Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
File: 6OcnETayGhWK70CdMOLGAB1bDak.mft (raw, json)
Hash identifier: Ol7ql+XdkYIqUoPEjwSyuyNfTZ5/wo/55uYbKLuHjqY=
Subject key identifier: 3C:68:A4:8E:5B:07:33:8F:7F:EC:8A:DC:CD:6B:E4:2A:21:43:A6:CA
Authority key identifier: E8:E7:27:11:36:B2:1A:15:8A:EF:40:9D:30:E2:C6:00:1D:5B:0D:A9
Certificate issuer: /CN=e8e7271136b21a158aef409d30e2c6001d5b0da9
Certificate serial: 019E1CEB994EF54E45C198CC5D6B2004945E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
Manifest number: 125C
Signing time: Tue 12 May 2026 16:01:02 +0000
Manifest this update: Tue 12 May 2026 16:01:02 +0000
Manifest next update: Wed 13 May 2026 16:01:02 +0000
Files and hashes: 1: 6OcnETayGhWK70CdMOLGAB1bDak.crl (hash: 7I4OcYxEaMRb/EIrJnJmjThtC8Xox/Yq2KOTqf6KYgc=)
2: BgOBkzwZiai7TWETAvn_IWE9YOQ.roa (hash: eYdWajw2NgiVsKV9NY6WqUM6UWy1PFC1+5llbrmRKeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:99:4e:f5:4e:45:c1:98:cc:5d:6b:20:04:94:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8e7271136b21a158aef409d30e2c6001d5b0da9
Validity
Not Before: May 12 16:01:02 2026 GMT
Not After : May 13 16:01:02 2026 GMT
Subject: CN=3c68a48e5b07338f7fec8adccd6be42a2143a6ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9f:36:d3:b8:e3:96:2c:e4:b8:72:75:76:c6:
bd:b9:fe:a2:c0:f5:c5:6b:7d:0d:77:0b:08:e6:71:
de:33:03:d9:ff:2f:ed:c1:ba:94:1d:aa:10:ed:26:
a5:05:94:cd:4d:d1:57:45:80:b8:b0:fe:e7:24:24:
82:3f:13:90:ee:10:8d:4a:c8:6a:cb:38:83:b4:53:
39:b0:2a:19:53:4a:05:dc:e8:69:99:63:cb:18:a0:
1a:4c:c7:83:b7:00:1a:d8:e4:12:8b:45:49:9d:ec:
54:45:e5:df:8e:06:71:a7:cd:ee:5c:65:c6:17:e0:
94:57:3e:12:2d:fa:a3:98:22:80:91:dc:56:77:bd:
9f:e0:94:45:42:bd:ff:3f:be:1e:0f:17:9b:d5:be:
09:39:bf:3b:1f:2c:66:e1:9b:a9:e6:ed:2f:1b:c8:
11:66:37:8c:be:30:fc:4c:c4:d4:6a:66:1f:76:25:
33:f7:31:ba:d7:76:a1:94:c8:b7:41:5d:10:84:d8:
94:ab:b2:2f:2c:cb:8a:f6:68:0d:85:26:61:68:87:
ba:d4:aa:53:45:30:f7:62:c2:2c:9f:9f:2c:db:11:
1a:0c:83:7a:79:a6:b4:50:60:4b:84:1e:b0:cb:a8:
d5:c9:ca:a6:61:f3:69:b9:30:81:2e:e8:7c:87:c7:
d6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:68:A4:8E:5B:07:33:8F:7F:EC:8A:DC:CD:6B:E4:2A:21:43:A6:CA
X509v3 Authority Key Identifier:
keyid:E8:E7:27:11:36:B2:1A:15:8A:EF:40:9D:30:E2:C6:00:1D:5B:0D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:6d:d7:08:54:ce:1a:6a:57:43:2f:8d:22:6e:58:99:70:e5:
ef:55:ef:24:03:11:54:5e:5c:be:cf:8d:78:35:de:9b:cf:15:
9e:46:10:42:e9:5a:34:29:c4:8b:13:ae:5f:e8:87:e8:53:47:
48:62:9e:18:fe:41:65:85:6c:b9:ee:30:2b:0a:13:ef:08:53:
4b:21:59:4c:16:68:db:e6:7d:07:e3:d6:b9:76:b9:f6:a6:3a:
85:f7:0b:f1:2f:9b:69:ab:14:ef:11:af:f9:4d:e2:42:97:56:
c2:ff:aa:1a:53:be:d6:94:dd:5e:d2:82:2e:ee:be:75:ee:e3:
18:4e:65:a9:37:33:e6:4a:aa:70:a3:ea:78:72:81:f1:8b:e4:
c8:3a:9a:9e:d7:40:33:81:ae:19:a5:8b:8c:09:39:ed:88:0c:
8c:44:03:6e:1a:ae:20:e7:8a:a1:26:11:e7:12:86:4a:ee:8a:
e2:4a:5e:30:82:5c:be:dc:e3:3b:e2:e8:0e:65:d7:d1:f1:66:
16:b5:e8:15:4f:1e:3d:10:4e:af:db:a5:9c:f0:b4:d7:30:6e:
6f:0c:04:af:f2:1b:f0:8e:83:34:10:74:30:a3:63:bd:9f:49:
fa:3c:55:f2:ae:c7:74:94:47:97:d2:59:b0:20:73:4e:a2:8a:
ee:58:5a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:20:23 2026 by rpki-client