Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft
File: 6ocBJxa2bugiZCwvChuQFItceyk.mft (raw, json)
Hash identifier: OXjiourz+Ug+YzQg3gCi9t8imi1xqGEeQy9sJcxkqTY=
Subject key identifier: 6F:DF:A0:D5:84:11:0F:56:22:12:A6:50:24:A9:5B:B7:7F:76:73:5C
Authority key identifier: EA:87:01:27:16:B6:6E:E8:22:64:2C:2F:0A:1B:90:14:8B:5C:7B:29
Certificate issuer: /CN=ea87012716b66ee822642c2f0a1b90148b5c7b29
Certificate serial: 019F19439DF3DDE52D34A44B33302BDEC985
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ocBJxa2bugiZCwvChuQFItceyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft
Manifest number: 10D9
Signing time: Tue 30 Jun 2026 16:01:29 +0000
Manifest this update: Tue 30 Jun 2026 16:01:29 +0000
Manifest next update: Wed 01 Jul 2026 16:01:29 +0000
Files and hashes: 1: 144eyzU15_7IM3-50Fn3yd-TPPE.roa (hash: CG72Nchm10xuRr8f1Bb+XAZQZQ9cILYiGnedodDRgi0=)
2: 6ocBJxa2bugiZCwvChuQFItceyk.crl (hash: ubXi/uTD2MWgI+uYB9mf3rX8S/7ZTLJEZJfFw1h98gE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ocBJxa2bugiZCwvChuQFItceyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:43:9d:f3:dd:e5:2d:34:a4:4b:33:30:2b:de:c9:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea87012716b66ee822642c2f0a1b90148b5c7b29
Validity
Not Before: Jun 30 16:01:29 2026 GMT
Not After : Jul 1 16:01:29 2026 GMT
Subject: CN=6fdfa0d584110f562212a65024a95bb77f76735c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a4:5e:b2:2b:1c:6b:45:31:1e:25:b7:4b:9e:
79:c8:96:4e:7c:21:1a:81:5b:80:7e:89:70:b7:44:
c7:5e:a0:5c:07:33:1a:0d:97:15:02:fc:ed:52:b0:
da:39:93:56:5f:95:6d:61:86:79:58:7d:88:be:c4:
67:f9:f7:e5:05:2f:9e:6d:a6:d3:f1:19:e4:03:ad:
ee:35:7e:3a:2a:a8:70:4a:af:b7:2c:05:a2:be:51:
2f:5c:e0:ed:0e:28:98:f5:7d:6c:0b:23:cf:bd:4f:
a3:e7:65:83:f5:1d:ad:3b:a4:6d:d7:4c:6c:49:77:
4f:61:a2:08:de:a4:d5:86:9f:3c:48:48:40:8f:f2:
53:f3:a4:c7:e1:f6:a6:20:2b:49:02:e5:5c:46:8c:
42:aa:be:10:15:b1:03:55:84:a7:ae:fc:1b:f2:94:
bc:94:37:7a:02:98:97:5d:4a:cb:f5:75:ba:3b:09:
f2:02:ca:9d:1d:a1:6c:84:b3:0c:be:af:0b:c1:c6:
93:1e:d7:cb:c5:86:34:d1:ac:5a:91:df:34:6f:0a:
25:de:f2:92:8a:32:60:b6:4b:df:dc:4f:3a:bc:89:
cb:96:41:d7:ec:45:69:50:21:40:8b:88:36:60:f9:
59:f4:0a:65:92:64:55:8f:c0:30:a1:5b:1a:54:92:
24:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:DF:A0:D5:84:11:0F:56:22:12:A6:50:24:A9:5B:B7:7F:76:73:5C
X509v3 Authority Key Identifier:
keyid:EA:87:01:27:16:B6:6E:E8:22:64:2C:2F:0A:1B:90:14:8B:5C:7B:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ocBJxa2bugiZCwvChuQFItceyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:2f:20:5a:c9:c2:7a:b8:89:13:16:69:d2:ae:06:12:3c:85:
6c:c4:40:fc:94:ab:2e:1c:25:02:5b:34:3b:f8:06:c0:d3:f2:
2e:e2:94:f6:aa:70:d0:6b:45:11:12:dd:5e:21:cd:2d:31:64:
51:6a:52:77:d9:a7:53:4c:17:82:50:66:13:87:d5:07:5c:06:
dc:17:93:a5:57:68:15:8b:34:32:c7:d1:bd:e8:dd:e7:c5:16:
88:9a:43:70:cd:7f:c2:a5:5b:7f:52:8e:56:dc:6d:b8:c4:22:
4c:b8:95:e9:43:8c:33:2d:5f:39:aa:5f:06:9e:0e:32:09:f9:
f3:87:e6:13:89:10:8a:52:0d:3f:b6:70:d6:80:ac:ea:6f:d1:
ff:f2:66:af:82:56:60:7c:13:8e:65:0b:4a:50:34:47:b9:5e:
4c:97:d6:6e:ee:74:4c:e8:b5:c0:a7:b9:86:dc:1a:46:bd:c1:
22:54:fc:70:ec:19:3f:0b:c9:31:53:8f:09:23:de:79:73:51:
c0:a6:ac:07:90:91:fa:aa:7a:7d:6b:98:19:b2:69:70:71:fb:
88:40:2f:67:0d:fa:fe:83:dd:42:be:33:e8:77:36:33:f2:f2:
9d:ad:e4:44:16:f2:26:b0:62:a6:bc:29:09:4a:33:1e:78:b6:
fc:39:a9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:17:51 2026 by rpki-client