Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
File: 6OcnETayGhWK70CdMOLGAB1bDak.mft (raw, json)
Hash identifier: f0u3F+NJZ1XvC+OdmMJbUCyE7YM8mtuWAwgFpCFVHv0=
Subject key identifier: BE:2C:75:D2:28:88:C8:44:EB:F2:AD:48:9D:F2:AD:FF:E9:6A:76:29
Authority key identifier: E8:E7:27:11:36:B2:1A:15:8A:EF:40:9D:30:E2:C6:00:1D:5B:0D:A9
Certificate issuer: /CN=e8e7271136b21a158aef409d30e2c6001d5b0da9
Certificate serial: 019F8FB5AE59D6595BD26B2B49B225A78CE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
Manifest number: 131C
Signing time: Thu 23 Jul 2026 16:01:16 +0000
Manifest this update: Thu 23 Jul 2026 16:01:16 +0000
Manifest next update: Fri 24 Jul 2026 16:01:16 +0000
Files and hashes: 1: 6OcnETayGhWK70CdMOLGAB1bDak.crl (hash: g/KoY69wSQob8S9rOlbLWQ5x1fNN4xy+XHOFoiuNDIQ=)
2: BgOBkzwZiai7TWETAvn_IWE9YOQ.roa (hash: eYdWajw2NgiVsKV9NY6WqUM6UWy1PFC1+5llbrmRKeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:ae:59:d6:59:5b:d2:6b:2b:49:b2:25:a7:8c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8e7271136b21a158aef409d30e2c6001d5b0da9
Validity
Not Before: Jul 23 16:01:16 2026 GMT
Not After : Jul 24 16:01:16 2026 GMT
Subject: CN=be2c75d22888c844ebf2ad489df2adffe96a7629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e6:a5:e4:53:16:82:44:61:cf:50:05:6c:ad:
12:09:fb:57:4a:2c:b3:dd:f8:cb:d1:6f:e7:e5:b5:
50:9c:80:d2:64:c0:62:37:e6:d3:64:b1:f1:e0:45:
b9:8e:40:e8:03:9d:98:aa:92:f0:3d:41:48:d7:43:
ab:a8:d1:33:71:56:ec:61:4e:aa:0c:79:3d:14:c6:
2c:25:ba:25:ef:6f:71:82:a7:4d:09:b8:b7:d4:0a:
55:1b:ec:87:cb:a9:84:bc:39:18:f1:02:0f:ad:1e:
52:d8:0f:55:2c:46:93:e6:e4:af:e4:b4:eb:2e:0f:
ad:01:60:23:b0:1c:c9:a2:ad:ac:37:54:bb:57:eb:
64:0f:7c:d9:f6:12:5d:07:2c:cd:a2:5a:50:fe:c7:
69:b6:74:bd:48:57:f1:74:44:06:43:55:7d:b4:ac:
14:65:c9:39:d6:0e:74:89:fd:e7:4b:63:9f:2c:a1:
f2:9f:d7:af:fa:4e:28:61:bd:f4:34:6f:fc:99:cd:
94:fe:23:85:15:a6:b5:63:f4:1a:c9:bf:cb:ae:3d:
b0:66:03:2d:9c:85:b9:b9:89:d6:ad:88:b5:0f:69:
06:95:2e:21:87:76:af:7b:07:e0:76:08:a8:96:d5:
d2:23:c4:a2:60:24:ec:06:ec:a7:3b:e6:34:b9:7a:
7a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:2C:75:D2:28:88:C8:44:EB:F2:AD:48:9D:F2:AD:FF:E9:6A:76:29
X509v3 Authority Key Identifier:
keyid:E8:E7:27:11:36:B2:1A:15:8A:EF:40:9D:30:E2:C6:00:1D:5B:0D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:4c:3c:1f:58:19:ab:23:a9:fd:fb:78:c9:8c:57:d2:50:7a:
d0:ba:67:58:14:33:00:f1:40:4a:ea:b5:41:ac:24:7e:a0:95:
dd:0a:10:c6:11:ac:ed:ac:02:24:33:49:4f:74:87:9a:27:b1:
fd:da:0c:76:6f:77:e2:da:bc:af:26:72:3c:2b:89:12:52:b4:
92:50:b2:8e:77:71:e9:33:24:21:3c:06:18:3e:be:66:66:f5:
f0:74:77:a6:7d:c7:cf:b7:ab:21:0f:e1:b2:01:ed:38:36:61:
1b:14:dc:1a:39:5c:ab:9e:3f:24:03:10:80:9b:2a:f8:b2:64:
37:14:4e:2d:5b:cb:7a:3c:1c:5a:a0:3d:2b:7a:98:43:a5:f2:
36:8b:a1:86:4c:5d:b8:47:fc:0d:bb:4f:9d:a7:cb:c9:9a:5d:
02:cf:fe:65:44:78:95:97:35:2f:45:71:b0:5d:0d:39:e0:ca:
cd:4a:34:93:f8:d3:b4:39:a9:95:c0:3d:c4:31:9a:5f:d7:5c:
7d:9b:55:a3:aa:95:e1:dd:90:08:82:c0:33:a4:38:30:6c:c0:
62:2e:f8:ee:20:69:eb:6f:64:20:10:f1:c0:6e:56:db:8f:96:
b3:e3:11:d4:da:ea:84:a1:91:1e:5b:9b:57:af:85:72:23:db:
c1:af:97:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:37:09 2026 by rpki-client