8:f2:
80:ca:9c:ab:a7:0f:23:9d:21:f8:1c:c4:4c:b3:e5:77:4e:e6:
fe:56:78:5b:5d:01:ee:91:b3:d4:e3:47:b4:94:ca:89:86:82:
49:e1:8b:c3:e1:a9:e9:17:42:8e:29:30:a6:81:cc:13:06:59:
53:ee:62:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHEC7jvnh5cCXQ4NlSI+sB4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5YjEzMjBmYmMyNGQ2ZjQzNjZjYjY0ZmNmNWVkMmQ3YjFi
NmJkZjcwHhcNMjYxMTEwMDYwMTA0WhcNMjYxMTExMDYwMTA0WjAzMTEwLwYDVQQD
EyhhNTNhYWJjMjM2MTQ1NDFlMjQ2YjkyNWI5NjYwNGE0ZTM2NTgxNTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIm/ypdEooEa8lodSzAN9TID3n+T
Shy3KV9cHWY8alW42s1aFnWABTNKS//WbWeOODWmN6vMA73i7YpM7AW+JDJEt4aH
ihrAnj0yBtyz0ME0t5i0kNmPkNopGMWDxCHl1xu180pOQ4zCSsyqLxbyo3WQC2+U
DT4OgjBi3P6dXtask1PXQeWhKJKAziI9o2aY7wlb9+JigqdJPnkKMk9Km8EmL4I+
0qLWmRDkWeO5VZ3nN2j8sHdsoxfS52FV2/3BpmzCcmV9N3SWoolBYjh7H01IDuQ1
j2eYsxo2shSd9WExvt5BwGVaf2Mdq8f2i06ZRVTES5SbiAmDRAg/LQMdgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKU6q8I2FFQeJGuSW5ZgSk42WBU0MB8GA1UdIwQY
MBaAFOmxMg+8JNb0Nmy2T89e0textr33MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmJFeUQ3d2sxdlEyYkxaUHoxN1MxN0cydmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9kZjFjYjUtNWY0OC00NmEwLWE3NmUt
ZDNlMjgwMGJkNjQwLzEvNmJFeUQ3d2sxdlEyYkxaUHoxN1MxN0cydmZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9kZjFjYjUtNWY0OC00NmEwLWE3NmUtZDNlMjgwMGJkNjQw
LzEvNmJFeUQ3d2sxdlEyYkxaUHoxN1MxN0cydmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAizOGcaqj
5h1C8IO7VeK8sfdmOFQjDAWVsRBWHDoQKBNJaQae1uF1OlTM7KFUcLBjo8O3CBYc
PThEBuYYTwfYU01ZTDKnXydL+txgP042gVBIG6iXDlfZsFa+usCptDiKHpcg2MpA
vyUFWgSto3PKeleU6kLo+3l0F0nZtvkwhhEdQbwg8Xr9SV4+DOc1V9jRAsTdt4HA
0GoEOD7rHVngwidhPdQdDXA0C3o+6ZU8jFRhC82zrlv/aVLpDcAwar3GWlIl7ujy
gMqcq6cPI50h+BzETLPld07m/lZ4W10B7pGz1ONHtJTKiYaCSeGLw+Gp6RdCjikw
poHMEwZZU+5iKA==
-----END CERTIFICATE-----
Generated at Tue Nov 10 14:28:11 2026 by rpki-client