
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
File: Oe6oRlUcbkGblH4NoQfuywBwQZo.mft (raw, json)
Hash identifier: bKOxjVpE3AhQruUVMhg8/d5AukJ9lCoTebeSrUnf+xU=
Subject key identifier: BD:6E:68:2C:F4:D5:BF:A5:C9:B0:1A:88:C6:3F:C6:84:B1:04:1C:8E
Authority key identifier: 39:EE:A8:46:55:1C:6E:41:9B:94:7E:0D:A1:07:EE:CB:00:70:41:9A
Certificate issuer: /CN=39eea846551c6e419b947e0da107eecb0070419a
Certificate serial: 01A12B0D4440681DBD6F0D8B5E5CFC21AB75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
Manifest number: 181E
Signing time: Sun 11 Oct 2026 13:00:52 +0000
Manifest this update: Sun 11 Oct 2026 13:00:52 +0000
Manifest next update: Mon 12 Oct 2026 13:00:52 +0000
Files and hashes: 1: NwT9W71qDLuM68yfor7jaPtZ31g.roa (hash: Oy3RbTWtLZU6r3g8zZub3EsVqMVs7mpKUAZ+3t3L7eo=)
2: Oe6oRlUcbkGblH4NoQfuywBwQZo.crl (hash: EhcXvoTdu7zL4yqWESgAz/Bl8yV98uDivYQV/xCUhjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:0d:44:40:68:1d:bd:6f:0d:8b:5e:5c:fc:21:ab:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39eea846551c6e419b947e0da107eecb0070419a
Validity
Not Before: Oct 11 13:00:52 2026 GMT
Not After : Oct 12 13:00:52 2026 GMT
Subject: CN=bd6e682cf4d5bfa5c9b01a88c63fc684b1041c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:65:9e:6b:a3:78:fa:77:67:30:a2:51:73:b1:
a4:88:0a:f5:c3:d9:f5:40:2a:c6:e0:e0:0e:68:f8:
d1:92:10:6e:d2:ea:81:fb:45:ce:a0:2f:45:4b:47:
dc:00:ce:f5:55:e0:dc:aa:7b:ea:54:e8:37:a4:f8:
c2:97:75:32:29:b6:cf:a8:74:8d:8d:4a:1e:97:08:
cb:b3:fc:aa:8c:de:80:92:14:65:b3:cc:9b:9a:f0:
15:7d:81:18:b8:e9:58:cc:aa:82:da:34:49:e0:a0:
a3:f8:c1:d9:95:27:a4:1f:b6:e3:f3:51:da:77:6d:
48:d1:3c:ea:57:98:a9:e9:d3:87:d4:84:23:bf:24:
a6:22:99:87:2a:0a:a9:00:be:b8:ff:b5:bc:72:97:
25:69:13:ee:02:7a:57:ff:07:23:e5:8a:c5:c8:1a:
c4:a7:c7:90:3d:e2:e4:f1:9b:04:e7:13:dc:9f:de:
b3:5b:7b:37:51:6e:a9:7e:ef:11:d1:19:e7:a5:d3:
c4:15:1a:04:a4:f2:da:51:df:e3:b9:3e:39:a9:4c:
37:b2:98:00:e3:82:c3:e4:1c:69:05:ff:41:38:db:
ff:e7:9a:85:37:88:3a:eb:43:eb:69:19:6d:ac:26:
0d:70:f0:bc:b7:98:78:89:30:45:45:ba:91:81:8a:
5e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:6E:68:2C:F4:D5:BF:A5:C9:B0:1A:88:C6:3F:C6:84:B1:04:1C:8E
X509v3 Authority Key Identifier:
keyid:39:EE:A8:46:55:1C:6E:41:9B:94:7E:0D:A1:07:EE:CB:00:70:41:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:48:fb:fa:17:d2:b1:61:64:73:a5:91:65:06:a8:c4:92:eb:
c9:3b:74:f8:df:87:30:8b:e2:f8:5f:35:11:11:23:44:89:7a:
95:1e:14:19:de:7a:23:b3:14:1a:31:d4:a4:b7:b6:ff:21:e3:
29:de:fa:77:4a:54:4c:1b:5c:a1:d0:55:12:43:b6:e4:37:12:
70:62:e7:e1:ef:26:5a:88:a6:4b:13:a4:e9:2a:e4:b5:e2:f2:
f6:28:e1:d4:fd:df:0c:19:08:53:83:d4:19:0b:d6:d9:d0:64:
48:26:ba:66:3f:9e:58:00:f8:8f:13:5e:6f:a1:bf:89:72:02:
8d:ce:7b:99:f8:4d:35:21:f8:25:5d:30:e8:97:fd:65:30:8f:
07:23:ce:8f:8c:14:ca:e7:a3:0d:3d:8f:3b:a3:14:55:12:99:
82:f0:30:c3:9f:71:b5:1d:01:59:3e:98:bd:53:e0:0c:07:3e:
16:51:6e:0e:f3:27:4a:6e:59:fe:b4:c3:f6:db:f2:56:65:1c:
d2:17:59:95:4a:24:eb:8c:d9:71:60:f6:0c:83:70:2e:ae:9f:
80:ac:d4:52:93:71:6b:7f:e3:35:99:ba:a6:69:fa:4d:b0:7d:
cc:4e:aa:56:31:4b:c6:6d:9c:c2:a3:97:74:ee:39:65:bc:ee:
6e:f8:9f:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaErDURAaB29bw2LXlz8Iat1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5ZWVhODQ2NTUxYzZlNDE5Yjk0N2UwZGExMDdlZWNiMDA3
MDQxOWEwHhcNMjYxMDExMTMwMDUyWhcNMjYxMDEyMTMwMDUyWjAzMTEwLwYDVQQD
EyhiZDZlNjgyY2Y0ZDViZmE1YzliMDFhODhjNjNmYzY4NGIxMDQxYzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WWea6N4+ndnMKJRc7GkiAr1w9n1
QCrG4OAOaPjRkhBu0uqB+0XOoC9FS0fcAM71VeDcqnvqVOg3pPjCl3UyKbbPqHSN
jUoelwjLs/yqjN6AkhRls8ybmvAVfYEYuOlYzKqC2jRJ4KCj+MHZlSekH7bj81Ha
d21I0TzqV5ip6dOH1IQjvySmIpmHKgqpAL64/7W8cpclaRPuAnpX/wcj5YrFyBrE
p8eQPeLk8ZsE5xPcn96zW3s3UW6pfu8R0RnnpdPEFRoEpPLaUd/juT45qUw3spgA
44LD5BxpBf9BONv/55qFN4g660PraRltrCYNcPC8t5h4iTBFRbqRgYpefQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL1uaCz01b+lybAaiMY/xoSxBByOMB8GA1UdIwQY
MBaAFDnuqEZVHG5Bm5R+DaEH7ssAcEGaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2U2b1JsVWNia0dibEg0Tm9RZnV5d0J3UVpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8wOWQzMjktN2ZmZS00NTFiLWJjODIt
MjgzMWE0ODUwNjQ1LzEvT2U2b1JsVWNia0dibEg0Tm9RZnV5d0J3UVpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8wOWQzMjktN2ZmZS00NTFiLWJjODItMjgzMWE0ODUwNjQ1
LzEvT2U2b1JsVWNia0dibEg0Tm9RZnV5d0J3UVpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOEj7+hfS
sWFkc6WRZQaoxJLryTt0+N+HMIvi+F81EREjRIl6lR4UGd56I7MUGjHUpLe2/yHj
Kd76d0pUTBtcodBVEkO25DcScGLn4e8mWoimSxOk6SrkteLy9ijh1P3fDBkIU4PU
GQvW2dBkSCa6Zj+eWAD4jxNeb6G/iXICjc57mfhNNSH4JV0w6Jf9ZTCPByPOj4wU
yuejDT2PO6MUVRKZgvAww59xtR0BWT6YvVPgDAc+FlFuDvMnSm5Z/rTD9tvyVmUc
0hdZlUok64zZcWD2DINwLq6fgKzUUpNxa3/jNZm6pmn6TbB9zE6qVjFLxm2cwqOX
dO45Zbzubvif3A==
-----END CERTIFICATE-----
Generated at Sun Oct 11 19:31:08 2026 by rpki-client