Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft
File: t_OeNnC0P1fxURt43eIIWWQBdFU.mft (raw, json)
Hash identifier: BTH6c8+B3ojKywtqKX5TrV+Kjh09OVWNX3zf6hHPXlE=
Subject key identifier: 82:96:50:6A:3D:9B:1A:1E:3B:91:3E:0B:C9:67:A0:34:80:22:48:DE
Authority key identifier: B7:F3:9E:36:70:B4:3F:57:F1:51:1B:78:DD:E2:08:59:64:01:74:55
Certificate issuer: /CN=b7f39e3670b43f57f1511b78dde2085964017455
Certificate serial: 019D38D3B04FE1822D09C0729F5E5F0B5400
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t_OeNnC0P1fxURt43eIIWWQBdFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft
Manifest number: 1018
Signing time: Sun 29 Mar 2026 09:01:30 +0000
Manifest this update: Sun 29 Mar 2026 09:01:30 +0000
Manifest next update: Mon 30 Mar 2026 09:01:30 +0000
Files and hashes: 1: JFPJOrPs9dXx9GwdhX115yKBrlc.roa (hash: xcbSy3Zef1nqQuOhrN3INeMT7qcWiLG9Wjm4R+KTz98=)
2: t_OeNnC0P1fxURt43eIIWWQBdFU.crl (hash: hX6SASDfi3yBkb/wpnJmlsRQbo74oUN1v+3dOgHn+KI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/t_OeNnC0P1fxURt43eIIWWQBdFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:b0:4f:e1:82:2d:09:c0:72:9f:5e:5f:0b:54:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7f39e3670b43f57f1511b78dde2085964017455
Validity
Not Before: Mar 29 09:01:30 2026 GMT
Not After : Mar 30 09:01:30 2026 GMT
Subject: CN=8296506a3d9b1a1e3b913e0bc967a034802248de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b3:91:26:7e:93:b3:cc:80:22:88:e6:16:10:
4d:0d:61:86:fc:fe:5a:08:5f:21:28:59:40:3f:be:
bc:37:8d:e1:9f:83:3a:38:b2:0a:0c:db:11:a3:71:
53:35:64:d9:32:18:7f:6f:2a:6a:fa:f5:46:a2:51:
2d:0a:81:ab:cb:11:97:7c:41:e1:ee:91:11:0f:43:
86:ba:7e:48:ff:71:73:9e:5f:0e:3c:b8:cd:ca:e5:
3a:85:7c:b2:fe:14:52:86:66:49:31:76:70:fe:b0:
7c:b3:ce:59:8f:7d:5e:be:de:68:8d:0d:f8:c4:34:
39:bb:7a:b0:13:33:68:b7:ee:93:2d:14:06:69:e6:
34:3c:83:50:d3:9d:dc:3a:89:31:01:ee:63:6f:0f:
cc:db:65:ac:97:0d:b0:51:46:98:2b:2b:01:d3:38:
58:93:ae:fc:79:23:60:eb:85:bc:62:1b:c6:6a:5a:
bc:bb:a1:64:bf:01:96:6b:c3:05:26:2f:69:f6:d9:
42:b6:95:cb:96:79:0d:90:86:8e:3a:70:02:ac:1d:
06:b2:ac:11:45:1c:57:41:57:af:9c:9b:77:43:e3:
8b:7a:d8:ac:e8:98:dc:70:b1:d1:1f:5f:df:9c:31:
81:80:51:5f:41:62:bf:59:72:3e:0c:c1:06:00:72:
5b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:96:50:6A:3D:9B:1A:1E:3B:91:3E:0B:C9:67:A0:34:80:22:48:DE
X509v3 Authority Key Identifier:
keyid:B7:F3:9E:36:70:B4:3F:57:F1:51:1B:78:DD:E2:08:59:64:01:74:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t_OeNnC0P1fxURt43eIIWWQBdFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:8d:ee:6a:18:5b:9d:74:65:85:51:61:28:16:3c:f9:c5:1e:
5f:67:57:4a:67:66:79:f9:2d:99:3e:42:b0:61:ef:a3:4b:71:
e1:c9:00:02:03:a2:0d:70:16:c8:97:40:a2:21:62:fd:90:e8:
aa:64:12:72:e6:46:1e:47:c7:25:ad:f9:6d:f2:4a:67:e7:72:
52:21:68:12:07:16:86:65:2d:dd:25:7d:43:0d:19:ec:35:3d:
43:9c:49:0a:ae:0a:2c:9c:43:d6:e6:2e:cf:36:47:f4:ca:82:
f0:04:62:7c:ee:15:09:82:8c:f8:b9:a1:0c:51:b9:67:ca:bb:
39:8d:b3:df:3c:6c:ef:19:35:ea:3b:9e:98:46:bc:b3:90:4c:
f1:b5:46:c0:07:7a:09:99:21:e5:1c:03:c6:e9:cf:66:98:9d:
3e:f5:9e:3e:49:12:66:ff:c1:14:2d:fb:51:79:9e:93:72:39:
5e:c9:ca:ce:49:4e:03:35:0d:ec:a5:86:bd:12:6c:b7:6f:35:
d2:c8:17:26:d8:cb:98:a7:10:3c:00:44:c5:60:ff:4f:e3:2c:
47:c5:7a:21:22:64:55:60:3f:64:fa:8e:e6:a6:1a:08:ff:88:
22:b0:e4:bb:a7:00:3b:ad:91:1c:c2:73:77:81:0e:72:3a:65:
29:43:65:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:40 2026 by rpki-client