Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft
File: Oexx3D1ozej5B3069mdRwp_O6kw.mft (raw, json)
Hash identifier: uIA0XKLtwJ6C9uzdStNNi3WhIi+Dq49evAgkZLScySA=
Subject key identifier: 1A:9F:4A:C6:97:E0:99:8E:38:C3:82:10:BE:A6:27:61:7C:23:6F:C0
Authority key identifier: 39:EC:71:DC:3D:68:CD:E8:F9:07:7D:3A:F6:67:51:C2:9F:CE:EA:4C
Certificate issuer: /CN=39ec71dc3d68cde8f9077d3af66751c29fceea4c
Certificate serial: 019EB6C4EA2AA63E5F0B0F5B4AB5F14AD13C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oexx3D1ozej5B3069mdRwp_O6kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft
Manifest number: 0CB0
Signing time: Thu 11 Jun 2026 13:00:18 +0000
Manifest this update: Thu 11 Jun 2026 13:00:18 +0000
Manifest next update: Fri 12 Jun 2026 13:00:18 +0000
Files and hashes: 1: GWIPuzYrr1ZkVb6zUh724dGRI1w.roa (hash: 8ZDylGUDk0rJ7fPM3ZJJKDsoUpKFNi+95rGt5nvLIKg=)
2: Oexx3D1ozej5B3069mdRwp_O6kw.crl (hash: 7fB4fedjdJv+/kdadhQEyPe3GK8/6hEYsB8MD8tys4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oexx3D1ozej5B3069mdRwp_O6kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:c4:ea:2a:a6:3e:5f:0b:0f:5b:4a:b5:f1:4a:d1:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ec71dc3d68cde8f9077d3af66751c29fceea4c
Validity
Not Before: Jun 11 13:00:18 2026 GMT
Not After : Jun 12 13:00:18 2026 GMT
Subject: CN=1a9f4ac697e0998e38c38210bea627617c236fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ea:da:d9:96:98:11:18:d3:f3:e1:c0:a7:0e:
cb:4c:ad:03:ff:71:13:7d:f1:a1:7f:05:6a:10:fe:
b8:77:08:90:ff:16:35:2b:e3:a9:43:57:8d:3b:e6:
53:e5:e3:9b:7e:e7:35:7f:fb:5a:f9:4e:9d:47:f5:
7a:8e:3e:eb:a8:01:a6:a2:06:8f:33:1c:d0:6c:a6:
90:28:ee:27:c5:13:54:63:c7:ee:00:7e:3e:60:da:
12:b2:97:0e:fc:a6:e4:ef:4e:5a:85:22:42:45:9c:
88:aa:e6:7d:84:82:4e:5c:3f:86:d6:ae:07:0e:c7:
b4:43:ba:72:f2:65:6b:52:a5:aa:7a:39:f3:8b:8b:
56:75:a4:3a:cd:ec:f5:58:25:0e:11:e7:0f:4e:97:
e6:ed:0d:1b:df:ec:1b:4e:f5:d2:b3:7c:64:a5:e0:
35:11:36:38:e1:da:a6:58:e2:20:b1:b4:f1:1b:96:
ba:a2:83:39:c8:b0:40:34:89:c2:f6:12:c4:61:bb:
45:29:1f:77:6c:74:d6:e0:41:97:61:e0:17:c8:02:
1e:22:e8:24:fa:10:e4:c7:e1:b0:34:27:f0:91:bc:
02:8e:f8:d3:b7:6a:8e:55:92:42:dd:9b:60:ce:e7:
95:84:81:93:51:55:59:24:10:4b:df:67:b9:ac:c2:
dc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:9F:4A:C6:97:E0:99:8E:38:C3:82:10:BE:A6:27:61:7C:23:6F:C0
X509v3 Authority Key Identifier:
keyid:39:EC:71:DC:3D:68:CD:E8:F9:07:7D:3A:F6:67:51:C2:9F:CE:EA:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oexx3D1ozej5B3069mdRwp_O6kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:c2:c7:ec:8a:ac:a9:da:e7:2a:be:61:99:a9:93:72:b9:c7:
8e:58:4b:52:1a:54:5e:42:d0:60:4c:12:8c:b2:f0:0c:19:6c:
87:de:18:e5:18:2a:d7:89:81:0c:c4:45:c1:66:fc:e7:af:40:
54:c8:11:5a:c9:50:08:8d:37:68:c9:b6:b0:92:26:1a:a5:d5:
04:08:48:ef:9a:73:49:25:22:5c:c0:95:05:8c:d4:d8:58:ff:
f0:d3:b3:da:bd:8d:f6:de:ac:83:ed:36:dd:ee:26:31:66:88:
8c:5e:8e:52:0e:3a:51:34:7a:ef:fc:74:96:01:84:aa:47:0c:
d7:34:f1:30:65:b9:5e:26:ed:c1:26:36:e0:7a:cd:eb:39:ac:
37:20:02:c6:ae:ae:60:52:19:ed:32:bd:3e:34:4f:8f:16:a1:
59:4d:48:ac:e7:34:0f:b8:e6:2b:f9:85:e9:4e:de:3e:73:62:
bd:a5:52:6b:bd:03:e1:6f:31:36:fd:18:6b:f4:fa:6a:5a:39:
f7:aa:29:1d:d1:d4:94:2c:38:4a:72:b4:41:8c:ce:75:34:58:
0a:20:1a:3a:89:34:62:f6:5f:13:4a:bf:df:cb:4f:aa:05:6e:
c1:6b:71:d7:e7:4c:f5:81:61:71:9c:c3:2c:77:da:dd:d6:bd:
7b:2c:bc:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 18:10:52 2026 by rpki-client