Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
File: OeQFnlGefK0FNr1U2RvJeHVkTNs.mft (raw, json)
Hash identifier: y1Ss9MsNzANNRKQslTxadzII7hZnVttZxpW0iv+ExYU=
Subject key identifier: 3E:A7:13:E4:6E:85:5D:33:A0:07:3C:04:EC:FF:77:C6:3C:6C:A8:48
Authority key identifier: 39:E4:05:9E:51:9E:7C:AD:05:36:BD:54:D9:1B:C9:78:75:64:4C:DB
Certificate issuer: /CN=39e4059e519e7cad0536bd54d91bc97875644cdb
Certificate serial: 019CAC4701FD582D6D7EB70DD9267B76E13A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
Manifest number: 17D7
Signing time: Mon 02 Mar 2026 02:01:00 +0000
Manifest this update: Mon 02 Mar 2026 02:01:00 +0000
Manifest next update: Tue 03 Mar 2026 02:01:00 +0000
Files and hashes: 1: OeQFnlGefK0FNr1U2RvJeHVkTNs.crl (hash: Mg6ek+XcEu/Sz0u9CN4K1IQXLr0TokuIBItKiwOxxzQ=)
2: qOowaPdAtIoEeA8UwWKl0WeOo_E.roa (hash: qf6D/9fKMsy5vRBqrt+Mp9eken3A/z5tlK1SkhHLKO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:01:fd:58:2d:6d:7e:b7:0d:d9:26:7b:76:e1:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39e4059e519e7cad0536bd54d91bc97875644cdb
Validity
Not Before: Mar 2 02:01:00 2026 GMT
Not After : Mar 3 02:01:00 2026 GMT
Subject: CN=3ea713e46e855d33a0073c04ecff77c63c6ca848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:08:04:5e:81:8d:77:64:2e:61:f7:7d:cd:89:
08:de:0d:33:15:86:f2:64:80:fa:aa:a1:87:cd:db:
2a:90:84:0c:1d:73:e2:10:57:9a:65:97:ab:e1:4e:
2a:ee:b5:0f:37:a3:e6:93:01:c4:d8:a1:4b:ac:89:
f2:e0:43:9a:34:8a:7e:ff:20:08:13:d0:4c:5e:88:
00:dd:cb:15:bf:c5:fd:eb:28:4e:c2:de:98:9a:b5:
8b:f0:90:4b:d2:ab:9d:de:95:ed:d5:8d:e0:ac:67:
bb:89:70:c9:84:c6:7f:c3:3b:dd:4a:50:58:5b:34:
93:24:37:94:c6:d0:43:ff:ec:10:99:ed:55:bc:58:
40:01:b1:c7:b1:26:30:d5:80:2d:52:5a:7c:26:13:
c3:72:26:92:50:07:51:5f:b1:15:a7:67:5d:01:f2:
1a:67:6a:7f:17:7e:ad:7f:c6:31:70:0d:c5:a8:7f:
0b:62:6c:db:c5:d4:10:69:8a:2e:35:ad:f9:e1:9d:
91:0f:4e:eb:b0:a9:d1:ae:90:7e:26:1b:01:b8:86:
0d:aa:3d:d3:6b:c5:d4:cd:d8:51:50:6d:a2:28:1b:
2b:f2:09:f7:3c:6e:a9:6c:47:40:76:9e:11:24:d8:
40:96:ab:83:30:be:57:f3:a7:74:22:fe:8e:8e:e4:
f7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A7:13:E4:6E:85:5D:33:A0:07:3C:04:EC:FF:77:C6:3C:6C:A8:48
X509v3 Authority Key Identifier:
keyid:39:E4:05:9E:51:9E:7C:AD:05:36:BD:54:D9:1B:C9:78:75:64:4C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:43:43:94:d2:92:b8:9f:00:2b:86:84:8e:f3:7a:49:e2:ab:
cd:48:3b:08:ce:7d:c6:65:1c:ce:3b:3b:e3:46:30:64:da:e1:
de:69:90:c5:9c:ac:18:f0:91:ce:f4:1f:8a:fe:02:1b:73:cd:
aa:08:3f:ca:3f:c3:99:1d:41:5c:1a:6a:54:cd:22:d1:0f:43:
ca:ab:69:38:19:03:80:d7:42:19:53:00:c2:30:6e:f8:94:c6:
dc:26:cf:d0:c0:21:a4:23:ed:07:48:83:db:66:e3:02:c0:87:
4f:c6:79:60:87:3b:da:8f:f6:64:dd:73:f5:e1:86:a1:c6:99:
be:7f:b2:79:2b:bd:28:13:a6:3f:8d:19:a7:a9:c3:1c:06:84:
96:b2:31:22:7e:64:e5:ef:84:80:3c:6d:34:74:84:fc:c8:34:
26:87:93:97:8c:a3:a9:44:ab:bf:ef:8c:67:13:16:0d:fe:af:
0c:c8:68:56:0f:90:9d:cf:89:29:da:fa:8e:43:4a:c3:f0:c6:
47:44:25:de:5d:2b:48:90:38:89:d4:06:f0:9c:66:c7:2d:78:
f1:8b:cf:48:13:7a:b5:8c:8f:70:09:5b:67:7e:ee:91:89:46:
41:9f:31:f6:0a:fa:25:36:8d:d6:36:f4:32:5d:1a:f3:0d:84:
a2:03:ca:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:03:50 2026 by rpki-client