
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft
File: 6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft (raw, json)
Hash identifier: sAigB4ILE5hg/C8ozCQuSM2S7XjzCSj6hpX6NvZDTPE=
Subject key identifier: 3D:A7:2B:07:A1:46:1A:80:53:F4:7C:BD:D0:76:95:33:C9:83:28:7D
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 01A17C5FB780641651DF210158AD37CE5092
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft
Manifest number: 1AEB
Signing time: Tue 27 Oct 2026 08:00:09 +0000
Manifest this update: Tue 27 Oct 2026 08:00:09 +0000
Manifest next update: Wed 28 Oct 2026 08:00:09 +0000
Files and hashes: 1: 3QvNaBTxs1PjLqnE1VOIhI45V7c.roa (hash: WFmXAUAeTAg/52UhkkFJsciHEc280mGsBIoSVtzTk+c=)
2: 5ERvaJCjijofjZEEyshS2DN7G8w.roa (hash: L0qBBv8W1SeaQxwY+yM3qe9nhTQXTw1BhXzcHvSUW8A=)
3: 6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl (hash: qKK4kOvr6qB5fq9d659Kc46Bwt73WU8vrObT3Vq5bk0=)
4: 9FTrqsCyEAUkh4YPrtnvXY_X4l0.roa (hash: NsC3+Fupa1mo3BaWG6ctFYcneaqQ6slJ0dPljJ/QMXI=)
5: 9aKkqtdGa1ABukMG_yLakFtZfm8.roa (hash: KrI6Pr1fZmvsqfb7nSDh5Zvb9gr8g8QjzGikzHidhBA=)
6: Ewp2ty2AesH2Jd9VIJPXFtxGGxY.roa (hash: ZxzzP3F2j7XnslqpQi6FYUYx4xkKMdzCPqasRFAy5H4=)
7: Kg1pxmiChPV6fz5fVLcqDVZPGVA.roa (hash: SRNE2+sx9FNGp2a8VnJm35Y0pORouHxk0y7BXf1WH74=)
8: LD-3cK94EujojZ7ZiN9ZmU7leBA.roa (hash: cS7YGfmXGTnX+pBKgNWgV7kZw2s1r4jfbn1oYwmWhSE=)
9: LDB6M5jKAUAX0pW_Ow6Al3r3TVc.roa (hash: 0871MmeimwA3qa6fuNCLnFf75uwna79ZP/U6WsupA/A=)
10: N9SJly_iVwmkDpbj9fIuOkPtA8E.roa (hash: OOmuPWfaQlIoeFuc06EF+wS2RKHaEW6adcFSP2176rs=)
11: QwRlOQcYxSvdN2FJpOpcXHAZE5I.roa (hash: JFqMAVJTjeNtNUVkPs0ekqTe1vs1PCY+bp6cGNGb31A=)
12: RVyoE2mNMNeL3FMAr2YC6ZIeUpc.roa (hash: Mpj7iy2/6clWPzb2aVRARaYOeEI5SbFcnwOqd9+kHL4=)
13: Sjw15gl8TsiPxYWGxwle5yVmVpI.roa (hash: KyfTMSv87/ffxlDqBdVXEjJETz4cQjnD5+jWHw/lzng=)
14: SvEm-yXVhiOKZ90phjAW_AA8ALc.roa (hash: 7Oq7qPwBODUfGC8UgiLRJC3+bMOGG/2kfdhFT0x3Ngw=)
15: UOozdgMWkk0RJwT79mq5mSwdurM.roa (hash: fJ4sYv6ZeyusyQL5urhnyr1YZ9IQ2Da9R2oWQOCYu0A=)
16: W80Mf4_ivkezZ0bshb3ksFAV6PY.roa (hash: GvDsjIe4MFxa+3NX/qnfQlgFppPBUAANoYbReZaXdUk=)
17: aWg21xYS3AUVunbtCCZYY0IE-qA.roa (hash: FfCb8eVmyUDpcRLrhqbLVf0Nu60pvL/vFuk4kk28e1o=)
18: dNvl41gDXbZfsDZ9RFpBvP6cYow.roa (hash: NaucFK+oQglGEexzweska9RmpWnDV2Wpe/l4R51xpK0=)
19: eToy7Dy86gp6pNPMymfDqa4MdTI.roa (hash: dTIlaV1AqccCy+1JNiT8jHC2RbOVH0ledpyPTc9PFZo=)
20: gb92OyPtFV8ggf63vEi-KCDdf-s.roa (hash: +rhI/ux5CfxH5KWi60cOU2i3sB6AO/30yOzY/E/1xts=)
21: hQ2GFL3dnEKzJSAPLs1axACh1nE.roa (hash: XfsYyUXshVaU5kesRq6m5zdn9J6jCqEigoDtxpwvnck=)
22: iHwdh7RQbqHYXi1tV5PT6-9KMZc.roa (hash: Vt5thfBB9WwucwEL2pJBtrKMfJA6iF3TBVYycl0yvI0=)
23: m5mX7hMQbCWq-GlbxcSu3T6pYEk.roa (hash: iTzlGtzNibw71SECgWWAtWLsGGjMg9WIxNFV2xfi6y4=)
24: mdu1Exn0vcwhf2D-oUz3A06rLz0.roa (hash: dkzkWhkhgt5FRBH7GshJAC2Twq+nZCCBlUCXlmzP+Ks=)
25: nVYscJl5lSrsIHBCJc12P0YYc1I.roa (hash: Qaq790oVJnBvnSmkP1Q9R1yIhbQhRqgrmHzuuPyL64c=)
26: quu8bKvWsrapvb9agdJWOzx8vCU.roa (hash: GuhXE2SWFgsGNwW07uZU74XAQZgfH3lzNUDa1zFBJKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:5f:b7:80:64:16:51:df:21:01:58:ad:37:ce:50:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Oct 27 08:00:09 2026 GMT
Not After : Oct 28 08:00:09 2026 GMT
Subject: CN=3da72b07a1461a8053f47cbdd0769533c983287d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fe:d1:1b:7a:f8:fb:10:08:df:df:1a:92:8c:
ec:de:c0:50:8a:66:e0:97:14:d5:42:50:df:ff:2a:
75:ec:c2:3b:e0:16:38:22:10:01:76:d1:c1:d0:74:
83:79:55:17:30:f7:a7:55:f7:3b:7d:15:99:7c:b4:
b3:12:6a:8f:6f:be:c0:46:84:12:11:d9:db:55:52:
ad:e9:04:9b:cd:da:0d:a3:c4:36:b7:51:6a:54:95:
23:ed:45:ad:2b:61:22:a9:45:31:8c:a7:e5:b6:47:
92:bc:71:12:02:df:40:4e:e7:66:27:97:31:dc:03:
48:5f:d6:8a:69:8e:f0:0d:5b:a0:66:e2:43:6a:80:
04:51:0d:15:14:00:4d:f4:ec:c4:54:8e:75:13:d3:
59:f5:37:14:20:2b:f1:d8:e7:30:ec:cd:b5:f0:92:
1b:15:c7:e3:f8:43:da:53:0f:f2:8b:20:60:56:5c:
bc:b9:40:90:d2:35:e5:7f:67:3c:21:51:6b:61:03:
59:18:c8:64:29:bd:a5:ab:69:71:11:72:37:2c:da:
e3:8c:be:3b:70:73:4f:c6:d1:bb:19:c6:4c:8b:60:
a4:65:6d:cb:69:8f:24:29:26:27:39:31:78:03:81:
0d:65:31:e5:7a:e2:ff:1f:92:9a:53:88:d0:87:8d:
b0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A7:2B:07:A1:46:1A:80:53:F4:7C:BD:D0:76:95:33:C9:83:28:7D
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:06:d3:7a:13:23:ff:d1:b5:0c:69:59:c9:8a:09:38:a3:7f:
a8:ee:31:be:08:ba:ac:68:9b:81:af:c9:8a:54:ed:22:fa:6a:
d6:c2:bb:75:74:1e:dc:3c:e5:53:58:d4:1a:30:fb:db:d0:ff:
9e:a2:e9:39:00:d5:a4:63:89:ea:91:55:f5:d8:8b:f4:d8:ea:
e1:29:70:64:e8:43:cc:86:7a:38:2a:43:f1:cb:98:ee:71:b4:
8e:78:bf:ec:af:94:c4:dd:6c:a2:1f:3e:ae:54:39:d2:be:eb:
f2:b4:e2:98:d4:9c:c4:fe:4d:fb:01:3a:86:0b:1d:24:f5:bd:
2c:9a:97:5f:17:66:d6:1c:c5:ce:22:a8:ec:2e:a1:48:0c:7d:
d3:67:85:46:9a:b1:eb:88:97:f2:78:6c:20:3c:2b:62:c3:f8:
f5:72:8a:cc:ad:29:ec:14:3e:d7:93:99:fc:4d:b3:d2:5d:ce:
19:04:f0:a8:2e:99:41:aa:e6:33:6f:18:ab:2a:1d:10:4d:19:
5c:00:86:3d:b4:fe:58:be:65:ab:55:64:b5:08:9a:1d:31:3e:
31:d5:ef:6c:65:97:79:ab:a7:d1:cb:82:7f:45:5d:e4:49:49:
7f:69:fe:53:a8:c4:da:85:80:be:20:04:64:5c:84:9d:9d:b3:
df:a6:f0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:36:11 2026 by rpki-client