Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
File: OeQFnlGefK0FNr1U2RvJeHVkTNs.mft (raw, json)
Hash identifier: 9qeqY2ymvfeLnlcR7WgPQpFlSGvcgu8m389K7dhJSIU=
Subject key identifier: 15:DD:54:A9:3D:68:2A:43:2D:B4:20:CE:C2:59:6D:4E:0E:07:46:33
Authority key identifier: 39:E4:05:9E:51:9E:7C:AD:05:36:BD:54:D9:1B:C9:78:75:64:4C:DB
Certificate issuer: /CN=39e4059e519e7cad0536bd54d91bc97875644cdb
Certificate serial: 019CAE353E97D60EDDB2F3F34787E7E0BF14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
Manifest number: 17D8
Signing time: Mon 02 Mar 2026 11:00:50 +0000
Manifest this update: Mon 02 Mar 2026 11:00:50 +0000
Manifest next update: Tue 03 Mar 2026 11:00:50 +0000
Files and hashes: 1: OeQFnlGefK0FNr1U2RvJeHVkTNs.crl (hash: 14NtElLmMg4CIQFK3knTWTwQnHBPzgq7v5tTRp9p5D8=)
2: qOowaPdAtIoEeA8UwWKl0WeOo_E.roa (hash: qf6D/9fKMsy5vRBqrt+Mp9eken3A/z5tlK1SkhHLKO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:3e:97:d6:0e:dd:b2:f3:f3:47:87:e7:e0:bf:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39e4059e519e7cad0536bd54d91bc97875644cdb
Validity
Not Before: Mar 2 11:00:50 2026 GMT
Not After : Mar 3 11:00:50 2026 GMT
Subject: CN=15dd54a93d682a432db420cec2596d4e0e074633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:27:93:cb:6e:d7:88:7f:ae:10:7f:b6:c5:0c:
91:2f:84:44:0f:61:dd:5a:64:a1:37:62:70:92:72:
a9:3c:13:5f:0e:40:06:7f:5b:27:50:d7:be:1d:1e:
0a:27:f9:3a:03:a3:f7:25:e4:59:00:05:27:87:eb:
ea:75:10:6c:f2:f6:42:1a:b2:f9:d2:71:27:5f:7c:
b7:37:55:c5:9d:2f:8b:a2:0b:95:a6:21:4f:0a:76:
31:53:79:cc:c9:9f:7e:f9:10:a8:a3:51:80:60:17:
a8:e5:1c:88:d4:d9:1c:9e:fe:e2:d3:fc:f3:65:e1:
f9:b2:26:9f:03:74:a6:ec:6f:ed:a6:dd:a6:60:f5:
5e:2d:13:b8:bf:08:cf:03:8c:c8:5b:56:e8:19:d1:
d0:d7:27:67:72:10:17:7f:3b:75:26:c8:15:d8:42:
5d:bd:f0:8c:1d:05:00:65:0b:2f:9e:b0:da:cd:f8:
04:3b:b3:36:32:9a:af:66:5a:8a:a4:c6:df:af:a6:
e9:91:27:e0:bc:d3:9f:2e:7b:54:e3:57:bd:bd:22:
5d:f1:38:d0:e9:39:0f:4e:f5:c3:61:24:11:85:02:
60:e9:9a:58:61:c8:f3:83:b8:d8:c8:42:a1:79:8d:
0e:66:65:e9:25:f5:e6:3d:f9:08:fb:c0:9a:b8:98:
86:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:DD:54:A9:3D:68:2A:43:2D:B4:20:CE:C2:59:6D:4E:0E:07:46:33
X509v3 Authority Key Identifier:
keyid:39:E4:05:9E:51:9E:7C:AD:05:36:BD:54:D9:1B:C9:78:75:64:4C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:1d:06:e4:e6:02:ce:f2:8a:56:e0:aa:ac:db:d5:c1:ad:62:
19:41:53:79:93:78:10:55:b4:6e:eb:43:11:5a:6c:e7:19:7e:
37:76:ed:57:d6:35:9e:f4:93:46:51:9c:f6:09:67:34:35:c5:
0e:e9:12:d7:6d:a3:30:22:b0:89:d9:25:11:90:8b:88:f6:06:
c2:5c:a4:3b:1f:a3:da:3c:fe:cc:21:4a:2b:28:00:70:f9:ea:
1f:68:54:4a:36:62:af:b7:32:69:18:af:a9:8c:ad:90:3f:b9:
d3:ea:14:9f:b0:71:7b:90:a4:06:fb:8c:ce:c1:e8:ad:b0:25:
32:ac:18:68:9e:c0:f9:07:21:1b:88:13:6d:3a:15:47:a6:f0:
bf:a0:4f:32:ad:bf:ad:58:6c:5e:48:c3:d8:28:40:9c:db:5a:
67:0c:68:e2:a7:e3:ff:67:8f:5c:66:cf:91:9f:12:08:38:2f:
a3:6b:29:18:7e:02:b6:15:90:82:8c:82:3f:7f:f5:10:8e:84:
e6:25:70:ee:b2:8c:f0:d8:c5:25:86:f2:b4:21:87:06:12:35:
91:e2:8e:00:ac:7c:f9:78:7f:42:a9:14:67:94:95:71:18:23:
5a:60:1c:5e:85:77:34:c7:ef:e3:ee:0f:9a:96:3d:21:8a:d0:
4a:b7:fe:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:09:04 2026 by rpki-client