Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
File: OeQFnlGefK0FNr1U2RvJeHVkTNs.mft (raw, json)
Hash identifier: COLD6rgxsl2QPAcul7hBQOsdXQpcznv1kytz0uxch/k=
Subject key identifier: B0:DA:A9:83:A6:DA:41:2D:83:D5:AA:EC:A4:0C:E3:C8:92:F8:A3:CC
Authority key identifier: 39:E4:05:9E:51:9E:7C:AD:05:36:BD:54:D9:1B:C9:78:75:64:4C:DB
Certificate issuer: /CN=39e4059e519e7cad0536bd54d91bc97875644cdb
Certificate serial: 019D99CFF2A11E55090F8BD91CA1C65AE846
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
Manifest number: 1852
Signing time: Fri 17 Apr 2026 05:00:35 +0000
Manifest this update: Fri 17 Apr 2026 05:00:35 +0000
Manifest next update: Sat 18 Apr 2026 05:00:35 +0000
Files and hashes: 1: OeQFnlGefK0FNr1U2RvJeHVkTNs.crl (hash: uEhdbUIauWErR2UGa7yTHDMsGo4SkydqMMHvuwSFidY=)
2: qOowaPdAtIoEeA8UwWKl0WeOo_E.roa (hash: qf6D/9fKMsy5vRBqrt+Mp9eken3A/z5tlK1SkhHLKO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:f2:a1:1e:55:09:0f:8b:d9:1c:a1:c6:5a:e8:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39e4059e519e7cad0536bd54d91bc97875644cdb
Validity
Not Before: Apr 17 05:00:35 2026 GMT
Not After : Apr 18 05:00:35 2026 GMT
Subject: CN=b0daa983a6da412d83d5aaeca40ce3c892f8a3cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ef:43:e5:f1:3c:00:ee:71:6d:e3:05:e1:00:
2f:55:20:d4:51:ad:99:e2:13:5b:8a:81:08:f1:1d:
04:37:dc:26:1d:53:f6:1d:7c:f1:40:3c:ed:31:35:
b0:fc:79:b5:2a:4c:4e:5f:b7:00:cf:cb:03:9d:e9:
7c:0d:7a:57:11:ea:6b:24:bf:83:77:99:19:14:2d:
3e:d5:7f:3b:92:8c:d2:54:20:8e:d1:97:b9:8c:81:
2c:e6:8a:e1:5d:ed:e0:b8:da:02:77:6f:e7:dd:d8:
2a:08:b9:6c:0b:6c:66:0e:48:3e:9a:c5:ca:4d:8a:
93:0a:ff:7e:3d:c9:99:ee:48:5e:8e:22:38:c8:03:
fc:83:83:a2:08:f0:d9:a0:1e:f8:e2:93:90:e2:60:
c6:b5:9e:1b:a3:7a:58:d8:3a:79:fa:51:44:54:3b:
4d:87:05:df:4d:a5:0c:1e:c3:08:89:c8:74:fe:3a:
aa:43:c7:07:18:01:45:e6:cc:fd:9c:f4:fb:a6:7c:
52:8b:e2:5b:55:d3:ca:da:01:0c:42:ea:1d:37:f4:
b9:71:67:e1:07:3e:3f:90:67:b8:66:27:26:11:5d:
ed:31:bb:ad:dc:b2:8b:c3:13:ac:1d:e2:5f:17:3b:
84:2c:65:9e:f4:ae:bd:00:c8:90:e5:51:fe:ee:5d:
ff:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:DA:A9:83:A6:DA:41:2D:83:D5:AA:EC:A4:0C:E3:C8:92:F8:A3:CC
X509v3 Authority Key Identifier:
keyid:39:E4:05:9E:51:9E:7C:AD:05:36:BD:54:D9:1B:C9:78:75:64:4C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:95:bb:ae:5b:2f:38:f2:bf:75:7a:c1:8c:93:79:57:60:3a:
af:04:d2:f7:e3:ff:46:33:fd:86:7a:5d:d3:df:04:95:b3:93:
61:f5:a3:b5:25:69:fc:07:b4:ea:67:73:e8:e0:24:68:93:6c:
62:2a:2c:9a:76:6a:3d:75:d1:41:4e:4e:5a:00:f1:be:9d:f1:
c0:87:db:54:dd:80:3a:a6:9b:9c:1e:54:0d:7e:0d:fc:2e:ca:
13:0d:ac:0f:33:0e:5f:c9:e1:9e:43:15:b8:9d:af:d7:02:da:
13:0a:c4:78:e3:6a:3d:9c:5f:20:1e:bf:35:80:57:ba:30:9d:
1c:47:5a:06:26:c4:b2:fc:58:56:11:91:30:87:90:8d:b7:16:
9c:e3:98:1e:66:10:80:ce:7a:59:40:a4:24:03:2b:67:1b:f7:
e1:2e:cc:0b:cf:13:8b:8a:ee:8c:22:12:4c:e7:29:a8:a4:e1:
91:a8:90:20:04:5f:9d:81:ae:33:3f:de:b5:e7:f3:49:6d:07:
58:45:73:4c:71:a2:61:90:53:3f:87:62:a6:cc:a5:42:eb:13:
6d:f9:f2:71:c6:f0:6f:86:77:85:79:1d:e1:c8:e7:9e:f4:ab:
05:9f:58:12:40:a2:a9:fb:f0:bd:c7:fd:9f:1f:fe:ea:6b:6b:
aa:f0:07:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:37:21 2026 by rpki-client