Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft
File: 6Y4gI4HByI2C87cPO-Booao3K50.mft (raw, json)
Hash identifier: hbEC0VZ9FxlwnzrsnajnxubpzX6+PVufGkV5FZtw5CE=
Subject key identifier: 60:39:F7:30:EE:12:F3:D5:4E:D5:6A:4A:FE:F7:D3:54:F0:8A:8A:5C
Authority key identifier: E9:8E:20:23:81:C1:C8:8D:82:F3:B7:0F:3B:E0:68:A1:AA:37:2B:9D
Certificate issuer: /CN=e98e202381c1c88d82f3b70f3be068a1aa372b9d
Certificate serial: 01A0C444B170C7E07531292971A699F86D3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Y4gI4HByI2C87cPO-Booao3K50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft
Manifest number: 1A64
Signing time: Mon 21 Sep 2026 14:00:31 +0000
Manifest this update: Mon 21 Sep 2026 14:00:31 +0000
Manifest next update: Tue 22 Sep 2026 14:00:31 +0000
Files and hashes: 1: 6Y4gI4HByI2C87cPO-Booao3K50.crl (hash: apL0qd9UZVh/GaepFpgV/Qhl7i65AkLjROv6gGjRlaU=)
2: NXeo-J_ZDukB7SO2DkXWmY8r8e8.roa (hash: b2x0KyvUzCbJHB1hWOnKC2ju1PwOkyG9Q3mb0qlRsLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Y4gI4HByI2C87cPO-Booao3K50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:44:b1:70:c7:e0:75:31:29:29:71:a6:99:f8:6d:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e98e202381c1c88d82f3b70f3be068a1aa372b9d
Validity
Not Before: Sep 21 14:00:31 2026 GMT
Not After : Sep 22 14:00:31 2026 GMT
Subject: CN=6039f730ee12f3d54ed56a4afef7d354f08a8a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:16:b7:e8:b7:69:df:75:a4:00:05:83:e2:aa:
b3:61:de:bd:56:6a:f1:96:6e:dc:7f:3f:dd:0b:f1:
6b:2b:4a:ae:c1:88:41:c2:fb:4e:55:a8:f4:b9:a6:
71:58:58:c2:89:ad:97:aa:4b:f3:1d:7f:2e:17:57:
6b:da:92:6a:cd:15:67:46:e9:45:d9:90:7b:9c:63:
0a:b3:3e:a5:ac:5b:56:85:fd:7d:cb:8e:6a:c4:43:
a0:26:6b:54:b0:a9:7d:c7:f7:39:d6:cb:6a:35:c0:
42:dd:69:05:4a:f7:22:91:ae:29:2b:2a:51:3b:b5:
18:d3:93:3d:66:96:e4:a5:0c:70:6b:04:b5:62:d6:
58:8e:1d:38:e4:12:da:a0:6c:f8:06:3f:73:1f:bd:
03:be:f1:83:ba:24:38:32:cb:ab:ba:dc:e3:66:06:
4a:bd:44:1a:b5:3a:0a:c5:2b:bf:6c:f6:bc:8e:d8:
0a:3b:4d:92:e5:66:73:6d:cc:ed:d0:ba:0e:09:2e:
12:7a:05:7a:6e:5d:1a:69:2e:38:ff:4b:f1:d4:4f:
58:51:43:7f:31:3c:c6:8b:54:62:d2:73:a0:2b:de:
cc:92:0a:20:c8:c0:e8:6a:22:af:79:c9:84:5f:f5:
f7:58:bf:36:c0:a7:66:99:52:71:71:03:aa:8b:3d:
b3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:39:F7:30:EE:12:F3:D5:4E:D5:6A:4A:FE:F7:D3:54:F0:8A:8A:5C
X509v3 Authority Key Identifier:
keyid:E9:8E:20:23:81:C1:C8:8D:82:F3:B7:0F:3B:E0:68:A1:AA:37:2B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Y4gI4HByI2C87cPO-Booao3K50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:d9:01:89:19:30:58:e6:16:38:6b:70:68:72:53:11:68:d1:
e4:77:5c:08:84:cf:88:54:85:1a:21:eb:17:c2:d2:6c:88:d6:
d8:9b:b6:7c:47:d7:ba:41:4a:75:0c:c2:e6:dc:01:cd:b4:b8:
bd:fa:09:a1:fc:34:5a:b0:05:7c:22:fc:da:10:fc:0b:d9:30:
17:53:b8:89:1d:e0:f6:2f:29:28:1c:b9:15:34:81:66:6d:e0:
65:2a:5c:3d:c6:14:8a:9d:9d:59:94:1c:ab:7b:45:58:c0:29:
cc:e8:79:dd:c7:2b:8e:6b:ed:f0:60:f5:4c:3d:42:62:90:be:
f6:67:df:a1:b5:43:c7:a4:1e:a0:be:7c:b4:86:57:45:fc:96:
62:c9:a7:40:2e:cd:63:05:fd:4c:f3:45:c2:a9:41:72:a4:cc:
e2:a8:ce:30:f2:6b:b4:12:1e:98:ec:5c:2f:99:80:38:ae:7f:
78:f7:a7:6b:7e:b6:30:1e:50:d4:e0:f4:95:8a:92:e2:21:bf:
89:05:51:1b:19:e3:94:30:df:06:c4:25:22:ec:d2:79:6d:76:
a2:2f:44:ae:f9:2f:ae:db:bb:45:d2:b0:ae:61:c4:54:d0:2f:
53:e3:75:9c:48:c6:ff:56:bf:f8:de:b8:b9:d6:58:3f:90:64:
df:4d:22:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDERLFwx+B1MSkpcaaZ+G09MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5OGUyMDIzODFjMWM4OGQ4MmYzYjcwZjNiZTA2OGExYWEz
NzJiOWQwHhcNMjYwOTIxMTQwMDMxWhcNMjYwOTIyMTQwMDMxWjAzMTEwLwYDVQQD
Eyg2MDM5ZjczMGVlMTJmM2Q1NGVkNTZhNGFmZWY3ZDM1NGYwOGE4YTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Ra36Ldp33WkAAWD4qqzYd69Vmrx
lm7cfz/dC/FrK0quwYhBwvtOVaj0uaZxWFjCia2XqkvzHX8uF1dr2pJqzRVnRulF
2ZB7nGMKsz6lrFtWhf19y45qxEOgJmtUsKl9x/c51stqNcBC3WkFSvcika4pKypR
O7UY05M9ZpbkpQxwawS1YtZYjh045BLaoGz4Bj9zH70DvvGDuiQ4MsurutzjZgZK
vUQatToKxSu/bPa8jtgKO02S5WZzbczt0LoOCS4SegV6bl0aaS44/0vx1E9YUUN/
MTzGi1Ri0nOgK97MkgogyMDoaiKvecmEX/X3WL82wKdmmVJxcQOqiz2zsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGA59zDuEvPVTtVqSv7301TwiopcMB8GA1UdIwQY
MBaAFOmOICOBwciNgvO3DzvgaKGqNyudMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlk0Z0k0SEJ5STJDODdjUE8tQm9vYW8zSzUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9mNzg5MzctYWVkMy00YjZmLWFhMmQt
YzgzMmVkN2Q1ZmVjLzEvNlk0Z0k0SEJ5STJDODdjUE8tQm9vYW8zSzUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9mNzg5MzctYWVkMy00YjZmLWFhMmQtYzgzMmVkN2Q1ZmVj
LzEvNlk0Z0k0SEJ5STJDODdjUE8tQm9vYW8zSzUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAktkBiRkw
WOYWOGtwaHJTEWjR5HdcCITPiFSFGiHrF8LSbIjW2Ju2fEfXukFKdQzC5twBzbS4
vfoJofw0WrAFfCL82hD8C9kwF1O4iR3g9i8pKBy5FTSBZm3gZSpcPcYUip2dWZQc
q3tFWMApzOh53ccrjmvt8GD1TD1CYpC+9mffobVDx6QeoL58tIZXRfyWYsmnQC7N
YwX9TPNFwqlBcqTM4qjOMPJrtBIemOxcL5mAOK5/ePena362MB5Q1OD0lYqS4iG/
iQVRGxnjlDDfBsQlIuzSeW12oi9Ervkvrtu7RdKwrmHEVNAvU+N1nEjG/1a/+N64
udZYP5Bk300i1Q==
-----END CERTIFICATE-----
Generated at Mon Sep 21 23:23:11 2026 by rpki-client