Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft
File: 6ocBJxa2bugiZCwvChuQFItceyk.mft (raw, json)
Hash identifier: KVmFgSeoMGL/RFdfxXwdpnSsjNXHsWBVPO/EwGVY81M=
Subject key identifier: 23:E6:2A:E5:59:49:BA:67:D9:CF:AB:BD:6F:C8:3A:CE:1F:47:BF:49
Authority key identifier: EA:87:01:27:16:B6:6E:E8:22:64:2C:2F:0A:1B:90:14:8B:5C:7B:29
Certificate issuer: /CN=ea87012716b66ee822642c2f0a1b90148b5c7b29
Certificate serial: 01A13DB868F0383DF6D2CD7825DE99141D18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ocBJxa2bugiZCwvChuQFItceyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft
Manifest number: 11F5
Signing time: Thu 15 Oct 2026 04:00:57 +0000
Manifest this update: Thu 15 Oct 2026 04:00:57 +0000
Manifest next update: Fri 16 Oct 2026 04:00:57 +0000
Files and hashes: 1: 144eyzU15_7IM3-50Fn3yd-TPPE.roa (hash: CG72Nchm10xuRr8f1Bb+XAZQZQ9cILYiGnedodDRgi0=)
2: 6ocBJxa2bugiZCwvChuQFItceyk.crl (hash: TrDVjxWE+2zC5AaxGSzJIOHAbpYEQFOsJF02bBIZ91o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ocBJxa2bugiZCwvChuQFItceyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:68:f0:38:3d:f6:d2:cd:78:25:de:99:14:1d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea87012716b66ee822642c2f0a1b90148b5c7b29
Validity
Not Before: Oct 15 04:00:57 2026 GMT
Not After : Oct 16 04:00:57 2026 GMT
Subject: CN=23e62ae55949ba67d9cfabbd6fc83ace1f47bf49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5f:c9:53:18:8a:92:66:90:75:2c:1c:1a:2c:
3f:87:f3:66:fa:4c:7c:d8:91:d4:78:8d:70:fb:8d:
f9:a1:8f:54:f6:86:ba:b3:87:16:81:25:39:14:92:
8f:95:24:6c:0f:ad:30:29:d2:e5:6c:ac:7c:63:11:
72:61:41:a2:1a:04:db:54:9f:44:47:6c:f6:8d:3a:
b4:af:c4:61:dc:b4:b8:bc:69:d3:ee:db:91:e0:3a:
4f:da:db:26:4c:76:b1:12:b2:f4:28:f9:25:3e:fe:
62:65:37:fb:e9:68:d7:75:b0:13:5f:eb:fb:a0:d9:
f1:d1:16:17:0b:12:7b:58:4e:92:39:a9:ca:aa:72:
b3:b2:cc:2b:d6:0a:bb:71:f7:fa:67:43:b5:f0:b3:
d2:7a:41:4a:1a:99:c2:eb:35:89:04:5e:ae:93:4f:
8e:bb:67:98:7d:64:ec:b6:fb:9e:92:21:cb:bf:1e:
0b:89:f4:81:96:4a:15:b2:7b:ec:3d:8b:7a:14:a1:
ed:51:71:5d:b9:f6:d2:3a:a9:13:c9:3d:62:e8:01:
52:4c:98:8c:49:d9:cd:35:4e:ad:90:7d:46:5c:c8:
92:c7:37:f6:9c:fc:0f:7d:8f:b4:b2:62:37:09:af:
96:0a:2b:0a:e6:7f:ff:97:02:94:2e:e6:41:63:ea:
15:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E6:2A:E5:59:49:BA:67:D9:CF:AB:BD:6F:C8:3A:CE:1F:47:BF:49
X509v3 Authority Key Identifier:
keyid:EA:87:01:27:16:B6:6E:E8:22:64:2C:2F:0A:1B:90:14:8B:5C:7B:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ocBJxa2bugiZCwvChuQFItceyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:14:21:dc:b9:0b:4a:f7:75:89:31:22:12:0f:a9:a2:e8:7a:
ef:d1:e1:74:7e:7c:69:3d:93:d3:fd:f0:00:b6:b4:a4:c9:0b:
f3:67:6e:ba:5d:92:68:11:2f:95:1d:79:d9:45:9b:b3:1c:3a:
ec:78:2f:00:16:78:1a:4e:45:fa:68:8f:1b:bd:96:bd:ca:7f:
95:a5:dc:af:73:35:aa:ed:e3:18:91:4b:64:ea:ef:b6:8d:65:
cb:e4:d0:25:6b:23:57:20:21:8b:a9:3f:14:12:80:e0:aa:05:
4a:a9:69:b9:ae:99:be:b3:b0:76:2d:c3:7a:79:44:09:b0:1c:
63:3e:2f:ae:a9:ab:2d:78:1f:4f:4a:38:a5:5f:06:25:a0:13:
b1:9d:60:bd:54:80:f2:7d:c8:b1:da:53:56:73:7f:2a:66:20:
1f:c5:1f:1d:87:a6:cf:78:70:91:a7:5a:45:ef:f8:3a:30:31:
3a:54:db:0b:24:cb:fc:df:1f:cc:78:3b:d3:f9:79:2f:4f:7d:
0d:ba:e1:03:81:6c:7e:ee:11:1b:52:e3:98:35:17:3f:c2:e2:
43:6a:fb:fb:42:65:ab:78:52:a4:d1:03:05:fc:08:5c:aa:86:
c5:a2:53:1c:2f:e6:89:9d:5c:e6:ae:4b:90:fd:79:1f:0b:73:
9f:10:d5:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9uGjwOD320s14Jd6ZFB0YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhODcwMTI3MTZiNjZlZTgyMjY0MmMyZjBhMWI5MDE0OGI1
YzdiMjkwHhcNMjYxMDE1MDQwMDU3WhcNMjYxMDE2MDQwMDU3WjAzMTEwLwYDVQQD
EygyM2U2MmFlNTU5NDliYTY3ZDljZmFiYmQ2ZmM4M2FjZTFmNDdiZjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqF/JUxiKkmaQdSwcGiw/h/Nm+kx8
2JHUeI1w+435oY9U9oa6s4cWgSU5FJKPlSRsD60wKdLlbKx8YxFyYUGiGgTbVJ9E
R2z2jTq0r8Rh3LS4vGnT7tuR4DpP2tsmTHaxErL0KPklPv5iZTf76WjXdbATX+v7
oNnx0RYXCxJ7WE6SOanKqnKzsswr1gq7cff6Z0O18LPSekFKGpnC6zWJBF6uk0+O
u2eYfWTstvuekiHLvx4LifSBlkoVsnvsPYt6FKHtUXFdufbSOqkTyT1i6AFSTJiM
SdnNNU6tkH1GXMiSxzf2nPwPfY+0smI3Ca+WCisK5n//lwKULuZBY+oVFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCPmKuVZSbpn2c+rvW/IOs4fR79JMB8GA1UdIwQY
MBaAFOqHAScWtm7oImQsLwobkBSLXHspMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNm9jQkp4YTJidWdpWkN3dkNodVFGSXRjZXlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS83MjlmY2QtNzA0Yi00MDgxLThkMjUt
YzlmZjFlZTZhZDk1LzEvNm9jQkp4YTJidWdpWkN3dkNodVFGSXRjZXlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS83MjlmY2QtNzA0Yi00MDgxLThkMjUtYzlmZjFlZTZhZDk1
LzEvNm9jQkp4YTJidWdpWkN3dkNodVFGSXRjZXlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADRQh3LkL
Svd1iTEiEg+pouh679HhdH58aT2T0/3wALa0pMkL82duul2SaBEvlR152UWbsxw6
7HgvABZ4Gk5F+miPG72Wvcp/laXcr3M1qu3jGJFLZOrvto1ly+TQJWsjVyAhi6k/
FBKA4KoFSqlpua6ZvrOwdi3DenlECbAcYz4vrqmrLXgfT0o4pV8GJaATsZ1gvVSA
8n3IsdpTVnN/KmYgH8UfHYemz3hwkadaRe/4OjAxOlTbCyTL/N8fzHg70/l5L099
DbrhA4Fsfu4RG1LjmDUXP8LiQ2r7+0Jlq3hSpNEDBfwIXKqGxaJTHC/miZ1c5q5L
kP15HwtznxDVdw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 14:06:21 2026 by rpki-client