Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
File: 6OcnETayGhWK70CdMOLGAB1bDak.mft (raw, json)
Hash identifier: HWD+G6i9QMNEf/Cc+GERpeEoqd9aFVkuH8kSjRYQ2YY=
Subject key identifier: 66:DD:78:8F:6A:89:7D:DC:D9:1C:FC:96:17:5F:92:E4:9D:81:7F:8A
Authority key identifier: E8:E7:27:11:36:B2:1A:15:8A:EF:40:9D:30:E2:C6:00:1D:5B:0D:A9
Certificate issuer: /CN=e8e7271136b21a158aef409d30e2c6001d5b0da9
Certificate serial: 019FA8D094E38F5B2099A00E8249C914C5B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
Manifest number: 1329
Signing time: Tue 28 Jul 2026 13:01:09 +0000
Manifest this update: Tue 28 Jul 2026 13:01:09 +0000
Manifest next update: Wed 29 Jul 2026 13:01:09 +0000
Files and hashes: 1: 6OcnETayGhWK70CdMOLGAB1bDak.crl (hash: URuLElWewUwtI3y1MqY6X1DrDI7aBoHTYXs2syOCp+E=)
2: BgOBkzwZiai7TWETAvn_IWE9YOQ.roa (hash: eYdWajw2NgiVsKV9NY6WqUM6UWy1PFC1+5llbrmRKeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:94:e3:8f:5b:20:99:a0:0e:82:49:c9:14:c5:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8e7271136b21a158aef409d30e2c6001d5b0da9
Validity
Not Before: Jul 28 13:01:09 2026 GMT
Not After : Jul 29 13:01:09 2026 GMT
Subject: CN=66dd788f6a897ddcd91cfc96175f92e49d817f8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5e:16:61:0d:52:e7:34:ce:ec:e5:05:d7:97:
34:51:11:f7:c1:97:cd:56:76:69:92:88:56:29:c1:
4c:94:6e:2e:3b:f4:df:62:4e:c2:b9:86:b1:02:de:
60:45:1e:a6:4c:b4:ab:09:34:bd:41:60:7a:66:41:
f1:50:16:5e:87:f4:c4:31:28:6c:80:14:0f:47:4b:
f8:0b:59:c9:fb:7a:93:40:bf:33:dd:b8:26:7c:25:
49:05:23:c5:c7:b7:ee:d6:fb:d3:3b:3b:35:e4:c7:
15:a4:4e:d1:99:f2:36:fd:23:49:2f:ff:5f:64:fd:
96:1d:e0:a6:9c:c3:0b:0f:26:80:e4:5f:6b:cc:66:
b3:50:2d:6f:f7:ac:26:f3:0a:2b:ed:dd:f0:eb:e2:
33:df:ac:a0:4e:51:c9:fe:1e:ca:16:66:1b:9d:cc:
90:85:0c:a1:41:45:3b:a0:9f:77:9f:b8:15:57:bb:
95:fe:b6:6b:8f:14:82:f4:c1:22:81:98:60:0d:84:
8d:fc:32:2f:61:5a:a5:27:68:b3:d7:05:5e:14:24:
49:23:e0:73:1a:23:65:de:35:e8:e1:9c:80:36:33:
a5:c4:e3:1d:13:87:89:70:38:88:e7:b8:f5:4d:68:
ed:ed:51:02:e8:86:9e:74:e3:17:52:1e:66:20:bc:
f3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:DD:78:8F:6A:89:7D:DC:D9:1C:FC:96:17:5F:92:E4:9D:81:7F:8A
X509v3 Authority Key Identifier:
keyid:E8:E7:27:11:36:B2:1A:15:8A:EF:40:9D:30:E2:C6:00:1D:5B:0D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:b6:d1:3d:b7:2e:15:0a:fb:c6:e1:24:07:9c:0d:68:c4:de:
a7:d3:ef:26:04:ba:aa:5a:0d:34:34:6f:f1:9e:5b:47:a8:92:
0a:ce:3c:20:be:38:53:54:c7:a7:f5:05:02:b8:57:3a:dd:b3:
4f:fc:a4:f8:57:96:d3:11:e2:61:a7:6b:41:f8:04:f4:02:6f:
94:7a:00:8b:67:12:aa:dd:6c:c1:fd:f6:3b:db:94:49:9a:be:
77:8a:42:cf:fc:14:17:df:75:a0:a1:b4:54:8b:91:b0:a2:b4:
14:ec:b2:3a:3b:d9:e3:76:15:38:b8:ae:d7:41:4c:47:0e:3e:
39:c5:4f:98:96:84:c4:81:f0:f2:11:90:6f:a2:84:82:37:72:
dd:6b:04:4d:d6:6e:36:06:c9:bd:2d:f0:0a:2d:ff:f9:fc:71:
1d:26:3d:c4:11:d4:06:8f:f7:75:d8:9f:54:5a:79:35:49:33:
a4:4b:c4:25:7a:1d:38:ab:55:17:8b:29:fd:f0:c8:33:1b:ee:
23:86:b2:90:1b:75:79:d6:de:48:2b:57:fb:e1:da:d8:8b:72:
d1:6d:d4:78:fc:20:f7:74:f1:ec:7a:ba:74:23:5e:8f:a6:d9:
a0:76:d0:d4:a5:1e:09:a0:86:61:ac:04:f1:f7:6f:d7:7a:1c:
50:52:c3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:26:04 2026 by rpki-client