Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
File: 6ogLzDAqXbosNRpv054KizkipTU.mft (raw, json)
Hash identifier: QizT6CErKkNk4q10ERfpgKJNgfYJX2NUUtvnz+CxTl8=
Subject key identifier: D1:D9:F5:70:9A:A5:84:C4:6E:F8:B2:C6:78:28:77:DA:9A:EC:56:E2
Authority key identifier: EA:88:0B:CC:30:2A:5D:BA:2C:35:1A:6F:D3:9E:0A:8B:39:22:A5:35
Certificate issuer: /CN=ea880bcc302a5dba2c351a6fd39e0a8b3922a535
Certificate serial: 019E3117658EAEFC80BEFFD3F5BB48A2A26F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
Manifest number: 097B
Signing time: Sat 16 May 2026 14:01:17 +0000
Manifest this update: Sat 16 May 2026 14:01:17 +0000
Manifest next update: Sun 17 May 2026 14:01:17 +0000
Files and hashes: 1: 6ogLzDAqXbosNRpv054KizkipTU.crl (hash: h5//mqC7QKaY523NAgN5V3PQeMIokZcUbMdLizfB7h4=)
2: PPUFqBGUCmFmWCrlXoGH2AYfPuA.roa (hash: L84g/xVBfxnI/AptpcgCwWfGsHlR8ZydiW8GLseCEig=)
3: lBNCxSrIMwGF7q55Faffo34PzIE.roa (hash: n9g3kmorGo6N42lTsebPz6v4VTR7WxY6co0/3tPw7b4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:65:8e:ae:fc:80:be:ff:d3:f5:bb:48:a2:a2:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea880bcc302a5dba2c351a6fd39e0a8b3922a535
Validity
Not Before: May 16 14:01:17 2026 GMT
Not After : May 17 14:01:17 2026 GMT
Subject: CN=d1d9f5709aa584c46ef8b2c6782877da9aec56e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a5:b1:7e:51:2d:66:4f:00:ca:71:37:10:89:
5e:4a:a2:d6:21:75:95:69:50:2b:08:b6:39:5e:3f:
d9:4a:f8:aa:a3:c3:02:a6:1b:5b:66:93:b7:4b:c1:
8d:e4:54:a1:89:19:38:96:36:5a:bf:30:72:ba:1e:
82:df:44:4e:fb:1a:fd:6a:5e:d7:2c:e2:d2:62:5b:
e3:6f:27:83:cb:5e:e5:d7:f3:58:d9:31:ea:3f:5b:
4a:b4:a0:53:f7:fb:20:70:15:00:bd:9e:d9:eb:2e:
0e:59:1b:9b:25:0a:7c:2c:f7:8f:3c:c3:eb:81:4e:
7e:80:ca:0d:5e:19:c8:bc:0b:68:3b:a3:ab:f2:eb:
0f:45:53:a8:54:37:5f:ba:73:2b:7f:e2:6d:9c:30:
69:ef:29:21:c8:f7:10:28:eb:99:4e:9a:c1:23:84:
36:f6:e8:77:53:98:3e:f1:13:04:a5:5a:a6:ef:2c:
df:ed:92:df:65:4c:18:75:4e:d8:a2:20:3e:d2:f9:
26:2a:99:de:da:76:70:d3:e0:0b:ab:6e:f3:3d:9c:
27:db:59:16:4a:64:2d:ed:fe:da:94:07:fb:0b:f9:
8f:7a:b7:e0:ef:a0:1e:3d:63:59:6b:66:b6:38:96:
c0:ec:fb:b6:bf:e8:b5:9d:9a:58:ef:4f:3f:53:d4:
42:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D9:F5:70:9A:A5:84:C4:6E:F8:B2:C6:78:28:77:DA:9A:EC:56:E2
X509v3 Authority Key Identifier:
keyid:EA:88:0B:CC:30:2A:5D:BA:2C:35:1A:6F:D3:9E:0A:8B:39:22:A5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:a0:67:cc:8c:a7:b8:5a:1f:82:9c:4d:87:6f:64:8e:48:88:
e5:9b:fa:de:09:7c:89:78:ab:e6:2a:57:38:b9:f5:7a:1b:20:
12:a3:ba:e0:ed:05:e4:ab:6b:4f:55:43:0a:3b:94:17:50:97:
ed:a2:a7:98:eb:98:8c:b3:99:53:5d:e0:3c:92:88:bd:9f:19:
61:65:05:89:5e:7b:d7:5a:92:33:2d:c5:b8:93:a2:4b:a1:c8:
db:9d:2a:74:20:c2:07:32:20:ec:90:8a:95:b9:7a:17:2a:14:
2d:42:d4:6f:f9:90:5f:0e:ef:bc:47:95:2d:bf:59:f9:20:47:
d4:4b:9c:5c:80:e6:df:ef:6f:bf:f2:4c:95:80:c1:2a:7b:e7:
40:3f:3f:f9:f2:ed:a9:40:a7:aa:4b:60:d8:c1:37:f9:9e:19:
1a:43:73:2a:d2:e6:25:a5:c0:ff:0d:96:60:8e:63:0e:4c:88:
bc:3f:d6:06:7e:74:f6:73:3c:d9:9c:69:44:e1:3f:cd:b0:51:
89:da:78:eb:62:c9:2f:82:4f:a0:88:09:5a:b3:ea:7e:fc:b8:
f3:65:3b:6c:ce:fb:0d:73:d6:04:1b:75:8e:19:80:d1:a4:47:
5e:47:28:2e:92:4e:71:88:59:4e:bf:7a:b0:59:db:24:94:19:
8b:ff:5e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:03 2026 by rpki-client