Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
File: 6OcnETayGhWK70CdMOLGAB1bDak.mft (raw, json)
Hash identifier: uItwoV8T1+QqDO2WHf/cgYl3wA2lrCW1og+0n4hDKGo=
Subject key identifier: 5B:FF:46:36:F0:09:94:06:B3:08:9C:E9:A5:36:68:D5:91:6A:5A:38
Authority key identifier: E8:E7:27:11:36:B2:1A:15:8A:EF:40:9D:30:E2:C6:00:1D:5B:0D:A9
Certificate issuer: /CN=e8e7271136b21a158aef409d30e2c6001d5b0da9
Certificate serial: 019CADFE38EDA726547970C403443B614C24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
Manifest number: 119E
Signing time: Mon 02 Mar 2026 10:00:44 +0000
Manifest this update: Mon 02 Mar 2026 10:00:44 +0000
Manifest next update: Tue 03 Mar 2026 10:00:44 +0000
Files and hashes: 1: 6OcnETayGhWK70CdMOLGAB1bDak.crl (hash: WqXIlCyK1MDZK2qubTsnrxnxRZRQuiJJ/dl+AKV8JhY=)
2: BgOBkzwZiai7TWETAvn_IWE9YOQ.roa (hash: eYdWajw2NgiVsKV9NY6WqUM6UWy1PFC1+5llbrmRKeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:38:ed:a7:26:54:79:70:c4:03:44:3b:61:4c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8e7271136b21a158aef409d30e2c6001d5b0da9
Validity
Not Before: Mar 2 10:00:44 2026 GMT
Not After : Mar 3 10:00:44 2026 GMT
Subject: CN=5bff4636f0099406b3089ce9a53668d5916a5a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b1:e1:4b:6f:4e:19:be:99:70:6d:8d:cc:7c:
4f:2b:8c:17:e1:c3:23:3e:6f:cb:e7:9c:25:b1:65:
8a:a7:c3:55:1b:1c:86:3a:26:ba:80:c2:06:38:c2:
51:6c:18:01:a3:c5:a6:2f:ab:3a:de:58:2b:6d:5d:
fd:9d:14:9b:e4:53:f3:e1:2c:48:eb:56:2a:f7:c1:
d8:fd:a0:f5:d0:bc:27:a6:da:17:27:16:b2:4e:a2:
c6:2d:4b:5d:e9:78:bf:85:a1:1e:4a:3b:40:41:fa:
cb:35:20:7d:8b:11:15:98:be:72:e1:fd:c4:bb:48:
d1:8a:70:94:ea:0b:cf:b1:97:21:91:c9:7e:09:b4:
e6:f9:50:77:4c:d1:1a:0d:3f:04:49:9b:0a:6d:80:
fb:65:71:ee:79:43:4d:7f:50:dc:c3:b5:d3:85:4d:
68:61:20:f2:b4:dc:dd:21:0a:20:a1:bf:a5:34:9f:
b9:f6:bd:84:67:1d:51:1d:92:a6:62:5b:42:1b:b6:
9e:e9:65:65:8f:d3:26:b7:e9:df:51:16:58:c1:f9:
5f:24:fc:e8:24:fd:e0:08:99:c6:4c:bf:49:49:3f:
f9:2b:c2:6a:d9:53:d4:20:72:3a:13:a9:85:e1:48:
11:3a:79:24:e0:39:41:98:66:54:64:07:25:17:7e:
29:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:FF:46:36:F0:09:94:06:B3:08:9C:E9:A5:36:68:D5:91:6A:5A:38
X509v3 Authority Key Identifier:
keyid:E8:E7:27:11:36:B2:1A:15:8A:EF:40:9D:30:E2:C6:00:1D:5B:0D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ce:6b:7b:d6:e3:82:8c:f6:75:03:96:b7:88:5e:5e:15:15:
c7:41:f6:a2:71:58:66:de:02:d7:68:47:87:2c:80:30:54:c4:
95:a2:e6:8d:64:7b:c8:52:51:5f:1c:33:74:8a:57:3e:cd:09:
12:9d:3b:62:25:2d:d7:9a:c9:a2:18:8f:7a:7f:73:50:cb:f8:
f2:c3:10:5d:4d:d6:a8:9a:96:35:d3:96:1b:df:4e:c1:d6:72:
26:4c:6c:91:ce:a7:31:c0:0c:84:35:aa:3b:3b:cf:62:8b:61:
fc:e7:f9:f5:bb:0d:20:e5:fb:0f:f3:fd:19:61:85:81:9e:79:
db:a2:9f:ab:5a:68:f8:96:b0:c3:dc:d6:af:f3:37:38:98:89:
29:a3:81:03:68:b3:92:3b:32:0a:a0:fa:79:5d:7d:01:a5:04:
52:3b:6a:1f:6a:59:30:74:d4:7c:2e:ef:86:9b:8c:7b:5d:48:
94:f7:65:eb:15:6f:1d:73:82:85:ee:5e:d4:58:1c:7f:5c:0b:
4d:bb:2f:2e:9c:ba:8d:ef:2f:ef:7c:e7:0c:1b:ad:31:fb:1e:
86:d4:eb:e1:43:86:d4:c1:a7:1b:c1:da:86:80:f3:bf:18:df:
8d:dc:a8:49:e3:be:be:97:c8:e9:1c:77:76:97:bc:b2:fa:11:
e2:cf:89:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:54:23 2026 by rpki-client