Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
File: 6ogLzDAqXbosNRpv054KizkipTU.mft (raw, json)
Hash identifier: oh4xlsCZRHLWN+hMa5SHv4CCtNou6WRoanzMrYN6pQQ=
Subject key identifier: B2:10:0F:EA:8E:FB:8A:2C:82:F0:48:0B:65:FD:D7:A1:AB:3F:C8:58
Authority key identifier: EA:88:0B:CC:30:2A:5D:BA:2C:35:1A:6F:D3:9E:0A:8B:39:22:A5:35
Certificate issuer: /CN=ea880bcc302a5dba2c351a6fd39e0a8b3922a535
Certificate serial: 019D9A74F65241C0E3488C44F73CB04EDE92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
Manifest number: 092D
Signing time: Fri 17 Apr 2026 08:00:49 +0000
Manifest this update: Fri 17 Apr 2026 08:00:49 +0000
Manifest next update: Sat 18 Apr 2026 08:00:49 +0000
Files and hashes: 1: 6ogLzDAqXbosNRpv054KizkipTU.crl (hash: 0vQ6f2wVL+lB0dmGy9e72zIqjYTzIPBOsIwhPi7RJPg=)
2: PPUFqBGUCmFmWCrlXoGH2AYfPuA.roa (hash: L84g/xVBfxnI/AptpcgCwWfGsHlR8ZydiW8GLseCEig=)
3: lBNCxSrIMwGF7q55Faffo34PzIE.roa (hash: n9g3kmorGo6N42lTsebPz6v4VTR7WxY6co0/3tPw7b4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:f6:52:41:c0:e3:48:8c:44:f7:3c:b0:4e:de:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea880bcc302a5dba2c351a6fd39e0a8b3922a535
Validity
Not Before: Apr 17 08:00:49 2026 GMT
Not After : Apr 18 08:00:49 2026 GMT
Subject: CN=b2100fea8efb8a2c82f0480b65fdd7a1ab3fc858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:47:fa:b6:a0:17:8f:96:be:ef:0b:89:54:3e:
9b:78:6d:9b:58:e4:56:a5:fb:64:47:d7:07:5a:40:
fb:6a:0c:60:04:8e:f2:24:80:6c:73:67:16:f2:5a:
f6:c7:89:3e:cf:54:69:98:23:3b:f4:77:1f:74:e2:
58:49:43:cf:ee:c2:5a:81:a7:9c:c4:06:f9:b3:a6:
ff:bf:d2:2d:30:d6:b2:fe:3f:69:a6:67:20:cc:ba:
e1:f4:2e:37:54:35:73:14:ed:c6:84:0a:93:87:4f:
fb:5d:26:ae:23:a8:a5:c2:48:08:21:31:16:37:35:
34:c3:10:21:3b:85:0c:25:2c:33:c5:ee:2b:7e:be:
fe:eb:b0:9b:d9:93:3e:a4:bf:67:96:66:9b:d0:1f:
24:a3:74:7a:48:75:bb:f0:16:90:94:6e:36:40:1d:
df:8c:81:aa:52:b7:c9:31:67:ec:49:a1:dd:9c:01:
23:5b:e0:38:29:e5:71:7f:8d:57:d8:19:97:2e:06:
7a:b5:c2:f2:3f:0b:16:a5:6e:43:76:78:84:b8:d7:
22:21:de:02:ae:ea:9e:81:0f:08:67:2a:f7:aa:8b:
23:83:e4:78:96:1f:42:e0:5f:b2:b9:6b:ad:82:4d:
2a:82:b6:77:b2:1a:42:15:a3:f7:c0:11:f9:08:72:
51:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:10:0F:EA:8E:FB:8A:2C:82:F0:48:0B:65:FD:D7:A1:AB:3F:C8:58
X509v3 Authority Key Identifier:
keyid:EA:88:0B:CC:30:2A:5D:BA:2C:35:1A:6F:D3:9E:0A:8B:39:22:A5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:03:a4:a6:2c:99:2f:84:45:4f:c7:9d:89:08:5a:69:9e:75:
a4:78:95:ca:9c:a8:43:01:14:2f:d2:46:9e:ed:5c:30:6b:c4:
e0:4c:39:28:1e:28:b2:98:19:87:7c:91:77:a7:cb:2a:98:6e:
8e:b5:2b:d7:88:f6:0b:71:8e:90:d6:c4:59:ad:d6:cf:d9:ec:
cf:8b:83:01:b0:de:ff:be:88:74:f2:05:d8:1d:09:60:43:86:
e2:6b:1c:30:51:56:b8:5b:0b:86:a2:33:23:db:cd:f5:67:69:
0a:69:c9:e7:f3:b1:6c:b6:b9:50:72:4d:3c:be:e2:96:3d:b6:
f4:72:30:f0:15:1b:f3:7b:89:a1:3e:39:e9:8a:3d:ef:b5:50:
c6:0a:44:4f:03:82:67:ae:78:87:b2:fb:a9:54:12:fe:a4:20:
78:8e:91:35:1d:2f:0a:49:e6:1a:c4:d4:a6:d4:b6:df:a5:0c:
cc:9e:36:bc:45:cd:29:98:63:29:c0:ca:07:1f:26:d8:4c:e6:
76:db:e3:56:96:ae:e7:2c:2a:de:3d:51:95:2d:f4:b0:ec:a8:
ac:22:d6:e4:37:41:c6:1c:3e:c7:2a:e9:47:d1:e8:da:21:96:
10:2a:67:11:e3:3d:48:70:6d:71:61:27:42:c7:ec:0d:86:ab:
68:9f:f6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:23:02 2026 by rpki-client