Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
File: 6ogLzDAqXbosNRpv054KizkipTU.mft (raw, json)
Hash identifier: edhLOXKplpzANJYPMgvX3ov7EhCFFzgg6S/IS00TmXg=
Subject key identifier: 27:7E:95:5E:48:95:63:DD:7D:DB:CE:E3:4E:B9:9E:86:2C:1D:8F:DE
Authority key identifier: EA:88:0B:CC:30:2A:5D:BA:2C:35:1A:6F:D3:9E:0A:8B:39:22:A5:35
Certificate issuer: /CN=ea880bcc302a5dba2c351a6fd39e0a8b3922a535
Certificate serial: 019D2A724EE16874DC60694A9BA92988A13E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
Manifest number: 08F3
Signing time: Thu 26 Mar 2026 14:00:27 +0000
Manifest this update: Thu 26 Mar 2026 14:00:27 +0000
Manifest next update: Fri 27 Mar 2026 14:00:27 +0000
Files and hashes: 1: 6ogLzDAqXbosNRpv054KizkipTU.crl (hash: ZOui27JzyG0f/PhC8MXki1jEITyxkwF72Jmuu70jmuo=)
2: PPUFqBGUCmFmWCrlXoGH2AYfPuA.roa (hash: L84g/xVBfxnI/AptpcgCwWfGsHlR8ZydiW8GLseCEig=)
3: lBNCxSrIMwGF7q55Faffo34PzIE.roa (hash: n9g3kmorGo6N42lTsebPz6v4VTR7WxY6co0/3tPw7b4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:4e:e1:68:74:dc:60:69:4a:9b:a9:29:88:a1:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea880bcc302a5dba2c351a6fd39e0a8b3922a535
Validity
Not Before: Mar 26 14:00:27 2026 GMT
Not After : Mar 27 14:00:27 2026 GMT
Subject: CN=277e955e489563dd7ddbcee34eb99e862c1d8fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:21:55:51:7c:69:c6:17:10:9d:f4:0d:7a:33:
9a:30:10:d0:ea:28:6a:29:a7:d5:46:26:d5:34:5e:
f4:b7:81:8b:03:68:82:81:87:04:14:f3:29:57:cd:
da:4e:1c:8f:ff:d8:86:35:b4:23:2d:c5:7c:14:43:
c4:a2:84:15:51:b0:66:36:fa:b1:33:23:eb:b3:a3:
1b:89:c6:14:7e:19:a7:ff:7e:50:aa:5a:14:5c:4e:
59:9d:67:39:06:3f:74:03:ac:af:25:fb:c4:76:18:
36:01:48:d3:87:df:1a:87:ae:a7:81:b0:75:5f:30:
95:a9:4e:ce:18:61:ea:7d:dc:27:b8:0e:c1:11:7e:
c7:ac:19:10:5d:90:12:d0:f2:ae:a8:76:bb:30:de:
9e:d6:10:06:0b:f1:ce:12:01:aa:40:60:06:67:5d:
30:54:31:28:4f:b9:8b:ca:74:67:4a:aa:f0:45:e0:
42:00:f8:92:34:a0:55:10:2c:99:8b:32:99:33:6d:
6b:e6:77:32:08:b9:6e:62:f7:f5:67:a2:f0:38:84:
5d:97:0a:7c:3d:e8:28:90:85:e0:dc:34:0b:71:ef:
ab:df:60:07:95:ec:a6:29:6e:3f:ef:51:7c:d7:c3:
27:37:ba:13:26:99:e0:46:c7:12:8a:d2:35:59:2e:
36:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:7E:95:5E:48:95:63:DD:7D:DB:CE:E3:4E:B9:9E:86:2C:1D:8F:DE
X509v3 Authority Key Identifier:
keyid:EA:88:0B:CC:30:2A:5D:BA:2C:35:1A:6F:D3:9E:0A:8B:39:22:A5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:75:16:7b:e2:1c:7b:37:15:7f:1f:9e:b5:fb:43:df:11:6e:
75:0a:d4:3e:2a:f4:9d:80:47:cf:05:5f:58:82:bd:a5:63:15:
43:fb:fb:89:a8:66:3c:8a:f6:54:eb:2b:36:85:0d:89:ac:97:
53:e6:43:8b:e0:8f:f6:22:1a:e9:74:53:8b:0d:84:b5:63:c0:
1a:f4:53:69:f9:06:2d:7e:ee:2a:2b:07:80:69:56:05:47:ef:
4c:25:58:ee:e0:6b:52:ef:34:89:82:6c:64:d8:9e:7d:bc:9c:
d5:f5:5a:6f:23:67:cd:68:49:da:19:da:de:39:98:01:c8:e9:
8b:f2:cc:65:7e:67:ee:c0:5a:3e:9e:30:3d:ba:45:91:65:92:
c6:94:36:8f:c5:90:89:42:cb:bf:24:bf:d8:22:6b:74:65:f1:
7b:80:37:a1:59:6d:ba:d2:db:d4:6b:9b:81:71:0d:cf:d3:5f:
34:a4:96:5f:6e:3c:f5:c1:1d:73:1d:d5:51:96:3e:6c:76:56:
60:c2:13:84:e2:81:74:15:32:5f:ae:71:7d:76:f8:28:d4:e2:
d7:32:94:c3:db:5a:79:59:16:05:fc:dc:34:d5:59:16:a8:f2:
ab:33:db:e0:92:8d:7c:de:62:35:4b:69:42:5a:51:b3:a5:c5:
75:72:3b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:36:50 2026 by rpki-client