Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
File: Oe6oRlUcbkGblH4NoQfuywBwQZo.mft (raw, json)
Hash identifier: y4fchOfxNQp+OlCHaIXZeMArk/01BdrUyyDenFXYzWI=
Subject key identifier: 18:A6:B9:CB:9A:D1:1F:FE:15:AB:DE:FA:C4:79:62:A2:41:E5:E0:AB
Authority key identifier: 39:EE:A8:46:55:1C:6E:41:9B:94:7E:0D:A1:07:EE:CB:00:70:41:9A
Certificate issuer: /CN=39eea846551c6e419b947e0da107eecb0070419a
Certificate serial: 019CADFEBB6120B649011B20AED4EF04AC3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
Manifest number: 15CB
Signing time: Mon 02 Mar 2026 10:01:18 +0000
Manifest this update: Mon 02 Mar 2026 10:01:18 +0000
Manifest next update: Tue 03 Mar 2026 10:01:18 +0000
Files and hashes: 1: NwT9W71qDLuM68yfor7jaPtZ31g.roa (hash: Oy3RbTWtLZU6r3g8zZub3EsVqMVs7mpKUAZ+3t3L7eo=)
2: Oe6oRlUcbkGblH4NoQfuywBwQZo.crl (hash: N3oH6zMlZxemyTSZq5oOl3N1HLru9PkFPJfozWkb+Gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:bb:61:20:b6:49:01:1b:20:ae:d4:ef:04:ac:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39eea846551c6e419b947e0da107eecb0070419a
Validity
Not Before: Mar 2 10:01:18 2026 GMT
Not After : Mar 3 10:01:18 2026 GMT
Subject: CN=18a6b9cb9ad11ffe15abdefac47962a241e5e0ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:46:3b:72:3f:ea:3f:c7:f6:cf:15:57:5f:ec:
94:57:8c:e1:ed:fb:00:52:77:56:5e:27:7c:6d:ae:
f1:b9:de:4e:30:de:88:d4:7d:77:dc:cd:f8:68:c5:
e2:01:02:93:bc:ca:be:61:45:58:e2:da:e7:dc:cd:
1c:b6:03:a4:0c:44:b3:dd:a3:0f:d2:d9:95:5d:22:
29:3b:c6:6b:52:0a:ef:65:3f:2f:44:a9:f1:54:aa:
20:df:b5:9a:53:b5:bb:0b:cb:86:8d:24:92:f5:94:
83:66:78:f2:07:4e:3f:16:63:38:50:19:a5:e2:fd:
7c:f8:42:98:d9:df:53:cd:2e:53:47:94:57:22:08:
34:2f:4f:a0:ea:a5:fa:87:2a:fc:49:9e:4a:7a:27:
36:d8:8b:34:b8:c9:84:08:bf:96:7c:80:34:6e:5e:
9c:f9:02:eb:d2:ac:df:c2:6a:dc:b1:4b:cd:92:0e:
b8:4a:04:18:a6:f0:0b:36:56:65:21:fe:b5:78:e9:
8b:ac:78:fb:4f:f6:1f:e7:ab:d4:c4:b0:d1:1e:44:
90:de:02:83:44:d4:c4:f3:74:6a:4b:2d:3e:93:69:
36:08:49:21:e4:fb:23:36:ab:fb:a2:dc:e4:8e:39:
9c:3c:77:c3:50:e8:4e:e6:c1:55:b1:18:4a:f6:ee:
ef:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A6:B9:CB:9A:D1:1F:FE:15:AB:DE:FA:C4:79:62:A2:41:E5:E0:AB
X509v3 Authority Key Identifier:
keyid:39:EE:A8:46:55:1C:6E:41:9B:94:7E:0D:A1:07:EE:CB:00:70:41:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:fe:24:f9:ed:c4:0e:40:04:10:a0:0e:01:81:e1:35:fd:4c:
7e:96:27:50:45:01:01:b5:64:27:01:98:a1:c9:c8:ed:b5:6c:
57:0c:7e:44:05:b7:d0:79:4e:1f:56:c7:f7:08:0c:05:f8:38:
74:84:98:c6:4d:df:d9:55:c2:1a:cb:51:ce:a8:63:6d:ca:63:
c4:dd:e1:5c:e2:96:ee:7e:8a:0f:89:95:96:db:ef:77:26:38:
e2:8f:4d:8f:12:1f:b7:bd:97:d7:98:df:76:c4:e8:f0:ca:1e:
fa:82:c7:b7:36:95:6c:fb:fd:e0:d0:81:bf:f4:b4:b6:ac:86:
09:47:ee:3e:d7:8d:a2:49:b6:ee:21:15:03:4d:62:3f:bd:fa:
5b:b9:90:88:d9:8d:37:47:a3:2e:30:72:ce:d0:a7:3c:50:57:
6a:72:7c:c3:7d:21:e3:b9:70:f0:5f:e6:86:8b:e9:ac:64:be:
37:43:07:ac:b9:35:14:fd:55:73:6c:15:ff:20:99:ad:17:ae:
45:94:36:eb:cb:31:fd:59:30:a2:86:d1:30:2b:d6:b7:46:75:
cb:62:5b:99:55:da:52:42:a1:8d:58:2b:61:81:09:08:e2:24:
6d:c8:6b:b8:bf:54:69:36:36:ad:11:74:64:9d:06:b1:53:61:
70:fa:b8:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:10:08 2026 by rpki-client