Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
File: OeQFnlGefK0FNr1U2RvJeHVkTNs.mft (raw, json)
Hash identifier: d+PCbNZZVUn2Wfg02uyh3pCo1WmmrRKYcxV2XYFT4lA=
Subject key identifier: B7:AE:06:DC:97:84:F1:D0:55:46:FD:16:61:63:FA:BF:25:9E:1F:3A
Authority key identifier: 39:E4:05:9E:51:9E:7C:AD:05:36:BD:54:D9:1B:C9:78:75:64:4C:DB
Certificate issuer: /CN=39e4059e519e7cad0536bd54d91bc97875644cdb
Certificate serial: 01A0C8C62CC3DC81DBFBC612C52E6BCC9975
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
Manifest number: 19F8
Signing time: Tue 22 Sep 2026 11:00:25 +0000
Manifest this update: Tue 22 Sep 2026 11:00:25 +0000
Manifest next update: Wed 23 Sep 2026 11:00:25 +0000
Files and hashes: 1: OeQFnlGefK0FNr1U2RvJeHVkTNs.crl (hash: TxGk5DebbvkBqKQSkRyNZKH/8Q6FBpq9WOmbMf7wigk=)
2: qOowaPdAtIoEeA8UwWKl0WeOo_E.roa (hash: qf6D/9fKMsy5vRBqrt+Mp9eken3A/z5tlK1SkhHLKO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:c6:2c:c3:dc:81:db:fb:c6:12:c5:2e:6b:cc:99:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39e4059e519e7cad0536bd54d91bc97875644cdb
Validity
Not Before: Sep 22 11:00:25 2026 GMT
Not After : Sep 23 11:00:25 2026 GMT
Subject: CN=b7ae06dc9784f1d05546fd166163fabf259e1f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:11:6f:d0:db:79:4f:a1:85:e5:fd:dd:5c:d9:
8c:97:24:fc:60:6c:1d:27:1d:b5:00:e4:9e:f4:d6:
66:eb:2e:a2:ea:69:d7:34:36:3c:06:d0:f0:8b:41:
79:19:84:ef:46:53:9e:ba:ec:3e:e8:96:0b:56:dd:
cf:30:c0:bc:13:eb:e4:80:8b:cb:d5:a7:ec:9d:3d:
7e:59:8a:3d:ed:73:4b:68:dd:91:30:0b:47:7c:47:
54:f0:dc:8c:2b:be:8d:db:d5:a3:4c:b2:d8:6c:fa:
1d:90:72:76:48:76:ce:09:64:c1:ec:db:2e:f4:38:
ce:47:b7:e0:ae:5d:4e:3d:d2:99:b5:fd:6d:bf:7c:
dd:f6:77:c0:19:73:5c:1f:69:b7:72:e3:d4:42:95:
cd:e0:15:59:bf:1a:e6:92:17:bb:9f:5b:ff:50:10:
ab:dc:86:6d:10:66:c1:f6:f7:c7:b7:a9:73:a5:b1:
99:3f:9d:ef:66:cb:58:c3:d9:d2:9e:17:4e:fc:3a:
29:51:e4:bb:8b:fe:03:a4:8f:db:27:4e:86:f7:64:
eb:fb:4e:2e:46:9f:2a:4c:ef:2c:f6:9c:6b:99:b6:
5c:ab:e1:2a:0e:1c:04:fd:03:be:81:28:9c:64:40:
53:6c:31:d0:d1:34:9a:cb:f6:69:ff:4b:69:c8:d0:
75:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:AE:06:DC:97:84:F1:D0:55:46:FD:16:61:63:FA:BF:25:9E:1F:3A
X509v3 Authority Key Identifier:
keyid:39:E4:05:9E:51:9E:7C:AD:05:36:BD:54:D9:1B:C9:78:75:64:4C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:e4:a5:57:80:53:95:88:05:01:c9:d8:eb:94:8e:0f:ba:94:
e2:b1:bd:5a:4b:a9:aa:80:ac:ee:5e:ea:59:3b:ac:bb:2d:f1:
cf:7a:03:fe:31:ed:e8:c9:16:2a:fe:0f:b4:c0:d1:38:5a:79:
06:fa:4a:17:84:21:a0:5a:81:be:e0:72:16:45:13:0d:41:5b:
4c:4a:fb:e2:4a:f7:56:48:cd:76:6d:38:94:f6:e2:29:ba:c6:
59:02:92:11:73:33:01:76:cd:dc:4f:e2:34:41:25:1c:0d:f8:
43:85:dc:0a:27:4c:49:44:ca:99:6f:73:f3:8a:d8:1f:81:f2:
59:b2:0e:d8:bb:e2:90:af:a8:97:0c:1b:60:01:f0:5e:0e:89:
d0:03:c8:54:a5:94:6c:c9:74:fd:cc:1b:f6:c0:e1:df:2e:6c:
7d:61:f4:aa:5a:c4:8c:c3:76:ac:f3:94:65:a5:61:a2:f3:c8:
7d:fe:b4:32:4d:5f:7c:77:7e:29:98:87:be:75:7d:b3:fa:e8:
98:c2:b3:1b:3d:c6:bb:69:73:f1:61:59:9d:9e:cf:30:f2:43:
65:dc:08:99:79:b6:bd:28:0a:a5:cb:ef:f1:52:b1:95:73:3c:
e0:51:0c:f2:f4:73:05:59:f9:e5:3a:c9:b8:30:2a:3f:ba:36:
65:63:86:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:08:25 2026 by rpki-client