
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
File: OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft (raw, json)
Hash identifier: jpEn1+qFQO/UTSnqG4wjmx4Efaxys8zo5mXPvRlJawY=
Subject key identifier: 87:8A:2B:B8:44:12:B9:84:5C:3A:C3:76:20:AB:5E:F7:DD:F3:F3:C6
Authority key identifier: 38:48:88:5C:97:02:EA:C1:F3:D0:12:63:E6:D3:E5:44:49:EE:21:54
Certificate issuer: /CN=3848885c9702eac1f3d01263e6d3e54449ee2154
Certificate serial: 019E205AD208D29F912053E8A40299AC78B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
Manifest number: 126D
Signing time: Wed 13 May 2026 08:01:23 +0000
Manifest this update: Wed 13 May 2026 08:01:23 +0000
Manifest next update: Thu 14 May 2026 08:01:23 +0000
Files and hashes: 1: OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl (hash: qfOpt0rRbrS0A0pwM9n5O8XIjuhLyeLEnVbm5hw6r+I=)
2: ZkxTmxBiQkgSo4ZJv_M7YhFQ0hQ.roa (hash: 2n/6N4Jbcs9rQ/9iwExbuGW4el4Ljo8UJZzO/3/a1NU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 08:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:d2:08:d2:9f:91:20:53:e8:a4:02:99:ac:78:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3848885c9702eac1f3d01263e6d3e54449ee2154
Validity
Not Before: May 13 08:01:23 2026 GMT
Not After : May 14 08:01:23 2026 GMT
Subject: CN=878a2bb84412b9845c3ac37620ab5ef7ddf3f3c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bd:c7:79:7f:f8:27:2b:4a:69:e0:52:05:98:
30:2b:51:99:ae:d0:c8:4e:a3:bb:ce:6c:3d:fd:02:
c2:1e:7a:08:1d:9c:58:cd:14:8c:0d:8c:ee:8a:cd:
3b:bc:b0:75:15:45:49:13:ec:5d:2b:4b:c6:54:80:
ee:00:a8:c5:98:13:fb:bb:4b:d0:82:e1:0b:e0:1f:
bf:41:79:61:9e:81:be:1d:71:bd:3b:b5:8b:4a:4a:
d6:2e:a0:23:70:94:8a:82:f4:a9:78:69:a8:99:6f:
27:1a:29:8a:96:21:42:b6:3f:54:cc:95:08:38:87:
09:2d:9c:5c:df:89:2d:bf:35:d1:69:2e:c8:1d:c8:
50:32:1f:cb:16:c7:a9:59:3a:06:9f:3e:fe:13:bd:
c4:5f:24:2e:2e:fe:f6:28:ac:c8:21:13:84:f6:d8:
f3:9d:4c:bd:ad:df:a2:f4:dd:60:1c:6a:f7:ce:59:
b7:ee:3b:2d:84:08:af:6d:4d:a8:eb:1b:8d:78:60:
0a:a6:9a:d9:73:19:a0:db:95:35:93:86:33:ce:18:
73:fa:d3:f7:3a:fa:4c:9c:bd:6a:c9:de:2d:0f:eb:
2e:30:f9:f7:31:72:ac:cd:d2:27:04:8b:3a:1d:fb:
6e:1d:7e:8b:56:ee:58:98:21:eb:30:dc:b6:51:c8:
95:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:8A:2B:B8:44:12:B9:84:5C:3A:C3:76:20:AB:5E:F7:DD:F3:F3:C6
X509v3 Authority Key Identifier:
keyid:38:48:88:5C:97:02:EA:C1:F3:D0:12:63:E6:D3:E5:44:49:EE:21:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:35:69:f2:c2:46:02:ec:aa:44:7e:ca:7b:60:c7:b9:58:d9:
b2:04:f2:60:27:7b:4f:d4:56:19:83:60:a2:43:19:b4:03:1a:
ae:4c:e1:c9:95:93:c5:b5:6e:fd:01:9d:3c:da:0c:12:7e:34:
96:36:1d:0b:a8:85:1b:25:fb:a3:1c:54:c5:0b:fc:2a:b8:aa:
67:7f:c3:15:c9:87:b4:19:ce:6b:99:fd:d3:62:64:25:92:49:
0d:14:92:0f:27:73:25:27:ea:1c:27:aa:e8:77:13:bb:42:8f:
61:36:87:c5:74:ec:d6:85:57:ab:2a:e5:2a:0d:0b:2a:0f:c6:
12:7c:db:7f:a9:6a:25:e3:8a:32:67:d3:73:82:1a:4a:ce:15:
ce:cb:c6:53:16:f2:15:2d:a3:70:01:46:86:bd:f2:d3:aa:30:
b7:6a:9a:dd:28:b0:f2:65:92:b8:43:9a:9f:30:64:c0:d6:b1:
b6:f5:3d:8d:ac:cd:cc:0f:71:92:43:27:ed:9b:9a:5f:be:28:
ed:6f:a1:44:65:e9:7d:a8:64:b6:79:ef:ed:e0:e7:10:34:c2:
4d:71:bf:a9:89:dc:58:18:84:f7:a3:ed:6b:6a:fa:74:1a:c4:
01:5f:52:d2:d0:f0:10:ec:aa:1d:10:ad:9f:88:72:d8:ea:fd:
1c:8d:3b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:26:00 2026 by rpki-client