Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
File: OeQFnlGefK0FNr1U2RvJeHVkTNs.mft (raw, json)
Hash identifier: SfSb7J3VnZLO1mHrRFgj0flo7zh+FjEum0ilwvET2zI=
Subject key identifier: CE:EB:57:1A:20:7D:13:B7:1A:2A:D7:F2:B1:94:E0:49:06:F9:3B:59
Authority key identifier: 39:E4:05:9E:51:9E:7C:AD:05:36:BD:54:D9:1B:C9:78:75:64:4C:DB
Certificate issuer: /CN=39e4059e519e7cad0536bd54d91bc97875644cdb
Certificate serial: 019FAAF57F85ADB199366FAEBA76D894925B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
Manifest number: 1964
Signing time: Tue 28 Jul 2026 23:00:43 +0000
Manifest this update: Tue 28 Jul 2026 23:00:43 +0000
Manifest next update: Wed 29 Jul 2026 23:00:43 +0000
Files and hashes: 1: OeQFnlGefK0FNr1U2RvJeHVkTNs.crl (hash: pkAkpPeXEpHepTgAldWNHJPouO/LTpkLCatg5uFaFWA=)
2: qOowaPdAtIoEeA8UwWKl0WeOo_E.roa (hash: qf6D/9fKMsy5vRBqrt+Mp9eken3A/z5tlK1SkhHLKO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:7f:85:ad:b1:99:36:6f:ae:ba:76:d8:94:92:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39e4059e519e7cad0536bd54d91bc97875644cdb
Validity
Not Before: Jul 28 23:00:43 2026 GMT
Not After : Jul 29 23:00:43 2026 GMT
Subject: CN=ceeb571a207d13b71a2ad7f2b194e04906f93b59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ef:71:ad:ea:25:36:e5:a8:42:0a:64:71:f6:
ff:15:60:c6:72:1c:5b:2e:da:1a:e4:fd:a6:6c:da:
1d:63:64:02:42:20:fe:29:6c:bc:2a:c1:3f:fd:93:
11:6c:4a:c5:12:63:72:fb:6d:c1:21:90:26:ed:37:
7c:ac:b4:aa:9c:ff:6e:73:22:db:7b:12:a5:ce:70:
8a:3a:05:45:ff:85:c7:5c:04:3b:ca:8f:49:74:ff:
c1:e2:dd:01:86:db:66:85:76:b5:9d:f7:99:57:c0:
ea:0f:db:49:c1:78:7c:b1:e5:0f:84:fe:93:3f:25:
e8:a0:b3:f9:0e:2e:97:a4:af:bf:c9:04:93:7a:62:
a3:9c:65:26:49:2c:a6:9d:f0:50:96:12:c7:7c:f1:
a5:87:ef:e4:10:d3:84:ed:73:8e:91:bd:ec:68:a4:
bf:09:89:67:4b:80:ec:d0:b3:5a:34:f2:3c:f5:b5:
60:c6:8d:16:c9:59:99:73:d7:1b:6d:7f:55:dc:90:
c3:b8:12:49:95:37:82:4b:ee:a0:ef:75:e9:b4:5d:
32:1b:95:5a:99:82:9f:cc:ec:cb:43:a2:72:5b:5e:
21:6f:87:a0:d1:dd:92:38:27:2d:f7:b3:6e:bc:fa:
d7:f1:ab:1a:3c:99:ee:1e:25:f3:de:75:a3:fc:48:
33:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:EB:57:1A:20:7D:13:B7:1A:2A:D7:F2:B1:94:E0:49:06:F9:3B:59
X509v3 Authority Key Identifier:
keyid:39:E4:05:9E:51:9E:7C:AD:05:36:BD:54:D9:1B:C9:78:75:64:4C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:5a:08:c7:73:e6:19:37:2d:fd:a3:5a:8b:9b:87:f4:fe:7f:
ec:1d:62:2a:30:12:6b:d5:a7:bb:bc:a1:5d:7b:37:2e:e9:ef:
34:7b:2c:3f:29:6a:48:ed:3a:39:eb:52:e0:d3:8f:a9:18:a8:
67:2f:ce:1d:e3:c4:3c:0b:69:d3:d9:0f:7b:9e:12:9f:52:91:
27:3e:de:b6:43:2c:ea:e2:57:19:bb:0d:08:3b:50:7e:fa:19:
73:61:c8:13:c6:bd:c7:60:64:bf:25:1b:e7:93:b2:a1:e3:e2:
f1:40:c1:a9:a5:9f:68:e6:32:ff:93:03:95:90:b5:6a:ff:9a:
98:36:51:a9:9c:e9:de:0d:79:7a:59:3c:0e:1b:2e:c8:84:69:
55:9d:1f:0b:80:db:77:e7:95:fa:4c:10:c6:f7:b6:54:77:c6:
8a:6f:a0:14:3b:dd:7f:c9:a8:bc:51:ce:2c:9f:de:91:c3:a9:
20:cd:6f:88:4a:55:cf:f0:46:05:d5:52:0c:5c:91:53:b4:04:
7e:90:fe:31:db:c1:99:e1:9f:71:cb:69:bc:6b:9a:09:5e:94:
b8:3e:7e:2f:e3:da:89:95:47:4e:ff:7e:ac:d8:02:d7:0c:a0:
29:9b:98:fa:fc:c4:4f:52:80:f7:42:38:29:c7:f9:ff:64:8d:
02:00:63:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:41:04 2026 by rpki-client