Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft
File: Oexx3D1ozej5B3069mdRwp_O6kw.mft (raw, json)
Hash identifier: pN8YDxR5yF5c/M/PWa87idSyrxT1ahfBCa5mA5k0kaU=
Subject key identifier: B1:EE:5C:80:47:51:2B:75:49:BB:D0:CF:CA:79:0C:34:28:43:6C:C4
Authority key identifier: 39:EC:71:DC:3D:68:CD:E8:F9:07:7D:3A:F6:67:51:C2:9F:CE:EA:4C
Certificate issuer: /CN=39ec71dc3d68cde8f9077d3af66751c29fceea4c
Certificate serial: 019D270457F79C1A34626F90AE1963E47307
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oexx3D1ozej5B3069mdRwp_O6kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft
Manifest number: 0BE1
Signing time: Wed 25 Mar 2026 22:01:29 +0000
Manifest this update: Wed 25 Mar 2026 22:01:29 +0000
Manifest next update: Thu 26 Mar 2026 22:01:29 +0000
Files and hashes: 1: GWIPuzYrr1ZkVb6zUh724dGRI1w.roa (hash: 8ZDylGUDk0rJ7fPM3ZJJKDsoUpKFNi+95rGt5nvLIKg=)
2: Oexx3D1ozej5B3069mdRwp_O6kw.crl (hash: iffxsvlGZ2+imKg3Jod888aq+YqxzmlTpAzuMHmiukM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oexx3D1ozej5B3069mdRwp_O6kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:57:f7:9c:1a:34:62:6f:90:ae:19:63:e4:73:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ec71dc3d68cde8f9077d3af66751c29fceea4c
Validity
Not Before: Mar 25 22:01:29 2026 GMT
Not After : Mar 26 22:01:29 2026 GMT
Subject: CN=b1ee5c8047512b7549bbd0cfca790c3428436cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6e:c4:89:d0:38:ad:60:b6:10:67:3b:e8:08:
38:68:c8:c5:cf:c7:da:51:9f:99:ab:35:6b:46:c5:
89:23:22:94:fd:da:57:12:76:bf:18:3c:51:02:bc:
85:03:03:cb:6a:0f:45:04:08:cd:30:ee:48:4d:5d:
4b:e8:5b:25:9d:bd:3a:f6:53:52:ce:cf:db:3a:2a:
7e:fc:a4:a2:d9:cb:89:a4:69:c3:b4:30:2c:8e:d8:
a2:ae:9a:ab:a8:c0:cf:3b:c1:59:41:30:90:6d:72:
ef:fb:c5:4b:39:97:f2:9b:be:07:bf:1f:34:a0:d2:
e3:d8:bb:e3:3c:30:c0:f9:00:b3:e0:37:e5:4f:8c:
16:85:6b:05:5a:11:f6:78:0b:33:81:9f:ee:8c:bd:
ab:6a:da:5f:be:84:d2:b4:c8:09:c4:c5:d4:78:9f:
15:1f:96:1c:0e:a3:0f:b2:a4:63:3f:4d:92:a1:bd:
84:23:d3:77:72:3a:75:11:53:24:68:4b:66:db:4f:
6a:13:38:28:82:67:6f:e2:6a:d6:19:97:31:b7:8f:
6d:f9:c0:69:10:4f:d1:0a:ff:84:60:6e:0a:f3:25:
8d:f0:7d:e4:30:f8:f3:b6:52:d5:bb:47:89:37:42:
7f:1c:5d:10:2e:b1:1b:1d:e9:78:59:bc:5e:24:14:
27:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:EE:5C:80:47:51:2B:75:49:BB:D0:CF:CA:79:0C:34:28:43:6C:C4
X509v3 Authority Key Identifier:
keyid:39:EC:71:DC:3D:68:CD:E8:F9:07:7D:3A:F6:67:51:C2:9F:CE:EA:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oexx3D1ozej5B3069mdRwp_O6kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:00:5e:1d:eb:37:ef:37:d3:db:12:49:70:a9:a2:3e:1d:97:
ab:4d:58:12:73:f9:3a:80:a3:70:48:e2:f3:f0:31:7f:e5:ff:
be:57:d0:22:cd:fc:1e:ec:6a:57:2f:6d:d0:59:6c:94:83:13:
b3:fb:0d:a3:fe:74:b8:65:d4:f9:37:ec:4b:39:88:35:b5:3e:
7e:20:66:6e:7e:20:72:f7:7c:5b:4c:a0:51:12:20:d1:fe:11:
1b:ae:ec:2e:34:79:dc:76:c7:cc:b6:12:af:99:68:fd:f4:63:
ee:33:fa:52:5c:cb:a2:51:fe:5d:ec:cf:c9:cf:07:1c:df:f2:
39:bd:e7:27:ee:c3:8f:c2:82:2e:03:57:74:c0:69:16:3d:84:
66:da:40:8f:56:7c:ae:59:ce:c8:b9:3a:25:dd:5f:1a:ae:8d:
14:ed:40:ed:f3:3a:38:13:4d:ea:2d:6d:ac:98:0d:7b:31:a8:
08:c8:90:55:e4:23:ca:0b:de:d7:ce:49:5c:1a:57:bb:0f:1f:
b6:01:ee:09:17:38:92:a2:42:bb:d3:7c:3b:60:e9:58:41:21:
41:60:22:24:7e:75:98:52:e3:f8:22:1e:86:6d:6a:22:f6:13:
a0:86:22:53:f1:e7:d5:84:80:70:f4:d4:f4:eb:f5:2a:bb:ae:
6a:8e:c8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:15:56 2026 by rpki-client