Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
File: 6ogLzDAqXbosNRpv054KizkipTU.mft (raw, json)
Hash identifier: T4XpjSLvihbSxpVaTwj9Cv1eoIjhOeM82XpHezghtBY=
Subject key identifier: 25:6F:F8:0B:CF:6F:EA:6A:D8:B1:C9:7C:05:A2:52:E6:06:5D:3E:46
Authority key identifier: EA:88:0B:CC:30:2A:5D:BA:2C:35:1A:6F:D3:9E:0A:8B:39:22:A5:35
Certificate issuer: /CN=ea880bcc302a5dba2c351a6fd39e0a8b3922a535
Certificate serial: 019FA9AC10B22466270B14F237A1856C518B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
Manifest number: 0A3E
Signing time: Tue 28 Jul 2026 17:00:53 +0000
Manifest this update: Tue 28 Jul 2026 17:00:53 +0000
Manifest next update: Wed 29 Jul 2026 17:00:53 +0000
Files and hashes: 1: 6ogLzDAqXbosNRpv054KizkipTU.crl (hash: zpnbgyraFS0rCeL6M6Gd9cBTcuhm0F2roVtzloIfxHY=)
2: PPUFqBGUCmFmWCrlXoGH2AYfPuA.roa (hash: L84g/xVBfxnI/AptpcgCwWfGsHlR8ZydiW8GLseCEig=)
3: lBNCxSrIMwGF7q55Faffo34PzIE.roa (hash: n9g3kmorGo6N42lTsebPz6v4VTR7WxY6co0/3tPw7b4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:10:b2:24:66:27:0b:14:f2:37:a1:85:6c:51:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea880bcc302a5dba2c351a6fd39e0a8b3922a535
Validity
Not Before: Jul 28 17:00:53 2026 GMT
Not After : Jul 29 17:00:53 2026 GMT
Subject: CN=256ff80bcf6fea6ad8b1c97c05a252e6065d3e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:10:7d:5c:a3:d5:c2:88:41:52:06:09:0e:02:
6c:96:56:2b:5b:84:ea:d9:11:b2:76:12:32:5f:47:
c0:59:ce:8b:01:20:61:e7:b1:34:2c:99:6e:60:d7:
52:b3:89:5e:a8:8d:ea:73:96:e5:65:52:4a:dd:24:
2f:be:75:f3:45:62:d0:55:3f:d4:31:9e:2c:5a:e9:
00:de:5c:ab:56:db:29:d0:6c:26:18:28:ae:15:51:
fc:5a:7c:f9:45:87:82:67:50:ee:70:dd:e0:b5:b7:
9a:4f:45:aa:c3:19:c4:fe:2f:17:72:14:17:20:25:
aa:ff:58:17:fc:94:6e:93:fc:0a:df:82:39:99:0a:
1b:06:a8:09:94:a7:55:7e:ea:cd:80:84:7f:93:2a:
33:f9:13:c1:f0:5f:98:a8:71:7f:5f:a6:76:d1:46:
ff:3e:00:8a:17:94:c4:1e:fd:4f:f7:f6:9f:3b:1d:
3b:02:53:8f:c7:b4:60:5f:e5:85:66:8d:03:37:11:
ff:29:10:af:cf:e6:10:1d:5e:eb:f4:6f:ac:7e:c4:
e3:4d:de:b1:1d:17:4c:bb:76:a1:1b:ab:8e:64:16:
86:7c:48:15:25:a2:2f:da:87:19:d8:51:d7:60:21:
41:dd:1a:63:3b:6f:51:79:d3:82:63:32:44:b0:0a:
a0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:6F:F8:0B:CF:6F:EA:6A:D8:B1:C9:7C:05:A2:52:E6:06:5D:3E:46
X509v3 Authority Key Identifier:
keyid:EA:88:0B:CC:30:2A:5D:BA:2C:35:1A:6F:D3:9E:0A:8B:39:22:A5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:10:3d:53:8f:4b:c4:70:d8:e9:5e:76:87:ae:e8:54:b0:26:
e5:16:24:28:e7:ad:ca:a0:1d:ed:0a:3c:a8:b8:9b:79:3c:c3:
ce:d9:08:e2:2c:e1:53:95:5a:f3:59:11:4e:d8:76:00:8e:f6:
56:3c:97:d5:7d:0b:43:eb:d2:5e:ca:69:8c:2b:5d:51:11:c1:
ee:bf:ae:82:11:7f:e8:ee:b2:16:da:91:e1:1a:3c:41:2d:6b:
e2:95:ff:64:03:5f:5a:74:94:b5:e1:a0:b4:f0:4b:7b:23:07:
de:a1:06:4a:ac:8c:dd:08:85:98:35:61:06:21:88:3e:77:60:
2e:a3:0d:3c:6a:ba:d3:3a:ac:0f:b5:fd:9f:96:e6:29:0c:3f:
2f:93:6d:26:c2:df:2b:3e:66:3a:00:7d:6a:dc:e2:31:09:5c:
ef:4d:85:1e:f3:ad:f4:d1:f4:b2:d5:9c:c2:e8:f7:5a:b0:ae:
26:d5:f2:c7:de:51:d3:1d:72:be:d9:0e:6d:73:54:e7:6e:fb:
bd:33:80:0a:a0:8c:a0:67:b3:29:4c:ff:9d:54:cd:59:b0:c9:
e2:92:9a:4c:4e:dc:f2:12:af:ee:57:84:a4:3e:4c:be:da:8d:
2e:ae:71:86:ca:24:82:59:09:b8:0c:56:bf:f3:19:62:1f:66:
8c:de:6b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:41:12 2026 by rpki-client