Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.mft
File: OEhy6BezpF-Y1LFbZd1FK12i1hE.mft (raw, json)
Hash identifier: TbGd/va34aOPV5BoLCSZ70FxGE1BtvDyjZsfJJb/SPc=
Subject key identifier: 51:0E:88:9E:D8:4C:91:28:05:1A:E7:9F:19:7E:F7:04:A4:02:95:11
Authority key identifier: 38:48:72:E8:17:B3:A4:5F:98:D4:B1:5B:65:DD:45:2B:5D:A2:D6:11
Certificate issuer: /CN=384872e817b3a45f98d4b15b65dd452b5da2d611
Certificate serial: 019D27DF82426EA7473654C81A65B829A6F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEhy6BezpF-Y1LFbZd1FK12i1hE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 02:00:52 +0000
Manifest this update: Thu 26 Mar 2026 02:00:52 +0000
Manifest next update: Fri 27 Mar 2026 02:00:52 +0000
Files and hashes: 1: 8GTqxn7gEbfVcrTo_203jWSQqyQ.roa (hash: FBwIvrh4fkJq3441dM0QezB27aCU253T8SzW2IFWPFU=)
2: OEhy6BezpF-Y1LFbZd1FK12i1hE.crl (hash: PheS9g/SvUwVVOv48sQJr1dAJl9rLfUKB8I4dimWGkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEhy6BezpF-Y1LFbZd1FK12i1hE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:82:42:6e:a7:47:36:54:c8:1a:65:b8:29:a6:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=384872e817b3a45f98d4b15b65dd452b5da2d611
Validity
Not Before: Mar 26 02:00:52 2026 GMT
Not After : Mar 27 02:00:52 2026 GMT
Subject: CN=510e889ed84c9128051ae79f197ef704a4029511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1c:59:d0:73:50:94:3c:5c:21:30:98:7f:c8:
84:7d:cd:db:d5:ed:a6:7d:29:85:a2:a3:d4:21:07:
37:42:84:4f:54:4e:fc:0e:93:72:03:e0:a1:70:a5:
46:eb:ff:36:bd:3c:e5:88:ad:9c:a1:f9:52:f1:4c:
d4:00:32:29:d6:b5:93:0f:b6:21:87:5e:0e:58:63:
58:d8:a3:b7:26:42:a3:95:1a:9b:25:a2:e0:a9:36:
46:31:51:d2:63:e2:f8:51:fb:10:e9:33:2d:be:d2:
9f:43:36:90:7d:e3:cd:92:6d:15:04:52:d7:50:4f:
53:ad:d2:79:da:85:2a:2b:98:50:54:6b:ce:b9:6a:
5b:51:f8:27:53:f1:b5:e5:cd:9e:db:55:6a:f2:3a:
a4:9d:69:6a:c8:42:f8:d4:be:f0:86:f2:de:fe:ee:
56:c5:e5:96:8c:c2:cc:e1:ff:d7:ea:fb:fe:3b:5f:
85:6a:bd:b7:db:5d:99:14:f6:9a:9c:b3:ac:0c:b4:
89:24:8b:e7:32:51:d7:2f:1f:4a:33:59:89:aa:33:
fc:23:0d:f2:22:ec:fe:a2:c9:63:bc:9a:de:33:da:
76:98:1d:68:e4:7c:05:22:7b:88:8a:e2:7f:55:16:
1a:13:d0:8f:7b:8e:c4:44:d8:d7:60:f4:6c:57:30:
87:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:0E:88:9E:D8:4C:91:28:05:1A:E7:9F:19:7E:F7:04:A4:02:95:11
X509v3 Authority Key Identifier:
keyid:38:48:72:E8:17:B3:A4:5F:98:D4:B1:5B:65:DD:45:2B:5D:A2:D6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEhy6BezpF-Y1LFbZd1FK12i1hE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:35:93:33:1a:10:e8:29:ca:25:e7:1a:4b:1c:53:6a:af:86:
48:74:18:c4:76:6f:d1:4a:41:5a:e4:89:cb:06:28:4e:2e:98:
01:88:99:b4:07:15:9a:8a:85:e6:57:5a:c0:3d:b0:c0:03:fb:
36:31:b1:06:47:44:76:3c:79:12:88:d0:20:d6:5d:cd:c7:57:
84:6c:e6:41:76:72:2d:d7:56:f9:87:1c:a4:c8:f5:79:c0:6b:
b5:e6:cd:bd:7c:b7:35:ae:cd:dd:3a:2e:c5:be:72:a9:ed:eb:
14:ff:d8:be:15:94:cd:1e:8a:50:5b:59:bb:e8:97:48:52:1e:
8a:1d:62:32:a7:25:6f:4a:5c:7a:60:31:5e:dc:56:97:f7:64:
0d:f2:2e:e4:75:e4:52:a8:27:c3:83:0e:09:2a:7b:27:7d:96:
21:4c:5a:ba:7f:d6:b7:57:bb:01:71:b2:2f:24:ae:f1:57:e9:
91:9d:c1:d9:3b:13:76:08:f2:2a:40:47:5d:3f:4f:2a:4c:c4:
6e:41:65:d5:a6:cc:dc:d7:c4:f8:b0:33:18:1f:19:3d:08:81:
3c:2f:82:09:b7:b2:cd:e5:e2:0e:f7:59:4d:33:60:7c:78:14:
dc:22:7f:22:d3:2e:51:82:5c:d2:67:60:80:7d:d4:bc:bd:6c:
d3:db:7c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:43 2026 by rpki-client