Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
File: 6OcnETayGhWK70CdMOLGAB1bDak.mft (raw, json)
Hash identifier: N9xpZl3AKlygfhvOivGCU6FuQZG3zHm+yUiOzJ8NrYo=
Subject key identifier: FA:E4:24:6B:3B:07:C7:3D:0E:D7:F7:D0:63:FF:B6:81:86:10:BE:DF
Authority key identifier: E8:E7:27:11:36:B2:1A:15:8A:EF:40:9D:30:E2:C6:00:1D:5B:0D:A9
Certificate issuer: /CN=e8e7271136b21a158aef409d30e2c6001d5b0da9
Certificate serial: 01A18B9CB5ED3626690519CF0BC1909DAA8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
Manifest number: 1423
Signing time: Fri 30 Oct 2026 07:01:05 +0000
Manifest this update: Fri 30 Oct 2026 07:01:05 +0000
Manifest next update: Sat 31 Oct 2026 07:01:05 +0000
Files and hashes: 1: 6OcnETayGhWK70CdMOLGAB1bDak.crl (hash: 8C/Sp1Tmsq/LD3OZr/VX42PwbwwrFg/ycYGs8Cwz2UQ=)
2: BgOBkzwZiai7TWETAvn_IWE9YOQ.roa (hash: eYdWajw2NgiVsKV9NY6WqUM6UWy1PFC1+5llbrmRKeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 07:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8b:9c:b5:ed:36:26:69:05:19:cf:0b:c1:90:9d:aa:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8e7271136b21a158aef409d30e2c6001d5b0da9
Validity
Not Before: Oct 30 07:01:05 2026 GMT
Not After : Oct 31 07:01:05 2026 GMT
Subject: CN=fae4246b3b07c73d0ed7f7d063ffb6818610bedf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9f:29:cb:2c:40:e2:3a:94:87:58:33:33:7d:
2b:85:84:4f:cc:88:d7:4f:ba:28:f7:f3:cd:44:34:
5e:b1:30:cd:43:0f:7b:42:0c:0e:f8:db:32:ab:28:
46:35:a7:3e:89:4c:8b:e3:6a:93:ff:22:97:77:be:
c1:e8:30:66:c7:d1:50:83:d1:bd:e0:8d:10:94:b5:
e0:9e:d6:8b:29:35:16:96:27:cf:21:1e:9d:35:32:
84:f9:ce:54:e0:bc:00:0b:77:91:48:1c:27:9a:55:
bd:52:d3:fe:dd:4c:5c:68:ae:51:81:15:1c:91:02:
da:29:ab:a8:b1:b1:84:8e:7a:c6:34:b2:4b:d6:2d:
6f:ee:77:90:77:68:60:40:4c:96:28:11:ee:21:28:
69:58:74:90:69:fc:59:0c:91:0d:7e:a8:cb:12:e4:
1b:02:e7:11:7c:c4:80:ae:cb:83:fa:13:16:2c:1b:
b1:32:68:b4:fd:10:b2:5e:56:4e:9e:3a:37:36:94:
34:ef:2c:90:b7:fa:44:4e:50:c0:48:4a:b6:6f:a8:
f0:70:63:1c:78:cd:39:7d:25:4a:0c:4c:06:d2:ce:
3d:dc:d5:f8:2c:ff:9a:f6:a3:27:88:35:43:ca:cc:
03:f4:57:b1:f6:10:65:6c:a1:23:40:ad:2c:58:74:
a2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E4:24:6B:3B:07:C7:3D:0E:D7:F7:D0:63:FF:B6:81:86:10:BE:DF
X509v3 Authority Key Identifier:
keyid:E8:E7:27:11:36:B2:1A:15:8A:EF:40:9D:30:E2:C6:00:1D:5B:0D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:b0:26:85:10:6b:d6:9d:9a:5a:cc:2b:db:74:56:df:c1:b5:
6c:9c:73:15:81:ca:d1:1b:50:ec:b5:a0:67:4d:bd:8e:4c:ff:
a9:b8:39:94:b4:ca:5c:1b:2e:46:20:9a:2e:2e:fc:7e:69:db:
ea:c7:5a:a7:69:99:9c:2e:8d:93:ed:32:be:3f:45:83:e4:4b:
b3:9b:75:fe:b0:8c:d0:22:a8:1c:3f:7b:50:3d:1e:1b:a0:0a:
4b:21:b5:3e:58:e5:83:ec:a2:56:03:11:f1:04:19:34:f4:38:
d2:02:37:91:fe:87:d0:27:5c:94:64:f4:68:f1:03:f0:b1:92:
5b:63:8f:3e:46:b5:76:58:d9:04:b9:1b:a4:b7:4e:39:a2:3c:
d0:bf:59:1a:e9:c3:53:88:51:be:98:25:aa:9e:10:06:47:6d:
94:41:f7:80:5a:14:1a:5d:b1:a0:a0:03:df:60:bb:72:65:8d:
53:27:e7:49:21:f6:ad:ef:8d:51:21:be:fe:27:30:4f:cc:ae:
e8:81:84:4f:97:ac:58:77:52:38:f2:31:b0:20:57:3d:06:1b:
62:09:dd:92:8b:28:af:f9:b1:6f:a0:c3:b9:60:55:39:db:15:
46:6b:e5:7c:0a:b4:5e:68:cb:ac:d4:3e:4f:ec:52:0a:35:13:
e5:0f:66:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGLnLXtNiZpBRnPC8GQnaqMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4ZTcyNzExMzZiMjFhMTU4YWVmNDA5ZDMwZTJjNjAwMWQ1
YjBkYTkwHhcNMjYxMDMwMDcwMTA1WhcNMjYxMDMxMDcwMTA1WjAzMTEwLwYDVQQD
EyhmYWU0MjQ2YjNiMDdjNzNkMGVkN2Y3ZDA2M2ZmYjY4MTg2MTBiZWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlp8pyyxA4jqUh1gzM30rhYRPzIjX
T7oo9/PNRDResTDNQw97QgwO+NsyqyhGNac+iUyL42qT/yKXd77B6DBmx9FQg9G9
4I0QlLXgntaLKTUWlifPIR6dNTKE+c5U4LwAC3eRSBwnmlW9UtP+3UxcaK5RgRUc
kQLaKauosbGEjnrGNLJL1i1v7neQd2hgQEyWKBHuIShpWHSQafxZDJENfqjLEuQb
AucRfMSArsuD+hMWLBuxMmi0/RCyXlZOnjo3NpQ07yyQt/pETlDASEq2b6jwcGMc
eM05fSVKDEwG0s493NX4LP+a9qMniDVDyswD9Fex9hBlbKEjQK0sWHSirwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPrkJGs7B8c9Dtf30GP/toGGEL7fMB8GA1UdIwQY
MBaAFOjnJxE2shoViu9AnTDixgAdWw2pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk9jbkVUYXlHaFdLNzBDZE1PTEdBQjFiRGFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9jYmY0MjUtYjk1OC00ZTQ5LTljOTYt
ODM1NmQyZDQyNzcxLzEvNk9jbkVUYXlHaFdLNzBDZE1PTEdBQjFiRGFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9jYmY0MjUtYjk1OC00ZTQ5LTljOTYtODM1NmQyZDQyNzcx
LzEvNk9jbkVUYXlHaFdLNzBDZE1PTEdBQjFiRGFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABLAmhRBr
1p2aWswr23RW38G1bJxzFYHK0RtQ7LWgZ029jkz/qbg5lLTKXBsuRiCaLi78fmnb
6sdap2mZnC6Nk+0yvj9Fg+RLs5t1/rCM0CKoHD97UD0eG6AKSyG1Pljlg+yiVgMR
8QQZNPQ40gI3kf6H0CdclGT0aPED8LGSW2OPPka1dljZBLkbpLdOOaI80L9ZGunD
U4hRvpglqp4QBkdtlEH3gFoUGl2xoKAD32C7cmWNUyfnSSH2re+NUSG+/icwT8yu
6IGET5esWHdSOPIxsCBXPQYbYgndkosor/mxb6DDuWBVOdsVRmvlfAq0XmjLrNQ+
T+xSCjUT5Q9m1g==
-----END CERTIFICATE-----
Generated at Fri Oct 30 14:22:05 2026 by rpki-client