Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
File: OeQFnlGefK0FNr1U2RvJeHVkTNs.mft (raw, json)
Hash identifier: lTEYraCGblJG71A0Kv9uGrQDFDxo0KYg/1FnQroZ/Eg=
Subject key identifier: 50:C5:B8:6A:4B:B1:5F:ED:E4:A7:AD:81:E3:42:1C:50:27:4A:E7:3A
Authority key identifier: 39:E4:05:9E:51:9E:7C:AD:05:36:BD:54:D9:1B:C9:78:75:64:4C:DB
Certificate issuer: /CN=39e4059e519e7cad0536bd54d91bc97875644cdb
Certificate serial: 019D2BBC42F44177B2A6493D4D3596781D65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
Manifest number: 1819
Signing time: Thu 26 Mar 2026 20:00:51 +0000
Manifest this update: Thu 26 Mar 2026 20:00:51 +0000
Manifest next update: Fri 27 Mar 2026 20:00:51 +0000
Files and hashes: 1: OeQFnlGefK0FNr1U2RvJeHVkTNs.crl (hash: ns1rg00PJMFU93QElOyHCQcO5YZmS226sTo0yH8LJy0=)
2: qOowaPdAtIoEeA8UwWKl0WeOo_E.roa (hash: qf6D/9fKMsy5vRBqrt+Mp9eken3A/z5tlK1SkhHLKO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:bc:42:f4:41:77:b2:a6:49:3d:4d:35:96:78:1d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39e4059e519e7cad0536bd54d91bc97875644cdb
Validity
Not Before: Mar 26 20:00:51 2026 GMT
Not After : Mar 27 20:00:51 2026 GMT
Subject: CN=50c5b86a4bb15fede4a7ad81e3421c50274ae73a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a5:b3:a5:02:2c:8d:58:b9:a1:46:d8:18:d9:
fb:45:de:37:bc:fe:30:ec:d7:dc:41:d4:be:04:ef:
a5:21:5e:81:e8:d0:62:74:42:4c:24:5a:e5:b6:78:
0c:e5:a7:4a:b3:78:1b:ee:53:7a:60:8f:e4:2b:2d:
ae:3b:e9:04:c9:d4:3b:3a:48:bf:4f:8a:f3:d2:03:
b6:5b:83:d7:5b:b0:99:22:03:c0:12:95:25:95:f6:
bb:e7:fe:c1:8c:77:97:a8:dd:1f:c3:25:14:c6:81:
32:81:42:8e:21:ee:23:c1:3c:c8:65:f0:3e:80:e2:
ae:d7:8f:45:6f:53:3e:06:0a:1d:57:38:87:bf:83:
9f:88:f0:bc:3a:a9:1c:73:79:21:8b:0b:be:57:1b:
34:c5:8d:c0:ea:ec:e3:0f:7b:20:13:34:3c:ab:8b:
fa:84:18:17:ea:cd:50:5c:a3:63:60:49:5f:64:36:
e9:b5:ea:8d:72:5e:f2:60:30:8d:b0:40:e3:95:e6:
03:8a:cc:f9:a7:72:d2:b7:87:d7:46:90:51:a8:1f:
6e:ee:f6:51:b0:7d:34:4a:ad:2e:e7:cd:de:fe:25:
96:30:49:23:4f:cc:ca:b4:12:de:ad:98:4e:ef:94:
e4:b3:bd:a6:83:b3:75:f8:c5:01:35:99:7d:ae:61:
16:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C5:B8:6A:4B:B1:5F:ED:E4:A7:AD:81:E3:42:1C:50:27:4A:E7:3A
X509v3 Authority Key Identifier:
keyid:39:E4:05:9E:51:9E:7C:AD:05:36:BD:54:D9:1B:C9:78:75:64:4C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:00:11:f9:79:75:18:1c:03:e9:9b:ff:3d:3f:23:b6:44:9a:
4c:f6:32:f5:ae:42:3d:7b:67:5d:63:71:7d:10:50:ff:8f:4a:
32:b3:ad:ca:1c:2f:5b:d4:4f:ea:b9:af:1a:d0:1d:a6:e3:3b:
95:2a:c7:ee:8d:83:b5:da:d5:0d:5e:aa:e8:e0:41:ff:45:24:
9e:a6:c0:b0:b6:a8:11:e5:43:31:43:47:0b:f2:01:25:33:d8:
78:95:2d:c1:09:d5:03:3f:1d:fc:55:34:61:6a:1e:83:0b:c5:
5b:f9:a2:7b:d7:57:2a:91:c5:5f:e0:ee:b4:e9:d9:98:a2:eb:
d7:a3:97:c1:70:9d:9c:7b:1f:3b:87:02:01:08:a9:58:a7:9d:
f2:3d:65:fc:a1:6e:17:cb:29:97:1f:a0:67:30:5b:af:cb:c7:
cb:2c:b9:ce:3f:49:df:0c:f4:9c:64:c7:7a:31:9d:d9:97:f9:
e1:3b:82:60:42:d9:62:08:82:4c:c5:79:70:d1:45:53:3b:ba:
ca:cf:de:fe:a0:31:02:90:5d:11:e1:f0:e9:16:50:df:49:3b:
5c:ed:68:97:2e:c4:a2:15:47:ba:fd:de:95:f0:92:e3:6d:11:
59:19:36:31:a3:da:e8:43:6c:b3:91:84:5d:03:77:16:f3:62:
7a:9b:a7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:34:21 2026 by rpki-client