Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
File: 6ogLzDAqXbosNRpv054KizkipTU.mft (raw, json)
Hash identifier: QqmpmrSub5bNZ/HByJwXwp2KePKo5xc9Kb9Ev6aoSgI=
Subject key identifier: AA:6E:FD:90:F5:94:F0:DD:66:30:D4:B6:0D:18:A7:CE:79:51:8A:8B
Authority key identifier: EA:88:0B:CC:30:2A:5D:BA:2C:35:1A:6F:D3:9E:0A:8B:39:22:A5:35
Certificate issuer: /CN=ea880bcc302a5dba2c351a6fd39e0a8b3922a535
Certificate serial: 019E1DC79D4C0C2409E710739A182C71A8CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
Manifest number: 0971
Signing time: Tue 12 May 2026 20:01:21 +0000
Manifest this update: Tue 12 May 2026 20:01:21 +0000
Manifest next update: Wed 13 May 2026 20:01:21 +0000
Files and hashes: 1: 6ogLzDAqXbosNRpv054KizkipTU.crl (hash: x+kQTLQuD+SbMf9d9TQ7qa3Cr6OD2z310rgODFsSnwo=)
2: PPUFqBGUCmFmWCrlXoGH2AYfPuA.roa (hash: L84g/xVBfxnI/AptpcgCwWfGsHlR8ZydiW8GLseCEig=)
3: lBNCxSrIMwGF7q55Faffo34PzIE.roa (hash: n9g3kmorGo6N42lTsebPz6v4VTR7WxY6co0/3tPw7b4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:9d:4c:0c:24:09:e7:10:73:9a:18:2c:71:a8:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea880bcc302a5dba2c351a6fd39e0a8b3922a535
Validity
Not Before: May 12 20:01:21 2026 GMT
Not After : May 13 20:01:21 2026 GMT
Subject: CN=aa6efd90f594f0dd6630d4b60d18a7ce79518a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7f:d4:04:66:77:2e:65:be:6e:76:22:03:34:
e1:de:b5:16:0d:e3:94:d0:f1:7c:ed:2a:78:48:87:
aa:c4:36:60:36:ab:5a:31:c7:1b:71:16:81:3b:e4:
b3:04:53:2a:6a:db:37:f5:6a:45:6b:a3:13:3b:7b:
17:07:f8:3d:06:48:42:8e:cd:ea:e6:4f:56:2d:56:
e1:ae:2f:37:ef:81:b8:3b:c6:9f:17:c8:40:eb:f8:
db:c7:83:76:c2:19:66:dc:37:76:8d:a6:fb:6f:db:
90:60:27:f4:d7:97:47:3c:28:d2:41:68:48:52:cc:
b2:1c:4b:2f:05:75:4d:70:c2:b4:fd:b7:55:74:08:
7c:c9:34:8b:41:e1:7b:f8:b7:03:04:0a:5c:86:57:
26:f3:dc:d7:2d:22:fc:cb:d0:0a:3f:e2:45:e7:bb:
18:c5:1b:42:10:b7:d2:65:e9:98:af:82:f7:d6:f4:
1e:a9:57:c9:f3:cf:ad:5b:03:a4:a6:f4:0f:0a:da:
e2:4c:6a:07:21:c6:a5:e3:8a:30:9c:da:e6:b5:3c:
aa:e8:a9:5c:9e:3e:7c:5a:6f:8d:cf:75:8f:88:20:
37:9a:61:af:e2:e4:3c:09:53:82:f2:ab:f4:ff:09:
99:63:54:49:f9:4a:2a:a5:97:73:0c:e3:aa:f0:e9:
c8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:6E:FD:90:F5:94:F0:DD:66:30:D4:B6:0D:18:A7:CE:79:51:8A:8B
X509v3 Authority Key Identifier:
keyid:EA:88:0B:CC:30:2A:5D:BA:2C:35:1A:6F:D3:9E:0A:8B:39:22:A5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:bb:60:dd:b6:7f:65:aa:b1:fb:5c:30:1a:e9:6a:b8:88:55:
fd:2d:64:e5:c7:20:cc:33:82:04:52:4f:cb:f3:a7:89:f8:6e:
9b:11:9c:e4:33:fb:0d:39:ea:a0:e0:67:8a:87:9d:50:52:ee:
60:60:a1:ab:b3:38:3d:2c:8e:51:7e:1a:5f:18:41:53:e7:2c:
b1:ff:d2:23:8e:c0:80:e5:69:80:b6:0f:5a:85:81:94:01:64:
2c:71:c9:f7:8a:2d:32:cd:de:9a:41:79:fa:1b:a7:b2:6a:b5:
1c:50:d8:3b:c5:74:76:1a:9f:b0:d0:3a:03:4d:45:25:fb:18:
64:33:fb:f9:f9:d6:3c:09:7a:a2:52:b7:42:7f:49:70:7b:a9:
85:c6:81:51:f5:8a:dc:a4:a1:b3:79:bf:98:c7:bf:f1:c4:fc:
ed:30:9a:70:8c:f3:fd:66:d9:63:36:3f:9a:89:bc:39:e4:68:
81:90:0f:c6:89:72:bc:d4:31:5d:af:bd:eb:48:19:d0:14:b2:
1c:0c:31:99:64:09:19:ca:31:63:92:a0:b0:b7:82:15:82:1a:
c3:33:99:b8:07:87:42:c1:9e:a9:c7:aa:a0:58:d0:36:46:8b:
fa:aa:87:49:ec:f5:17:cf:27:d6:80:68:e1:df:48:36:8e:c4:
50:fe:9d:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dx51MDCQJ5xBzmhgscajMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhODgwYmNjMzAyYTVkYmEyYzM1MWE2ZmQzOWUwYThiMzky
MmE1MzUwHhcNMjYwNTEyMjAwMTIxWhcNMjYwNTEzMjAwMTIxWjAzMTEwLwYDVQQD
EyhhYTZlZmQ5MGY1OTRmMGRkNjYzMGQ0YjYwZDE4YTdjZTc5NTE4YThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApn/UBGZ3LmW+bnYiAzTh3rUWDeOU
0PF87Sp4SIeqxDZgNqtaMccbcRaBO+SzBFMqats39WpFa6MTO3sXB/g9BkhCjs3q
5k9WLVbhri8374G4O8afF8hA6/jbx4N2whlm3Dd2jab7b9uQYCf015dHPCjSQWhI
UsyyHEsvBXVNcMK0/bdVdAh8yTSLQeF7+LcDBApchlcm89zXLSL8y9AKP+JF57sY
xRtCELfSZemYr4L31vQeqVfJ88+tWwOkpvQPCtriTGoHIcal44ownNrmtTyq6Klc
nj58Wm+Nz3WPiCA3mmGv4uQ8CVOC8qv0/wmZY1RJ+UoqpZdzDOOq8OnILwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKpu/ZD1lPDdZjDUtg0Yp855UYqLMB8GA1UdIwQY
MBaAFOqIC8wwKl26LDUab9OeCos5IqU1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNm9nTHpEQXFYYm9zTlJwdjA1NEtpemtpcFRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8yYjcyOWYtMDhhNy00YzkzLThiYzkt
ODE1YzVmMjc2NWQwLzEvNm9nTHpEQXFYYm9zTlJwdjA1NEtpemtpcFRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8yYjcyOWYtMDhhNy00YzkzLThiYzktODE1YzVmMjc2NWQw
LzEvNm9nTHpEQXFYYm9zTlJwdjA1NEtpemtpcFRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAabtg3bZ/
Zaqx+1wwGulquIhV/S1k5ccgzDOCBFJPy/OnifhumxGc5DP7DTnqoOBnioedUFLu
YGChq7M4PSyOUX4aXxhBU+cssf/SI47AgOVpgLYPWoWBlAFkLHHJ94otMs3emkF5
+hunsmq1HFDYO8V0dhqfsNA6A01FJfsYZDP7+fnWPAl6olK3Qn9JcHuphcaBUfWK
3KShs3m/mMe/8cT87TCacIzz/WbZYzY/mom8OeRogZAPxolyvNQxXa+960gZ0BSy
HAwxmWQJGcoxY5KgsLeCFYIawzOZuAeHQsGeqceqoFjQNkaL+qqHSez1F88n1oBo
4d9INo7EUP6dzw==
-----END CERTIFICATE-----
Generated at Wed May 13 05:08:39 2026 by rpki-client