Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.mft
File: OEEmbyyUrEIrlqaKdQC7gsEXkZE.mft (raw, json)
Hash identifier: YlFJI87f4awhxmQfEovoR41GCy5nmXEeX4FUOb10oQc=
Subject key identifier: F8:4A:65:80:7F:35:02:29:82:A9:5B:B1:1B:E5:2E:F9:C5:8B:3B:22
Authority key identifier: 38:41:26:6F:2C:94:AC:42:2B:96:A6:8A:75:00:BB:82:C1:17:91:91
Certificate issuer: /CN=3841266f2c94ac422b96a68a7500bb82c1179191
Certificate serial: 019D25BAB9720D683B64BE54290FC7332010
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEEmbyyUrEIrlqaKdQC7gsEXkZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.mft
Manifest number: 17DB
Signing time: Wed 25 Mar 2026 16:01:27 +0000
Manifest this update: Wed 25 Mar 2026 16:01:27 +0000
Manifest next update: Thu 26 Mar 2026 16:01:27 +0000
Files and hashes: 1: 8wgUQ75Sqdb_feNT6FKCZdFZvpc.roa (hash: o68Cj0XHDjDdBxBAZozu7KF1vAsEnCHUT+BQL685gAA=)
2: OEEmbyyUrEIrlqaKdQC7gsEXkZE.crl (hash: Vw3Rmg0XdaGDXkBD/1yB/t4SEX9xDnli95vGlTLAcN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEEmbyyUrEIrlqaKdQC7gsEXkZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:b9:72:0d:68:3b:64:be:54:29:0f:c7:33:20:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3841266f2c94ac422b96a68a7500bb82c1179191
Validity
Not Before: Mar 25 16:01:27 2026 GMT
Not After : Mar 26 16:01:27 2026 GMT
Subject: CN=f84a65807f35022982a95bb11be52ef9c58b3b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:93:3a:4d:01:ad:82:8f:ae:9f:13:0b:5c:99:
c1:91:39:a8:c8:d8:9c:b7:85:2b:05:31:df:4b:9f:
00:89:48:6c:6e:3b:fd:75:f9:1f:fb:2d:32:8b:d5:
90:64:44:c4:25:23:94:a5:f2:ff:90:a6:db:60:82:
7d:33:bf:31:76:ce:de:1f:55:3f:e4:41:2a:b5:fc:
21:94:6a:1a:15:46:65:7b:ab:37:d6:f5:ea:e1:fb:
ab:a3:d5:45:d1:7e:f8:e6:d6:dd:e3:6a:3c:d1:02:
65:a4:d9:d9:3f:79:20:5b:0f:e7:1e:63:88:d2:62:
9c:00:13:48:e0:67:37:f4:64:1d:e4:e4:fa:34:b5:
7b:27:41:ee:20:7f:11:ae:7f:fb:ab:d9:af:ab:34:
b1:e9:13:aa:14:0f:bf:a2:83:b4:48:43:22:f3:b3:
5c:55:30:0a:56:08:67:8a:8f:b0:1d:0b:e7:87:f7:
b1:83:4d:60:37:29:7b:ca:43:98:3c:15:61:ad:92:
9c:95:58:cf:ce:8e:77:fd:93:fe:e4:92:db:28:b3:
63:15:9d:fc:da:26:66:ea:78:fe:e5:8a:5c:f5:ff:
f5:b7:5e:ec:94:25:52:dd:72:e7:78:ca:0b:67:f0:
bf:95:7c:9f:ed:88:7a:26:8d:9a:08:96:6b:c9:bf:
41:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:4A:65:80:7F:35:02:29:82:A9:5B:B1:1B:E5:2E:F9:C5:8B:3B:22
X509v3 Authority Key Identifier:
keyid:38:41:26:6F:2C:94:AC:42:2B:96:A6:8A:75:00:BB:82:C1:17:91:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEEmbyyUrEIrlqaKdQC7gsEXkZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:67:54:5b:43:f9:8c:d2:a6:cb:e4:9d:4f:3c:8a:3c:4e:df:
a3:ec:68:16:50:14:4b:54:fc:f6:d1:b6:21:d2:c2:30:eb:62:
cd:4f:41:98:5d:4c:55:d2:1b:d0:16:1f:5d:0a:db:9f:3f:c4:
82:84:49:fc:e5:ad:11:3d:f1:e8:cc:8f:94:92:0b:ca:eb:0c:
e2:18:9b:ca:c6:5a:96:15:b6:7c:35:7a:67:46:1e:3a:bc:65:
fc:5e:e5:2d:0d:52:89:b1:3d:54:2e:07:55:a7:6e:2b:89:63:
fb:df:d9:ec:0e:2a:df:2e:19:09:02:8d:eb:c4:2e:ba:8d:17:
35:b0:7f:e1:43:0b:f0:fe:f0:d6:63:93:13:dc:ba:8e:23:86:
d7:75:dc:ff:fd:77:d1:c9:ef:60:1c:81:a7:6e:09:c8:3c:19:
3b:81:b6:65:45:6c:e7:06:2e:7f:31:7b:2d:5b:0c:95:67:fc:
41:c8:a1:3f:9b:2e:0c:fc:ef:9e:28:45:fe:80:79:aa:6b:0d:
06:ae:a1:3c:03:8f:6e:07:cc:89:e6:a9:0f:9a:d8:ea:e0:de:
5d:0c:6f:5e:a3:ac:cc:a2:e7:78:bd:12:37:e4:cd:b3:bc:70:
3b:95:fe:84:93:3e:57:18:6f:58:8b:c1:c6:6a:30:db:2d:89:
0a:29:bf:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:50 2026 by rpki-client