Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft
File: 6ocBJxa2bugiZCwvChuQFItceyk.mft (raw, json)
Hash identifier: Il63bmKcz5MyB9NhMTW1VnlTjzfE1ttk5SeTiOgMWko=
Subject key identifier: 3E:B7:01:1B:10:CE:2E:77:01:9E:35:59:3D:CB:E5:BC:44:04:60:05
Authority key identifier: EA:87:01:27:16:B6:6E:E8:22:64:2C:2F:0A:1B:90:14:8B:5C:7B:29
Certificate issuer: /CN=ea87012716b66ee822642c2f0a1b90148b5c7b29
Certificate serial: 01A0D192102DD021A33F179C950B09BA87D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ocBJxa2bugiZCwvChuQFItceyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft
Manifest number: 11BD
Signing time: Thu 24 Sep 2026 04:00:05 +0000
Manifest this update: Thu 24 Sep 2026 04:00:05 +0000
Manifest next update: Fri 25 Sep 2026 04:00:05 +0000
Files and hashes: 1: 144eyzU15_7IM3-50Fn3yd-TPPE.roa (hash: CG72Nchm10xuRr8f1Bb+XAZQZQ9cILYiGnedodDRgi0=)
2: 6ocBJxa2bugiZCwvChuQFItceyk.crl (hash: pAac7sENZJuGrP6mGLL2INPdi5WxmD0fd3Y+Nx9YK1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ocBJxa2bugiZCwvChuQFItceyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:92:10:2d:d0:21:a3:3f:17:9c:95:0b:09:ba:87:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea87012716b66ee822642c2f0a1b90148b5c7b29
Validity
Not Before: Sep 24 04:00:05 2026 GMT
Not After : Sep 25 04:00:05 2026 GMT
Subject: CN=3eb7011b10ce2e77019e35593dcbe5bc44046005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b2:aa:f0:b4:25:81:2b:fb:5e:f7:09:fa:5e:
ea:16:9a:73:2c:31:82:02:97:ad:f2:78:d6:58:40:
6d:8c:80:07:11:e1:cd:e4:13:34:64:06:1e:b3:e6:
2a:e9:69:99:2b:57:ea:99:b4:d1:55:00:67:4f:f1:
47:a2:df:d0:30:c9:39:da:bc:6e:f5:97:30:d3:f2:
14:a9:d9:05:ff:99:e3:ea:0c:87:df:e6:10:a6:82:
65:63:a6:75:cd:4c:c1:a8:08:ae:51:41:ab:d7:ea:
db:32:bd:c6:aa:a3:42:bd:f6:cc:01:f5:9d:8f:0b:
05:d2:ab:8e:a6:58:63:bf:72:10:07:42:31:4a:60:
a1:68:c6:a4:d4:cd:d9:c0:5b:02:1e:d6:16:25:b3:
86:22:85:a6:89:55:ff:dc:ad:d9:19:89:9e:e4:19:
95:ac:42:d5:65:76:36:b9:eb:58:a4:37:9e:54:c9:
2a:b5:25:d7:8c:4e:a9:71:d9:6b:41:8b:94:2a:dc:
cd:d3:59:d2:f6:bf:f6:90:21:5e:ba:ec:5b:fe:42:
d4:b3:d4:90:95:63:b7:4e:a1:38:32:88:ef:5e:9e:
56:6f:68:93:76:03:16:d6:fd:cd:3c:93:a0:6b:db:
dc:c6:23:be:40:9c:ef:1e:74:a4:2d:bf:1b:d3:44:
7e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B7:01:1B:10:CE:2E:77:01:9E:35:59:3D:CB:E5:BC:44:04:60:05
X509v3 Authority Key Identifier:
keyid:EA:87:01:27:16:B6:6E:E8:22:64:2C:2F:0A:1B:90:14:8B:5C:7B:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ocBJxa2bugiZCwvChuQFItceyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:63:dc:41:5d:ed:f7:2e:15:71:b8:1a:70:c4:76:ea:19:7f:
44:27:37:ce:38:a0:71:40:01:29:fa:ea:86:47:35:b3:17:61:
15:a5:dc:a1:b3:91:09:fe:39:ee:31:ed:96:0c:f9:ee:55:99:
b6:af:20:6f:71:24:59:e0:45:56:c8:81:15:b1:65:2e:c3:c0:
88:c3:8e:04:38:f9:60:68:08:2b:d9:37:e1:13:f8:89:57:bc:
1b:06:42:c5:ce:42:f3:bf:2b:ee:9a:1b:b0:d6:59:fc:d8:76:
f3:2f:4c:aa:34:c3:12:0e:90:26:71:4e:df:32:4b:1c:64:a8:
ad:d0:94:68:06:d4:6e:eb:04:0d:0d:d5:96:eb:ba:c1:41:f5:
e6:37:33:dd:58:ed:de:e2:21:41:d5:dd:b7:02:98:0d:4d:26:
34:cb:2b:f4:90:ee:6d:87:f3:09:00:ed:9f:0d:23:e1:c1:d7:
f3:d2:80:8a:43:a7:ef:dc:6e:a4:77:6c:4d:d5:23:2a:0d:e5:
d7:eb:99:b7:4b:4f:a3:a8:8f:4b:10:44:bc:28:e6:c6:8d:d2:
e5:1e:a0:09:d8:83:c2:9f:f8:f0:76:3d:1a:e7:c2:d6:71:51:
7b:15:1c:ad:fd:58:d2:cd:d1:b9:f3:4e:f6:0b:12:99:45:26:
a8:45:d4:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:04:43 2026 by rpki-client