Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
File: Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft (raw, json)
Hash identifier: Q4eYKVwOOTJPjboeo1Q+IB1IE14xz2a1MH06ROWT1hc=
Subject key identifier: 8E:0C:E6:62:6E:F8:0A:7E:C9:1B:1B:80:C1:DC:4C:6F:5C:4D:2D:1B
Authority key identifier: 3A:3E:A3:3A:EA:8B:38:42:7F:2B:CE:F5:ED:4C:21:42:3A:2A:9D:64
Certificate issuer: /CN=3a3ea33aea8b38427f2bcef5ed4c21423a2a9d64
Certificate serial: 019D9E885F30A16E632CC9E380D6BB7E1B27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
Manifest number: 04EA
Signing time: Sat 18 Apr 2026 03:00:30 +0000
Manifest this update: Sat 18 Apr 2026 03:00:30 +0000
Manifest next update: Sun 19 Apr 2026 03:00:30 +0000
Files and hashes: 1: 7jGC3eByRg_Kov58Z9afFa1zFhk.roa (hash: 01p3EgWoHQZuC7lRAyeIevnlE5QEkxh9vvqWiCkIFPs=)
2: JiK8psPNS7Q8TSWjkJH1pP9BmF8.roa (hash: 3M1URB5bq4S79c9mtyyaPbUG6/SErUNxltBv4XVCKoY=)
3: Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl (hash: D7/ZeVx0rE+mgePTLvj3Z/4RhHBV79h+alj0IRs2wZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9e:88:5f:30:a1:6e:63:2c:c9:e3:80:d6:bb:7e:1b:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3ea33aea8b38427f2bcef5ed4c21423a2a9d64
Validity
Not Before: Apr 18 03:00:30 2026 GMT
Not After : Apr 19 03:00:30 2026 GMT
Subject: CN=8e0ce6626ef80a7ec91b1b80c1dc4c6f5c4d2d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e5:66:d5:13:be:af:de:e1:3f:66:ea:48:96:
bf:dd:2f:f6:cd:e6:7d:af:c0:14:2e:2d:28:cf:98:
3c:21:33:40:89:d9:a9:af:d8:b1:49:91:6e:12:d9:
08:c3:b1:32:ac:06:ce:5d:e3:65:0e:bf:23:10:a2:
9d:d9:55:5c:dd:50:8d:e4:46:58:aa:b0:8f:35:ed:
b6:a9:db:f2:56:f1:c3:1d:23:75:6c:54:cd:11:4d:
e7:a4:a9:d0:57:9c:79:fb:f8:91:34:3e:8e:65:b0:
0b:9c:c9:74:58:59:1d:d8:30:d2:0a:15:97:5f:c9:
97:4f:d7:73:56:e8:82:fc:c5:36:68:d3:ff:82:33:
e3:04:67:ff:21:c1:46:79:99:ba:1a:1e:24:43:af:
b2:e3:3e:4d:e8:f6:3b:5a:96:9a:50:62:8c:ef:32:
48:85:4e:0b:ef:0e:d6:ec:af:19:0b:f5:01:3f:05:
43:03:16:d3:e0:b2:9a:22:64:ce:5c:db:db:e8:af:
07:ff:72:ec:0c:d5:4b:3f:58:55:66:c1:a9:23:78:
2d:31:55:a4:95:38:4e:7a:e9:ca:3c:71:52:40:f1:
48:e1:9f:9d:14:87:07:26:ed:67:21:55:46:70:82:
92:58:b4:87:d6:2f:9a:8a:46:89:fb:e8:d1:c6:66:
71:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:0C:E6:62:6E:F8:0A:7E:C9:1B:1B:80:C1:DC:4C:6F:5C:4D:2D:1B
X509v3 Authority Key Identifier:
keyid:3A:3E:A3:3A:EA:8B:38:42:7F:2B:CE:F5:ED:4C:21:42:3A:2A:9D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:95:2f:3a:af:99:ab:f1:1f:91:db:0c:78:98:e2:e7:1c:36:
f6:1c:1f:a7:be:86:6c:ca:78:f9:d7:ec:66:5f:17:73:00:c4:
41:80:ac:ee:da:e7:e7:1f:7b:c5:b8:5b:94:06:11:bf:49:f7:
3b:38:fa:d4:b6:70:74:06:82:c5:d0:2c:4e:51:ff:5f:a3:62:
b7:1c:28:b6:bf:8e:9a:cc:12:97:46:9b:dc:90:a2:f8:fb:29:
4b:8e:f6:e9:10:d1:db:a6:46:44:db:a8:06:6a:a1:87:96:ca:
75:3e:3c:42:e2:53:9c:51:e4:fb:dc:15:44:a5:ee:ab:67:62:
d0:56:1b:74:e6:24:7d:7e:d5:ba:9c:13:46:33:b1:03:91:90:
f8:e0:6c:5b:56:2d:20:c5:0c:78:05:4c:25:85:64:e7:60:c9:
6b:f8:a2:8f:58:1a:5c:ce:c3:80:17:de:3c:c4:9e:64:11:fb:
a6:e3:a6:35:fc:a5:a4:5a:68:32:8e:6c:6e:c4:76:9f:db:c5:
ed:9a:74:21:9c:e6:8b:58:11:10:c5:fc:59:7c:19:8d:89:1f:
26:f5:1f:3d:d7:3f:f9:b9:79:98:45:6e:69:9a:ca:b7:6a:e1:
3b:8a:f5:f0:38:7f:ba:d5:cc:90:f8:11:86:ca:10:e4:3a:c6:
c5:7b:10:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 07:32:39 2026 by rpki-client