Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
File: 6OcnETayGhWK70CdMOLGAB1bDak.mft (raw, json)
Hash identifier: 9uwoieBfDHz0MFHQ5coGefoNuz0X8qsPEQtq2g4OaXY=
Subject key identifier: D2:07:22:A8:61:72:21:25:34:8E:A9:22:6D:F9:CF:26:98:5C:4B:CD
Authority key identifier: E8:E7:27:11:36:B2:1A:15:8A:EF:40:9D:30:E2:C6:00:1D:5B:0D:A9
Certificate issuer: /CN=e8e7271136b21a158aef409d30e2c6001d5b0da9
Certificate serial: 019DA52FA9CC6D05D7AC93F892C93B7A2B12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
Manifest number: 121E
Signing time: Sun 19 Apr 2026 10:00:57 +0000
Manifest this update: Sun 19 Apr 2026 10:00:57 +0000
Manifest next update: Mon 20 Apr 2026 10:00:57 +0000
Files and hashes: 1: 6OcnETayGhWK70CdMOLGAB1bDak.crl (hash: hOkJUzov9QtjM0Big0zPNSECSmvJFduCuhHzof0NtTQ=)
2: BgOBkzwZiai7TWETAvn_IWE9YOQ.roa (hash: eYdWajw2NgiVsKV9NY6WqUM6UWy1PFC1+5llbrmRKeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:2f:a9:cc:6d:05:d7:ac:93:f8:92:c9:3b:7a:2b:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8e7271136b21a158aef409d30e2c6001d5b0da9
Validity
Not Before: Apr 19 10:00:57 2026 GMT
Not After : Apr 20 10:00:57 2026 GMT
Subject: CN=d20722a861722125348ea9226df9cf26985c4bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:43:58:6d:b5:0f:3d:c3:94:bf:6d:49:d6:94:
95:62:64:e8:ca:ce:86:ec:fa:70:3c:ca:bd:22:c4:
56:4a:47:79:40:d2:79:83:7b:e0:6e:70:42:35:90:
75:7d:cc:02:90:19:31:96:45:ff:dd:e4:c6:98:1e:
cb:2f:54:90:c6:10:cc:b6:b5:3c:00:4a:97:98:af:
4f:ea:0b:1f:83:ef:59:c2:5f:61:e3:a5:79:d0:3c:
80:63:1d:31:c7:42:dc:af:d1:9d:d9:96:0b:63:16:
78:53:af:22:fa:a8:67:55:1a:dc:7d:53:04:04:8b:
1f:17:29:10:7e:00:80:69:21:41:cc:9a:36:aa:bc:
7d:95:af:12:8c:79:d4:60:9f:a4:33:a1:43:61:c3:
6a:01:0d:68:01:ee:c8:d6:9f:cf:d1:16:b7:2b:8b:
24:73:bb:5a:a8:ff:01:98:fa:79:ee:10:1c:83:28:
a5:75:5e:e7:94:b9:78:3a:5e:7a:95:b1:4d:02:61:
9c:6c:c1:05:38:26:c2:ff:1c:16:03:85:d6:f4:4a:
36:0a:d8:f3:72:8c:55:19:39:c3:58:ec:1d:01:0f:
f3:34:89:c2:de:17:4e:94:6a:2d:be:62:46:75:f6:
7e:f3:f0:82:09:12:6a:51:11:49:f2:30:47:91:91:
64:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:07:22:A8:61:72:21:25:34:8E:A9:22:6D:F9:CF:26:98:5C:4B:CD
X509v3 Authority Key Identifier:
keyid:E8:E7:27:11:36:B2:1A:15:8A:EF:40:9D:30:E2:C6:00:1D:5B:0D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:bd:bf:e5:7a:ab:8d:b5:0b:8d:84:c6:7a:c1:0b:64:8a:2c:
54:58:53:31:eb:79:7c:f0:65:da:cf:3d:a1:08:1a:79:78:04:
71:22:ab:fc:dd:e8:18:da:1b:48:0b:bf:b8:f6:77:7d:54:be:
4d:60:c2:97:b3:41:f5:8a:e7:95:0e:ab:e6:95:fe:33:1a:20:
d6:e0:1c:31:fa:02:a9:78:69:62:30:7f:b6:f3:50:ba:13:02:
27:2b:dd:cd:11:f9:d6:71:b5:30:ff:6f:01:2e:21:fa:01:bc:
8b:0b:61:23:ea:be:5e:22:7e:78:a6:a0:15:01:50:4a:e5:0f:
e2:4d:f5:ad:08:4c:3e:e9:c0:88:95:a5:c2:a1:92:b0:97:0e:
eb:4f:6c:0a:4e:79:88:af:11:18:08:75:b9:ed:e6:36:e6:15:
5d:0e:2f:85:ac:0d:bf:3f:46:d5:53:bf:8c:9b:a5:a5:aa:81:
e0:bb:5d:c5:93:76:c3:b7:99:7f:7e:a8:1d:d1:f0:5d:41:5c:
12:ce:a9:33:9c:78:77:30:7b:68:b1:80:42:2b:4c:c0:83:60:
73:f1:fa:9c:b7:fa:95:90:9f:56:4a:91:da:dc:db:86:41:9b:
84:50:2d:5a:dd:7d:2c:6b:02:f3:3b:00:50:86:c3:7c:17:d4:
2b:6a:09:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:38:33 2026 by rpki-client