Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
File: 6ogLzDAqXbosNRpv054KizkipTU.mft (raw, json)
Hash identifier: 786gStdJqx2V/y4fsMKUma41FZGIDeuelcT/3UfHxhA=
Subject key identifier: 18:BF:14:F1:B1:9D:DA:15:59:64:B6:66:90:39:DB:77:19:3D:00:70
Authority key identifier: EA:88:0B:CC:30:2A:5D:BA:2C:35:1A:6F:D3:9E:0A:8B:39:22:A5:35
Certificate issuer: /CN=ea880bcc302a5dba2c351a6fd39e0a8b3922a535
Certificate serial: 019F9090D66A49D049AEC9C2B9E62896E7AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
Manifest number: 0A31
Signing time: Thu 23 Jul 2026 20:00:38 +0000
Manifest this update: Thu 23 Jul 2026 20:00:38 +0000
Manifest next update: Fri 24 Jul 2026 20:00:38 +0000
Files and hashes: 1: 6ogLzDAqXbosNRpv054KizkipTU.crl (hash: Nh5UhW8h+qyGtRPh4qbDEspxIhsXFAwkAlIuCFTUSyI=)
2: PPUFqBGUCmFmWCrlXoGH2AYfPuA.roa (hash: L84g/xVBfxnI/AptpcgCwWfGsHlR8ZydiW8GLseCEig=)
3: lBNCxSrIMwGF7q55Faffo34PzIE.roa (hash: n9g3kmorGo6N42lTsebPz6v4VTR7WxY6co0/3tPw7b4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:d6:6a:49:d0:49:ae:c9:c2:b9:e6:28:96:e7:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea880bcc302a5dba2c351a6fd39e0a8b3922a535
Validity
Not Before: Jul 23 20:00:38 2026 GMT
Not After : Jul 24 20:00:38 2026 GMT
Subject: CN=18bf14f1b19dda155964b6669039db77193d0070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5c:2a:ac:f3:9f:2e:19:17:c3:26:eb:cd:d2:
87:83:14:07:c8:4f:b7:3d:0a:09:5f:6e:16:7c:97:
5a:94:0f:e9:d0:84:5e:2e:87:09:bd:37:d1:12:63:
73:28:58:48:7d:3c:74:b6:56:dc:89:51:c2:0a:68:
df:52:b8:a0:17:36:72:67:ea:d8:49:8b:f8:59:5c:
ca:cd:ab:3d:8f:09:bc:06:c5:e9:82:78:01:cf:f5:
41:73:79:41:9a:a0:bb:6c:e0:65:b3:aa:ec:12:99:
33:a1:49:4f:0b:2b:42:14:ba:fb:54:98:61:66:d7:
8e:7c:e7:ea:bf:c4:bf:6c:ba:89:22:17:1e:7a:3b:
88:86:47:19:09:75:4e:26:58:91:e4:08:3f:54:80:
ce:92:80:98:98:b1:cc:90:0f:f8:67:1c:65:3d:94:
fb:1f:ee:75:cc:5a:74:10:5a:76:5f:0b:8f:31:52:
df:6d:6b:c7:2a:de:1a:54:64:b8:c5:3c:ee:e6:7d:
8a:b8:d3:21:39:9c:f5:ad:20:eb:2f:b1:47:71:23:
2a:b8:32:7c:f9:98:40:34:58:87:99:42:ca:b7:5f:
bc:bf:96:cd:71:27:99:3f:d2:5d:2b:10:ae:1b:60:
36:d1:2f:27:7f:4b:3e:a8:8c:0f:e2:12:bf:67:4d:
ec:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:BF:14:F1:B1:9D:DA:15:59:64:B6:66:90:39:DB:77:19:3D:00:70
X509v3 Authority Key Identifier:
keyid:EA:88:0B:CC:30:2A:5D:BA:2C:35:1A:6F:D3:9E:0A:8B:39:22:A5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:95:e8:5d:97:52:07:99:00:05:b1:cd:95:a4:23:b5:27:50:
74:26:7b:e3:7e:68:e5:d0:4e:34:74:7a:92:02:67:b4:84:7b:
77:89:35:d3:6b:45:1d:ab:18:b9:8a:2a:1b:19:f4:2d:97:76:
bb:d4:74:2e:f8:0d:5c:41:28:12:29:5d:3a:70:81:1f:9e:cf:
0c:33:94:6b:6f:e3:02:d5:69:65:76:34:65:8a:c3:b6:6c:ab:
83:b0:52:a7:79:06:8e:23:27:14:0a:cc:a9:ff:b9:48:46:59:
12:d5:90:e1:3b:58:63:9b:f1:f8:2f:27:92:c9:84:9f:f8:65:
9c:78:b1:77:60:80:50:c1:23:28:92:ef:2a:d9:b9:3d:b3:1d:
c3:6a:3c:12:b8:db:9e:e5:e7:3b:73:a0:b6:1c:36:2a:67:82:
bf:d4:c8:76:9e:7a:c5:07:f8:7d:7c:64:e2:d4:4e:b8:9d:69:
d7:60:3c:62:34:22:92:cd:86:94:bf:5e:5b:b9:56:c4:e3:88:
78:8f:d5:84:6d:6e:3c:c2:ae:4c:64:5d:ff:2d:a5:8e:f0:fb:
96:91:1e:5c:24:96:6a:d3:30:89:e3:a8:f5:a0:21:ca:47:85:
50:c1:cf:47:94:fa:6e:75:72:d2:22:01:3e:b2:34:62:c9:04:
4a:a2:7e:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QkNZqSdBJrsnCueYolueuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhODgwYmNjMzAyYTVkYmEyYzM1MWE2ZmQzOWUwYThiMzky
MmE1MzUwHhcNMjYwNzIzMjAwMDM4WhcNMjYwNzI0MjAwMDM4WjAzMTEwLwYDVQQD
EygxOGJmMTRmMWIxOWRkYTE1NTk2NGI2NjY5MDM5ZGI3NzE5M2QwMDcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFwqrPOfLhkXwybrzdKHgxQHyE+3
PQoJX24WfJdalA/p0IReLocJvTfREmNzKFhIfTx0tlbciVHCCmjfUrigFzZyZ+rY
SYv4WVzKzas9jwm8BsXpgngBz/VBc3lBmqC7bOBls6rsEpkzoUlPCytCFLr7VJhh
ZteOfOfqv8S/bLqJIhceejuIhkcZCXVOJliR5Ag/VIDOkoCYmLHMkA/4ZxxlPZT7
H+51zFp0EFp2XwuPMVLfbWvHKt4aVGS4xTzu5n2KuNMhOZz1rSDrL7FHcSMquDJ8
+ZhANFiHmULKt1+8v5bNcSeZP9JdKxCuG2A20S8nf0s+qIwP4hK/Z03sTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBi/FPGxndoVWWS2ZpA523cZPQBwMB8GA1UdIwQY
MBaAFOqIC8wwKl26LDUab9OeCos5IqU1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNm9nTHpEQXFYYm9zTlJwdjA1NEtpemtpcFRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8yYjcyOWYtMDhhNy00YzkzLThiYzkt
ODE1YzVmMjc2NWQwLzEvNm9nTHpEQXFYYm9zTlJwdjA1NEtpemtpcFRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8yYjcyOWYtMDhhNy00YzkzLThiYzktODE1YzVmMjc2NWQw
LzEvNm9nTHpEQXFYYm9zTlJwdjA1NEtpemtpcFRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAypXoXZdS
B5kABbHNlaQjtSdQdCZ7435o5dBONHR6kgJntIR7d4k102tFHasYuYoqGxn0LZd2
u9R0LvgNXEEoEildOnCBH57PDDOUa2/jAtVpZXY0ZYrDtmyrg7BSp3kGjiMnFArM
qf+5SEZZEtWQ4TtYY5vx+C8nksmEn/hlnHixd2CAUMEjKJLvKtm5PbMdw2o8Erjb
nuXnO3Ogthw2KmeCv9TIdp56xQf4fXxk4tROuJ1p12A8YjQiks2GlL9eW7lWxOOI
eI/VhG1uPMKuTGRd/y2ljvD7lpEeXCSWatMwieOo9aAhykeFUMHPR5T6bnVy0iIB
PrI0YskESqJ+Nw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:53:33 2026 by rpki-client