
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.mft
File: 6ZTnQGQVjpeQSZCUdRDrmUGYbKE.mft (raw, json)
Hash identifier: fF5oIC2QLXR/0iqL6EPI0ZU4VZc60N9/r+qtFaLwVQ0=
Subject key identifier: BD:0A:73:46:6E:20:D2:91:D6:24:7A:68:4E:73:2A:3C:0E:17:BD:44
Authority key identifier: E9:94:E7:40:64:15:8E:97:90:49:90:94:75:10:EB:99:41:98:6C:A1
Certificate issuer: /CN=e994e74064158e97904990947510eb9941986ca1
Certificate serial: 01A0C1B1807C0C13C6198541BEC188831BD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.mft
Manifest number: 0A00
Signing time: Mon 21 Sep 2026 02:00:30 +0000
Manifest this update: Mon 21 Sep 2026 02:00:30 +0000
Manifest next update: Tue 22 Sep 2026 02:00:30 +0000
Files and hashes: 1: 6ZTnQGQVjpeQSZCUdRDrmUGYbKE.crl (hash: sBl31JhwZIUysmU1LndqSIgfi0rrZwesLC94lvxbS/g=)
2: b4Ahv2Rp9bxG7wcFPklnJREK0b0.roa (hash: KQEo13dywO1eXsbu0WPKOMTBSK6OIgfZ6KB0hgpviHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 02:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:b1:80:7c:0c:13:c6:19:85:41:be:c1:88:83:1b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e994e74064158e97904990947510eb9941986ca1
Validity
Not Before: Sep 21 02:00:30 2026 GMT
Not After : Sep 22 02:00:30 2026 GMT
Subject: CN=bd0a73466e20d291d6247a684e732a3c0e17bd44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:be:1c:7f:14:20:98:14:ec:e0:68:fc:d3:ed:
d5:65:af:3c:ac:cf:60:fa:ab:d6:bd:70:18:81:99:
19:2f:76:b2:04:fb:81:cd:10:d7:82:65:5e:e7:7a:
fb:f8:99:15:df:4d:0c:bf:5c:e0:e7:dc:ca:ec:14:
96:6a:65:a8:fe:35:69:bf:8f:da:40:8c:20:6b:84:
16:82:cd:92:8f:fb:23:71:00:24:e0:31:ad:1c:8d:
c7:cb:cb:9c:44:f1:18:c8:bf:02:ec:aa:b9:7b:06:
43:d9:98:a6:19:39:c2:a6:c5:70:ed:8d:30:22:31:
d1:b1:95:7d:1d:bc:aa:3c:9a:6f:60:b6:78:5f:a9:
f6:08:95:0d:ed:93:88:3e:84:ab:d1:24:84:b6:19:
37:90:00:f5:15:00:cd:f4:90:76:09:ef:5c:8f:b3:
f6:b0:4e:b6:f4:c9:b8:b8:66:70:2a:71:81:3d:d1:
09:72:dd:2c:a0:eb:8a:75:c6:4b:53:e8:6e:4a:79:
2e:cc:79:17:db:2a:dc:fe:e0:f9:e6:df:5a:5c:0d:
e4:6e:53:e4:23:c3:92:f3:c0:68:c8:4e:f5:76:6b:
ca:e9:95:36:be:41:1e:75:47:00:4f:70:ee:10:17:
7e:88:8d:18:1c:e4:d8:c1:47:63:3a:51:b8:fc:ac:
f7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0A:73:46:6E:20:D2:91:D6:24:7A:68:4E:73:2A:3C:0E:17:BD:44
X509v3 Authority Key Identifier:
keyid:E9:94:E7:40:64:15:8E:97:90:49:90:94:75:10:EB:99:41:98:6C:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:e9:d6:e2:69:18:70:6d:e8:4d:69:ae:1c:a6:be:65:9e:dc:
57:46:78:19:51:9b:6c:61:37:31:9d:dd:06:62:db:03:63:8a:
3c:b9:9c:9a:56:fe:bc:ce:5f:e4:21:fc:0a:25:5c:85:70:d4:
6f:2a:05:01:bc:d1:9e:9e:1c:bd:b0:cd:2e:c8:40:04:ed:a5:
f7:d4:0b:18:e8:a2:18:b1:f7:f3:59:1a:68:5e:62:c4:55:33:
c2:b5:2f:f8:9d:fc:d6:e9:e8:e1:e8:8a:0a:fb:18:2e:3f:ca:
e0:46:dd:15:47:10:63:89:7b:ca:f7:7f:2e:90:fd:d2:6f:9b:
a0:90:e3:28:25:4c:3c:b2:eb:08:e5:44:3b:ec:cc:a1:30:3b:
e1:af:c7:2b:33:9e:81:2e:7f:eb:5f:6d:c9:0d:9e:45:63:d3:
13:01:26:9d:da:ed:33:3b:b4:ee:a4:24:e6:59:08:d0:4e:3c:
e0:0f:93:f8:c6:36:be:84:2c:2f:69:ec:7c:0c:f3:a3:3a:b8:
c9:8f:0d:22:da:70:d6:36:99:fe:57:99:d3:ce:bc:5d:e0:9d:
a5:ea:f1:9a:46:1f:51:55:fb:54:67:b7:9f:a6:6d:01:62:69:
33:23:b8:b7:eb:71:aa:1b:85:36:2e:04:f5:43:05:2b:92:7b:
ef:e4:15:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDBsYB8DBPGGYVBvsGIgxvZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5OTRlNzQwNjQxNThlOTc5MDQ5OTA5NDc1MTBlYjk5NDE5
ODZjYTEwHhcNMjYwOTIxMDIwMDMwWhcNMjYwOTIyMDIwMDMwWjAzMTEwLwYDVQQD
EyhiZDBhNzM0NjZlMjBkMjkxZDYyNDdhNjg0ZTczMmEzYzBlMTdiZDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsL4cfxQgmBTs4Gj80+3VZa88rM9g
+qvWvXAYgZkZL3ayBPuBzRDXgmVe53r7+JkV300Mv1zg59zK7BSWamWo/jVpv4/a
QIwga4QWgs2Sj/sjcQAk4DGtHI3Hy8ucRPEYyL8C7Kq5ewZD2ZimGTnCpsVw7Y0w
IjHRsZV9HbyqPJpvYLZ4X6n2CJUN7ZOIPoSr0SSEthk3kAD1FQDN9JB2Ce9cj7P2
sE629Mm4uGZwKnGBPdEJct0soOuKdcZLU+huSnkuzHkX2yrc/uD55t9aXA3kblPk
I8OS88BoyE71dmvK6ZU2vkEedUcAT3DuEBd+iI0YHOTYwUdjOlG4/Kz3kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL0Kc0ZuINKR1iR6aE5zKjwOF71EMB8GA1UdIwQY
MBaAFOmU50BkFY6XkEmQlHUQ65lBmGyhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlpUblFHUVZqcGVRU1pDVWRSRHJtVUdZYktFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8xYzEyZTUtYzgwZC00NzMzLWJjNGEt
MzYyMGNlZmNjNzI0LzEvNlpUblFHUVZqcGVRU1pDVWRSRHJtVUdZYktFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8xYzEyZTUtYzgwZC00NzMzLWJjNGEtMzYyMGNlZmNjNzI0
LzEvNlpUblFHUVZqcGVRU1pDVWRSRHJtVUdZYktFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbunW4mkY
cG3oTWmuHKa+ZZ7cV0Z4GVGbbGE3MZ3dBmLbA2OKPLmcmlb+vM5f5CH8CiVchXDU
byoFAbzRnp4cvbDNLshABO2l99QLGOiiGLH381kaaF5ixFUzwrUv+J381uno4eiK
CvsYLj/K4EbdFUcQY4l7yvd/LpD90m+boJDjKCVMPLLrCOVEO+zMoTA74a/HKzOe
gS5/619tyQ2eRWPTEwEmndrtMzu07qQk5lkI0E484A+T+MY2voQsL2nsfAzzozq4
yY8NItpw1jaZ/leZ0868XeCdperxmkYfUVX7VGe3n6ZtAWJpMyO4t+txqhuFNi4E
9UMFK5J77+QVyg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 13:40:40 2026 by rpki-client