Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
File: oej-6X2jZbZICCGxi-35_CNVOCY.mft (raw, json)
Hash identifier: gzcx5Qy5M+0dd391aSkIeCxQOn620taKNRIGpLCTiqw=
Subject key identifier: 2C:80:92:62:D3:58:46:52:57:CC:22:57:79:8A:EB:28:C4:27:DF:BE
Authority key identifier: A1:E8:FE:E9:7D:A3:65:B6:48:08:21:B1:8B:ED:F9:FC:23:55:38:26
Certificate issuer: /CN=a1e8fee97da365b6480821b18bedf9fc23553826
Certificate serial: 019D9A74E0FA87BD51C9F379E4CA2CE99F71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
Manifest number: 0FA8
Signing time: Fri 17 Apr 2026 08:00:44 +0000
Manifest this update: Fri 17 Apr 2026 08:00:44 +0000
Manifest next update: Sat 18 Apr 2026 08:00:44 +0000
Files and hashes: 1: jRCRVJYAGBXYgrtW6iJFIwl-3T4.roa (hash: zd3vqx8SZ7kQ7l/rKEA4mZdGGLkEyNUj7EHXRniiHWs=)
2: oej-6X2jZbZICCGxi-35_CNVOCY.crl (hash: pvxfTQyFKiw0rHDekM2HuzjEnScr5TVOgc/rIlLBf3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:e0:fa:87:bd:51:c9:f3:79:e4:ca:2c:e9:9f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1e8fee97da365b6480821b18bedf9fc23553826
Validity
Not Before: Apr 17 08:00:44 2026 GMT
Not After : Apr 18 08:00:44 2026 GMT
Subject: CN=2c809262d358465257cc2257798aeb28c427dfbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6b:e0:68:77:7a:db:3c:ad:f7:2b:65:cb:22:
9a:d1:09:1b:41:3d:e8:d4:c0:c3:83:14:6b:67:87:
1d:15:02:9c:95:0c:9f:c5:35:cd:f8:f8:46:23:46:
17:a4:77:cc:0a:97:38:80:af:d4:85:e5:a5:b8:9b:
04:75:37:16:30:eb:a1:c1:62:9c:2f:be:12:f2:27:
c7:5c:ba:73:b7:0c:38:a1:ba:00:25:fe:be:9c:a0:
eb:91:fa:48:92:e5:e0:f5:0b:15:fc:d2:34:50:c6:
89:d6:ce:f1:a0:7a:c0:52:f2:a4:8b:1b:5b:39:e3:
4f:f1:bf:07:05:a2:e3:0c:83:5a:d6:e5:ea:c5:5e:
24:21:e2:21:18:da:17:1e:83:45:5f:c7:71:67:0b:
b4:af:c3:a4:4c:47:b7:05:80:79:ce:60:6e:ac:44:
7d:42:76:1c:4f:1c:12:4b:f2:03:16:aa:89:13:80:
77:e3:d1:57:a7:04:85:1c:5e:85:f3:f9:16:18:64:
ef:de:3d:eb:b5:33:60:c4:00:fd:0d:9c:3e:5c:ff:
2b:1d:ed:c7:7d:da:6c:ce:e5:1e:99:fd:20:9c:f8:
32:7e:50:9a:93:59:9e:b3:9f:d9:97:f7:9b:81:e2:
8f:fe:64:ba:e2:a2:86:08:bd:92:6b:d5:5c:c5:c4:
d0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:80:92:62:D3:58:46:52:57:CC:22:57:79:8A:EB:28:C4:27:DF:BE
X509v3 Authority Key Identifier:
keyid:A1:E8:FE:E9:7D:A3:65:B6:48:08:21:B1:8B:ED:F9:FC:23:55:38:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:fe:b8:0a:ed:35:b8:60:35:51:1b:68:b5:55:54:35:86:97:
15:c5:56:53:50:60:be:bc:77:b7:fb:2e:b7:c9:a5:e3:9d:e8:
d6:f7:16:01:8b:8e:ad:89:90:f7:36:49:f5:db:f5:b8:b0:c2:
18:5c:3a:b5:aa:d5:59:e0:eb:59:d0:fd:a2:1b:1c:69:05:e8:
8e:33:39:ae:25:a0:33:b9:88:be:91:df:25:5e:82:e4:03:1e:
24:4b:be:18:ca:16:7a:cd:a6:80:cd:78:2f:a1:07:63:10:7d:
9f:2c:60:12:20:63:5a:96:6e:a4:01:da:61:ca:30:00:b3:43:
f1:61:a4:20:9b:67:b3:5b:24:5d:1e:36:d6:1a:d7:68:ef:1e:
a7:9e:8c:c6:c1:10:c8:f0:9c:c5:d9:0e:88:2a:12:ee:59:25:
ad:3b:e0:e6:b8:05:3e:33:da:6c:9e:3f:a8:bf:d8:03:71:f9:
92:35:5e:ee:b6:57:be:2a:cc:81:a3:1a:39:9e:c4:c7:00:fd:
e4:07:a9:10:a3:72:f4:90:21:a4:19:b2:36:19:26:25:08:20:
c3:09:e2:3f:46:6f:68:db:dd:b8:c0:9f:26:43:18:8a:20:d8:
81:ad:9b:6d:d0:16:1f:5e:41:5f:c5:3f:61:d5:08:7f:1f:04:
bd:3f:bc:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:45:35 2026 by rpki-client