Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
File: Oe6oRlUcbkGblH4NoQfuywBwQZo.mft (raw, json)
Hash identifier: uPWlIAsjDXfgQaQcxGl7B55tdf+NgTyg4AOCdgwSNjo=
Subject key identifier: 84:D6:06:8C:70:0F:19:76:49:F2:FD:06:6E:E0:5A:2B:99:E1:4C:AC
Authority key identifier: 39:EE:A8:46:55:1C:6E:41:9B:94:7E:0D:A1:07:EE:CB:00:70:41:9A
Certificate issuer: /CN=39eea846551c6e419b947e0da107eecb0070419a
Certificate serial: 019E20C824EEC6FC57992E131A8DEC0021AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
Manifest number: 168B
Signing time: Wed 13 May 2026 10:00:47 +0000
Manifest this update: Wed 13 May 2026 10:00:47 +0000
Manifest next update: Thu 14 May 2026 10:00:47 +0000
Files and hashes: 1: NwT9W71qDLuM68yfor7jaPtZ31g.roa (hash: Oy3RbTWtLZU6r3g8zZub3EsVqMVs7mpKUAZ+3t3L7eo=)
2: Oe6oRlUcbkGblH4NoQfuywBwQZo.crl (hash: yGEcUy/TiIb6p4+/ZJgI+clOjaZ/amLkAqxiiitVUcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:c8:24:ee:c6:fc:57:99:2e:13:1a:8d:ec:00:21:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39eea846551c6e419b947e0da107eecb0070419a
Validity
Not Before: May 13 10:00:47 2026 GMT
Not After : May 14 10:00:47 2026 GMT
Subject: CN=84d6068c700f197649f2fd066ee05a2b99e14cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b7:77:5f:0c:77:b4:2d:50:f1:4d:37:27:06:
0a:e4:33:47:d8:52:d7:68:29:98:f3:51:8a:fa:29:
99:fb:29:47:51:aa:ad:d2:e7:73:22:f0:4a:c5:26:
e9:f8:73:05:a8:03:ec:cd:5d:15:f9:1b:d8:b6:4c:
0a:0a:03:1f:f5:c2:60:01:eb:fb:b8:04:58:82:13:
df:03:b1:4a:ed:e4:04:15:27:0e:4a:20:2a:8f:a7:
db:4a:54:61:a7:2b:66:28:ba:d8:e2:e8:28:77:c9:
57:ca:f8:9e:27:ea:e6:0a:38:ae:ee:3a:79:83:c5:
5e:07:10:91:b6:58:41:69:05:cf:b1:7e:90:a1:23:
c0:fd:fd:00:d7:fe:a7:a8:5d:4f:cb:99:7a:39:d5:
09:35:1d:ad:74:2f:d2:8a:cd:df:1e:7d:81:a4:9a:
6c:6f:60:33:91:07:ad:49:d9:03:af:00:7b:ed:7d:
64:90:55:85:c2:ce:21:30:8c:0d:d3:38:68:dc:80:
78:14:cf:c6:c6:2f:f4:f0:f8:2c:5c:95:d7:d7:3e:
42:12:31:d8:ba:6d:25:80:92:a6:a3:39:9d:49:f9:
72:5c:c7:77:02:20:e2:ad:cf:20:f8:4b:4d:2d:b3:
9e:34:47:1f:4a:31:66:19:99:ed:9c:1e:3a:2d:d6:
b2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D6:06:8C:70:0F:19:76:49:F2:FD:06:6E:E0:5A:2B:99:E1:4C:AC
X509v3 Authority Key Identifier:
keyid:39:EE:A8:46:55:1C:6E:41:9B:94:7E:0D:A1:07:EE:CB:00:70:41:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:fc:7d:cd:5d:e5:13:c7:01:7d:e7:f6:6f:68:90:bc:5b:26:
9d:20:f9:54:f6:50:d8:ab:6b:52:4e:f1:02:67:ba:f4:d2:f4:
b0:a3:5a:33:40:68:85:ac:60:35:66:8f:4b:8a:f0:b0:c8:0f:
84:d9:de:e6:e0:2b:38:80:67:bd:5c:ea:ad:a0:5b:81:7d:90:
17:a5:f6:72:a2:3f:bf:8f:88:a2:33:05:24:52:9f:91:c8:b0:
77:04:f4:e2:0a:06:46:60:cd:df:9f:c7:14:94:2a:66:92:3c:
22:9e:b7:fe:46:54:1a:3a:ad:d4:b2:30:9a:ff:79:36:c3:2c:
eb:cb:49:c7:0a:95:94:0c:47:b4:08:62:e0:37:04:fd:14:a8:
73:70:cd:4f:fd:0a:a1:57:03:1c:94:e4:eb:8a:81:a9:7e:71:
68:16:3e:66:2d:1c:39:08:62:4c:b5:e7:92:0a:34:45:43:67:
31:2a:67:f2:23:96:8c:c0:21:a4:09:b0:a4:fc:66:79:76:48:
c6:af:f3:cd:aa:97:e8:9b:34:0d:8d:70:9f:a8:85:d5:ab:7f:
e8:ce:59:52:cf:f5:3a:cd:48:99:5d:05:8d:46:9b:3e:3d:aa:
db:38:8c:d8:e8:ef:c0:7c:35:a0:90:29:cd:5f:7f:8a:e1:fb:
3f:74:06:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:09:06 2026 by rpki-client