Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.mft
File: OEhy6BezpF-Y1LFbZd1FK12i1hE.mft (raw, json)
Hash identifier: rOTVQKfR1j2tIArpFw64oI8ovcM55yyOOKOeB1UfH7s=
Subject key identifier: 9F:90:65:89:66:EC:16:F8:A2:57:36:09:33:82:BE:A7:D7:B8:03:C7
Authority key identifier: 38:48:72:E8:17:B3:A4:5F:98:D4:B1:5B:65:DD:45:2B:5D:A2:D6:11
Certificate issuer: /CN=384872e817b3a45f98d4b15b65dd452b5da2d611
Certificate serial: 019D394095FB2C91D29F51DF65FDBF19EE3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEhy6BezpF-Y1LFbZd1FK12i1hE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 11:00:27 +0000
Manifest this update: Sun 29 Mar 2026 11:00:27 +0000
Manifest next update: Mon 30 Mar 2026 11:00:27 +0000
Files and hashes: 1: 8GTqxn7gEbfVcrTo_203jWSQqyQ.roa (hash: FBwIvrh4fkJq3441dM0QezB27aCU253T8SzW2IFWPFU=)
2: OEhy6BezpF-Y1LFbZd1FK12i1hE.crl (hash: wGEaMU3UXnlCe537MjRsYqrXyVH97GTAhddywLmNgB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEhy6BezpF-Y1LFbZd1FK12i1hE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:95:fb:2c:91:d2:9f:51:df:65:fd:bf:19:ee:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=384872e817b3a45f98d4b15b65dd452b5da2d611
Validity
Not Before: Mar 29 11:00:27 2026 GMT
Not After : Mar 30 11:00:27 2026 GMT
Subject: CN=9f90658966ec16f8a25736093382bea7d7b803c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:48:a8:06:eb:46:be:a9:fd:a2:c9:e3:4f:8d:
18:41:02:22:6c:da:73:3a:18:d5:23:80:3f:3f:cb:
df:60:4d:b2:f5:d2:35:31:67:9b:1f:f9:20:12:89:
f9:f6:35:6b:3f:cf:20:6b:f5:69:90:e5:cd:23:ae:
3f:44:4d:e1:42:e4:d5:e5:76:79:40:a5:eb:c4:89:
88:ba:7c:06:e8:92:f9:73:23:b1:c3:c2:b3:2a:99:
21:d2:ab:56:4b:85:10:61:5d:b5:b2:cf:30:2f:f8:
66:a9:60:60:3a:31:25:e0:20:0e:ce:71:63:2b:34:
ea:4e:41:42:24:60:a1:3f:69:8b:5a:db:fb:7a:e3:
6c:d3:2c:95:b7:59:d7:f9:5f:08:de:f6:79:79:6d:
e1:c8:c9:15:bc:9c:a8:80:5e:60:70:09:6e:c7:4c:
bd:ae:10:24:70:e3:e1:8d:bd:6a:e0:77:d9:f1:3b:
fe:0b:d8:46:36:dd:a3:69:99:e5:44:13:26:6e:00:
0b:2b:cb:25:8e:74:22:74:95:05:bc:af:f0:15:b0:
df:78:bf:3a:24:02:cc:cc:53:2e:c6:ba:e6:69:ea:
45:cb:88:52:e4:50:18:e8:b9:30:a4:29:2e:34:e0:
7e:85:de:77:f4:c8:9c:db:33:ba:ad:8e:a3:8d:4a:
29:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:90:65:89:66:EC:16:F8:A2:57:36:09:33:82:BE:A7:D7:B8:03:C7
X509v3 Authority Key Identifier:
keyid:38:48:72:E8:17:B3:A4:5F:98:D4:B1:5B:65:DD:45:2B:5D:A2:D6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEhy6BezpF-Y1LFbZd1FK12i1hE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:33:41:ab:75:43:d1:93:09:64:c3:16:a7:e0:11:80:fc:ef:
c5:23:77:e7:5d:ff:9c:3d:0b:95:ab:20:02:23:d7:23:69:96:
bf:50:74:72:cb:d3:52:66:11:6e:74:17:e6:95:62:2c:06:d6:
c7:15:a6:2d:8b:3d:f0:eb:e1:33:a5:05:4a:d2:85:30:2b:1e:
f4:ec:e4:e9:2d:6e:11:2e:03:87:b4:10:b3:3f:41:b6:5c:6b:
cb:a1:80:9f:d9:98:60:f2:0b:4a:c5:ea:53:bc:55:8f:55:8a:
4c:92:fd:09:a1:61:1c:b8:42:dc:18:46:3e:9c:01:2a:8d:58:
19:cf:f8:61:e6:95:70:01:7f:5d:f6:fa:91:c9:65:2b:40:7a:
0b:37:23:dc:c6:3f:82:9c:a8:f0:01:0a:40:26:cd:51:53:4e:
cd:97:a0:ea:b9:b7:aa:07:04:04:32:ab:3c:5d:04:33:f4:c8:
07:96:ad:fc:47:84:8f:e2:15:68:4b:7c:25:68:97:c9:d3:86:
05:0c:e8:70:bb:a5:61:18:a9:e7:2b:1b:9c:cf:81:0d:53:04:
8a:58:fb:99:69:53:cc:00:cf:39:a3:e8:b2:01:f7:88:39:19:
83:18:f6:ba:60:c3:25:35:a3:19:8b:27:e3:7b:e6:27:7e:a7:
94:ba:f6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:53 2026 by rpki-client