Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
File: 6OcnETayGhWK70CdMOLGAB1bDak.mft (raw, json)
Hash identifier: vW80ALdaqTxHjnJVXzaZpvgOqTG+U0rNKMC+rRqG9x4=
Subject key identifier: 13:D0:59:BA:0D:3F:31:B8:E0:0A:F0:38:6E:79:1E:E2:6F:38:89:FF
Authority key identifier: E8:E7:27:11:36:B2:1A:15:8A:EF:40:9D:30:E2:C6:00:1D:5B:0D:A9
Certificate issuer: /CN=e8e7271136b21a158aef409d30e2c6001d5b0da9
Certificate serial: 01A0D426D4E43554F5AE7C25A1C7C73879BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
Manifest number: 13C4
Signing time: Thu 24 Sep 2026 16:01:49 +0000
Manifest this update: Thu 24 Sep 2026 16:01:49 +0000
Manifest next update: Fri 25 Sep 2026 16:01:49 +0000
Files and hashes: 1: 6OcnETayGhWK70CdMOLGAB1bDak.crl (hash: 7Zzh31AMpCpb4ekdysqUOHs7cikSx9MFTo9c2wS3v6w=)
2: BgOBkzwZiai7TWETAvn_IWE9YOQ.roa (hash: eYdWajw2NgiVsKV9NY6WqUM6UWy1PFC1+5llbrmRKeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:26:d4:e4:35:54:f5:ae:7c:25:a1:c7:c7:38:79:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8e7271136b21a158aef409d30e2c6001d5b0da9
Validity
Not Before: Sep 24 16:01:49 2026 GMT
Not After : Sep 25 16:01:49 2026 GMT
Subject: CN=13d059ba0d3f31b8e00af0386e791ee26f3889ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:29:a2:ee:f3:54:8e:d9:02:43:b5:f8:a5:d1:
b2:5e:39:fa:13:21:5f:cf:5b:b2:96:21:a3:44:0e:
3a:83:18:62:39:27:70:5b:e0:19:5c:06:9a:3b:79:
3d:51:e2:69:37:60:74:24:cb:cc:9a:01:cd:4d:b6:
17:e1:ec:49:4c:1e:4b:a3:6c:52:cd:7b:d1:be:e2:
1d:52:28:53:f9:e1:7d:8d:b6:b1:ca:03:8b:ca:11:
e2:7c:d5:99:92:c4:55:2b:f5:09:50:63:2f:dd:ec:
6e:84:b8:44:09:80:40:89:4f:f2:50:8f:00:25:4b:
7d:75:2d:20:6d:69:2c:ca:86:21:25:4c:c2:22:08:
02:35:2f:9b:99:76:07:51:12:86:71:bd:b4:12:45:
e6:4f:0a:ff:21:c3:7a:fb:d7:41:9d:22:a7:93:01:
53:01:34:82:ae:97:e5:12:67:d9:36:55:12:86:6a:
75:eb:e2:b5:b8:42:80:ff:8c:b7:2e:6e:0c:8f:6b:
2d:7f:95:40:6a:82:bc:b5:ee:21:27:22:0a:b5:4c:
fc:8e:87:c8:e0:24:7c:ef:74:f0:e1:48:05:3d:b5:
c9:af:8b:01:a8:61:6d:22:8d:45:80:40:00:ce:cf:
27:e5:a1:a6:28:64:77:28:54:4a:10:b7:aa:28:f7:
f4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D0:59:BA:0D:3F:31:B8:E0:0A:F0:38:6E:79:1E:E2:6F:38:89:FF
X509v3 Authority Key Identifier:
keyid:E8:E7:27:11:36:B2:1A:15:8A:EF:40:9D:30:E2:C6:00:1D:5B:0D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:98:0a:54:30:66:58:1a:a3:25:e0:ae:7b:41:1d:00:85:53:
29:91:9d:99:14:c0:f3:41:53:71:63:db:09:8b:5d:27:1e:b8:
6b:95:49:35:62:4d:55:35:4a:13:e5:3b:0c:42:71:23:b5:17:
a3:f0:95:88:be:fd:e2:44:c0:c1:92:f4:cb:4c:f5:b1:17:c9:
74:3f:bf:ff:2d:69:3f:a0:22:86:99:9d:2f:a7:9c:22:58:26:
06:5d:bc:1b:e1:7d:32:44:57:c2:c7:09:1b:43:08:e0:0e:23:
d8:33:53:ba:f1:2e:3d:92:3e:d7:0e:f3:7c:27:b0:85:aa:e9:
64:d8:cd:d6:92:9e:37:38:cd:60:b1:19:1d:63:fc:e7:ab:61:
2e:27:ad:2a:90:ef:e1:da:eb:9d:4f:21:11:91:87:72:bb:5d:
4e:e5:4f:2d:c7:46:58:2f:a9:0b:d5:c7:dc:b0:23:8e:e5:b7:
3e:46:51:fd:63:cf:f6:cd:de:80:79:3e:fc:8e:4a:0e:7f:46:
db:d7:41:21:5e:58:89:b8:6e:db:b3:87:68:b1:7b:78:5a:d7:
98:e9:d9:a4:a4:85:1c:34:02:48:8d:1c:a5:18:20:6c:c3:6d:
52:e5:88:78:e2:31:26:16:ba:25:4d:11:ca:18:e1:aa:92:bf:
8e:a5:54:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:17:49 2026 by rpki-client