Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
File: Oe6oRlUcbkGblH4NoQfuywBwQZo.mft (raw, json)
Hash identifier: Nrebkg+Fxjfw5vCqqkEKIMbOUCZXEEGlKIxwVv8mSYg=
Subject key identifier: DB:4E:81:6B:A2:3E:95:E6:67:BB:C2:D3:61:3B:06:B5:80:98:87:24
Authority key identifier: 39:EE:A8:46:55:1C:6E:41:9B:94:7E:0D:A1:07:EE:CB:00:70:41:9A
Certificate issuer: /CN=39eea846551c6e419b947e0da107eecb0070419a
Certificate serial: 019D9D763B115BD60D6379594A4F9F5D0F58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
Manifest number: 1647
Signing time: Fri 17 Apr 2026 22:01:04 +0000
Manifest this update: Fri 17 Apr 2026 22:01:04 +0000
Manifest next update: Sat 18 Apr 2026 22:01:04 +0000
Files and hashes: 1: NwT9W71qDLuM68yfor7jaPtZ31g.roa (hash: Oy3RbTWtLZU6r3g8zZub3EsVqMVs7mpKUAZ+3t3L7eo=)
2: Oe6oRlUcbkGblH4NoQfuywBwQZo.crl (hash: 0RDQrt3xFzDc1nTYQCbaQgsjmIaInw0eU9Rt72xQJjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:76:3b:11:5b:d6:0d:63:79:59:4a:4f:9f:5d:0f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39eea846551c6e419b947e0da107eecb0070419a
Validity
Not Before: Apr 17 22:01:04 2026 GMT
Not After : Apr 18 22:01:04 2026 GMT
Subject: CN=db4e816ba23e95e667bbc2d3613b06b580988724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:02:0e:3e:59:06:42:9f:ab:ed:91:ff:09:10:
29:56:c9:ef:8b:9a:ae:a8:b4:83:a9:7c:bc:2e:42:
b2:ff:4d:7a:d4:86:37:03:40:d5:72:8e:5a:0c:a2:
4c:0a:6f:5b:73:82:fb:b3:46:b9:28:4b:01:7e:1b:
32:e2:b4:46:be:c6:69:0e:7b:e1:96:6d:7d:d1:b0:
d0:25:0b:dc:26:b7:21:9f:84:cd:59:92:ab:45:14:
22:a8:90:ea:43:03:05:63:45:b9:69:33:56:32:9b:
38:10:07:c6:ff:9a:47:76:64:b9:24:68:18:0d:18:
9f:13:3a:49:f0:7d:9c:4b:dc:f6:fe:86:ab:32:8e:
ac:85:ec:2f:86:d5:8f:69:d6:ad:26:7b:dc:96:6a:
6a:57:32:36:93:20:f7:11:ac:04:7a:19:0a:5f:93:
49:fe:34:3d:1a:df:e1:9b:5e:c3:26:51:24:25:8e:
f3:6b:86:a9:ec:4c:98:88:03:8d:a8:b8:8a:87:c6:
f3:41:30:00:04:e5:ce:ea:fd:60:86:1b:bf:48:2f:
43:ed:4a:83:4e:df:85:4a:c2:36:ac:12:79:1b:39:
3f:ee:7e:a1:63:96:18:df:bf:20:0f:39:82:4c:30:
71:a4:dc:bf:59:ac:f3:c8:37:f5:79:66:c1:55:bb:
a9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:4E:81:6B:A2:3E:95:E6:67:BB:C2:D3:61:3B:06:B5:80:98:87:24
X509v3 Authority Key Identifier:
keyid:39:EE:A8:46:55:1C:6E:41:9B:94:7E:0D:A1:07:EE:CB:00:70:41:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:41:f3:5c:e9:08:cd:88:b7:8b:0d:b0:dd:0e:a6:5c:49:73:
4a:a9:57:0e:21:f2:61:94:ae:ab:db:91:6c:bb:7d:64:ff:f4:
3c:4f:5e:b9:e9:3c:fa:f6:18:c0:6b:84:41:fc:59:78:50:6f:
ad:85:3c:d6:77:b7:79:18:4d:c1:a9:69:d4:d7:6c:65:b8:04:
64:0e:b4:93:7b:ca:47:57:d5:cb:49:00:ef:ff:f5:07:7e:d3:
36:6e:64:f2:e2:01:d2:22:e8:1c:25:16:3e:b9:81:f7:64:b5:
cf:ad:b1:5c:7d:18:58:7b:a6:a0:4b:59:26:c9:21:e6:8e:d4:
5c:37:f7:f1:6b:b2:9d:8d:7e:dc:be:5f:78:34:ed:e7:d7:da:
d5:6c:05:42:2e:63:93:ad:76:5a:9b:0f:2a:e8:3e:0d:83:6d:
30:03:e7:20:97:1c:d0:28:5e:52:f6:7c:68:61:91:9a:ef:d5:
29:45:42:c8:09:35:56:e5:53:33:29:2f:c0:78:3a:f3:a1:20:
5d:af:a8:5c:9d:60:cc:9e:e3:ad:d3:78:0f:84:16:8c:d9:98:
bf:b2:7d:de:7c:63:16:9d:7c:2b:7b:91:5b:ea:1d:b2:0c:ce:
e7:ec:45:4e:a9:b9:12:23:8c:09:aa:81:db:83:5e:93:1a:61:
72:bb:30:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:43:39 2026 by rpki-client