Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
File: 6ogLzDAqXbosNRpv054KizkipTU.mft (raw, json)
Hash identifier: 4rlNo8j3jTLWUa8pwvaw+nMhpjQy9GwoEacUi8qTQ1g=
Subject key identifier: 84:64:D6:E2:10:AF:51:76:ED:C5:9C:DC:7D:4F:EC:5B:43:40:6D:39
Authority key identifier: EA:88:0B:CC:30:2A:5D:BA:2C:35:1A:6F:D3:9E:0A:8B:39:22:A5:35
Certificate issuer: /CN=ea880bcc302a5dba2c351a6fd39e0a8b3922a535
Certificate serial: 01A14315C12C1FDF769FE6F26F8BD682CB03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
Manifest number: 0B12
Signing time: Fri 16 Oct 2026 05:01:01 +0000
Manifest this update: Fri 16 Oct 2026 05:01:01 +0000
Manifest next update: Sat 17 Oct 2026 05:01:01 +0000
Files and hashes: 1: 6ogLzDAqXbosNRpv054KizkipTU.crl (hash: Q5TJoeuuWt1sqz3/o3SFbaPI/txsZStDxRupCa1NZFA=)
2: PPUFqBGUCmFmWCrlXoGH2AYfPuA.roa (hash: L84g/xVBfxnI/AptpcgCwWfGsHlR8ZydiW8GLseCEig=)
3: lBNCxSrIMwGF7q55Faffo34PzIE.roa (hash: n9g3kmorGo6N42lTsebPz6v4VTR7WxY6co0/3tPw7b4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:43:15:c1:2c:1f:df:76:9f:e6:f2:6f:8b:d6:82:cb:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea880bcc302a5dba2c351a6fd39e0a8b3922a535
Validity
Not Before: Oct 16 05:01:01 2026 GMT
Not After : Oct 17 05:01:01 2026 GMT
Subject: CN=8464d6e210af5176edc59cdc7d4fec5b43406d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1f:b2:13:20:ad:a9:85:90:fc:f2:29:5d:20:
82:f3:b9:8d:34:9b:fa:ed:82:ef:36:cd:85:f6:ab:
1d:72:97:f3:87:11:c5:5a:e2:52:ef:37:fb:68:39:
46:27:40:80:ca:04:44:c9:95:dd:08:82:5c:36:03:
3c:fb:1e:3f:71:ac:4b:17:fa:67:a2:6d:b5:38:4d:
a3:5e:9a:aa:28:20:47:39:37:73:9b:5f:52:ca:11:
70:c8:cf:25:01:9b:07:73:dd:ab:ff:43:00:17:04:
98:e2:d7:8b:c6:61:ce:fb:2d:a6:ae:46:5b:f8:b8:
f7:90:07:19:db:e4:92:12:9f:fb:84:74:4b:c0:3e:
53:4a:59:ae:3f:0a:a3:57:66:d7:58:f5:6c:06:64:
54:59:ab:2e:71:4d:8f:20:71:6b:a6:2a:29:fe:b9:
93:08:49:f7:3c:42:09:10:38:c1:11:52:75:2c:14:
fb:bc:51:da:78:84:b1:8b:60:38:ed:97:5f:f8:4e:
77:a0:bf:69:00:3b:70:ac:10:78:6d:c7:15:cd:f2:
cf:08:f0:8e:3b:18:38:95:eb:bf:3c:ab:18:71:71:
ac:e1:a1:00:c3:e6:14:bb:17:5c:76:39:4e:fd:da:
2a:fd:35:2b:93:91:92:e7:bb:51:0c:2e:58:6c:c3:
63:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:64:D6:E2:10:AF:51:76:ED:C5:9C:DC:7D:4F:EC:5B:43:40:6D:39
X509v3 Authority Key Identifier:
keyid:EA:88:0B:CC:30:2A:5D:BA:2C:35:1A:6F:D3:9E:0A:8B:39:22:A5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:04:a8:14:32:ed:16:5c:5f:00:f4:d7:0f:76:61:dd:c7:3b:
1d:c5:71:b0:31:c6:9c:7a:9b:4c:14:ff:75:04:37:f5:7f:0f:
e5:e3:2b:96:af:a3:00:58:d9:c2:1e:fb:36:ac:f6:33:a6:32:
80:90:48:18:66:e3:38:9c:cc:b3:d0:51:fd:36:d9:9c:9e:35:
fc:ba:67:ad:a7:1c:69:f8:92:64:db:c3:b7:c1:c1:6c:88:60:
76:f6:76:36:a4:b0:b1:82:f0:ca:0f:19:16:68:54:a5:d5:f2:
40:0f:50:6a:43:47:e9:61:d7:d8:48:fb:ee:2b:a5:42:eb:18:
c9:36:5a:77:15:bf:86:a1:45:ca:dd:d0:a5:53:7e:55:aa:b0:
d4:06:13:78:79:55:fc:c0:4a:41:73:2a:a7:c6:44:1d:53:d6:
77:ee:d7:2b:72:f5:95:d8:50:4a:8c:d4:0f:f8:5f:85:ab:38:
49:f4:9a:da:21:09:52:07:7c:1a:f1:c9:d7:99:5e:03:30:a4:
b4:86:3c:5d:08:8d:e7:a7:78:81:1e:75:cc:d3:ac:4a:4f:3c:
9d:a8:5d:7e:f3:dd:36:30:dd:f9:a9:05:12:c0:b3:57:59:e0:
df:de:da:9f:ce:fa:5a:88:e5:92:76:50:40:2c:a8:81:44:0c:
50:91:6f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 11:15:41 2026 by rpki-client