Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft
File: Oexx3D1ozej5B3069mdRwp_O6kw.mft (raw, json)
Hash identifier: CTUjXE6JAJs9DrtmHVQYzLg6a3+ElyUBjzZrHSM7qlg=
Subject key identifier: 4F:6F:BE:F0:3F:4C:9B:2B:4E:99:2C:A7:61:6F:7E:CA:D0:F2:4F:0A
Authority key identifier: 39:EC:71:DC:3D:68:CD:E8:F9:07:7D:3A:F6:67:51:C2:9F:CE:EA:4C
Certificate issuer: /CN=39ec71dc3d68cde8f9077d3af66751c29fceea4c
Certificate serial: 01A08A1ECEA6A2947919851408E9D0DBDBFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oexx3D1ozej5B3069mdRwp_O6kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft
Manifest number: 0DA2
Signing time: Thu 10 Sep 2026 07:01:09 +0000
Manifest this update: Thu 10 Sep 2026 07:01:09 +0000
Manifest next update: Fri 11 Sep 2026 07:01:09 +0000
Files and hashes: 1: GWIPuzYrr1ZkVb6zUh724dGRI1w.roa (hash: 8ZDylGUDk0rJ7fPM3ZJJKDsoUpKFNi+95rGt5nvLIKg=)
2: Oexx3D1ozej5B3069mdRwp_O6kw.crl (hash: MXyYV0vKXwoIiC2TE3Jyk3qeojUyVRzQx0XyhhOlF/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oexx3D1ozej5B3069mdRwp_O6kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:1e:ce:a6:a2:94:79:19:85:14:08:e9:d0:db:db:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ec71dc3d68cde8f9077d3af66751c29fceea4c
Validity
Not Before: Sep 10 07:01:09 2026 GMT
Not After : Sep 11 07:01:09 2026 GMT
Subject: CN=4f6fbef03f4c9b2b4e992ca7616f7ecad0f24f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3d:85:33:dd:21:3a:75:3e:c7:f7:af:66:ec:
13:2f:5e:45:ae:f4:86:d2:9f:6c:dc:40:01:8e:34:
29:43:80:4e:5a:bb:68:4b:da:8b:bf:13:be:4d:5c:
56:bd:d9:e3:0f:9b:1d:66:e5:9f:26:5f:c3:e6:7b:
48:94:cd:81:6d:f0:1e:1c:20:48:bd:2e:23:6c:ba:
56:7d:a5:16:40:60:f1:55:cd:5a:69:0a:35:28:2d:
20:c8:3a:a9:6e:49:fa:bb:2c:77:cc:fd:61:69:b5:
9f:88:46:e6:2c:c6:6c:84:b9:44:7a:cf:6e:58:1a:
9c:af:f3:ea:df:95:a2:8b:d0:1b:74:e4:3e:20:55:
1a:a5:8d:b9:d1:d8:ba:36:46:8d:6b:20:bd:47:a9:
4b:45:4c:c5:95:41:55:e4:cb:d7:c6:03:87:3c:5c:
6f:a0:44:2c:e7:b1:af:76:b5:6b:69:8f:bb:f0:20:
8e:e5:d8:16:3d:6e:13:ba:da:9a:b2:10:7c:02:67:
c0:54:16:4a:b1:40:6e:66:2b:00:d6:79:cf:db:33:
fb:71:d1:17:06:52:db:15:5d:74:56:cd:ab:eb:c6:
9f:f5:6d:84:35:86:00:6b:84:f6:ff:4b:ff:82:1d:
35:6a:c4:81:37:32:23:b5:39:a4:8a:69:71:0a:74:
05:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:6F:BE:F0:3F:4C:9B:2B:4E:99:2C:A7:61:6F:7E:CA:D0:F2:4F:0A
X509v3 Authority Key Identifier:
keyid:39:EC:71:DC:3D:68:CD:E8:F9:07:7D:3A:F6:67:51:C2:9F:CE:EA:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oexx3D1ozej5B3069mdRwp_O6kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:55:a0:ae:ca:f9:d7:4a:cf:a2:71:90:90:d4:2a:d3:d3:2f:
bb:cc:6f:15:bf:b5:f4:a6:10:0a:eb:a2:bd:ed:36:66:5a:41:
66:5f:a8:d3:38:2c:d0:fe:1a:f6:d2:a3:ed:27:5a:9c:7f:59:
ef:fc:27:ed:ae:13:3d:41:ec:ef:53:91:b0:19:c9:fa:43:2c:
cf:51:d4:06:5a:1d:ee:ad:14:39:1f:33:68:fa:57:55:71:d2:
bd:4f:c6:4c:fd:ad:c5:be:55:d0:e9:63:4c:35:8c:44:51:6f:
09:29:c1:57:b6:06:ac:1b:a5:bc:cc:39:b8:db:38:7f:df:b0:
98:4b:b8:66:8f:78:f6:ec:77:66:05:d3:78:43:b4:17:3b:33:
30:47:76:0e:cf:54:f5:e4:c4:4c:0a:bb:47:6b:b2:f7:83:26:
06:50:76:ae:0e:c0:c4:d4:b3:d9:2f:98:bd:3f:a5:e0:91:ec:
b2:5c:92:aa:4b:ad:47:c4:a4:8c:29:62:b3:2b:c1:e1:99:a9:
dd:7d:ca:d6:0b:20:8f:38:12:7d:48:e4:e9:85:81:39:77:ee:
85:e3:cc:fc:ed:ec:88:d3:33:91:11:43:85:c5:67:79:fe:3a:
57:61:e7:56:e8:13:bd:89:b9:1e:9f:7d:aa:90:23:f0:bf:ee:
1a:5f:66:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:20:16 2026 by rpki-client