Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
File: oej-6X2jZbZICCGxi-35_CNVOCY.mft (raw, json)
Hash identifier: bP8UHeqYRzlhx8jUFFUSXtimsFmQAsGubnyWvU2DSfw=
Subject key identifier: 3D:3C:0E:9B:B0:93:98:E6:36:F3:F8:05:E1:A3:7A:2D:81:BE:01:7E
Authority key identifier: A1:E8:FE:E9:7D:A3:65:B6:48:08:21:B1:8B:ED:F9:FC:23:55:38:26
Certificate issuer: /CN=a1e8fee97da365b6480821b18bedf9fc23553826
Certificate serial: 01A129FB2767A9E6284674BFA4111B68C4F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
Manifest number: 1180
Signing time: Sun 11 Oct 2026 08:01:27 +0000
Manifest this update: Sun 11 Oct 2026 08:01:27 +0000
Manifest next update: Mon 12 Oct 2026 08:01:27 +0000
Files and hashes: 1: jRCRVJYAGBXYgrtW6iJFIwl-3T4.roa (hash: zd3vqx8SZ7kQ7l/rKEA4mZdGGLkEyNUj7EHXRniiHWs=)
2: oej-6X2jZbZICCGxi-35_CNVOCY.crl (hash: 9FeJURaRtk8XwjwNMtFKqmeugbM5r8nmJ95EppfI5BM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 08:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:fb:27:67:a9:e6:28:46:74:bf:a4:11:1b:68:c4:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1e8fee97da365b6480821b18bedf9fc23553826
Validity
Not Before: Oct 11 08:01:27 2026 GMT
Not After : Oct 12 08:01:27 2026 GMT
Subject: CN=3d3c0e9bb09398e636f3f805e1a37a2d81be017e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:66:f0:c1:00:72:57:74:02:02:4b:3a:92:14:
9c:6b:e8:07:35:1f:7f:1b:99:0d:c0:dc:33:ad:4a:
0f:8a:20:3b:a3:d4:82:ca:ab:e0:cb:74:49:10:ab:
80:4c:6a:cd:47:94:f0:72:29:01:96:54:fc:35:5b:
e0:14:d7:bf:c9:2f:bf:dd:23:fc:56:bd:0d:dc:14:
3d:7e:44:a6:16:12:ff:62:7b:38:5d:6a:15:9d:06:
ea:65:81:5c:52:e1:79:62:21:67:8b:5f:1b:13:24:
b6:20:2e:7a:a6:c5:63:43:b4:11:8d:5c:8b:12:28:
75:8b:5f:29:f2:61:e5:ac:75:2a:83:87:46:9f:84:
b0:e3:c8:55:6d:fb:e5:fa:d5:a0:60:cc:3b:24:8e:
a6:ea:dd:6c:af:17:1a:1a:3b:a0:e8:c5:0c:46:d1:
97:93:32:9b:bb:16:10:91:d4:66:e2:5c:0f:6d:f4:
f4:19:bf:ba:bd:89:fd:15:79:1b:43:df:2a:75:f9:
df:a2:da:b4:a6:62:22:95:20:18:cc:27:0b:a1:8a:
ef:d6:8e:5e:c9:d4:65:96:c2:0e:3c:59:4b:44:0f:
47:1c:e2:17:7c:69:3d:e5:b0:36:af:91:3a:3d:ed:
1f:95:52:cc:0f:19:c9:dc:fc:2b:b9:2a:de:e5:86:
2f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:3C:0E:9B:B0:93:98:E6:36:F3:F8:05:E1:A3:7A:2D:81:BE:01:7E
X509v3 Authority Key Identifier:
keyid:A1:E8:FE:E9:7D:A3:65:B6:48:08:21:B1:8B:ED:F9:FC:23:55:38:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:56:ba:b4:7b:ba:97:69:b1:68:b1:24:d7:db:ef:c7:49:08:
a1:97:fb:dc:3d:80:17:da:e3:fb:46:55:07:b6:ba:63:3b:6f:
89:f7:a9:7e:22:4f:c5:fc:6c:9f:a4:b3:6c:b7:50:a4:84:f2:
a5:de:af:38:56:0a:5e:d9:6b:5f:58:22:63:14:c0:e4:5c:42:
09:93:42:0c:da:6e:ca:bf:b9:c9:db:1c:01:24:88:64:0b:92:
85:eb:49:d9:e2:85:03:33:8f:8b:e3:8b:86:02:64:79:12:3c:
a6:c0:e2:c2:84:e4:bd:a6:34:89:47:55:7b:bd:a8:2c:b3:f7:
9a:15:c7:f9:a8:fa:95:a5:9b:e4:84:84:f9:c3:26:e1:45:9c:
db:96:9f:ea:ca:b2:1e:87:77:5e:36:4c:2b:dc:e7:a6:53:c8:
51:1d:02:b7:43:4e:16:d8:e3:c7:a7:95:45:28:46:81:a7:c3:
d1:de:99:56:a1:75:4a:6d:5f:93:86:57:2d:f8:3c:93:e4:3b:
84:af:e7:f7:e3:95:19:78:1d:53:de:e9:08:aa:74:a4:f1:80:
ec:a8:5e:a3:15:f4:1f:3e:16:78:68:5d:08:9e:db:16:1d:0b:
71:18:a4:71:3b:1c:70:c4:a4:3c:44:e8:2d:6c:d6:e2:fc:21:
3a:a8:f2:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:36:14 2026 by rpki-client