Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
File: 6ogLzDAqXbosNRpv054KizkipTU.mft (raw, json)
Hash identifier: cm3IV3lXA8Jqk//TjkKb3nXxuOXQsx0fLfDY0uiwoVM=
Subject key identifier: CB:32:68:B8:D3:C0:58:E3:D3:0D:09:06:3A:9F:80:0F:10:C9:B8:7A
Authority key identifier: EA:88:0B:CC:30:2A:5D:BA:2C:35:1A:6F:D3:9E:0A:8B:39:22:A5:35
Certificate issuer: /CN=ea880bcc302a5dba2c351a6fd39e0a8b3922a535
Certificate serial: 01A000939B964A3EF1E35EED0571FDF333C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
Manifest number: 0A6B
Signing time: Fri 14 Aug 2026 14:01:08 +0000
Manifest this update: Fri 14 Aug 2026 14:01:08 +0000
Manifest next update: Sat 15 Aug 2026 14:01:08 +0000
Files and hashes: 1: 6ogLzDAqXbosNRpv054KizkipTU.crl (hash: bd6P8DtBEh0JdRDSTTN2HIUkzGzRNAc5NoJ6mBeLLe4=)
2: PPUFqBGUCmFmWCrlXoGH2AYfPuA.roa (hash: L84g/xVBfxnI/AptpcgCwWfGsHlR8ZydiW8GLseCEig=)
3: lBNCxSrIMwGF7q55Faffo34PzIE.roa (hash: n9g3kmorGo6N42lTsebPz6v4VTR7WxY6co0/3tPw7b4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 14:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:93:9b:96:4a:3e:f1:e3:5e:ed:05:71:fd:f3:33:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea880bcc302a5dba2c351a6fd39e0a8b3922a535
Validity
Not Before: Aug 14 14:01:08 2026 GMT
Not After : Aug 15 14:01:08 2026 GMT
Subject: CN=cb3268b8d3c058e3d30d09063a9f800f10c9b87a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e4:af:f7:51:fe:4c:97:92:b5:11:b9:de:72:
db:6c:5f:7f:af:38:bd:8d:73:b1:f0:39:10:2b:52:
4b:89:bd:43:31:b4:fc:3d:89:61:2e:34:3a:74:2a:
63:24:71:b0:40:3d:70:38:f2:43:10:4d:fa:1b:91:
6d:01:c5:ba:af:ac:b0:f4:e5:06:a8:56:08:87:b8:
97:1b:da:15:28:f7:70:98:0d:f6:98:a9:2a:25:fc:
6a:de:51:fd:82:a4:33:f5:3c:3c:5a:c5:5e:58:96:
3a:1a:5c:a6:f4:20:a5:1c:e2:21:50:40:0d:18:36:
49:cd:aa:38:6e:b2:f7:6d:73:97:2a:ba:a3:f0:12:
26:3f:f9:7b:d5:e1:42:51:58:65:8b:f1:e6:1d:f7:
9e:81:e9:82:40:32:d9:3e:3e:cb:57:d9:83:d8:91:
e4:53:c7:f1:d7:5e:bf:fd:d0:1c:1c:a7:52:b9:3f:
6c:ca:62:d5:56:79:c8:6e:41:79:7a:75:7b:7b:3e:
4a:be:ff:19:76:1c:46:5d:a5:b1:3c:3f:98:3a:08:
d8:6e:69:27:79:fd:c8:9d:76:e3:cd:8d:dc:10:0c:
a4:c8:04:9a:f6:ec:6d:1c:fb:fb:b5:c3:14:0d:cd:
c8:ea:5f:2f:b2:cf:53:d9:13:33:0f:43:34:a8:80:
e9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:32:68:B8:D3:C0:58:E3:D3:0D:09:06:3A:9F:80:0F:10:C9:B8:7A
X509v3 Authority Key Identifier:
keyid:EA:88:0B:CC:30:2A:5D:BA:2C:35:1A:6F:D3:9E:0A:8B:39:22:A5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:52:ea:d3:9f:6c:14:8e:0e:f1:3b:c4:8f:55:be:8a:11:34:
b8:47:b6:71:87:9f:45:a2:4f:1f:4e:ce:a4:84:66:80:8c:62:
39:f2:d7:31:36:ab:e0:86:4e:25:de:1a:51:2b:fd:38:9e:a6:
08:2b:fb:b0:49:fb:97:9a:dd:f7:7e:25:b2:61:cf:f0:2c:e6:
a7:d6:cd:97:41:18:45:c0:78:8c:ee:74:a8:78:31:e6:17:8e:
1d:a8:e3:b3:5f:5a:44:43:cc:76:29:a3:b2:f1:e1:fc:a2:77:
86:ae:dc:fa:ac:31:c5:54:be:46:7a:84:22:d5:d8:16:45:9e:
22:7e:b0:c4:42:fd:8b:7d:10:2d:06:43:df:e8:4c:36:53:23:
c9:21:b8:13:fd:64:f5:cf:26:87:f1:8e:2a:f6:18:bc:9e:e8:
df:63:f2:81:d7:9d:48:95:f2:25:b2:b7:f6:cd:d0:c2:06:c6:
26:11:cc:92:3d:9f:b1:5b:be:86:e1:1d:f8:3b:a5:51:91:99:
21:2c:42:4b:aa:34:95:bd:9d:f0:23:a7:84:40:d5:a4:47:4b:
e1:cf:12:c0:50:1e:59:79:4a:f9:ee:d7:05:41:ce:64:24:e7:
cd:7f:db:00:fc:2b:82:37:35:1f:95:5b:5a:3d:4d:cf:ad:fc:
e5:71:8f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:13 2026 by rpki-client