Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
File: 6ogLzDAqXbosNRpv054KizkipTU.mft (raw, json)
Hash identifier: RuydI8J0kMcALNvfPx+4GcnfjtQjUshwBLObFV/aO2k=
Subject key identifier: CF:F9:6B:AD:0A:E3:34:6D:D4:BD:B8:1E:C9:69:EF:4D:E8:56:D3:F3
Authority key identifier: EA:88:0B:CC:30:2A:5D:BA:2C:35:1A:6F:D3:9E:0A:8B:39:22:A5:35
Certificate issuer: /CN=ea880bcc302a5dba2c351a6fd39e0a8b3922a535
Certificate serial: 01A0DACD2ECC46FA9FF90A372995049CFC37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
Manifest number: 0ADC
Signing time: Fri 25 Sep 2026 23:01:14 +0000
Manifest this update: Fri 25 Sep 2026 23:01:14 +0000
Manifest next update: Sat 26 Sep 2026 23:01:14 +0000
Files and hashes: 1: 6ogLzDAqXbosNRpv054KizkipTU.crl (hash: +vwUWBPkJ0e7Uf80xz+QCO5EkQbqpa5sf/vY8oHHdz0=)
2: PPUFqBGUCmFmWCrlXoGH2AYfPuA.roa (hash: L84g/xVBfxnI/AptpcgCwWfGsHlR8ZydiW8GLseCEig=)
3: lBNCxSrIMwGF7q55Faffo34PzIE.roa (hash: n9g3kmorGo6N42lTsebPz6v4VTR7WxY6co0/3tPw7b4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:cd:2e:cc:46:fa:9f:f9:0a:37:29:95:04:9c:fc:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea880bcc302a5dba2c351a6fd39e0a8b3922a535
Validity
Not Before: Sep 25 23:01:14 2026 GMT
Not After : Sep 26 23:01:14 2026 GMT
Subject: CN=cff96bad0ae3346dd4bdb81ec969ef4de856d3f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8f:78:0a:c0:89:65:29:5d:41:91:93:6d:a7:
ab:be:be:af:fa:96:19:97:b6:93:93:7f:75:1b:52:
1c:92:d2:c8:9a:96:d2:3a:0f:81:b7:ab:66:5f:2e:
a9:d6:fa:9c:19:9f:55:9e:d1:69:e2:20:4b:bd:c5:
12:b5:22:13:3c:78:d4:9c:95:cd:00:83:79:fa:59:
5c:d4:ab:ce:32:f9:1f:75:d4:53:c6:d1:c7:e2:d7:
68:8e:e2:3f:0d:4c:80:c3:4b:3d:70:e2:ee:bc:6f:
00:b9:39:b1:06:cf:83:f0:26:25:e5:ee:8a:28:43:
36:60:d3:91:6f:5b:7e:73:50:aa:a6:28:2b:6b:30:
0a:2a:23:74:85:41:f0:0c:0e:a3:5d:8c:df:5c:1c:
df:8c:76:69:bb:79:ac:e3:a5:7b:31:b1:bc:07:37:
70:26:a3:93:16:91:58:71:af:b2:27:87:82:5f:db:
d6:80:ea:87:8b:46:91:4b:14:2d:76:a0:28:0c:b7:
2a:e9:6b:f1:e7:0e:48:73:70:7e:44:f0:83:6c:f9:
1f:c4:c7:13:a1:9a:5f:49:9b:82:2d:b2:5a:0f:7e:
d7:fa:b4:90:96:8f:36:28:07:76:56:18:36:ff:66:
37:e5:a8:f0:70:0d:22:75:38:71:c9:65:35:01:41:
60:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F9:6B:AD:0A:E3:34:6D:D4:BD:B8:1E:C9:69:EF:4D:E8:56:D3:F3
X509v3 Authority Key Identifier:
keyid:EA:88:0B:CC:30:2A:5D:BA:2C:35:1A:6F:D3:9E:0A:8B:39:22:A5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:e7:26:59:54:46:2f:c2:ec:68:77:bd:e0:bb:80:d8:be:6a:
94:8b:1a:51:e8:6c:fc:7b:8c:0d:1b:d1:60:61:d8:22:b6:63:
d7:a1:e9:76:e0:47:36:a2:e8:34:97:01:7c:fd:1f:e2:49:b2:
ad:25:1e:8d:2c:92:a4:e0:59:c3:a0:17:8c:6c:02:31:0d:1d:
b6:a4:44:27:25:56:9c:93:00:6e:22:82:a1:43:87:0d:f8:2c:
82:f6:bf:b0:f0:a0:d7:53:97:9e:fb:e9:8f:4e:e8:2b:ce:f1:
47:a8:31:0f:c6:5d:8c:81:29:c7:19:b6:54:ed:01:7b:f8:62:
f2:34:d0:07:80:09:3f:0e:a1:6c:6d:a9:67:b3:6b:e9:78:b1:
16:e6:67:f3:75:a4:47:17:55:7a:96:c5:36:db:ab:a2:4b:2b:
93:60:b6:19:5b:3d:c8:38:87:09:e1:d7:71:16:67:fe:67:bf:
4b:d0:ed:98:a9:9d:1b:28:97:2c:d4:c9:53:e8:92:a0:67:5a:
98:a0:2e:f8:7f:20:08:04:3b:ff:29:19:33:73:6c:1b:ec:42:
56:da:2b:13:d1:2a:69:b2:da:9f:4b:03:a4:07:57:d0:e6:af:
d4:e8:75:fe:62:04:e7:f7:29:20:1f:18:79:5b:a1:b1:c9:f7:
fa:f5:83:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:05:59 2026 by rpki-client