Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft
File: Oexx3D1ozej5B3069mdRwp_O6kw.mft (raw, json)
Hash identifier: ll1gNs/qIa3k92fnvyyjdvOKW2ONzehndV2hJn+xiXw=
Subject key identifier: 9E:19:57:EA:F0:E9:D5:A8:3A:94:8D:83:13:18:95:BE:69:64:B0:EE
Authority key identifier: 39:EC:71:DC:3D:68:CD:E8:F9:07:7D:3A:F6:67:51:C2:9F:CE:EA:4C
Certificate issuer: /CN=39ec71dc3d68cde8f9077d3af66751c29fceea4c
Certificate serial: 019DCD1956514635C177026F406E75B18EE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oexx3D1ozej5B3069mdRwp_O6kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft
Manifest number: 0C37
Signing time: Mon 27 Apr 2026 04:01:22 +0000
Manifest this update: Mon 27 Apr 2026 04:01:22 +0000
Manifest next update: Tue 28 Apr 2026 04:01:22 +0000
Files and hashes: 1: GWIPuzYrr1ZkVb6zUh724dGRI1w.roa (hash: 8ZDylGUDk0rJ7fPM3ZJJKDsoUpKFNi+95rGt5nvLIKg=)
2: Oexx3D1ozej5B3069mdRwp_O6kw.crl (hash: sA0/nxkgKdZvz1t//B5+Dcs0HB3sWOcpVow2HdUHWuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oexx3D1ozej5B3069mdRwp_O6kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 04:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:19:56:51:46:35:c1:77:02:6f:40:6e:75:b1:8e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ec71dc3d68cde8f9077d3af66751c29fceea4c
Validity
Not Before: Apr 27 04:01:22 2026 GMT
Not After : Apr 28 04:01:22 2026 GMT
Subject: CN=9e1957eaf0e9d5a83a948d83131895be6964b0ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:94:cf:66:39:0b:97:96:1f:14:e0:1a:fc:f4:
eb:31:06:08:d2:8f:da:b4:9c:a5:4c:c8:93:ec:20:
35:ec:12:da:44:61:36:49:cb:41:2d:c1:23:f5:dc:
56:96:4a:87:d8:64:f2:79:44:88:00:9e:09:c8:40:
ff:a7:de:a8:fa:ce:f9:2a:01:1a:4f:da:d3:2b:72:
96:57:7c:37:1e:a6:6d:08:b5:e8:51:c1:ed:f5:f3:
f7:21:b6:7e:9b:2c:12:c2:c8:dd:40:bf:f5:54:65:
4e:2c:20:06:78:1c:2c:17:ab:5e:46:e4:3d:62:de:
93:e5:b8:61:2e:49:95:f6:1f:bc:5e:43:de:95:8b:
97:b6:8c:14:7c:71:5a:f2:c1:b6:d2:5b:58:a7:53:
45:59:76:23:02:73:e1:78:e8:a4:a5:40:92:4e:73:
66:7e:5e:2c:68:b7:2e:39:e1:66:33:b0:cd:99:3f:
20:6d:bd:06:cb:58:67:b9:74:49:e5:38:e5:08:a7:
a8:92:54:74:1e:0c:1e:71:4f:84:77:ed:9a:ef:bd:
bc:be:d5:e5:f3:6c:6e:8e:90:e3:aa:b7:0c:bd:84:
d4:4b:e6:dc:20:73:9f:70:0c:d1:7a:42:d6:b8:f9:
62:0b:e8:2d:65:2f:8e:ce:9e:db:2d:b0:f9:00:1a:
f9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:19:57:EA:F0:E9:D5:A8:3A:94:8D:83:13:18:95:BE:69:64:B0:EE
X509v3 Authority Key Identifier:
keyid:39:EC:71:DC:3D:68:CD:E8:F9:07:7D:3A:F6:67:51:C2:9F:CE:EA:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oexx3D1ozej5B3069mdRwp_O6kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:90:4f:12:a1:7e:a2:12:d3:70:91:86:6f:59:6f:f7:0f:b2:
19:67:b2:1d:3d:dc:dd:94:a3:f3:d6:7a:0d:95:bd:0b:61:df:
d5:ff:62:ea:c5:4a:ac:20:9d:ce:08:c4:48:10:d9:4b:29:78:
c5:72:13:85:6e:76:53:10:d8:71:63:ce:b5:44:1d:aa:b4:0c:
51:2a:a9:da:95:ea:e8:f7:a6:e5:ef:87:36:e9:94:4f:ed:bb:
e7:2d:fc:f7:3f:af:71:ce:8d:02:40:40:88:4a:04:d4:93:f0:
7f:2e:a2:ef:f2:05:e2:08:bd:21:0c:36:97:0b:aa:f1:60:2b:
74:08:94:e1:b9:a6:4b:75:1d:61:c1:13:75:fb:63:97:a1:ce:
94:37:73:56:33:18:1f:54:f8:ca:f3:ab:3e:0a:93:8c:9a:fe:
f1:bd:eb:b9:50:31:d0:d9:e9:65:a5:49:c0:b2:74:d3:b7:a9:
ce:72:4a:e7:bc:a9:a5:dc:2b:ad:0d:69:33:2d:78:1c:16:fd:
66:13:72:0d:d4:4b:94:72:d3:eb:6f:44:47:d4:01:bd:75:1a:
b8:a8:6f:a2:be:df:a1:9d:49:c0:7b:6a:a3:5a:81:d5:72:8b:
5c:c7:aa:83:d7:ab:b1:97:41:cf:cb:e7:c6:20:31:7e:3d:a1:
6e:f9:5a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 10:44:59 2026 by rpki-client