Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
File: oej-6X2jZbZICCGxi-35_CNVOCY.mft (raw, json)
Hash identifier: vhCq08kjTLvb4cvQgwdJYrQJ/RLiWgntmyR876IjGxI=
Subject key identifier: 9D:5C:53:04:45:38:C7:5F:A6:D6:04:87:D4:91:ED:ED:58:D3:66:00
Authority key identifier: A1:E8:FE:E9:7D:A3:65:B6:48:08:21:B1:8B:ED:F9:FC:23:55:38:26
Certificate issuer: /CN=a1e8fee97da365b6480821b18bedf9fc23553826
Certificate serial: 019EC3DBF952DFDF7179684BA9031A667C04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
Manifest number: 1042
Signing time: Sun 14 Jun 2026 02:00:33 +0000
Manifest this update: Sun 14 Jun 2026 02:00:33 +0000
Manifest next update: Mon 15 Jun 2026 02:00:33 +0000
Files and hashes: 1: jRCRVJYAGBXYgrtW6iJFIwl-3T4.roa (hash: zd3vqx8SZ7kQ7l/rKEA4mZdGGLkEyNUj7EHXRniiHWs=)
2: oej-6X2jZbZICCGxi-35_CNVOCY.crl (hash: EnF/a0ZxXPDT+19iwpEqKSaGHQZfw79olAwnkpI5LHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:db:f9:52:df:df:71:79:68:4b:a9:03:1a:66:7c:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1e8fee97da365b6480821b18bedf9fc23553826
Validity
Not Before: Jun 14 02:00:33 2026 GMT
Not After : Jun 15 02:00:33 2026 GMT
Subject: CN=9d5c53044538c75fa6d60487d491eded58d36600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:76:48:74:21:5e:ce:09:db:b9:d4:85:69:f6:
cb:3b:3f:d3:80:89:0c:1d:b3:a4:25:77:69:a6:9f:
95:a0:83:02:d7:83:ee:a6:17:0b:1f:20:3b:2e:cb:
36:93:db:63:3a:f0:40:2d:7b:85:35:9e:7d:6e:5f:
77:01:7c:e1:6d:f9:a1:c5:33:15:1a:6b:2c:fe:f4:
f0:23:0c:2d:90:20:c7:6b:06:12:9b:4b:9f:40:bd:
76:4f:09:e8:9a:dc:9e:e8:57:a7:71:2d:f2:55:78:
8e:6b:40:2b:5e:de:b0:ba:0d:dd:2b:22:6a:cf:b2:
47:db:b5:74:02:23:96:e5:30:53:08:47:82:31:dc:
e2:e5:da:fe:61:b6:2c:cd:0d:39:92:ed:44:09:ee:
e8:cc:ce:83:67:bc:e7:18:8b:00:64:c3:1f:a1:11:
63:d9:51:9d:f5:6a:ff:6c:fb:21:37:77:27:7d:12:
7c:a2:b6:73:45:98:0e:b7:35:7d:52:d4:bc:c1:a3:
b5:c6:32:66:ec:7f:ee:47:58:2f:57:00:17:03:8d:
1b:67:7c:08:14:28:b1:a8:2e:29:57:07:78:b7:95:
94:e5:dd:a5:cb:f1:69:ff:d8:63:0c:dc:62:67:b3:
56:b0:87:6d:ba:80:f8:ea:78:17:87:b2:ea:90:1a:
cf:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:5C:53:04:45:38:C7:5F:A6:D6:04:87:D4:91:ED:ED:58:D3:66:00
X509v3 Authority Key Identifier:
keyid:A1:E8:FE:E9:7D:A3:65:B6:48:08:21:B1:8B:ED:F9:FC:23:55:38:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:3a:e7:4c:10:74:73:85:1b:1b:bb:40:d2:b5:84:a8:93:38:
7b:d5:0c:2c:43:f5:07:96:c5:c2:51:cc:26:16:f4:4d:79:b4:
51:00:e9:06:1d:f4:ab:e4:fb:5b:36:31:34:5e:b1:0c:fb:83:
97:cf:9b:55:c1:19:9b:b2:c4:40:8e:fc:3d:92:56:ef:3d:b4:
98:63:fd:09:f4:52:42:e1:8b:f2:70:46:12:6c:99:da:78:85:
6f:bf:b0:d4:b0:01:54:30:7f:1a:c3:b1:11:b2:83:96:0b:a9:
45:9b:c5:cb:2c:1f:bf:bb:aa:ef:80:89:a9:3a:76:52:d4:30:
fc:00:d4:5c:09:35:c9:a6:57:f6:0f:11:a2:8c:be:18:29:c7:
76:a5:f2:18:e8:61:c1:28:e3:c5:6b:18:3c:b9:bd:4f:79:51:
9d:c7:11:28:6f:92:4e:d5:96:9c:8a:06:7b:df:22:80:af:7a:
8f:0d:f6:37:ca:06:ed:b5:e8:9c:61:f0:04:9e:f0:a1:ac:9a:
9d:37:33:91:60:fe:d3:ab:66:e0:1a:27:fb:a2:bd:5d:92:a1:
90:c7:b6:bf:29:e8:b4:40:67:ae:77:b0:d5:6d:c7:3b:53:76:
f1:4c:7d:7f:8b:3e:cc:9a:49:0e:2e:16:16:a5:fb:05:9e:f2:
a0:04:af:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:22:55 2026 by rpki-client