
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
File: Oe6oRlUcbkGblH4NoQfuywBwQZo.mft (raw, json)
Hash identifier: A4Y6ONgy7s8conqnFXL8qu/tI/s0CzYgBDmlNmyxNo0=
Subject key identifier: 46:0D:52:CD:E7:29:AB:01:9F:B1:7F:42:5A:26:40:F4:5A:A6:FD:96
Authority key identifier: 39:EE:A8:46:55:1C:6E:41:9B:94:7E:0D:A1:07:EE:CB:00:70:41:9A
Certificate issuer: /CN=39eea846551c6e419b947e0da107eecb0070419a
Certificate serial: 019F9580040538A9FE1AC2EBCF610CC2A07B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
Manifest number: 174C
Signing time: Fri 24 Jul 2026 19:00:22 +0000
Manifest this update: Fri 24 Jul 2026 19:00:22 +0000
Manifest next update: Sat 25 Jul 2026 19:00:22 +0000
Files and hashes: 1: NwT9W71qDLuM68yfor7jaPtZ31g.roa (hash: Oy3RbTWtLZU6r3g8zZub3EsVqMVs7mpKUAZ+3t3L7eo=)
2: Oe6oRlUcbkGblH4NoQfuywBwQZo.crl (hash: XFJh3j7tPi+wtjeTWhM4JxGTOCfNi3EzCbDrCK6Ojds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:80:04:05:38:a9:fe:1a:c2:eb:cf:61:0c:c2:a0:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39eea846551c6e419b947e0da107eecb0070419a
Validity
Not Before: Jul 24 19:00:22 2026 GMT
Not After : Jul 25 19:00:22 2026 GMT
Subject: CN=460d52cde729ab019fb17f425a2640f45aa6fd96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:eb:44:a7:3a:ea:81:c2:02:de:58:ab:33:54:
28:91:d0:a7:94:39:74:d6:9a:09:52:e4:74:12:cb:
59:11:ae:bb:17:65:8f:6e:02:eb:2a:d8:8b:d0:da:
6e:ce:08:17:c1:ee:3a:bc:fd:52:9b:f2:5d:dc:cb:
d4:8e:2f:b9:87:8a:54:09:fc:12:98:08:65:7b:78:
77:bb:bc:e2:d4:0a:1e:51:80:0b:7b:b6:30:46:7c:
c4:8e:81:1e:1c:5c:58:19:98:1e:5c:06:c7:32:21:
d5:19:f4:5c:64:76:8f:38:6a:e9:d4:e4:9a:77:f6:
eb:70:3d:7e:bb:71:a4:8b:68:e5:4a:5c:78:d2:62:
a8:ba:ed:ff:38:94:c1:04:dc:5a:ec:a9:e9:a2:e1:
3c:6f:3b:2d:75:92:8c:3f:6f:27:6a:76:b1:54:36:
29:5b:d8:c9:ac:81:37:d0:16:cb:32:ed:7a:80:38:
79:6d:54:d5:99:1e:00:62:1c:48:dd:0f:60:c8:d1:
f5:ec:fd:14:64:ca:a4:37:69:6e:c7:37:3a:b6:56:
ac:c0:b1:a0:1e:0b:e9:9c:44:3e:a2:a0:1c:b9:42:
fc:b1:65:51:cb:ac:70:e6:d8:84:91:25:52:fc:e7:
94:ea:4b:49:2f:23:11:0e:76:45:3b:b5:34:e1:bb:
ac:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:0D:52:CD:E7:29:AB:01:9F:B1:7F:42:5A:26:40:F4:5A:A6:FD:96
X509v3 Authority Key Identifier:
keyid:39:EE:A8:46:55:1C:6E:41:9B:94:7E:0D:A1:07:EE:CB:00:70:41:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ee:96:48:66:b9:62:ad:cc:4f:3c:e0:c6:af:85:09:8f:25:
4c:e6:33:e7:ed:03:ad:71:1f:87:50:79:98:01:08:1a:b3:5c:
81:70:e6:aa:28:3c:49:eb:69:db:4d:bf:c5:d8:9d:cf:0f:b0:
93:a0:6b:21:18:4f:d6:3d:72:33:03:a4:0f:11:dd:63:75:76:
94:17:d4:4d:7d:33:fc:35:8c:4a:0d:4c:8c:f9:79:88:cb:4e:
31:e2:66:a2:43:06:fc:1c:f0:2f:6c:95:23:be:64:15:1b:94:
70:4a:01:99:a9:b7:c6:66:b2:90:85:a4:5e:54:c8:c3:8c:89:
c2:0e:04:26:7d:f7:83:65:ee:a5:e0:6f:fd:cb:7e:d2:9f:e9:
c7:df:d3:14:36:35:97:9e:d8:28:58:ba:a8:28:c1:d1:45:2e:
b7:92:d4:a7:e9:f0:2e:43:db:f0:cb:5a:d2:be:e4:98:b3:bf:
bb:b1:28:c6:1e:60:3a:f7:91:a6:ef:ca:38:83:32:89:ee:f6:
e6:4d:b6:8f:06:49:ae:21:39:2e:58:cb:6d:ff:8e:dc:e7:5d:
8c:54:32:e1:b5:8d:d7:21:78:65:e8:0e:e2:46:a2:7d:3a:f8:
61:ad:f3:ee:f4:c5:7a:35:58:b9:5b:2a:d8:38:8a:a6:46:17:
a9:e5:00:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 03:11:35 2026 by rpki-client