Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
File: 6OcnETayGhWK70CdMOLGAB1bDak.mft (raw, json)
Hash identifier: 8xQLVsgtF/H4hDIIta0GBttcemR6tbzot/b+0Wo//jg=
Subject key identifier: 7C:28:0D:31:5E:5A:F7:EE:A1:65:63:82:78:13:C0:A6:9D:01:C7:C9
Authority key identifier: E8:E7:27:11:36:B2:1A:15:8A:EF:40:9D:30:E2:C6:00:1D:5B:0D:A9
Certificate issuer: /CN=e8e7271136b21a158aef409d30e2c6001d5b0da9
Certificate serial: 01A0C2C3F4BD937AE86CB0C52E144C0AA4DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
Manifest number: 13BB
Signing time: Mon 21 Sep 2026 07:00:16 +0000
Manifest this update: Mon 21 Sep 2026 07:00:16 +0000
Manifest next update: Tue 22 Sep 2026 07:00:16 +0000
Files and hashes: 1: 6OcnETayGhWK70CdMOLGAB1bDak.crl (hash: RiLJ5DC1tuEi4VxFGYssGO2TXdhkDqIeaQd2t2+ZAKI=)
2: BgOBkzwZiai7TWETAvn_IWE9YOQ.roa (hash: eYdWajw2NgiVsKV9NY6WqUM6UWy1PFC1+5llbrmRKeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:c3:f4:bd:93:7a:e8:6c:b0:c5:2e:14:4c:0a:a4:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8e7271136b21a158aef409d30e2c6001d5b0da9
Validity
Not Before: Sep 21 07:00:16 2026 GMT
Not After : Sep 22 07:00:16 2026 GMT
Subject: CN=7c280d315e5af7eea16563827813c0a69d01c7c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:77:f1:9e:2a:1d:db:91:7d:d6:62:0c:d2:06:
0f:9c:5a:6f:35:09:7b:78:c2:1a:9f:82:03:fc:f4:
d8:21:5b:7a:61:2b:f1:e4:06:b5:4b:e6:88:a7:81:
ca:05:f4:1c:ed:3c:6f:cf:cc:c0:c4:6c:85:9a:1b:
18:d7:3a:95:99:f3:28:25:63:3b:1e:f7:d2:af:7d:
37:72:da:21:2b:6a:c1:4b:62:b0:48:a4:27:da:6c:
f7:f8:2d:1f:c0:2a:43:55:50:61:3e:1d:3f:09:cd:
f2:bc:55:52:fb:87:69:40:1a:84:37:a9:bb:27:a3:
92:52:5d:97:a6:72:09:9a:9c:16:12:ae:94:57:22:
15:12:55:c6:50:09:12:95:27:39:2e:a8:2a:8c:ed:
50:8e:a1:b6:a0:5d:27:91:24:da:23:1d:ae:95:3c:
ff:5b:5c:a5:e7:5a:39:ce:62:0a:06:6c:34:ba:7f:
9a:06:63:a3:8d:56:c7:66:70:14:d4:89:1e:88:d3:
a2:64:0c:90:cd:c9:a2:d5:aa:23:df:b2:1d:d8:0f:
96:20:13:7d:f6:33:c8:16:c7:6b:0b:21:39:dd:7b:
fd:e2:93:b0:d0:ef:3c:6a:33:f8:eb:f0:11:7b:8b:
4a:5f:2a:3f:35:7e:66:6b:70:2c:45:a7:e5:8a:45:
ce:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:28:0D:31:5E:5A:F7:EE:A1:65:63:82:78:13:C0:A6:9D:01:C7:C9
X509v3 Authority Key Identifier:
keyid:E8:E7:27:11:36:B2:1A:15:8A:EF:40:9D:30:E2:C6:00:1D:5B:0D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ad:a7:08:94:4a:7e:81:15:2c:5e:c4:a3:3d:79:af:ab:d8:
74:b9:a2:b9:2b:63:53:a9:15:f7:91:f6:c8:e8:2f:91:b1:d7:
07:10:31:fb:94:d3:0b:9a:37:55:13:4d:1b:c8:b2:74:f7:3f:
ac:96:fe:1a:e6:ce:cb:e8:55:ba:49:65:0c:cf:4e:0a:ef:21:
48:3b:90:3a:3b:88:11:a9:8e:2e:1e:e5:83:2c:36:1e:56:f9:
35:b0:43:37:e8:be:7b:ed:27:dc:7b:0a:58:77:78:eb:5d:24:
e7:a5:9d:ee:11:76:2c:8a:ee:1a:b7:e3:6a:66:d7:b8:05:b9:
71:73:61:b1:18:37:b9:d0:72:9c:79:b3:01:47:eb:0b:57:93:
6b:71:7e:e7:42:80:34:90:10:ca:e1:b3:1d:4c:b2:77:f1:4f:
e4:85:b0:84:a0:8a:eb:94:0a:9e:11:31:d3:54:d6:16:c7:49:
ce:71:0b:3e:3b:9d:d0:15:95:32:c0:99:ec:08:61:70:20:3d:
2f:f2:b0:d3:92:bd:dc:e3:92:38:7f:70:34:23:c6:77:c2:43:
5c:bc:35:d1:d4:48:ae:b6:34:35:f8:05:10:5f:54:bc:4e:63:
07:bf:40:8d:a4:40:c2:59:75:93:79:d3:0d:93:7b:33:fb:54:
90:c5:f9:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDCw/S9k3robLDFLhRMCqTbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4ZTcyNzExMzZiMjFhMTU4YWVmNDA5ZDMwZTJjNjAwMWQ1
YjBkYTkwHhcNMjYwOTIxMDcwMDE2WhcNMjYwOTIyMDcwMDE2WjAzMTEwLwYDVQQD
Eyg3YzI4MGQzMTVlNWFmN2VlYTE2NTYzODI3ODEzYzBhNjlkMDFjN2M5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3fxniod25F91mIM0gYPnFpvNQl7
eMIan4ID/PTYIVt6YSvx5Aa1S+aIp4HKBfQc7Txvz8zAxGyFmhsY1zqVmfMoJWM7
HvfSr303ctohK2rBS2KwSKQn2mz3+C0fwCpDVVBhPh0/Cc3yvFVS+4dpQBqEN6m7
J6OSUl2XpnIJmpwWEq6UVyIVElXGUAkSlSc5LqgqjO1QjqG2oF0nkSTaIx2ulTz/
W1yl51o5zmIKBmw0un+aBmOjjVbHZnAU1IkeiNOiZAyQzcmi1aoj37Id2A+WIBN9
9jPIFsdrCyE53Xv94pOw0O88ajP46/ARe4tKXyo/NX5ma3AsRaflikXO/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHwoDTFeWvfuoWVjgngTwKadAcfJMB8GA1UdIwQY
MBaAFOjnJxE2shoViu9AnTDixgAdWw2pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk9jbkVUYXlHaFdLNzBDZE1PTEdBQjFiRGFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9jYmY0MjUtYjk1OC00ZTQ5LTljOTYt
ODM1NmQyZDQyNzcxLzEvNk9jbkVUYXlHaFdLNzBDZE1PTEdBQjFiRGFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9jYmY0MjUtYjk1OC00ZTQ5LTljOTYtODM1NmQyZDQyNzcx
LzEvNk9jbkVUYXlHaFdLNzBDZE1PTEdBQjFiRGFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkK2nCJRK
foEVLF7Eoz15r6vYdLmiuStjU6kV95H2yOgvkbHXBxAx+5TTC5o3VRNNG8iydPc/
rJb+GubOy+hVukllDM9OCu8hSDuQOjuIEamOLh7lgyw2Hlb5NbBDN+i+e+0n3HsK
WHd4610k56Wd7hF2LIruGrfjambXuAW5cXNhsRg3udBynHmzAUfrC1eTa3F+50KA
NJAQyuGzHUyyd/FP5IWwhKCK65QKnhEx01TWFsdJznELPjud0BWVMsCZ7AhhcCA9
L/Kw05K93OOSOH9wNCPGd8JDXLw10dRIrrY0NfgFEF9UvE5jB79AjaRAwll1k3nT
DZN7M/tUkMX5Zg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 13:47:22 2026 by rpki-client