Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.mft
File: 6zlyC79FBhEPkD017RJJvUkeqLs.mft (raw, json)
Hash identifier: q5BuKB131BI1XevnjYee7LqIpnbAvNu6zc+yTVbeyx0=
Subject key identifier: A6:A8:4B:87:B3:D6:07:7E:55:CF:5C:AD:BE:BD:CF:90:FF:AA:D4:BC
Authority key identifier: EB:39:72:0B:BF:45:06:11:0F:90:3D:35:ED:12:49:BD:49:1E:A8:BB
Certificate issuer: /CN=eb39720bbf4506110f903d35ed1249bd491ea8bb
Certificate serial: 01A178BA593CE1439D5C11297D2EF8F4557E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zlyC79FBhEPkD017RJJvUkeqLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.mft
Manifest number: 027B
Signing time: Mon 26 Oct 2026 15:00:40 +0000
Manifest this update: Mon 26 Oct 2026 15:00:40 +0000
Manifest next update: Tue 27 Oct 2026 15:00:40 +0000
Files and hashes: 1: 03p-Qz6XRyJNNeVn4ckBquqSilU.roa (hash: ysNzZw8fmnL30nJOwCbMlcySw0Zqlls7bKqqA6kBPb4=)
2: 6zlyC79FBhEPkD017RJJvUkeqLs.crl (hash: HoU1ldOUd9KLRO3fUQ0dsqv2hZSu28IJPdLU0BKeQDA=)
3: mAUXHWg9xwo5F85IXm5SVffTuuA.roa (hash: GCJWVxe5b23c6JrLrMVtSOWuGjfgn1uA/TJ0/8z7eXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zlyC79FBhEPkD017RJJvUkeqLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:ba:59:3c:e1:43:9d:5c:11:29:7d:2e:f8:f4:55:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb39720bbf4506110f903d35ed1249bd491ea8bb
Validity
Not Before: Oct 26 15:00:40 2026 GMT
Not After : Oct 27 15:00:40 2026 GMT
Subject: CN=a6a84b87b3d6077e55cf5cadbebdcf90ffaad4bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0f:4d:0b:28:e4:6d:ae:3c:2e:c6:23:5b:34:
fc:b0:c0:13:81:d8:ed:f0:a9:4f:75:28:a5:55:72:
c4:e6:fb:f4:64:d4:2a:9d:09:ff:e8:c5:d4:07:a8:
76:79:0d:95:93:21:d7:38:a3:3f:4d:03:57:f1:51:
d8:8f:8d:1b:ee:a3:22:c1:09:43:fb:3b:2f:fe:14:
0f:81:36:a9:76:a2:22:9b:22:ae:c0:02:19:3d:be:
dc:05:e9:3b:b9:55:78:a3:49:32:aa:81:de:73:5f:
a6:b0:98:97:13:3f:6c:58:32:24:66:bf:83:90:60:
3b:e5:66:5b:fe:36:36:c9:4e:01:52:70:cc:7f:cb:
89:d8:79:86:35:54:b2:ec:c1:9b:99:09:ec:23:2a:
d6:78:ea:a2:b7:8c:d6:cf:14:26:d0:eb:c4:e3:e2:
bb:79:55:05:14:2d:ea:ec:78:9e:54:b4:1f:82:27:
fb:1b:8c:92:86:22:9e:3e:29:70:e4:53:f4:45:2f:
7d:b0:5d:4e:15:7e:5c:1f:33:1a:44:ea:66:4e:8c:
2d:d1:6c:f0:de:9a:dc:56:f3:e8:6e:8d:55:4f:7d:
d4:b2:7c:17:a5:4a:88:c1:91:90:d9:39:8d:09:c4:
72:76:16:9f:bd:b7:1a:78:5b:5f:bc:42:70:6d:fa:
8f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A8:4B:87:B3:D6:07:7E:55:CF:5C:AD:BE:BD:CF:90:FF:AA:D4:BC
X509v3 Authority Key Identifier:
keyid:EB:39:72:0B:BF:45:06:11:0F:90:3D:35:ED:12:49:BD:49:1E:A8:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zlyC79FBhEPkD017RJJvUkeqLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ea:f3:77:2b:5d:c1:ee:7d:c4:bf:1d:54:b9:cf:e8:53:83:
51:e7:32:77:6f:ec:34:4f:ed:ee:d0:4a:55:d6:6e:c6:bf:b6:
3c:f9:b1:94:ec:6a:b0:8f:33:c2:9b:2e:c1:7d:a7:17:87:62:
84:5e:54:fa:c3:62:b4:0d:1d:59:3a:be:d7:e7:21:0f:d6:9b:
21:f1:ca:c3:3d:0c:a8:6f:01:66:90:87:a7:be:47:d9:d4:65:
d4:c1:4f:9e:5e:50:db:22:83:7b:7a:35:07:76:91:3d:03:ae:
47:1f:8d:d7:15:52:29:0e:24:1d:c8:05:74:16:ff:a0:19:7f:
8f:73:ef:fc:b4:6a:7a:45:cb:7b:c4:11:9c:a9:13:ae:98:27:
18:0b:75:cc:86:2e:29:92:24:3d:63:26:06:61:df:c3:c2:67:
03:f7:79:8e:7f:d9:38:3d:5c:3a:b1:b7:08:7e:70:1a:c8:a4:
7e:21:56:fe:f3:85:ae:1b:05:7d:9e:0e:bb:f5:00:8e:51:7b:
0b:0e:ee:ec:52:8a:7f:aa:8b:b1:62:5f:c4:f1:a9:27:e6:5d:
f4:1e:fc:6f:ce:ff:c2:25:43:a7:05:64:fc:dc:e2:12:1e:ee:
50:e9:a8:a8:75:c4:eb:c9:d8:b1:34:0a:55:8c:69:3a:b2:8a:
75:e3:3a:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF4ulk84UOdXBEpfS749FV+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViMzk3MjBiYmY0NTA2MTEwZjkwM2QzNWVkMTI0OWJkNDkx
ZWE4YmIwHhcNMjYxMDI2MTUwMDQwWhcNMjYxMDI3MTUwMDQwWjAzMTEwLwYDVQQD
EyhhNmE4NGI4N2IzZDYwNzdlNTVjZjVjYWRiZWJkY2Y5MGZmYWFkNGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQ9NCyjkba48LsYjWzT8sMATgdjt
8KlPdSilVXLE5vv0ZNQqnQn/6MXUB6h2eQ2VkyHXOKM/TQNX8VHYj40b7qMiwQlD
+zsv/hQPgTapdqIimyKuwAIZPb7cBek7uVV4o0kyqoHec1+msJiXEz9sWDIkZr+D
kGA75WZb/jY2yU4BUnDMf8uJ2HmGNVSy7MGbmQnsIyrWeOqit4zWzxQm0OvE4+K7
eVUFFC3q7HieVLQfgif7G4yShiKePilw5FP0RS99sF1OFX5cHzMaROpmTowt0Wzw
3prcVvPobo1VT33UsnwXpUqIwZGQ2TmNCcRydhafvbcaeFtfvEJwbfqP9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKaoS4ez1gd+Vc9crb69z5D/qtS8MB8GA1UdIwQY
MBaAFOs5cgu/RQYRD5A9Ne0SSb1JHqi7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnpseUM3OUZCaEVQa0QwMTdSSkp2VWtlcUxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC80YWZlZTYtZDJkOS00ZTk2LThmMjMt
Yjg4N2UzMjIyMjllLzEvNnpseUM3OUZCaEVQa0QwMTdSSkp2VWtlcUxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC80YWZlZTYtZDJkOS00ZTk2LThmMjMtYjg4N2UzMjIyMjll
LzEvNnpseUM3OUZCaEVQa0QwMTdSSkp2VWtlcUxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAderzdytd
we59xL8dVLnP6FODUecyd2/sNE/t7tBKVdZuxr+2PPmxlOxqsI8zwpsuwX2nF4di
hF5U+sNitA0dWTq+1+chD9abIfHKwz0MqG8BZpCHp75H2dRl1MFPnl5Q2yKDe3o1
B3aRPQOuRx+N1xVSKQ4kHcgFdBb/oBl/j3Pv/LRqekXLe8QRnKkTrpgnGAt1zIYu
KZIkPWMmBmHfw8JnA/d5jn/ZOD1cOrG3CH5wGsikfiFW/vOFrhsFfZ4Ou/UAjlF7
Cw7u7FKKf6qLsWJfxPGpJ+Zd9B78b87/wiVDpwVk/NziEh7uUOmoqHXE68nYsTQK
VYxpOrKKdeM6XA==
-----END CERTIFICATE-----
Generated at Mon Oct 26 20:55:56 2026 by rpki-client