
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
File: 6oRgBs-LnjiPMUUTWAklAs7METY.mft (raw, json)
Hash identifier: h3mKusajbXv7JqMhtObiyQPAR70QeSzbSo5N8KMUvhQ=
Subject key identifier: C1:13:72:A7:7A:5B:42:00:A8:0F:EE:F5:9E:32:DC:3D:32:67:F1:9F
Authority key identifier: EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36
Certificate issuer: /CN=ea846006cf8b9e388f31451358092502cecc1136
Certificate serial: 01A08BD6019E54301312E709EE81D1507CB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
Manifest number: 124D
Signing time: Thu 10 Sep 2026 15:00:53 +0000
Manifest this update: Thu 10 Sep 2026 15:00:53 +0000
Manifest next update: Fri 11 Sep 2026 15:00:53 +0000
Files and hashes: 1: 6oRgBs-LnjiPMUUTWAklAs7METY.crl (hash: Tce3jpbx8wN+umUnCYPSEnBrOd3cJcgTMNqFCI2mMjc=)
2: BDoL8rUpvbaK_16BWlbfMCNWUSU.roa (hash: GfKO3arzoWGyw+NdQY8Rv86I2fy83YtHFt/TTLJyJno=)
3: hvVtewn6w22bnIW8yznhNvKtiF4.roa (hash: m3PFir5NovTfkiQPZLXiwU+9sgPb6SDjnc3/rkv8wo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d6:01:9e:54:30:13:12:e7:09:ee:81:d1:50:7c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea846006cf8b9e388f31451358092502cecc1136
Validity
Not Before: Sep 10 15:00:53 2026 GMT
Not After : Sep 11 15:00:53 2026 GMT
Subject: CN=c11372a77a5b4200a80feef59e32dc3d3267f19f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ee:89:78:2c:a9:53:48:7e:b5:fe:73:ed:1e:
86:19:96:5f:d7:98:5b:0b:10:93:ef:f6:d0:4b:fd:
61:8c:25:c6:f4:e2:60:1e:56:7b:50:c2:d4:5b:5d:
aa:24:a6:b7:76:1b:63:97:ad:16:ea:17:f0:95:e2:
e1:a7:80:71:04:1e:32:95:5b:f3:f3:fb:49:e2:f1:
e4:1e:c7:84:54:39:52:64:0d:8a:ab:63:bd:51:6c:
97:be:0e:00:1f:b0:48:e5:1f:a2:0b:90:c4:2d:f0:
7e:4b:22:1d:d6:d4:1f:33:fd:f4:e2:65:d9:bb:9f:
a6:d8:e5:cb:e5:c1:5c:89:e8:b1:65:cd:2b:ba:c2:
88:33:8f:4b:ef:f0:6a:17:e1:9e:b4:b1:62:a7:6c:
9c:c6:f5:35:db:e0:f1:cf:5e:0c:86:2f:e3:1b:58:
0d:e8:b7:20:ee:ae:be:b7:2b:d8:62:66:4b:99:c2:
0c:bb:1c:3f:34:ba:05:0b:46:78:80:28:7d:79:31:
87:ec:9a:78:da:e4:77:36:d2:84:68:d9:6a:5e:49:
2e:d4:56:b8:ad:2a:95:0a:d9:79:a8:30:7a:50:8c:
9c:46:d0:a2:02:d1:c0:5f:84:dc:d0:e3:4c:6c:81:
94:32:c7:a8:e7:c8:7d:7e:79:7b:51:16:42:07:6b:
e6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:13:72:A7:7A:5B:42:00:A8:0F:EE:F5:9E:32:DC:3D:32:67:F1:9F
X509v3 Authority Key Identifier:
keyid:EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:f7:fd:02:74:a2:55:6a:7c:cd:e0:9c:2c:f2:3f:81:5d:db:
6c:8e:79:6f:60:3e:d2:1e:3d:e1:4e:5f:3d:1c:26:83:39:2d:
4d:76:93:dd:92:1c:ff:95:94:4b:e8:5b:96:9e:cf:24:19:86:
63:97:f9:0f:8f:c0:45:62:ef:59:38:2c:9d:b1:bc:80:17:2b:
8a:15:82:e7:69:d0:6d:f0:76:27:1f:b2:17:6d:ee:76:4e:fe:
85:04:e4:05:d4:43:1f:b7:56:a1:6d:16:30:38:26:fa:4a:df:
34:aa:38:0c:3e:34:b0:b5:62:eb:b5:a1:18:8a:5a:36:c9:b7:
64:80:ee:3d:54:16:6e:d3:8a:e5:b2:80:f8:4b:49:79:d3:6f:
2e:bd:36:fa:27:65:a6:42:7e:80:b3:fb:93:14:d6:48:a9:eb:
94:c4:73:5d:3a:f1:7f:fd:fc:e6:2a:42:4f:db:6c:c5:02:c7:
60:77:5e:73:06:dc:2f:9c:80:1a:37:11:9f:c6:9f:1a:d4:f2:
98:36:46:cf:37:72:3e:3a:49:09:7b:7f:22:89:9b:db:de:9e:
39:9a:98:16:ef:ee:9b:a5:6b:84:ef:b0:fc:75:6e:9d:e4:3f:
a6:a3:06:8a:99:89:48:f1:55:f2:fc:75:e1:a1:b1:b1:6a:36:
4c:f5:a1:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCL1gGeVDATEucJ7oHRUHy4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhODQ2MDA2Y2Y4YjllMzg4ZjMxNDUxMzU4MDkyNTAyY2Vj
YzExMzYwHhcNMjYwOTEwMTUwMDUzWhcNMjYwOTExMTUwMDUzWjAzMTEwLwYDVQQD
EyhjMTEzNzJhNzdhNWI0MjAwYTgwZmVlZjU5ZTMyZGMzZDMyNjdmMTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAve6JeCypU0h+tf5z7R6GGZZf15hb
CxCT7/bQS/1hjCXG9OJgHlZ7UMLUW12qJKa3dhtjl60W6hfwleLhp4BxBB4ylVvz
8/tJ4vHkHseEVDlSZA2Kq2O9UWyXvg4AH7BI5R+iC5DELfB+SyId1tQfM/304mXZ
u5+m2OXL5cFcieixZc0rusKIM49L7/BqF+GetLFip2ycxvU12+Dxz14Mhi/jG1gN
6Lcg7q6+tyvYYmZLmcIMuxw/NLoFC0Z4gCh9eTGH7Jp42uR3NtKEaNlqXkku1Fa4
rSqVCtl5qDB6UIycRtCiAtHAX4Tc0ONMbIGUMseo58h9fnl7URZCB2vmkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMETcqd6W0IAqA/u9Z4y3D0yZ/GfMB8GA1UdIwQY
MBaAFOqEYAbPi544jzFFE1gJJQLOzBE2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNm9SZ0JzLUxuamlQTVVVVFdBa2xBczdNRVRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8yMWNkNzctMWVjYS00NmI5LTlhYmEt
Zjc0Y2NjYzRlMGExLzEvNm9SZ0JzLUxuamlQTVVVVFdBa2xBczdNRVRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8yMWNkNzctMWVjYS00NmI5LTlhYmEtZjc0Y2NjYzRlMGEx
LzEvNm9SZ0JzLUxuamlQTVVVVFdBa2xBczdNRVRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMff9AnSi
VWp8zeCcLPI/gV3bbI55b2A+0h494U5fPRwmgzktTXaT3ZIc/5WUS+hblp7PJBmG
Y5f5D4/ARWLvWTgsnbG8gBcrihWC52nQbfB2Jx+yF23udk7+hQTkBdRDH7dWoW0W
MDgm+krfNKo4DD40sLVi67WhGIpaNsm3ZIDuPVQWbtOK5bKA+EtJedNvLr02+idl
pkJ+gLP7kxTWSKnrlMRzXTrxf/385ipCT9tsxQLHYHdecwbcL5yAGjcRn8afGtTy
mDZGzzdyPjpJCXt/Iomb296eOZqYFu/um6VrhO+w/HVuneQ/pqMGipmJSPFV8vx1
4aGxsWo2TPWhjQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 23:13:10 2026 by rpki-client