Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
File: oej-6X2jZbZICCGxi-35_CNVOCY.mft (raw, json)
Hash identifier: JcnFM++9yOrryu3AWcNFNfwjnSm34s+E/wJ2AHlYlnk=
Subject key identifier: 6B:DD:37:D8:2D:42:B1:09:DD:DF:6F:D7:6A:84:AF:B9:15:46:BF:82
Authority key identifier: A1:E8:FE:E9:7D:A3:65:B6:48:08:21:B1:8B:ED:F9:FC:23:55:38:26
Certificate issuer: /CN=a1e8fee97da365b6480821b18bedf9fc23553826
Certificate serial: 019D2696344F403391E25412A632A0366F26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
Manifest number: 0F6C
Signing time: Wed 25 Mar 2026 20:01:11 +0000
Manifest this update: Wed 25 Mar 2026 20:01:11 +0000
Manifest next update: Thu 26 Mar 2026 20:01:11 +0000
Files and hashes: 1: jRCRVJYAGBXYgrtW6iJFIwl-3T4.roa (hash: zd3vqx8SZ7kQ7l/rKEA4mZdGGLkEyNUj7EHXRniiHWs=)
2: oej-6X2jZbZICCGxi-35_CNVOCY.crl (hash: 6RfN4coRfx5uc21tj9N+uJLrgfcqODN2VcKYp/vIzAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:34:4f:40:33:91:e2:54:12:a6:32:a0:36:6f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1e8fee97da365b6480821b18bedf9fc23553826
Validity
Not Before: Mar 25 20:01:11 2026 GMT
Not After : Mar 26 20:01:11 2026 GMT
Subject: CN=6bdd37d82d42b109dddf6fd76a84afb91546bf82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:61:f9:c7:2b:54:b5:e7:c6:79:d2:e4:ee:68:
a5:8a:8f:0e:1c:74:b2:39:f4:41:e1:0d:2d:9f:12:
ae:db:9d:e9:1f:28:ae:90:af:f0:6f:52:ce:62:27:
83:3d:92:6c:c9:ca:16:8f:53:aa:fd:45:44:a0:6e:
2d:8b:b7:90:81:86:7d:f3:2a:45:47:a3:11:83:54:
c0:40:2c:1d:22:9c:42:e8:8f:cb:11:ef:2e:86:e0:
c6:38:c3:93:f9:07:43:64:cf:db:34:82:f6:f7:1c:
b2:cc:9e:f2:ed:6c:2d:47:1c:4c:e9:93:b2:db:db:
ca:1b:a8:2f:b7:ef:dc:df:45:38:5f:b3:e8:9c:eb:
19:33:6d:bb:57:a9:9c:e2:0e:94:be:15:ab:d2:14:
a2:ad:04:5a:b7:cb:2a:6b:4b:9b:9b:e5:a3:b6:8b:
4d:ee:14:e0:da:bb:5d:27:cd:2a:b1:74:8c:e5:4c:
cb:04:96:ff:23:23:55:64:b2:6d:03:df:a6:b6:af:
bd:e2:5d:d8:49:9b:37:b1:73:e4:ba:be:8d:72:09:
a3:72:7e:e1:ee:70:8e:44:79:ad:8e:d2:71:5f:68:
56:14:b2:95:c5:70:c1:51:22:85:b2:d1:03:20:ae:
cc:cc:79:aa:56:b3:d1:6c:e8:0a:e2:2e:6a:ea:b8:
1b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:DD:37:D8:2D:42:B1:09:DD:DF:6F:D7:6A:84:AF:B9:15:46:BF:82
X509v3 Authority Key Identifier:
keyid:A1:E8:FE:E9:7D:A3:65:B6:48:08:21:B1:8B:ED:F9:FC:23:55:38:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:be:9b:cf:2d:7a:41:55:bf:e2:5a:46:3e:b3:e7:ed:af:16:
99:83:8f:b8:69:d1:71:de:00:8d:a5:38:d0:d4:e5:25:3a:69:
b0:09:b6:bb:ea:21:c0:5e:dc:98:d6:89:f5:69:74:fc:01:a8:
64:95:f7:79:56:30:a7:7a:5e:34:f0:6f:8f:4e:41:f1:a5:4d:
dc:2a:3f:7a:7b:7f:74:c7:da:32:61:37:c3:d5:24:86:ab:81:
03:f8:74:5e:9c:76:40:41:d5:12:f2:2a:77:39:82:6c:91:50:
f4:fe:48:a9:3c:0b:a1:20:09:a1:55:bd:b3:17:4c:bb:79:7c:
a5:86:26:3b:08:99:be:5c:28:c2:36:16:96:5a:ca:ce:88:19:
66:c7:ca:3e:67:af:ae:e0:80:ee:22:a9:2b:80:1f:ad:5d:1c:
e8:16:65:ea:44:81:fc:c1:b1:36:72:e7:7b:d8:44:f0:9a:5c:
51:46:71:16:45:8b:ab:8f:12:e6:6c:df:87:13:3e:6d:f4:11:
15:94:55:6f:11:94:49:b8:43:32:b9:cf:b8:f6:c5:30:aa:1e:
5a:30:c4:c6:09:4d:3c:f9:4e:34:7c:a9:f5:b2:99:82:89:8f:
32:57:c6:91:f7:0d:e8:49:80:fa:90:49:37:4a:62:98:6e:3b:
79:76:c7:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mljRPQDOR4lQSpjKgNm8mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExZThmZWU5N2RhMzY1YjY0ODA4MjFiMThiZWRmOWZjMjM1
NTM4MjYwHhcNMjYwMzI1MjAwMTExWhcNMjYwMzI2MjAwMTExWjAzMTEwLwYDVQQD
Eyg2YmRkMzdkODJkNDJiMTA5ZGRkZjZmZDc2YTg0YWZiOTE1NDZiZjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWH5xytUtefGedLk7milio8OHHSy
OfRB4Q0tnxKu253pHyiukK/wb1LOYieDPZJsycoWj1Oq/UVEoG4ti7eQgYZ98ypF
R6MRg1TAQCwdIpxC6I/LEe8uhuDGOMOT+QdDZM/bNIL29xyyzJ7y7WwtRxxM6ZOy
29vKG6gvt+/c30U4X7PonOsZM227V6mc4g6UvhWr0hSirQRat8sqa0ubm+WjtotN
7hTg2rtdJ80qsXSM5UzLBJb/IyNVZLJtA9+mtq+94l3YSZs3sXPkur6Ncgmjcn7h
7nCORHmtjtJxX2hWFLKVxXDBUSKFstEDIK7MzHmqVrPRbOgK4i5q6rgbTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGvdN9gtQrEJ3d9v12qEr7kVRr+CMB8GA1UdIwQY
MBaAFKHo/ul9o2W2SAghsYvt+fwjVTgmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2VqLTZYMmpaYlpJQ0NHeGktMzVfQ05WT0NZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi85YzcyYWUtODM2NS00ZjUwLTgyNWUt
ZjgyMTM3ZTAwYmMzLzEvb2VqLTZYMmpaYlpJQ0NHeGktMzVfQ05WT0NZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi85YzcyYWUtODM2NS00ZjUwLTgyNWUtZjgyMTM3ZTAwYmMz
LzEvb2VqLTZYMmpaYlpJQ0NHeGktMzVfQ05WT0NZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATL6bzy16
QVW/4lpGPrPn7a8WmYOPuGnRcd4AjaU40NTlJTppsAm2u+ohwF7cmNaJ9Wl0/AGo
ZJX3eVYwp3peNPBvj05B8aVN3Co/ent/dMfaMmE3w9UkhquBA/h0Xpx2QEHVEvIq
dzmCbJFQ9P5IqTwLoSAJoVW9sxdMu3l8pYYmOwiZvlwowjYWllrKzogZZsfKPmev
ruCA7iKpK4AfrV0c6BZl6kSB/MGxNnLne9hE8JpcUUZxFkWLq48S5mzfhxM+bfQR
FZRVbxGUSbhDMrnPuPbFMKoeWjDExglNPPlONHyp9bKZgomPMlfGkfcN6EmA+pBJ
N0pimG47eXbHPA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:06:43 2026 by rpki-client