
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft
File: 6ocBJxa2bugiZCwvChuQFItceyk.mft (raw, json)
Hash identifier: vS6tWDBOjRntQqpcle7lBo3kvVgLvvock3Tzq5veNaI=
Subject key identifier: C3:8B:F3:32:9E:F1:C2:50:C7:1B:50:72:22:1A:04:F1:1C:9F:D3:B8
Authority key identifier: EA:87:01:27:16:B6:6E:E8:22:64:2C:2F:0A:1B:90:14:8B:5C:7B:29
Certificate issuer: /CN=ea87012716b66ee822642c2f0a1b90148b5c7b29
Certificate serial: 019CAD599B24F61CE1B49A2E80DA8E0B1DDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ocBJxa2bugiZCwvChuQFItceyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft
Manifest number: 0F96
Signing time: Mon 02 Mar 2026 07:00:56 +0000
Manifest this update: Mon 02 Mar 2026 07:00:56 +0000
Manifest next update: Tue 03 Mar 2026 07:00:56 +0000
Files and hashes: 1: 6ocBJxa2bugiZCwvChuQFItceyk.crl (hash: zBg8OxewctUtZK6xr8mZ6xqInilDhC+yD1SlBuRK8Rw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ocBJxa2bugiZCwvChuQFItceyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:9b:24:f6:1c:e1:b4:9a:2e:80:da:8e:0b:1d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea87012716b66ee822642c2f0a1b90148b5c7b29
Validity
Not Before: Mar 2 07:00:56 2026 GMT
Not After : Mar 3 07:00:56 2026 GMT
Subject: CN=c38bf3329ef1c250c71b5072221a04f11c9fd3b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c9:fe:15:13:25:66:c0:80:72:7a:2b:f8:dd:
aa:cb:74:eb:bf:10:47:77:87:0c:19:0d:e0:34:fe:
a1:87:b2:91:84:a6:5f:ee:b5:60:7e:c1:01:b6:32:
62:e7:e9:23:83:53:71:4f:61:06:29:e9:cd:16:62:
f5:55:b3:d9:50:eb:81:31:7c:4f:23:95:41:01:d5:
6f:56:5e:cf:1f:30:e9:87:4d:7e:2c:9e:7b:fb:53:
29:32:4b:ed:7c:c9:5d:f3:19:90:d8:77:bc:cd:1a:
78:87:b3:91:8d:5c:ea:7d:48:42:76:df:af:ba:3b:
b2:57:be:95:dd:61:f4:93:df:7c:f6:40:cf:83:8e:
83:19:6e:cb:75:57:41:9c:f3:e6:fa:4d:6c:e7:7f:
56:9b:bf:48:ec:2e:c3:e6:ee:3f:e4:25:11:da:c5:
dc:68:e8:bf:9c:0f:40:79:9f:2f:75:6d:41:db:11:
de:15:bf:ba:bf:12:c5:1e:c4:de:c7:ac:83:9b:47:
2f:af:28:f2:0a:f8:cf:80:10:2e:6a:86:73:09:4f:
9f:d4:a3:8c:c3:88:6f:c8:25:ed:5c:7c:39:b2:21:
c6:02:be:74:9a:ca:be:55:85:ee:94:6a:63:4c:ce:
57:ff:6d:bd:09:fa:47:87:53:70:ee:d5:38:a8:f7:
8e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:8B:F3:32:9E:F1:C2:50:C7:1B:50:72:22:1A:04:F1:1C:9F:D3:B8
X509v3 Authority Key Identifier:
keyid:EA:87:01:27:16:B6:6E:E8:22:64:2C:2F:0A:1B:90:14:8B:5C:7B:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ocBJxa2bugiZCwvChuQFItceyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:fc:55:4d:70:f2:1d:62:49:b6:47:00:ef:16:eb:ee:a8:b8:
72:3c:73:55:3c:86:fb:f5:f3:97:4f:a7:eb:ef:d6:8e:ef:b6:
67:80:9b:7e:0c:3b:70:b2:9b:44:77:98:f0:43:6a:4b:b1:e3:
12:2e:57:88:62:4c:3c:ab:d6:a5:d2:08:64:c5:c7:ed:85:0e:
22:92:d0:dd:1d:21:65:8d:a2:a4:06:14:ed:86:d4:1c:bf:d1:
f4:a6:ed:96:6a:08:34:40:24:3f:2c:d0:93:e8:5b:0d:b4:57:
f4:2e:b0:e1:14:b5:b3:1b:42:97:4c:4a:90:e4:63:0f:de:3f:
09:42:95:fa:fa:31:3b:99:cd:ca:d8:2a:60:14:fb:a4:bb:6f:
d3:b5:77:4b:bd:41:84:f4:d8:6a:99:e2:20:85:d1:06:bb:d8:
b3:6d:1e:db:dd:47:07:e4:0c:ec:1e:66:ba:ce:59:fc:72:89:
88:9f:85:64:f9:93:f5:4b:25:e3:35:ff:c4:25:38:25:f5:b8:
05:74:e2:f9:87:49:0f:ff:a1:ac:b4:a3:2a:0f:01:9d:4b:6a:
74:84:8f:84:15:48:1f:f9:d2:1f:9a:b6:ee:1d:af:c3:02:13:
77:0a:a6:46:96:a4:9b:9c:1b:9f:01:16:8b:66:d3:8c:b4:ef:
7f:a4:21:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWZsk9hzhtJougNqOCx3dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhODcwMTI3MTZiNjZlZTgyMjY0MmMyZjBhMWI5MDE0OGI1
YzdiMjkwHhcNMjYwMzAyMDcwMDU2WhcNMjYwMzAzMDcwMDU2WjAzMTEwLwYDVQQD
EyhjMzhiZjMzMjllZjFjMjUwYzcxYjUwNzIyMjFhMDRmMTFjOWZkM2I4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsn+FRMlZsCAcnor+N2qy3TrvxBH
d4cMGQ3gNP6hh7KRhKZf7rVgfsEBtjJi5+kjg1NxT2EGKenNFmL1VbPZUOuBMXxP
I5VBAdVvVl7PHzDph01+LJ57+1MpMkvtfMld8xmQ2He8zRp4h7ORjVzqfUhCdt+v
ujuyV76V3WH0k9989kDPg46DGW7LdVdBnPPm+k1s539Wm79I7C7D5u4/5CUR2sXc
aOi/nA9AeZ8vdW1B2xHeFb+6vxLFHsTex6yDm0cvryjyCvjPgBAuaoZzCU+f1KOM
w4hvyCXtXHw5siHGAr50msq+VYXulGpjTM5X/229CfpHh1Nw7tU4qPeOOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMOL8zKe8cJQxxtQciIaBPEcn9O4MB8GA1UdIwQY
MBaAFOqHAScWtm7oImQsLwobkBSLXHspMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNm9jQkp4YTJidWdpWkN3dkNodVFGSXRjZXlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS83MjlmY2QtNzA0Yi00MDgxLThkMjUt
YzlmZjFlZTZhZDk1LzEvNm9jQkp4YTJidWdpWkN3dkNodVFGSXRjZXlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS83MjlmY2QtNzA0Yi00MDgxLThkMjUtYzlmZjFlZTZhZDk1
LzEvNm9jQkp4YTJidWdpWkN3dkNodVFGSXRjZXlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo/xVTXDy
HWJJtkcA7xbr7qi4cjxzVTyG+/Xzl0+n6+/Wju+2Z4Cbfgw7cLKbRHeY8ENqS7Hj
Ei5XiGJMPKvWpdIIZMXH7YUOIpLQ3R0hZY2ipAYU7YbUHL/R9KbtlmoINEAkPyzQ
k+hbDbRX9C6w4RS1sxtCl0xKkORjD94/CUKV+voxO5nNytgqYBT7pLtv07V3S71B
hPTYapniIIXRBrvYs20e291HB+QM7B5mus5Z/HKJiJ+FZPmT9Usl4zX/xCU4JfW4
BXTi+YdJD/+hrLSjKg8BnUtqdISPhBVIH/nSH5q27h2vwwITdwqmRpakm5wbnwEW
i2bTjLTvf6QhbA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:02:54 2026 by rpki-client