Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft
File: a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft (raw, json)
Hash identifier: G5Siw71mEEOn4cwUciOafb91oXbIxn8wC0i+Lkew1p0=
Subject key identifier: E5:7D:29:A4:2C:DF:57:F6:11:25:46:27:70:12:A5:12:59:95:4D:A6
Authority key identifier: 6B:F8:8E:82:B3:5A:0A:D6:D0:FF:31:56:AF:13:19:DF:C1:62:F8:E8
Certificate issuer: /CN=6bf88e82b35a0ad6d0ff3156af1319dfc162f8e8
Certificate serial: 019D37F6FC95C21F2A95A1963F05826B09A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft
Manifest number: 06D5
Signing time: Sun 29 Mar 2026 05:00:26 +0000
Manifest this update: Sun 29 Mar 2026 05:00:26 +0000
Manifest next update: Mon 30 Mar 2026 05:00:26 +0000
Files and hashes: 1: HdU5cxfsxlP0K4CqDFvCNnZmq28.roa (hash: xbyeSFIpEueYvgfQTG6iJ17W5Phz2i4KFR7f+DJwSVQ=)
2: a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl (hash: vPai3ytA68+CsSZIk/peplGYd9XXOkc2y3ozfIwwVes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft
rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:fc:95:c2:1f:2a:95:a1:96:3f:05:82:6b:09:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bf88e82b35a0ad6d0ff3156af1319dfc162f8e8
Validity
Not Before: Mar 29 05:00:26 2026 GMT
Not After : Mar 30 05:00:26 2026 GMT
Subject: CN=e57d29a42cdf57f6112546277012a51259954da6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:80:4c:75:5c:39:92:c2:11:90:eb:5f:63:66:
1f:c5:95:7b:52:5f:e8:9d:58:1f:de:05:45:02:8d:
e6:13:9a:0a:c5:e1:5b:f9:ce:41:2a:23:0e:dd:31:
66:5d:da:a3:fa:a8:b3:7b:ca:9e:cf:48:c5:68:cd:
4c:c2:27:cd:ae:c2:fb:a0:55:50:de:c1:75:6e:85:
d5:52:24:0a:02:bd:fe:d9:ad:af:58:25:e5:7d:36:
e1:36:1d:8a:bf:e9:78:5c:c0:0d:d2:f8:bd:e0:e1:
71:df:44:12:de:58:aa:4e:25:33:7e:72:18:b1:85:
fd:2c:b0:48:e7:22:40:ee:e2:27:0f:74:38:22:2f:
9f:4b:4d:da:b1:e6:ff:c1:7d:f1:bd:63:b2:47:73:
8c:00:99:7e:4e:f4:bb:ec:43:76:71:6b:d1:c6:69:
c2:9f:de:7c:bd:7d:d4:7a:ea:3f:e8:e5:4a:72:05:
83:8f:d9:0c:c4:d7:94:ba:59:9a:4d:09:49:6d:4d:
7a:05:8d:4f:36:4d:51:cd:1a:9b:04:19:da:8c:ea:
4e:b6:50:60:ff:7a:30:ad:7e:d0:89:7e:dd:38:77:
98:0e:33:e1:df:89:fc:c8:53:b1:fe:d3:f4:3d:2b:
12:f1:39:2d:68:00:66:0f:f7:46:15:a2:74:fd:87:
ce:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:7D:29:A4:2C:DF:57:F6:11:25:46:27:70:12:A5:12:59:95:4D:A6
X509v3 Authority Key Identifier:
keyid:6B:F8:8E:82:B3:5A:0A:D6:D0:FF:31:56:AF:13:19:DF:C1:62:F8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:68:7e:c8:28:2c:c9:8c:67:2b:32:3f:99:41:97:34:8a:60:
60:80:ad:f1:eb:20:93:3c:15:af:0b:ff:a8:8e:32:44:57:fa:
eb:03:7f:0c:0c:07:6a:bc:87:73:86:7b:57:c1:10:f7:57:94:
b6:96:38:6e:78:1e:3c:d6:02:1d:4d:d6:62:26:a1:bf:1d:98:
35:2d:54:a9:bb:7b:24:fb:fe:49:2f:90:e0:95:5e:e0:5e:f8:
e7:02:e8:a9:e2:26:76:d2:a7:72:ca:21:18:d4:7a:32:d1:71:
3d:2e:e0:77:f3:3c:af:15:36:af:ef:c2:1b:aa:85:2a:07:ab:
c7:8d:af:e9:ba:ba:77:91:bb:a4:5d:51:42:59:08:35:a6:d8:
20:a5:de:cd:77:dd:fc:a9:44:6f:4d:0e:9b:91:61:c6:6f:f0:
ea:ec:ba:ef:b7:84:77:93:78:41:69:9c:af:19:d2:e1:a8:2a:
59:ad:7e:80:f5:09:8a:d7:c3:f1:0a:3f:a2:a9:e5:f1:f8:12:
fb:43:44:64:86:ef:c5:25:01:ed:c5:ab:96:6b:67:f7:7d:73:
e2:f9:cc:c1:f1:6a:1b:65:85:a5:83:f9:42:4f:ed:4e:3f:9b:
f9:cc:6a:ee:76:3e:17:85:43:85:c4:46:34:be:c2:85:67:9c:
d2:71:b4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:01 2026 by rpki-client