Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
File: 6OcnETayGhWK70CdMOLGAB1bDak.mft (raw, json)
Hash identifier: tyOrFfax4UtWpYuH6R9VkwvUYsAb82kvT/tHMtbzcZs=
Subject key identifier: 4B:AD:AA:93:E2:BB:72:22:16:7F:C1:62:E0:96:36:E4:F1:50:9F:F1
Authority key identifier: E8:E7:27:11:36:B2:1A:15:8A:EF:40:9D:30:E2:C6:00:1D:5B:0D:A9
Certificate issuer: /CN=e8e7271136b21a158aef409d30e2c6001d5b0da9
Certificate serial: 019F9F289FA20C3479FBAEB21AEC5EBD3279
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
Manifest number: 1324
Signing time: Sun 26 Jul 2026 16:01:07 +0000
Manifest this update: Sun 26 Jul 2026 16:01:07 +0000
Manifest next update: Mon 27 Jul 2026 16:01:07 +0000
Files and hashes: 1: 6OcnETayGhWK70CdMOLGAB1bDak.crl (hash: TnBWbz1UufihFveIO8ARdZfC7YIL9IPdxYnBjQZ1/xE=)
2: BgOBkzwZiai7TWETAvn_IWE9YOQ.roa (hash: eYdWajw2NgiVsKV9NY6WqUM6UWy1PFC1+5llbrmRKeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:28:9f:a2:0c:34:79:fb:ae:b2:1a:ec:5e:bd:32:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8e7271136b21a158aef409d30e2c6001d5b0da9
Validity
Not Before: Jul 26 16:01:07 2026 GMT
Not After : Jul 27 16:01:07 2026 GMT
Subject: CN=4badaa93e2bb7222167fc162e09636e4f1509ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2e:46:38:71:22:5f:24:f6:05:4a:ba:90:86:
ef:c2:d9:ee:f1:76:ea:19:7c:eb:d6:2b:5e:f5:6c:
53:19:e2:e0:0b:c4:f8:32:34:1e:21:16:6c:05:b4:
82:90:43:5a:85:66:46:b9:de:09:12:7d:96:1e:97:
18:44:e1:19:74:43:a2:f2:1b:ad:e8:ee:d3:b8:6d:
a8:52:50:1b:03:aa:a2:bc:b7:66:6f:e2:c7:0b:de:
c6:cc:14:2f:a3:30:37:26:65:ed:85:97:80:65:5e:
c8:b0:d9:97:5b:7d:3b:31:f3:b6:b7:01:8c:70:78:
18:bd:f2:23:2a:b7:e1:c7:af:0f:65:7d:8d:2c:dd:
fe:ed:81:f6:0a:58:cb:11:e4:a4:f8:89:8e:83:4e:
dc:3e:98:9d:41:32:24:f9:f7:55:2e:4d:15:83:c5:
ba:4e:15:7e:24:3c:53:a8:45:38:cf:14:69:4f:6d:
fc:3e:82:74:ea:7b:92:43:f7:39:45:74:55:76:ea:
fe:95:b2:88:c3:2f:29:5c:78:ea:ac:8f:a3:8d:10:
af:68:64:02:3a:75:61:da:86:e6:75:06:27:f6:cc:
d1:08:5c:25:69:1d:4c:00:05:58:f2:ef:e7:be:19:
1c:1f:9b:bd:17:41:d4:e9:25:aa:3f:c5:3b:bf:ec:
35:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:AD:AA:93:E2:BB:72:22:16:7F:C1:62:E0:96:36:E4:F1:50:9F:F1
X509v3 Authority Key Identifier:
keyid:E8:E7:27:11:36:B2:1A:15:8A:EF:40:9D:30:E2:C6:00:1D:5B:0D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:2f:51:41:40:55:30:e0:dd:13:75:a6:24:c6:a0:ec:cf:2d:
ca:bb:ac:6d:38:08:76:91:6e:3d:ab:d3:63:88:ec:b4:3e:d4:
d8:a1:a9:47:4e:b1:d9:fd:18:1a:a8:45:08:78:6d:bd:e3:f5:
a1:b0:e6:17:4c:80:0b:8d:dc:5b:42:b2:7e:85:a6:97:49:0e:
4d:94:d9:79:84:c2:e4:ba:12:d2:39:26:88:68:6d:fd:b3:6f:
92:0f:f3:1c:20:76:e1:a4:e5:fc:b3:50:0e:5a:7f:f4:36:39:
28:69:79:d6:64:00:9c:b7:5b:ab:e6:b7:88:b6:a6:fc:95:11:
07:27:bd:f7:43:96:d7:17:74:c7:54:ba:4e:ac:49:be:e7:5b:
ac:ac:bd:eb:f2:b6:cd:45:f7:ab:6c:41:1f:21:a9:9f:b5:eb:
35:b7:75:a1:3e:19:0a:58:e7:de:c2:dd:d0:05:cb:3e:01:38:
31:90:45:00:eb:14:33:92:f4:88:fe:2b:a0:50:48:4d:22:9b:
18:28:39:a1:71:fc:05:bd:fe:05:6d:a8:4e:cf:01:62:d7:e0:
96:f4:ff:99:c7:89:15:60:c8:79:8c:17:96:be:a1:e3:ae:2a:
83:81:e1:3d:8e:5e:cf:3a:41:91:f0:4c:a5:3f:a5:1f:84:5f:
b9:a2:f7:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+fKJ+iDDR5+66yGuxevTJ5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4ZTcyNzExMzZiMjFhMTU4YWVmNDA5ZDMwZTJjNjAwMWQ1
YjBkYTkwHhcNMjYwNzI2MTYwMTA3WhcNMjYwNzI3MTYwMTA3WjAzMTEwLwYDVQQD
Eyg0YmFkYWE5M2UyYmI3MjIyMTY3ZmMxNjJlMDk2MzZlNGYxNTA5ZmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAji5GOHEiXyT2BUq6kIbvwtnu8Xbq
GXzr1ite9WxTGeLgC8T4MjQeIRZsBbSCkENahWZGud4JEn2WHpcYROEZdEOi8hut
6O7TuG2oUlAbA6qivLdmb+LHC97GzBQvozA3JmXthZeAZV7IsNmXW307MfO2twGM
cHgYvfIjKrfhx68PZX2NLN3+7YH2CljLEeSk+ImOg07cPpidQTIk+fdVLk0Vg8W6
ThV+JDxTqEU4zxRpT238PoJ06nuSQ/c5RXRVdur+lbKIwy8pXHjqrI+jjRCvaGQC
OnVh2obmdQYn9szRCFwlaR1MAAVY8u/nvhkcH5u9F0HU6SWqP8U7v+w1lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEutqpPiu3IiFn/BYuCWNuTxUJ/xMB8GA1UdIwQY
MBaAFOjnJxE2shoViu9AnTDixgAdWw2pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk9jbkVUYXlHaFdLNzBDZE1PTEdBQjFiRGFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9jYmY0MjUtYjk1OC00ZTQ5LTljOTYt
ODM1NmQyZDQyNzcxLzEvNk9jbkVUYXlHaFdLNzBDZE1PTEdBQjFiRGFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9jYmY0MjUtYjk1OC00ZTQ5LTljOTYtODM1NmQyZDQyNzcx
LzEvNk9jbkVUYXlHaFdLNzBDZE1PTEdBQjFiRGFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANS9RQUBV
MODdE3WmJMag7M8tyrusbTgIdpFuPavTY4jstD7U2KGpR06x2f0YGqhFCHhtveP1
obDmF0yAC43cW0KyfoWml0kOTZTZeYTC5LoS0jkmiGht/bNvkg/zHCB24aTl/LNQ
Dlp/9DY5KGl51mQAnLdbq+a3iLam/JURBye990OW1xd0x1S6TqxJvudbrKy96/K2
zUX3q2xBHyGpn7XrNbd1oT4ZCljn3sLd0AXLPgE4MZBFAOsUM5L0iP4roFBITSKb
GCg5oXH8Bb3+BW2oTs8BYtfglvT/mceJFWDIeYwXlr6h464qg4HhPY5ezzpBkfBM
pT+lH4RfuaL3iQ==
-----END CERTIFICATE-----
Generated at Sun Jul 26 20:32:33 2026 by rpki-client