Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.mft
File: Oeh-8DzxcaQLor7InmiLudOCWHM.mft (raw, json)
Hash identifier: WGPSnlmKzsMGNhqz9VohAH7LktI2Bv2lXZSNlBcPBh4=
Subject key identifier: 04:02:69:EE:D4:78:6C:95:73:FE:9F:AF:C9:CA:5D:44:97:82:45:DA
Authority key identifier: 39:E8:7E:F0:3C:F1:71:A4:0B:A2:BE:C8:9E:68:8B:B9:D3:82:58:73
Certificate issuer: /CN=39e87ef03cf171a40ba2bec89e688bb9d3825873
Certificate serial: 019D2816F344174CD827DE9ABFA57187BD38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oeh-8DzxcaQLor7InmiLudOCWHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 03:01:25 +0000
Manifest this update: Thu 26 Mar 2026 03:01:25 +0000
Manifest next update: Fri 27 Mar 2026 03:01:25 +0000
Files and hashes: 1: Oeh-8DzxcaQLor7InmiLudOCWHM.crl (hash: fw0WgjAN/r+uwfkm3pKa9kKWE/8vL6CNrBdHHgvv2MA=)
2: eDMAR7PJPyAOpBqLeTLJ9cfWmlY.roa (hash: +nUDLc8VobBs/aZ0/WWl0V/gT+IU0wqtjeeOECCwgDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oeh-8DzxcaQLor7InmiLudOCWHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:f3:44:17:4c:d8:27:de:9a:bf:a5:71:87:bd:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39e87ef03cf171a40ba2bec89e688bb9d3825873
Validity
Not Before: Mar 26 03:01:25 2026 GMT
Not After : Mar 27 03:01:25 2026 GMT
Subject: CN=040269eed4786c9573fe9fafc9ca5d44978245da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a8:0b:6f:21:27:84:13:b7:6f:b8:54:e1:3c:
32:cc:7f:dd:0c:be:a6:2d:02:b0:6d:42:cf:20:df:
a8:f3:56:67:5e:3c:0f:5f:26:d4:eb:35:fb:85:39:
f0:2b:53:3d:ca:3c:82:99:b4:0e:c3:f7:e4:ec:d2:
6a:10:30:41:a5:cd:62:47:4b:bf:49:57:d3:a6:32:
b1:bd:6b:5d:a9:22:8c:19:e9:30:bc:c7:cd:0d:b6:
68:69:ac:23:ff:88:da:47:91:3d:58:c9:7c:ec:75:
85:1f:d7:97:cd:47:0e:46:53:5a:40:ef:67:40:ab:
95:98:9e:16:d5:e7:78:05:0a:6a:73:98:30:14:f1:
d1:ce:ac:33:3d:84:eb:ef:b1:50:f6:45:10:ff:a9:
8e:07:92:50:4d:e2:6b:0e:8c:42:09:c5:7e:e6:2d:
68:4d:8f:6e:1c:dd:07:96:78:13:a7:23:26:f6:87:
69:7a:b5:b4:48:91:e8:da:c7:df:7d:9a:40:17:e9:
79:b4:d8:60:be:3b:0c:13:3a:c9:8c:6b:e0:a9:9e:
cd:a6:35:54:bf:e8:51:8e:97:6e:e2:50:bd:32:11:
29:d2:00:6d:a2:cc:c9:92:57:85:fe:97:a7:26:41:
c4:32:66:18:26:cd:ec:95:6f:77:cb:fd:1e:91:da:
fa:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:02:69:EE:D4:78:6C:95:73:FE:9F:AF:C9:CA:5D:44:97:82:45:DA
X509v3 Authority Key Identifier:
keyid:39:E8:7E:F0:3C:F1:71:A4:0B:A2:BE:C8:9E:68:8B:B9:D3:82:58:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oeh-8DzxcaQLor7InmiLudOCWHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:04:57:ea:da:9f:ef:ea:56:c1:6e:2a:9f:6c:98:dc:e7:12:
49:7a:9d:45:5d:59:c9:90:fe:e0:4b:3f:05:b1:52:6a:fd:3f:
d0:da:eb:06:2b:80:89:8b:c9:b8:d3:be:65:db:1d:56:7d:8f:
2f:27:ef:20:0f:e3:15:7b:41:97:8c:58:1c:49:99:82:7b:bd:
f6:de:5f:53:9b:4b:8d:75:e9:8e:2c:46:61:1c:63:c7:8d:69:
62:46:46:5b:ed:43:ca:47:5f:4c:86:69:6a:14:f4:64:5c:7b:
48:8f:83:d4:f8:0b:53:ec:1d:29:9f:68:61:ae:d3:5c:03:8b:
4c:06:e4:87:07:69:07:22:fe:52:d0:0c:63:91:b5:4f:40:9e:
ee:64:55:09:80:09:d7:d2:5a:d0:77:16:c2:21:00:da:88:e5:
95:60:ea:41:23:c2:b7:ae:87:6c:74:f8:5e:84:08:92:2c:33:
b6:43:fc:05:e0:6f:d9:0d:ff:b3:ec:ec:33:fc:e2:86:1a:ec:
29:cd:8b:0f:a5:a7:fb:74:1c:57:cd:1a:86:77:9a:73:fb:1d:
78:32:b8:67:61:f1:85:5a:75:18:d2:3a:a1:4e:d2:f4:dd:cf:
0f:38:a9:0b:77:87:4b:79:8e:03:53:2f:49:19:66:6b:d2:f2:
d2:07:fc:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:25:44 2026 by rpki-client