
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
File: oEhFrx3ACHsnTO5SpKngiAM1Q10.mft (raw, json)
Hash identifier: SzCsl51V6twJPzqDTCNP7V4sXvu5d8Zdohpd4CXHQAk=
Subject key identifier: 68:81:B9:F9:9F:F5:01:BB:91:2A:10:62:83:34:50:A7:C8:09:23:5A
Authority key identifier: A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
Certificate issuer: /CN=a04845af1dc0087b274cee52a4a9e0880335435d
Certificate serial: 019D97AA9432CF02257604BEF35C56280715
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
Manifest number: 18DC
Signing time: Thu 16 Apr 2026 19:00:31 +0000
Manifest this update: Thu 16 Apr 2026 19:00:31 +0000
Manifest next update: Fri 17 Apr 2026 19:00:31 +0000
Files and hashes: 1: 7YBZcKVViMTWDrcb33ThKGDDu_M.roa (hash: IHCu4cQWdFxSyysMTzK5fSm+R+NUGrWc2Oz3D3xdFh4=)
2: GPGTgFwiYsVJWbSqO1-Vy4YA5-U.roa (hash: pErOAng/hMAVplt5BEW7zkhrPBcrawDRAlwBfNH3YGU=)
3: oEhFrx3ACHsnTO5SpKngiAM1Q10.crl (hash: CEpP880WkCVJXt2JxQJBOhhHdY0YWK8LU5bUfoZ4elE=)
4: tLFRg_bTx97O6i5WBrjpjR1Uclg.roa (hash: tAKe6SFpNg6TVOf+ij5N/AwpZZGW6IDo9qGmcBBSkj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:aa:94:32:cf:02:25:76:04:be:f3:5c:56:28:07:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04845af1dc0087b274cee52a4a9e0880335435d
Validity
Not Before: Apr 16 19:00:31 2026 GMT
Not After : Apr 17 19:00:31 2026 GMT
Subject: CN=6881b9f99ff501bb912a1062833450a7c809235a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9f:14:37:a7:25:b3:93:86:e3:2f:61:f0:63:
a4:10:84:6a:c7:6c:36:b6:be:22:3b:cd:19:f2:81:
88:8e:cd:7d:57:cf:8c:7f:f0:c2:53:fc:bd:12:bf:
85:a7:b2:d8:a3:53:6f:86:42:c7:98:ab:a4:74:57:
d0:ca:91:04:2b:dd:12:f0:29:3e:a6:60:aa:7b:23:
76:24:c5:2d:1a:62:38:06:b5:4f:fc:4e:6a:6d:4d:
30:65:50:3a:f5:b1:20:b8:90:70:d4:27:30:3d:8e:
5b:4c:cd:eb:73:da:5e:a4:f3:cd:9d:ef:0e:ca:10:
fc:59:2d:5c:9d:14:6f:19:52:11:36:03:c7:d0:35:
44:f0:c1:18:5e:7b:e7:4c:72:ab:80:00:62:71:b4:
b2:0d:77:17:d7:ef:f6:54:a2:12:58:f1:da:50:e3:
ae:5f:ea:03:6d:3f:35:16:13:0c:7b:01:c5:81:c0:
f1:bf:a1:ba:c2:85:5d:74:da:48:31:6a:c8:cc:09:
47:5d:72:21:4e:b3:22:0f:5b:14:89:4a:74:3f:ae:
cd:07:e4:d2:ae:2d:d0:f3:cd:bf:fe:74:af:73:72:
81:a9:c3:2d:48:81:b4:de:3f:0e:27:6d:59:e8:4f:
ec:22:11:85:0a:64:9a:02:d8:8a:73:0c:04:07:68:
49:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:81:B9:F9:9F:F5:01:BB:91:2A:10:62:83:34:50:A7:C8:09:23:5A
X509v3 Authority Key Identifier:
keyid:A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:8f:39:0d:14:1c:4f:15:38:6a:73:c6:2a:4b:6b:3c:9f:7d:
24:c5:8c:a3:75:41:e6:5d:e5:d9:82:65:dd:8a:63:e8:55:10:
7a:8b:26:dc:c2:7b:64:38:9d:88:8d:b7:99:64:19:f7:8b:27:
b1:4e:7d:61:a4:9c:7b:52:ae:93:49:44:e0:39:e4:88:b9:7c:
e8:4a:21:fd:9d:c0:8b:f5:7c:ee:56:a7:14:e0:05:69:44:06:
91:de:9d:1f:0b:06:e1:15:d0:46:fb:c6:47:c6:0b:18:f3:82:
e3:7d:78:85:b7:2b:e1:87:54:f4:55:d8:2c:76:41:9e:32:cf:
c8:bd:65:b3:5a:cf:8b:a7:ef:43:63:f0:db:ff:43:8c:ae:c6:
52:01:91:f0:60:50:a2:b7:4c:bb:f3:49:41:80:1f:39:7d:62:
b2:2e:b6:cd:67:2a:59:f0:4d:7a:68:a6:68:5d:34:5b:31:b6:
8a:ac:6a:8d:23:29:83:93:40:94:d1:9c:a1:06:e7:b1:92:44:
bc:4e:8d:b4:35:9f:6b:44:4c:38:72:3c:25:72:4d:73:07:99:
54:df:d9:5e:15:7f:86:35:c9:52:f3:d6:7c:fe:48:48:ae:ad:
cd:c4:c9:17:86:ed:5e:ff:3d:43:d0:fa:bb:50:26:57:88:1a:
7f:93:f1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:31 2026 by rpki-client