Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
File: OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft (raw, json)
Hash identifier: CWTA16/gJ0XLWzS4v/8PXx71FB+IKgCriLgmiQMgAAo=
Subject key identifier: 1C:27:44:8F:05:A6:AE:28:8A:42:8B:23:2B:C3:F2:82:38:79:6A:4C
Authority key identifier: 38:48:88:5C:97:02:EA:C1:F3:D0:12:63:E6:D3:E5:44:49:EE:21:54
Certificate issuer: /CN=3848885c9702eac1f3d01263e6d3e54449ee2154
Certificate serial: 019D992BBD049D5522C36FEB990E42D2B674
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
Manifest number: 1227
Signing time: Fri 17 Apr 2026 02:01:13 +0000
Manifest this update: Fri 17 Apr 2026 02:01:13 +0000
Manifest next update: Sat 18 Apr 2026 02:01:13 +0000
Files and hashes: 1: OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl (hash: ypMRIkfI73UOwEBFcTup1RgB23infRBSRG/QFaAJZXM=)
2: ZkxTmxBiQkgSo4ZJv_M7YhFQ0hQ.roa (hash: 2n/6N4Jbcs9rQ/9iwExbuGW4el4Ljo8UJZzO/3/a1NU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:bd:04:9d:55:22:c3:6f:eb:99:0e:42:d2:b6:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3848885c9702eac1f3d01263e6d3e54449ee2154
Validity
Not Before: Apr 17 02:01:13 2026 GMT
Not After : Apr 18 02:01:13 2026 GMT
Subject: CN=1c27448f05a6ae288a428b232bc3f28238796a4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:06:b2:bb:7b:3b:cb:97:ce:94:ab:66:28:32:
2a:22:4c:73:f6:06:3a:07:77:54:6d:4f:6d:6f:9e:
f0:dd:73:48:e4:b7:84:0c:da:da:c2:1c:41:31:28:
7a:0d:d1:65:65:02:8c:35:32:ab:33:2b:05:27:6c:
2f:78:f5:37:4c:da:33:35:c9:07:87:28:0c:97:75:
db:85:de:56:ab:c6:87:52:1b:79:d7:7e:7b:b1:43:
f4:29:85:c7:41:e1:83:06:6b:47:57:3d:67:c9:e7:
ec:c4:f9:d4:9c:37:df:66:96:b7:68:02:fb:80:04:
51:6f:e4:b2:b8:8e:58:11:80:ce:f9:b9:3f:c1:37:
00:67:7d:34:a5:eb:73:86:47:c7:7a:81:a3:83:93:
d0:56:46:0a:a5:f2:82:00:c5:c3:d6:09:01:45:cd:
09:e9:61:d8:ae:c4:73:15:42:f9:9c:dd:8d:75:00:
00:84:c6:b1:65:1f:0f:e1:5d:88:0b:4a:6d:12:e0:
86:76:1a:d5:c7:45:08:8b:01:d9:9b:d4:ec:ab:62:
4c:df:78:f5:26:75:42:e9:f7:11:c5:77:c2:1e:d0:
02:ab:49:ef:8d:6d:ff:06:1e:30:27:b6:a0:ac:f4:
5c:2b:8e:58:d6:43:8f:3a:ce:10:62:a8:1e:16:c7:
e9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:27:44:8F:05:A6:AE:28:8A:42:8B:23:2B:C3:F2:82:38:79:6A:4C
X509v3 Authority Key Identifier:
keyid:38:48:88:5C:97:02:EA:C1:F3:D0:12:63:E6:D3:E5:44:49:EE:21:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:c0:d9:cb:98:3c:a8:b8:88:13:29:b5:27:4f:f9:c8:9a:d8:
75:11:ff:c3:4d:2a:a6:cc:f5:23:64:46:17:bb:36:b0:7d:b2:
38:71:21:48:db:3c:fc:ea:c8:bd:7a:e5:7b:10:3f:01:dc:17:
9b:77:6b:fc:65:74:bd:74:0e:56:3b:65:0f:27:b0:28:b8:19:
1e:8b:a8:ec:fb:6b:90:9f:74:c2:f1:c3:d7:aa:1c:32:ff:53:
b9:84:dd:a2:06:27:4c:4b:2d:be:cf:d6:1f:df:04:3d:52:0d:
0e:a0:4b:50:1f:79:2a:1e:43:9f:3b:38:76:04:3f:cc:07:2e:
57:5b:d0:bd:b1:bf:09:6b:ff:c7:6a:6b:4e:59:a3:ca:6b:ac:
78:1b:8f:cb:cd:a8:e0:7e:74:dc:de:0d:2e:a8:68:01:c3:0e:
45:3a:03:58:ef:0d:9f:ac:26:d2:ea:8d:1d:b4:32:01:ff:4d:
01:80:51:25:ab:b8:5b:d1:56:af:d2:f5:de:8c:48:37:bb:dc:
68:94:f5:9b:f6:e4:2e:94:7b:b3:8d:62:bf:29:68:d4:53:ac:
14:4e:f8:29:b1:b5:4b:c6:c3:f8:a3:88:3a:05:4e:7f:c1:53:
cc:95:8a:cc:3c:bd:c9:fb:63:39:ae:07:9f:b5:e6:56:0b:41:
ff:d1:38:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZK70EnVUiw2/rmQ5C0rZ0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4NDg4ODVjOTcwMmVhYzFmM2QwMTI2M2U2ZDNlNTQ0NDll
ZTIxNTQwHhcNMjYwNDE3MDIwMTEzWhcNMjYwNDE4MDIwMTEzWjAzMTEwLwYDVQQD
EygxYzI3NDQ4ZjA1YTZhZTI4OGE0MjhiMjMyYmMzZjI4MjM4Nzk2YTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwayu3s7y5fOlKtmKDIqIkxz9gY6
B3dUbU9tb57w3XNI5LeEDNrawhxBMSh6DdFlZQKMNTKrMysFJ2wvePU3TNozNckH
hygMl3Xbhd5Wq8aHUht51357sUP0KYXHQeGDBmtHVz1nyefsxPnUnDffZpa3aAL7
gARRb+SyuI5YEYDO+bk/wTcAZ300petzhkfHeoGjg5PQVkYKpfKCAMXD1gkBRc0J
6WHYrsRzFUL5nN2NdQAAhMaxZR8P4V2IC0ptEuCGdhrVx0UIiwHZm9Tsq2JM33j1
JnVC6fcRxXfCHtACq0nvjW3/Bh4wJ7agrPRcK45Y1kOPOs4QYqgeFsfpOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBwnRI8Fpq4oikKLIyvD8oI4eWpMMB8GA1UdIwQY
MBaAFDhIiFyXAurB89ASY+bT5URJ7iFUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0VpSVhKY0M2c0h6MEJKajV0UGxSRW51SVZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zN2JkYjctOWI5My00NmFiLTlhMTUt
NDJhNDhkYmMyNTIxLzEvT0VpSVhKY0M2c0h6MEJKajV0UGxSRW51SVZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zN2JkYjctOWI5My00NmFiLTlhMTUtNDJhNDhkYmMyNTIx
LzEvT0VpSVhKY0M2c0h6MEJKajV0UGxSRW51SVZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHMDZy5g8
qLiIEym1J0/5yJrYdRH/w00qpsz1I2RGF7s2sH2yOHEhSNs8/OrIvXrlexA/AdwX
m3dr/GV0vXQOVjtlDyewKLgZHouo7PtrkJ90wvHD16ocMv9TuYTdogYnTEstvs/W
H98EPVINDqBLUB95Kh5Dnzs4dgQ/zAcuV1vQvbG/CWv/x2prTlmjymuseBuPy82o
4H503N4NLqhoAcMORToDWO8Nn6wm0uqNHbQyAf9NAYBRJau4W9FWr9L13oxIN7vc
aJT1m/bkLpR7s41ivylo1FOsFE74KbG1S8bD+KOIOgVOf8FTzJWKzDy9yftjOa4H
n7XmVgtB/9E4Kg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:53:56 2026 by rpki-client