Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
File: 6OcnETayGhWK70CdMOLGAB1bDak.mft (raw, json)
Hash identifier: GPKqAQY+ipgyMKnDhaNGnTjOU48MUuBhilsWKVM8BDw=
Subject key identifier: 06:36:96:B5:68:F2:6F:A5:88:D8:58:64:98:3B:C1:47:61:E5:E1:D4
Authority key identifier: E8:E7:27:11:36:B2:1A:15:8A:EF:40:9D:30:E2:C6:00:1D:5B:0D:A9
Certificate issuer: /CN=e8e7271136b21a158aef409d30e2c6001d5b0da9
Certificate serial: 01A088D56EEE79C584D3E3849E1934DAC6C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
Manifest number: 139D
Signing time: Thu 10 Sep 2026 01:01:23 +0000
Manifest this update: Thu 10 Sep 2026 01:01:23 +0000
Manifest next update: Fri 11 Sep 2026 01:01:23 +0000
Files and hashes: 1: 6OcnETayGhWK70CdMOLGAB1bDak.crl (hash: uHOZuH9O9zyolrNIQinogucLszzVQX5XRHXCrptce5A=)
2: BgOBkzwZiai7TWETAvn_IWE9YOQ.roa (hash: eYdWajw2NgiVsKV9NY6WqUM6UWy1PFC1+5llbrmRKeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 21:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:88:d5:6e:ee:79:c5:84:d3:e3:84:9e:19:34:da:c6:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8e7271136b21a158aef409d30e2c6001d5b0da9
Validity
Not Before: Sep 10 01:01:23 2026 GMT
Not After : Sep 11 01:01:23 2026 GMT
Subject: CN=063696b568f26fa588d85864983bc14761e5e1d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f0:c9:63:0c:56:5d:0a:de:ca:a1:50:63:90:
17:7f:cb:df:e2:6a:68:26:40:87:82:48:41:88:3c:
b5:ee:c8:69:f6:de:ce:71:79:20:c1:af:60:8a:3f:
84:70:47:90:2b:41:08:80:a7:1b:e7:be:18:16:6f:
cc:d3:44:75:7f:94:ce:9b:01:09:ec:9e:ab:d6:7c:
af:01:62:7a:76:31:32:a8:9b:97:6f:c1:c4:35:80:
97:b8:90:5a:77:14:1a:f0:1f:d9:6b:1b:9e:c7:14:
b9:5a:31:1b:a2:22:b7:f9:d5:5d:e5:5b:03:b8:8c:
3d:33:88:b1:a3:90:f1:61:5b:df:cd:25:df:c5:c7:
ea:28:63:f0:f0:6a:1e:88:6d:b7:64:d0:60:34:f5:
ea:c7:52:59:fb:cc:68:de:3c:10:54:d6:7e:23:ef:
19:b7:b6:55:4b:ed:e2:33:a7:b9:d9:36:5d:10:c6:
3f:44:7c:1e:00:a7:19:be:bf:e9:b2:78:2d:00:7b:
3f:95:d9:d6:5b:b9:d5:da:57:e8:3b:8c:5f:77:97:
4c:e1:d4:a6:c2:13:52:fe:98:da:1e:50:1f:06:ee:
79:28:be:fe:09:00:00:04:0c:c7:d1:dc:1c:54:5c:
9c:9b:be:d5:09:a5:52:1a:f3:91:23:87:f1:eb:16:
ff:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:36:96:B5:68:F2:6F:A5:88:D8:58:64:98:3B:C1:47:61:E5:E1:D4
X509v3 Authority Key Identifier:
keyid:E8:E7:27:11:36:B2:1A:15:8A:EF:40:9D:30:E2:C6:00:1D:5B:0D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:61:03:d5:54:7e:5a:3a:59:be:fa:09:66:cc:da:f4:75:58:
2d:c8:ad:4d:76:38:d3:2b:0c:4a:cf:2b:bc:2f:8b:ef:fe:d7:
d9:82:ae:66:72:9b:20:71:97:a3:83:3c:7d:fa:df:4e:eb:dd:
89:80:5f:19:0d:6a:19:3f:a1:44:25:cb:66:c4:dc:7c:74:51:
99:ac:c3:97:d8:cf:9b:11:9f:d5:d2:d5:84:09:27:8c:4f:86:
04:34:64:87:8c:85:b3:ec:83:4c:7b:17:bc:41:06:67:45:cc:
8f:5c:cc:a8:a7:4a:94:c6:2d:be:d2:76:66:40:9e:ce:cf:e1:
80:5f:aa:5c:3d:4a:c5:e6:4e:a0:22:c7:f6:9c:b4:b6:02:bb:
01:fc:d3:e7:31:3d:0b:34:45:91:d2:4b:07:ee:64:fc:2f:6a:
7b:41:95:cd:dc:92:15:8c:11:e1:5c:59:36:1a:fb:96:fc:fb:
e5:cb:da:d2:7b:a9:45:a0:5c:50:ac:ee:67:89:9e:dd:44:ef:
be:eb:85:2d:ca:50:26:64:e3:c6:90:53:f7:42:4b:61:3d:9c:
01:36:0e:a5:ce:5d:fe:33:53:7b:3d:8a:ca:5c:b5:8d:4e:31:
f8:4a:0e:2d:e9:3e:d8:4c:93:05:a7:e4:0f:b0:c0:10:f1:8b:
19:3d:6b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 06:50:12 2026 by rpki-client