Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
File: 6ogLzDAqXbosNRpv054KizkipTU.mft (raw, json)
Hash identifier: Xhi0BjtgZxFb7ruNaozD2a3c4chmdtXnqiVUO4NAFAM=
Subject key identifier: 53:2B:70:2B:2B:B6:00:74:FD:C1:93:88:CE:C1:5A:B6:15:FE:94:21
Authority key identifier: EA:88:0B:CC:30:2A:5D:BA:2C:35:1A:6F:D3:9E:0A:8B:39:22:A5:35
Certificate issuer: /CN=ea880bcc302a5dba2c351a6fd39e0a8b3922a535
Certificate serial: 019D37F6FE4C57E85CCD54A9F87A27BF8ADD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
Manifest number: 08FA
Signing time: Sun 29 Mar 2026 05:00:26 +0000
Manifest this update: Sun 29 Mar 2026 05:00:26 +0000
Manifest next update: Mon 30 Mar 2026 05:00:26 +0000
Files and hashes: 1: 6ogLzDAqXbosNRpv054KizkipTU.crl (hash: Ohic93gdHMicOjSVz+egmAlzBVrO28PWp87nG7QrRpU=)
2: PPUFqBGUCmFmWCrlXoGH2AYfPuA.roa (hash: L84g/xVBfxnI/AptpcgCwWfGsHlR8ZydiW8GLseCEig=)
3: lBNCxSrIMwGF7q55Faffo34PzIE.roa (hash: n9g3kmorGo6N42lTsebPz6v4VTR7WxY6co0/3tPw7b4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:fe:4c:57:e8:5c:cd:54:a9:f8:7a:27:bf:8a:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea880bcc302a5dba2c351a6fd39e0a8b3922a535
Validity
Not Before: Mar 29 05:00:26 2026 GMT
Not After : Mar 30 05:00:26 2026 GMT
Subject: CN=532b702b2bb60074fdc19388cec15ab615fe9421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fa:72:90:b8:d3:cc:c3:d8:56:15:ff:26:36:
28:69:f6:94:b7:64:23:63:23:c1:00:c0:be:10:42:
31:60:83:ff:c5:70:9a:e5:37:a9:93:c6:c5:90:d7:
17:8e:08:e9:00:11:bf:3d:3c:3d:32:66:fe:dd:6e:
d6:58:e6:ce:99:1f:d0:54:4f:50:aa:33:a9:ca:d3:
df:5d:00:e4:1a:48:19:35:b4:84:a4:ac:d1:41:cf:
f2:cb:1f:c3:70:07:e9:ac:cb:aa:d3:b5:97:0e:17:
0b:fa:f6:cb:b5:25:51:38:08:b2:b5:9d:76:75:d4:
10:30:30:48:da:ef:9b:63:b6:64:8b:ae:af:38:c2:
a3:5f:a4:a4:a6:b0:b3:d6:be:8a:ec:7c:26:ad:58:
5b:8e:bf:8b:f8:8f:5a:44:08:03:7a:5c:90:ef:8d:
95:6c:a0:5c:30:50:99:63:5e:da:a4:47:08:5f:c6:
d4:10:99:11:3c:ca:19:ec:66:57:b2:f5:68:b7:c9:
bf:3e:a8:9c:51:e1:87:71:55:96:57:59:a9:da:d9:
3b:fe:a7:a4:f8:c2:05:a6:6f:02:f4:d1:56:3e:58:
51:76:4b:32:bd:d3:cf:ec:fc:58:27:60:da:a1:7a:
64:90:73:2f:45:6a:cb:c8:8e:25:10:97:63:50:ae:
a1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2B:70:2B:2B:B6:00:74:FD:C1:93:88:CE:C1:5A:B6:15:FE:94:21
X509v3 Authority Key Identifier:
keyid:EA:88:0B:CC:30:2A:5D:BA:2C:35:1A:6F:D3:9E:0A:8B:39:22:A5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:64:02:0f:b2:68:e8:be:8b:2e:d6:cd:25:a2:82:d0:36:6c:
d8:77:ce:34:6b:60:e4:b5:2b:36:e7:98:4c:57:46:56:ef:a6:
6a:86:be:5f:66:a3:18:6f:14:4e:a9:17:5c:e3:93:07:05:56:
e0:3b:7f:19:01:1e:0f:6d:09:73:38:3f:f9:e1:8c:4a:48:c1:
77:74:a1:bd:3b:32:9e:6c:7f:03:87:58:1e:d9:0a:c0:87:06:
a0:5d:01:58:a4:12:40:12:50:ab:01:c9:db:8a:d4:f6:3b:49:
7c:7c:ad:c0:52:7a:3e:1e:b3:8f:7b:ae:94:01:bc:b6:e1:0d:
35:81:87:89:b3:7e:4b:12:58:40:a6:72:45:8d:14:4b:d3:38:
f1:7c:e9:26:67:70:76:a7:06:ee:5e:e2:26:b1:8c:89:fd:ef:
bf:29:9f:00:43:4d:4f:fa:15:70:f0:44:bb:1e:c5:a8:4d:af:
27:b4:5c:9f:83:6c:d3:3d:c6:70:b8:f9:93:11:c8:46:bd:df:
63:fb:20:15:db:1d:6c:c4:74:62:31:90:8d:d7:94:ad:e2:98:
97:6b:6a:c8:d3:bd:85:8c:78:31:12:06:b7:fe:e1:ed:da:a6:
9d:b5:1d:17:7a:f5:59:fb:2d:07:af:f8:e4:4d:31:b4:68:4c:
2a:0e:42:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:02:28 2026 by rpki-client