Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
File: 6OcnETayGhWK70CdMOLGAB1bDak.mft (raw, json)
Hash identifier: bpQTWSnpLKedEiat6xZ4rTNA1xRQQHA/5SCKrFph5oo=
Subject key identifier: 86:EC:C7:D1:3E:8B:95:2C:10:AF:9A:99:D7:9C:26:80:A8:9F:6C:39
Authority key identifier: E8:E7:27:11:36:B2:1A:15:8A:EF:40:9D:30:E2:C6:00:1D:5B:0D:A9
Certificate issuer: /CN=e8e7271136b21a158aef409d30e2c6001d5b0da9
Certificate serial: 019D27A86E23CC4A21F7AFF707388E6956AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
Manifest number: 11DD
Signing time: Thu 26 Mar 2026 01:00:42 +0000
Manifest this update: Thu 26 Mar 2026 01:00:42 +0000
Manifest next update: Fri 27 Mar 2026 01:00:42 +0000
Files and hashes: 1: 6OcnETayGhWK70CdMOLGAB1bDak.crl (hash: nCK20s4M7SxDli8bj7dEB7umG5j5OajGiIeRY+8b968=)
2: BgOBkzwZiai7TWETAvn_IWE9YOQ.roa (hash: eYdWajw2NgiVsKV9NY6WqUM6UWy1PFC1+5llbrmRKeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:6e:23:cc:4a:21:f7:af:f7:07:38:8e:69:56:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8e7271136b21a158aef409d30e2c6001d5b0da9
Validity
Not Before: Mar 26 01:00:42 2026 GMT
Not After : Mar 27 01:00:42 2026 GMT
Subject: CN=86ecc7d13e8b952c10af9a99d79c2680a89f6c39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7c:55:63:9b:08:99:0e:73:30:7f:c0:0f:7d:
46:a7:27:78:4b:a3:cb:c2:71:e3:b4:1e:81:43:7a:
e5:88:e5:40:05:99:8a:8f:01:22:7a:ff:13:ec:77:
97:3e:cb:8d:88:a5:f3:03:33:23:2f:5c:3c:d7:b3:
ac:7b:14:70:53:b2:c0:1f:12:c6:b1:02:2b:5e:4b:
4a:8f:e2:9d:7b:78:58:b7:a3:1a:1c:c7:f8:49:d3:
47:a3:d9:b4:e3:db:f1:67:30:10:5b:b9:58:d7:96:
f7:3e:eb:46:64:39:6e:6f:19:48:fe:a3:53:4d:b1:
96:26:e2:4b:57:c5:e1:fc:5b:fd:d3:1c:ed:42:e4:
51:3e:fe:bc:65:16:9a:b3:6b:1b:a8:5d:29:90:94:
b9:dc:26:4b:11:19:29:a4:69:d7:c6:84:30:9c:4e:
56:f5:b8:f2:aa:af:02:54:9a:bd:9c:90:6a:fd:49:
ee:5d:a6:bd:19:a7:aa:29:85:da:8e:c2:5e:5a:cc:
fe:29:c6:68:87:4e:3c:da:c0:c5:16:e9:6b:01:c9:
ea:18:69:a3:f6:f2:ce:11:e3:b7:49:31:08:8e:ff:
95:8a:99:74:86:11:44:b2:0b:88:02:3c:8f:de:93:
de:62:a2:24:bc:94:d0:93:18:86:76:a2:5e:87:ea:
48:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:EC:C7:D1:3E:8B:95:2C:10:AF:9A:99:D7:9C:26:80:A8:9F:6C:39
X509v3 Authority Key Identifier:
keyid:E8:E7:27:11:36:B2:1A:15:8A:EF:40:9D:30:E2:C6:00:1D:5B:0D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:22:d5:12:ba:84:7a:47:15:ae:74:8a:4d:f0:9d:5c:df:e4:
d7:3a:61:8a:78:b2:6d:bf:49:3c:8f:be:33:ba:af:37:f8:12:
c5:4b:b9:35:b0:a4:72:87:d0:c9:ab:ba:53:1a:09:fd:a8:36:
dd:96:83:08:63:23:c2:75:2b:ed:64:56:51:76:9b:4c:2b:cf:
89:52:76:ef:0b:93:1e:46:d2:e9:fd:77:d9:24:92:72:e6:df:
6f:3a:9e:30:b3:48:36:6d:28:ff:f3:0d:a5:31:86:78:85:89:
5b:40:da:0f:c6:3e:9c:0e:f2:0b:f2:7b:f8:b8:72:da:65:28:
04:3e:df:67:e0:66:7c:39:13:9d:06:67:70:cb:04:f9:3f:36:
68:f7:d6:b3:6a:1f:13:22:b3:80:43:f7:bd:b2:56:10:d0:bb:
81:c5:0c:05:d9:a6:7b:55:d3:c5:11:23:51:b8:c8:5e:49:07:
1f:6f:32:51:8d:54:5e:01:e9:3e:29:69:bd:2f:2b:94:4b:e6:
b0:60:38:f1:17:ef:79:fe:04:8e:a6:09:68:73:45:04:9d:85:
dd:df:17:f9:90:d7:87:f0:7c:7e:86:f2:43:39:10:33:04:0d:
ef:4b:74:f7:21:32:1d:e0:b3:ef:ab:36:1e:53:57:e6:56:6f:
37:a8:2c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:25:03 2026 by rpki-client