Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft
File: 6ocBJxa2bugiZCwvChuQFItceyk.mft (raw, json)
Hash identifier: Pb/FdzERRyRlmhSAbvoajT3lywsKQ86dP+Hsx6kXVBY=
Subject key identifier: A5:AF:F8:AF:75:4F:7C:EC:6E:39:62:4A:53:25:81:D9:42:71:99:AA
Authority key identifier: EA:87:01:27:16:B6:6E:E8:22:64:2C:2F:0A:1B:90:14:8B:5C:7B:29
Certificate issuer: /CN=ea87012716b66ee822642c2f0a1b90148b5c7b29
Certificate serial: 019D992B26297019548E20A0C9465C425DB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ocBJxa2bugiZCwvChuQFItceyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft
Manifest number: 1011
Signing time: Fri 17 Apr 2026 02:00:34 +0000
Manifest this update: Fri 17 Apr 2026 02:00:34 +0000
Manifest next update: Sat 18 Apr 2026 02:00:34 +0000
Files and hashes: 1: 6ocBJxa2bugiZCwvChuQFItceyk.crl (hash: 3itdgz6TpkIgNI4VDRJQ42Hy6tli+MmAhxq1J5JHMSY=)
2: e1xA0qhf12TewPpcKPwlaOmYujs.roa (hash: pWg+B28ely4ojEbsJr2wJT+gJj9a3mD2eiLdX2BcKiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ocBJxa2bugiZCwvChuQFItceyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:26:29:70:19:54:8e:20:a0:c9:46:5c:42:5d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea87012716b66ee822642c2f0a1b90148b5c7b29
Validity
Not Before: Apr 17 02:00:34 2026 GMT
Not After : Apr 18 02:00:34 2026 GMT
Subject: CN=a5aff8af754f7cec6e39624a532581d9427199aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:85:dd:eb:7f:71:2b:7e:38:54:e0:c5:a4:51:
b0:67:6a:a5:ad:3f:da:a4:ce:30:79:e9:23:25:a2:
40:02:a5:ba:86:59:73:fe:95:f4:b7:ba:74:e3:8e:
69:7e:1b:22:a4:b9:25:b7:06:64:10:a7:45:1b:07:
db:0a:59:15:9c:4b:c3:9f:32:6b:b1:3a:68:9b:bf:
2a:36:9b:24:25:0a:11:98:02:3f:6b:ef:38:b5:b6:
c2:9c:6b:a0:49:2a:b5:07:49:08:53:4e:a1:a1:fb:
c3:c8:4e:d7:38:e0:63:98:21:6e:11:e8:62:36:61:
aa:2c:7d:77:5c:5a:ff:c2:55:82:ed:24:3c:c6:30:
e3:c0:0a:c7:e0:06:51:20:0b:80:00:fa:b6:a5:f9:
47:7b:b7:a4:80:79:57:ec:57:26:5d:f0:48:d4:0a:
4b:4d:c2:fc:04:b4:f5:2f:ff:27:1c:a4:09:8c:7c:
51:b8:83:db:c7:02:86:2d:82:45:4b:a9:7b:70:0c:
5d:dc:8d:ec:d1:65:87:fc:db:21:c6:04:09:f5:8e:
25:10:0b:2a:3b:25:96:62:8a:17:84:fe:79:ca:9e:
a4:b1:51:42:00:ef:06:b8:4f:a9:35:61:d1:f9:0e:
2d:55:0b:26:f7:f7:84:c9:83:db:b6:f7:44:24:06:
46:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:AF:F8:AF:75:4F:7C:EC:6E:39:62:4A:53:25:81:D9:42:71:99:AA
X509v3 Authority Key Identifier:
keyid:EA:87:01:27:16:B6:6E:E8:22:64:2C:2F:0A:1B:90:14:8B:5C:7B:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ocBJxa2bugiZCwvChuQFItceyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:16:5f:ec:44:e7:5f:a7:9d:8d:c2:28:0c:dd:5e:c8:77:ab:
3b:86:c0:23:67:6b:98:3e:0b:15:d5:07:88:41:ad:11:45:01:
5b:ba:9d:03:da:72:db:d7:1b:d1:fa:fb:70:0f:2a:c6:f5:1c:
61:bb:85:87:c0:7c:15:bd:a7:51:48:e9:39:8d:45:c5:55:f6:
0d:fc:54:1d:86:1f:03:3d:43:53:5b:c7:59:78:37:55:0a:0a:
87:69:21:c4:eb:ef:bc:18:e1:f6:97:14:30:66:d9:b3:ae:d7:
74:b1:ac:ae:e7:3d:79:b7:ce:3f:04:ba:0e:3f:81:9e:f3:a6:
1f:5a:ab:b6:0c:20:9c:e9:21:fa:8b:fc:ec:29:42:04:21:45:
98:73:0d:63:e3:13:8f:4b:53:b9:a1:e1:12:50:04:52:6b:18:
da:09:e9:66:1e:b1:71:21:cd:36:c5:03:06:4e:f6:35:16:90:
64:1b:af:22:f9:3f:c2:81:bf:d0:88:e8:b9:d4:58:10:82:52:
2b:d7:88:10:f8:a4:a1:ee:11:75:0d:28:f1:43:af:b7:78:66:
be:1f:0c:9a:97:3c:f5:ce:c3:85:72:33:e4:3b:72:79:ee:88:
27:20:d5:4e:1d:3f:4f:ab:19:ac:46:59:c7:6b:f4:f7:63:ef:
9e:d7:fa:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZKyYpcBlUjiCgyUZcQl21MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhODcwMTI3MTZiNjZlZTgyMjY0MmMyZjBhMWI5MDE0OGI1
YzdiMjkwHhcNMjYwNDE3MDIwMDM0WhcNMjYwNDE4MDIwMDM0WjAzMTEwLwYDVQQD
EyhhNWFmZjhhZjc1NGY3Y2VjNmUzOTYyNGE1MzI1ODFkOTQyNzE5OWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIXd639xK344VODFpFGwZ2qlrT/a
pM4weekjJaJAAqW6hllz/pX0t7p0445pfhsipLkltwZkEKdFGwfbClkVnEvDnzJr
sTpom78qNpskJQoRmAI/a+84tbbCnGugSSq1B0kIU06hofvDyE7XOOBjmCFuEehi
NmGqLH13XFr/wlWC7SQ8xjDjwArH4AZRIAuAAPq2pflHe7ekgHlX7FcmXfBI1ApL
TcL8BLT1L/8nHKQJjHxRuIPbxwKGLYJFS6l7cAxd3I3s0WWH/NshxgQJ9Y4lEAsq
OyWWYooXhP55yp6ksVFCAO8GuE+pNWHR+Q4tVQsm9/eEyYPbtvdEJAZGfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKWv+K91T3zsbjliSlMlgdlCcZmqMB8GA1UdIwQY
MBaAFOqHAScWtm7oImQsLwobkBSLXHspMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNm9jQkp4YTJidWdpWkN3dkNodVFGSXRjZXlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS83MjlmY2QtNzA0Yi00MDgxLThkMjUt
YzlmZjFlZTZhZDk1LzEvNm9jQkp4YTJidWdpWkN3dkNodVFGSXRjZXlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS83MjlmY2QtNzA0Yi00MDgxLThkMjUtYzlmZjFlZTZhZDk1
LzEvNm9jQkp4YTJidWdpWkN3dkNodVFGSXRjZXlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHRZf7ETn
X6edjcIoDN1eyHerO4bAI2drmD4LFdUHiEGtEUUBW7qdA9py29cb0fr7cA8qxvUc
YbuFh8B8Fb2nUUjpOY1FxVX2DfxUHYYfAz1DU1vHWXg3VQoKh2khxOvvvBjh9pcU
MGbZs67XdLGsruc9ebfOPwS6Dj+BnvOmH1qrtgwgnOkh+ov87ClCBCFFmHMNY+MT
j0tTuaHhElAEUmsY2gnpZh6xcSHNNsUDBk72NRaQZBuvIvk/woG/0IjoudRYEIJS
K9eIEPikoe4RdQ0o8UOvt3hmvh8Mmpc89c7DhXIz5Dtyee6IJyDVTh0/T6sZrEZZ
x2v092Pvntf6Sw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:57:08 2026 by rpki-client