Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft
File: 6aqxRGEAqPzgPfGddV4GMp7iRxM.mft (raw, json)
Hash identifier: smQ+yir17uU0D/maCCCLI2YOpINw+MwBzLNkDpSJrAk=
Subject key identifier: 62:8D:55:81:DB:71:1B:C1:22:73:94:0A:74:87:FD:1F:05:92:23:87
Authority key identifier: E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13
Certificate issuer: /CN=e9aab1446100a8fce03df19d755e06329ee24713
Certificate serial: 01A06EA7FFBB8D6ADB5CA5229DC31A700AAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft
Manifest number: 1A50
Signing time: Fri 04 Sep 2026 23:01:38 +0000
Manifest this update: Fri 04 Sep 2026 23:01:38 +0000
Manifest next update: Sat 05 Sep 2026 23:01:38 +0000
Files and hashes: 1: 6aqxRGEAqPzgPfGddV4GMp7iRxM.crl (hash: zfzTL8ImGnL+b+J3lF3E9NEI6aMarFTzgojqX3FmwFA=)
2: JlHGBE70CjYUjMlPy-yN4dzG-cs.roa (hash: eJeCGZHCYQ5pmVVEGiFVOguyq7hsvoBtUeukZnmh3W4=)
3: _GwYJ0PKXJK6fqA4cXd9zGiQJsk.roa (hash: TYTF9XrM81uGdSP5QXPvN15cnh9G39fwkeUY9WQ9Rbg=)
4: cxDAVDgNr82cHnIJJB4UwFs2cGU.roa (hash: sgT8v5E2LVdbt2FX0DJ7W7uBv5rW5PIhx+eS3wQDvSs=)
5: dwRGeRiPxu8Ert93hewpcLQlQPs.roa (hash: EAiXOznjLfpEqp6yCwCN/ahYsHXDQcQqsmXEqqAl9Vo=)
6: nSCF5qcvbkhkVZeNhESQPgQzsYw.roa (hash: Y9RP3rduyUtto1z3zNhzoo4HTEI6paw2VNckcRzLK4g=)
7: vSQI8aeWI14r_sJ8b9o2QgEO_BI.roa (hash: oiaQsMRtgp1rem+ZyltK5SLqiX97thYBgEBpvq3aaYc=)
8: wyPR3DQqTcPeXSMxj_8q1QvGp98.roa (hash: gpZ7dcu9+au0qJAS/mbf494bt1LZl0k6YCG8tQBUn4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:a7:ff:bb:8d:6a:db:5c:a5:22:9d:c3:1a:70:0a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9aab1446100a8fce03df19d755e06329ee24713
Validity
Not Before: Sep 4 23:01:38 2026 GMT
Not After : Sep 5 23:01:38 2026 GMT
Subject: CN=628d5581db711bc12273940a7487fd1f05922387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:be:58:f3:27:a1:60:9e:7f:e3:d2:13:65:53:
42:c1:3c:22:66:ae:a7:65:5f:f8:32:91:0c:48:98:
5e:cb:45:bf:4b:3f:bd:57:97:e1:55:b1:10:59:c3:
28:c9:81:cf:4f:91:a9:b1:0c:ca:94:46:b8:1f:99:
ea:92:da:a4:14:fe:45:ed:47:52:99:8f:e6:4d:aa:
ee:ed:ef:0d:f1:80:ab:21:b5:50:1d:30:6b:81:b6:
b9:eb:69:75:92:41:36:21:73:b1:ea:b3:df:5e:82:
86:c0:ef:d6:a2:76:c1:e0:6a:24:d9:5e:63:87:db:
c2:c1:32:46:e0:b4:d5:29:6a:66:62:ef:2a:d7:23:
f1:dd:3b:a8:87:fa:e9:cc:67:7d:35:f7:50:6a:91:
37:9a:a5:e5:3c:71:95:ed:dc:b3:75:d4:62:9f:19:
3c:d2:35:d1:0d:42:6e:e3:60:d8:d2:5b:5a:d3:a2:
43:01:31:14:de:2d:00:06:ef:e4:32:45:7f:80:c9:
4e:20:1e:1d:38:43:75:57:36:b8:24:0a:39:60:ed:
9a:4f:d5:01:83:24:02:8a:6b:0e:d2:58:0a:c0:38:
f5:2b:20:de:d2:bb:de:ab:10:3b:61:0f:bd:8b:37:
f7:d9:28:27:b6:d7:00:35:80:d7:d9:3d:7f:62:02:
24:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:8D:55:81:DB:71:1B:C1:22:73:94:0A:74:87:FD:1F:05:92:23:87
X509v3 Authority Key Identifier:
keyid:E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:24:8f:9b:76:51:c9:9a:fa:cd:a8:9c:f4:9a:a5:f0:3a:0e:
5b:bb:2e:a6:0b:e7:dc:4e:06:b6:1e:9c:2c:88:ab:78:d6:89:
04:e9:b7:0a:b0:4f:6f:e1:1f:1d:9d:a2:f5:90:dd:ca:57:85:
6b:d3:e6:fb:00:5b:ce:04:44:48:27:c6:3e:73:e1:8c:80:90:
25:19:3a:eb:19:f5:b4:e6:c8:b6:5d:d8:85:34:93:2f:0a:d0:
0a:41:dd:87:cd:a3:46:ed:df:10:b0:92:4e:0a:8b:00:56:93:
e3:50:a6:40:d2:c8:98:4b:a8:d6:46:6c:a2:d4:c6:c4:18:60:
77:55:65:50:5a:d8:74:55:9c:ca:33:a3:c4:88:7d:01:6b:9f:
ec:29:cd:20:55:65:d1:a0:e1:7a:73:e3:31:78:d7:0c:b1:b2:
98:5d:3c:31:7b:4a:1d:7a:67:5b:0a:0a:71:6e:bf:c5:d2:18:
ce:57:e6:19:e1:39:d6:21:7e:72:bd:fd:ed:a3:0d:35:16:34:
0d:6b:72:16:1c:71:c2:14:65:8b:99:9b:a4:53:55:18:a2:e2:
cd:e3:b7:5c:05:f9:cf:34:62:c5:35:4c:5c:ad:8c:53:6e:55:
d1:27:b1:95:6e:e4:f0:f8:18:46:93:f6:18:0c:20:23:50:5e:
3b:66:5d:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBup/+7jWrbXKUincMacAqsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5YWFiMTQ0NjEwMGE4ZmNlMDNkZjE5ZDc1NWUwNjMyOWVl
MjQ3MTMwHhcNMjYwOTA0MjMwMTM4WhcNMjYwOTA1MjMwMTM4WjAzMTEwLwYDVQQD
Eyg2MjhkNTU4MWRiNzExYmMxMjI3Mzk0MGE3NDg3ZmQxZjA1OTIyMzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb5Y8yehYJ5/49ITZVNCwTwiZq6n
ZV/4MpEMSJhey0W/Sz+9V5fhVbEQWcMoyYHPT5GpsQzKlEa4H5nqktqkFP5F7UdS
mY/mTaru7e8N8YCrIbVQHTBrgba562l1kkE2IXOx6rPfXoKGwO/WonbB4Gok2V5j
h9vCwTJG4LTVKWpmYu8q1yPx3Tuoh/rpzGd9NfdQapE3mqXlPHGV7dyzddRinxk8
0jXRDUJu42DY0lta06JDATEU3i0ABu/kMkV/gMlOIB4dOEN1Vza4JAo5YO2aT9UB
gyQCimsO0lgKwDj1KyDe0rveqxA7YQ+9izf32SgnttcANYDX2T1/YgIkYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGKNVYHbcRvBInOUCnSH/R8FkiOHMB8GA1UdIwQY
MBaAFOmqsURhAKj84D3xnXVeBjKe4kcTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmFxeFJHRUFxUHpnUGZHZGRWNEdNcDdpUnhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS83MWUwOWMtMjhmMy00ODI1LTgwNmYt
YTBkYzM1NGY0Y2EzLzEvNmFxeFJHRUFxUHpnUGZHZGRWNEdNcDdpUnhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS83MWUwOWMtMjhmMy00ODI1LTgwNmYtYTBkYzM1NGY0Y2Ez
LzEvNmFxeFJHRUFxUHpnUGZHZGRWNEdNcDdpUnhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdCSPm3ZR
yZr6zaic9Jql8DoOW7supgvn3E4Gth6cLIireNaJBOm3CrBPb+EfHZ2i9ZDdyleF
a9Pm+wBbzgRESCfGPnPhjICQJRk66xn1tObItl3YhTSTLwrQCkHdh82jRu3fELCS
TgqLAFaT41CmQNLImEuo1kZsotTGxBhgd1VlUFrYdFWcyjOjxIh9AWuf7CnNIFVl
0aDhenPjMXjXDLGymF08MXtKHXpnWwoKcW6/xdIYzlfmGeE51iF+cr397aMNNRY0
DWtyFhxxwhRli5mbpFNVGKLizeO3XAX5zzRixTVMXK2MU25V0SexlW7k8PgYRpP2
GAwgI1BeO2Zd5A==
-----END CERTIFICATE-----
Generated at Sat Sep 5 02:25:38 2026 by rpki-client