Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
File: 6ogLzDAqXbosNRpv054KizkipTU.mft (raw, json)
Hash identifier: n+LJTR3NSJ5+DoDgDPiNT9O1+faFRQjSUhubHtIDTkI=
Subject key identifier: 0F:2C:AD:3E:19:25:DA:12:97:19:83:EA:84:FB:24:D3:AC:84:D6:60
Authority key identifier: EA:88:0B:CC:30:2A:5D:BA:2C:35:1A:6F:D3:9E:0A:8B:39:22:A5:35
Certificate issuer: /CN=ea880bcc302a5dba2c351a6fd39e0a8b3922a535
Certificate serial: 01A0C77CDB7E55748E28BD79ACB59B2B2EF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
Manifest number: 0AD2
Signing time: Tue 22 Sep 2026 05:00:43 +0000
Manifest this update: Tue 22 Sep 2026 05:00:43 +0000
Manifest next update: Wed 23 Sep 2026 05:00:43 +0000
Files and hashes: 1: 6ogLzDAqXbosNRpv054KizkipTU.crl (hash: TUZHaMoah+53HtMB+iRD/JQkYy+oZpAYy/ef3Y4HX6k=)
2: PPUFqBGUCmFmWCrlXoGH2AYfPuA.roa (hash: L84g/xVBfxnI/AptpcgCwWfGsHlR8ZydiW8GLseCEig=)
3: lBNCxSrIMwGF7q55Faffo34PzIE.roa (hash: n9g3kmorGo6N42lTsebPz6v4VTR7WxY6co0/3tPw7b4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:7c:db:7e:55:74:8e:28:bd:79:ac:b5:9b:2b:2e:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea880bcc302a5dba2c351a6fd39e0a8b3922a535
Validity
Not Before: Sep 22 05:00:43 2026 GMT
Not After : Sep 23 05:00:43 2026 GMT
Subject: CN=0f2cad3e1925da12971983ea84fb24d3ac84d660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:42:f1:ce:56:b2:91:c1:69:50:22:2c:1a:f7:
d1:5a:92:70:78:8a:43:cf:0e:53:f7:00:98:5d:f2:
cd:0b:3d:4a:e7:05:aa:5b:ef:eb:81:38:91:c0:e1:
12:02:81:87:70:c0:b4:0a:dd:3e:3d:df:ff:aa:57:
35:a2:d0:18:c9:c9:49:e8:2d:76:ff:64:af:82:8b:
70:a4:40:6d:1e:c6:38:3d:0b:a1:cb:0b:05:a2:04:
c1:06:b0:59:9d:bf:3a:7d:e6:c2:83:da:3d:7b:a8:
2b:2f:5a:02:21:a3:a5:93:45:43:03:ba:0d:55:c4:
84:ce:fb:73:8a:7c:4d:e2:e1:41:09:3e:63:98:0a:
11:81:1f:11:26:78:2b:6d:8a:ab:d0:ce:9d:5f:10:
b1:e8:da:49:b2:91:84:4d:6f:60:b3:be:a9:1a:cc:
26:3e:bb:a4:46:5f:3c:4f:3d:32:0b:fd:51:0b:7f:
9a:a5:b4:7d:be:70:8f:ee:3c:3e:4d:1b:48:bb:48:
87:19:66:eb:1a:50:1b:54:a6:bd:43:03:65:1d:c2:
b9:be:65:74:cc:7f:85:77:d5:63:4f:83:78:df:2b:
7a:1a:13:e7:00:2f:4b:8c:b0:e1:fc:b7:23:0a:2f:
03:c8:ce:43:7e:aa:45:38:6b:66:f1:c4:53:ef:3b:
6f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:2C:AD:3E:19:25:DA:12:97:19:83:EA:84:FB:24:D3:AC:84:D6:60
X509v3 Authority Key Identifier:
keyid:EA:88:0B:CC:30:2A:5D:BA:2C:35:1A:6F:D3:9E:0A:8B:39:22:A5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:61:37:5a:95:15:59:a0:7e:c4:84:b0:cb:1c:11:5f:70:0e:
bd:ac:15:00:28:5a:0d:61:5d:c8:6a:c7:32:6a:80:59:c8:09:
39:8c:6b:9d:40:9e:1e:69:38:7c:ca:33:4d:06:91:f3:6c:58:
ab:3d:8d:6f:62:fd:06:4b:e3:0b:e1:ec:54:23:4b:3a:b7:9f:
00:ae:34:42:e4:0a:1f:c4:03:e8:96:58:62:b2:6f:15:1e:7b:
cb:15:fb:3d:79:94:92:aa:4b:f4:e8:e2:af:bb:c6:c1:64:d3:
3a:c5:ef:75:09:86:e0:da:92:dd:e7:cc:cd:c7:9d:09:47:97:
3f:c3:e4:cd:e1:e8:05:ed:75:53:e6:6b:56:9e:3a:14:3c:0c:
69:87:07:e9:c6:a0:86:cf:87:27:18:07:be:36:11:6d:bf:f5:
ba:15:ae:a4:be:9f:a5:c7:59:f0:5c:c7:2e:a4:58:66:65:7e:
10:eb:03:bd:38:89:f1:81:74:58:89:ec:fe:14:13:97:93:cb:
df:a6:bc:83:1d:dc:3f:0e:1e:ec:5b:6d:15:03:b7:5d:cc:43:
3a:91:63:40:65:bf:af:35:7c:cd:17:d0:c9:61:69:85:9e:c6:
03:4b:b6:e3:a2:09:82:47:89:a0:33:6f:59:e2:39:a3:e7:87:
4b:20:3c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:02:30 2026 by rpki-client