Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
File: oej-6X2jZbZICCGxi-35_CNVOCY.mft (raw, json)
Hash identifier: dgD9FOf1h7twLms0kBtV75LI67XSrmEBKcGI+buYi4k=
Subject key identifier: 82:BD:37:F6:6E:30:4E:2A:AE:3B:3F:57:4D:FB:BE:34:A6:02:DD:A7
Authority key identifier: A1:E8:FE:E9:7D:A3:65:B6:48:08:21:B1:8B:ED:F9:FC:23:55:38:26
Certificate issuer: /CN=a1e8fee97da365b6480821b18bedf9fc23553826
Certificate serial: 01A0BDD4C0B26DEF245FDE36ECCF995ABF42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
Manifest number: 1148
Signing time: Sun 20 Sep 2026 08:00:31 +0000
Manifest this update: Sun 20 Sep 2026 08:00:31 +0000
Manifest next update: Mon 21 Sep 2026 08:00:31 +0000
Files and hashes: 1: jRCRVJYAGBXYgrtW6iJFIwl-3T4.roa (hash: zd3vqx8SZ7kQ7l/rKEA4mZdGGLkEyNUj7EHXRniiHWs=)
2: oej-6X2jZbZICCGxi-35_CNVOCY.crl (hash: YFZPGOyDTOh8/QHT69+vTjf6mQpgyrJE9iqAlSJQZ2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:d4:c0:b2:6d:ef:24:5f:de:36:ec:cf:99:5a:bf:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1e8fee97da365b6480821b18bedf9fc23553826
Validity
Not Before: Sep 20 08:00:31 2026 GMT
Not After : Sep 21 08:00:31 2026 GMT
Subject: CN=82bd37f66e304e2aae3b3f574dfbbe34a602dda7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:69:c4:a7:d5:53:1e:c4:43:87:72:fa:9d:5a:
2d:47:8e:bb:bd:c4:64:b4:44:e9:2f:0b:1b:11:9a:
a5:37:3e:88:d0:b0:df:78:9d:b5:df:3b:de:af:c7:
ab:af:fd:91:dd:e8:19:ca:00:42:03:83:bc:2e:7f:
b2:c5:d0:2f:b7:12:f7:e4:8a:74:9e:4f:ee:e1:c4:
e0:6f:e9:1e:0c:66:48:04:f0:8e:2d:91:5b:33:cf:
7c:ec:d1:1f:c0:90:37:42:34:43:35:ea:6a:3f:b1:
48:48:8c:61:4a:e4:03:47:1e:4c:a0:9d:97:40:3e:
45:ef:97:f8:ca:47:e1:40:99:e8:db:33:5f:83:0c:
70:db:57:a0:54:49:c0:cf:a9:72:2f:d3:19:85:d3:
f0:48:df:d1:0d:c8:1d:79:20:8b:d9:ac:51:ef:87:
05:d3:25:c7:3e:02:26:5d:81:64:03:1e:20:5f:0a:
66:67:b8:99:bf:2b:91:df:74:9c:aa:4e:12:91:c9:
f9:d9:a5:57:bf:35:e0:e4:8d:b2:3d:a5:b4:d3:8b:
ef:a0:3d:ae:86:ae:6d:ac:a8:ab:92:64:3d:d1:d5:
b9:82:d3:4d:64:5e:31:07:55:cb:d6:2e:b6:d4:7c:
1d:b8:4d:7e:0f:da:28:fa:ef:41:f4:99:8d:dd:a6:
5e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:BD:37:F6:6E:30:4E:2A:AE:3B:3F:57:4D:FB:BE:34:A6:02:DD:A7
X509v3 Authority Key Identifier:
keyid:A1:E8:FE:E9:7D:A3:65:B6:48:08:21:B1:8B:ED:F9:FC:23:55:38:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:62:78:3c:2d:81:73:24:95:7e:f1:5d:e1:ab:10:c5:09:45:
38:37:75:f7:d3:d5:14:b6:c7:0b:02:5d:dc:8d:09:67:47:fb:
4a:12:7e:49:07:02:92:47:7e:1b:f7:4c:1c:f7:9d:7b:b8:0d:
36:50:33:d5:9a:f7:d1:58:de:7c:0d:76:5d:99:16:f1:82:41:
e9:8d:c3:c8:a4:59:a3:cd:2a:1a:b1:97:ff:4c:93:5b:2e:78:
c0:17:c5:91:3b:6a:52:bb:77:d2:6e:4f:05:89:97:98:10:30:
8c:7f:1d:75:07:5d:cf:a3:18:4f:df:f4:1e:4e:5d:e6:ba:b7:
5c:d8:8b:90:61:1b:89:81:46:ed:28:19:1d:f4:db:01:03:a1:
61:7f:d9:c4:c6:f7:5a:57:af:d0:35:87:16:d0:28:d1:0f:a0:
5b:46:b3:e3:36:7b:ab:3a:cc:1d:e5:71:ef:15:a5:fe:63:56:
82:80:55:ba:26:ba:e0:67:3a:26:45:a1:37:eb:29:21:c3:a9:
5a:a2:0e:d7:00:b2:e4:5b:b5:3a:6c:3e:cc:52:84:13:3c:4f:
b5:a9:42:58:c1:d0:6e:65:e8:47:52:8a:48:40:3a:1e:4d:3d:
54:d2:f6:b5:3c:1d:ae:93:14:2e:66:91:a4:96:4d:32:0a:98:
4f:97:61:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:56:55 2026 by rpki-client