Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
File: oej-6X2jZbZICCGxi-35_CNVOCY.mft (raw, json)
Hash identifier: zaNq4ptJMsfFc84ywZPWguga+R5ibWQqW5CKURwQd8Y=
Subject key identifier: A7:B9:46:52:64:D0:17:8D:B8:A0:86:4B:BC:F8:70:8E:24:69:DF:80
Authority key identifier: A1:E8:FE:E9:7D:A3:65:B6:48:08:21:B1:8B:ED:F9:FC:23:55:38:26
Certificate issuer: /CN=a1e8fee97da365b6480821b18bedf9fc23553826
Certificate serial: 019E21A45AA775AC22F86282C249F4ABADC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
Manifest number: 0FEE
Signing time: Wed 13 May 2026 14:01:19 +0000
Manifest this update: Wed 13 May 2026 14:01:19 +0000
Manifest next update: Thu 14 May 2026 14:01:19 +0000
Files and hashes: 1: jRCRVJYAGBXYgrtW6iJFIwl-3T4.roa (hash: zd3vqx8SZ7kQ7l/rKEA4mZdGGLkEyNUj7EHXRniiHWs=)
2: oej-6X2jZbZICCGxi-35_CNVOCY.crl (hash: xh55LS6u6ZxnUI88MC3XoJ7kwY3gsMruzs3vrSg5oMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 14:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:a4:5a:a7:75:ac:22:f8:62:82:c2:49:f4:ab:ad:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1e8fee97da365b6480821b18bedf9fc23553826
Validity
Not Before: May 13 14:01:19 2026 GMT
Not After : May 14 14:01:19 2026 GMT
Subject: CN=a7b9465264d0178db8a0864bbcf8708e2469df80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fe:9f:57:de:1e:a5:82:97:88:a3:bf:b1:8d:
2a:89:0f:00:6b:60:65:a0:43:93:6b:45:de:f5:ac:
c3:29:07:57:71:5c:85:8a:67:1d:71:b2:2d:c6:40:
e7:8e:ee:76:94:e2:b6:87:c7:9e:71:7f:9c:db:8d:
41:87:f1:b9:8d:41:8c:4d:df:14:41:fe:4c:95:ac:
69:8b:9c:00:b1:ff:27:c5:6f:ca:95:cf:f1:e9:ee:
fd:d4:c7:44:23:b5:63:e8:37:bf:b9:50:88:fb:cc:
48:ba:85:85:5b:6c:53:ba:25:3e:3a:53:d2:a5:54:
e7:f2:0e:c3:f4:a7:6f:a1:96:bd:e3:b5:99:69:37:
ad:ee:16:4b:f7:92:4a:d8:55:a0:d7:45:76:29:22:
ba:cc:d9:07:36:61:9c:84:67:8f:59:b6:9b:e1:31:
cf:33:82:ef:ac:61:87:12:9d:2a:75:7f:e3:c8:9b:
c5:de:d5:3a:52:95:9c:c4:26:6e:34:ad:a9:d6:39:
c7:dc:05:f2:3d:1c:3a:41:de:9d:67:ff:83:c8:bf:
8a:8a:c6:68:a6:83:b5:cb:b7:60:6b:a9:19:9d:c5:
60:52:d9:98:a2:34:01:14:65:04:87:04:b4:d9:3c:
19:60:bd:17:f7:9d:65:57:2d:40:2d:29:0a:54:da:
a5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B9:46:52:64:D0:17:8D:B8:A0:86:4B:BC:F8:70:8E:24:69:DF:80
X509v3 Authority Key Identifier:
keyid:A1:E8:FE:E9:7D:A3:65:B6:48:08:21:B1:8B:ED:F9:FC:23:55:38:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:d8:6a:d7:d0:df:ac:6a:1b:55:74:58:a3:05:82:23:9a:2e:
cd:09:af:de:f4:8d:36:75:58:e6:b8:37:bd:4d:66:59:e0:6b:
13:f6:81:7d:5a:4d:e0:eb:63:17:c1:77:1f:59:74:cc:58:db:
b7:04:dd:a5:0d:60:8d:2d:3c:55:07:5a:f2:3c:f8:61:66:7e:
26:77:18:d1:88:be:17:25:bf:2c:2c:97:5b:bb:98:38:8e:5a:
b8:61:91:11:7f:b8:1d:9b:2b:e9:f6:16:65:af:75:30:ac:46:
ab:9d:fb:39:33:92:4f:37:90:b1:a6:d4:34:3a:fd:a3:a6:d6:
6e:b4:46:c1:fc:40:a5:c4:46:dc:ef:f1:44:2a:af:4b:c9:70:
a1:69:d7:f0:e6:04:84:cb:81:f0:f2:90:bf:83:a4:57:fe:5b:
19:5f:b9:5b:44:f6:a4:e9:55:c3:ff:c8:3e:54:38:be:31:f0:
dc:08:72:98:48:85:4f:76:f7:96:22:26:da:f7:65:92:2d:7d:
57:d9:2f:5a:21:32:40:a2:3e:b4:16:a3:01:68:7f:95:c9:8c:
8c:f8:20:b2:99:22:35:5e:a7:9b:08:d5:00:55:e0:ca:06:0f:
9e:9f:e8:56:a9:4e:a6:37:a1:25:85:52:0b:c6:e6:e2:98:78:
b5:df:53:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:34:27 2026 by rpki-client