Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.mft
File: OEGrqj51xG2YtvqGeNNP7yrDhbA.mft (raw, json)
Hash identifier: +Cm1N/FvgtEWIJHHubHi72PwFv+/BaKsobBpFA3+jhE=
Subject key identifier: CE:2A:D6:15:63:8A:BE:95:45:14:35:74:2A:65:58:5F:4F:4B:88:7D
Authority key identifier: 38:41:AB:AA:3E:75:C4:6D:98:B6:FA:86:78:D3:4F:EF:2A:C3:85:B0
Certificate issuer: /CN=3841abaa3e75c46d98b6fa8678d34fef2ac385b0
Certificate serial: 019D3865A109C508D52E8DB38B51F823FD6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEGrqj51xG2YtvqGeNNP7yrDhbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.mft
Manifest number: 0FEC
Signing time: Sun 29 Mar 2026 07:01:17 +0000
Manifest this update: Sun 29 Mar 2026 07:01:17 +0000
Manifest next update: Mon 30 Mar 2026 07:01:17 +0000
Files and hashes: 1: OEGrqj51xG2YtvqGeNNP7yrDhbA.crl (hash: pVr+SeafTW2rewkFgOsq1S/+g64LGhqWv/hhSvO/jQA=)
2: nZmUNx60tBq0xrGS7jldkZK6ecc.roa (hash: sjJTaq5f6jNHN9R7kd3r95jiTe0+BXzf/lUFmIOlkdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEGrqj51xG2YtvqGeNNP7yrDhbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:a1:09:c5:08:d5:2e:8d:b3:8b:51:f8:23:fd:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3841abaa3e75c46d98b6fa8678d34fef2ac385b0
Validity
Not Before: Mar 29 07:01:17 2026 GMT
Not After : Mar 30 07:01:17 2026 GMT
Subject: CN=ce2ad615638abe95451435742a65585f4f4b887d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1b:90:3d:d9:d9:d4:be:e8:c9:06:65:95:47:
fe:03:03:20:f0:20:03:52:d7:ea:5e:b1:79:f8:9f:
5a:95:f9:61:cc:cc:31:d6:59:6c:a3:9c:b7:a8:f0:
70:18:69:cb:a7:44:67:bb:a6:59:fe:df:58:e2:59:
27:27:73:77:ab:c2:7b:69:fb:24:a0:87:c2:9b:00:
ee:ee:de:7d:51:e1:01:de:a5:28:cb:38:5e:1c:93:
6b:c0:8b:a7:72:81:1d:2c:0c:e5:95:74:75:55:16:
b5:20:3e:fa:6e:4d:8d:f4:ae:40:53:f6:52:00:5c:
a6:20:d1:d6:21:9f:fd:ab:9e:51:ff:02:ad:b1:b3:
b6:1f:2e:fe:2f:66:8e:6f:cf:bf:fb:ca:28:c2:f9:
a6:43:bc:3e:a6:42:b0:41:ad:fb:46:05:11:59:5b:
af:3b:3d:ee:dd:c7:c3:19:fc:b1:2c:88:b5:ab:df:
da:b0:86:07:a2:ae:31:bb:fc:f9:92:95:fc:65:9f:
7d:bb:6f:44:ad:39:8d:4e:59:84:6c:c4:b0:41:9f:
bf:8c:6a:2e:5f:6d:8f:bc:a8:ed:13:2d:67:fa:7e:
7b:4f:be:d2:53:d4:e6:7a:38:31:54:7d:e9:b2:8a:
ce:fd:af:e2:c1:22:07:62:36:0b:a7:27:15:f8:27:
dc:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:2A:D6:15:63:8A:BE:95:45:14:35:74:2A:65:58:5F:4F:4B:88:7D
X509v3 Authority Key Identifier:
keyid:38:41:AB:AA:3E:75:C4:6D:98:B6:FA:86:78:D3:4F:EF:2A:C3:85:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEGrqj51xG2YtvqGeNNP7yrDhbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:58:3a:1e:a1:1b:63:89:5c:89:8c:25:ea:ec:7b:b4:f8:01:
35:44:2a:b9:8f:e5:1d:50:fd:79:f6:8d:fd:af:4d:d3:6e:04:
4a:7e:85:8f:33:91:16:f3:44:93:49:2d:3a:17:5e:bb:0e:1c:
32:9f:06:86:90:87:cb:de:5d:ed:cc:bf:18:7c:f7:15:6a:e1:
a0:7f:51:4e:b0:c9:e7:09:b9:00:53:55:e9:1f:01:16:c8:c5:
ad:65:56:6d:2b:87:23:d4:1c:9d:e3:e1:e1:05:c3:30:93:31:
bd:86:31:5c:7e:e6:0f:7b:d1:0e:37:35:28:8b:4d:92:63:df:
a8:40:a4:c6:14:db:4c:d3:67:52:1f:17:9c:af:65:d2:e3:0e:
92:fd:f3:4d:de:a1:75:24:5e:6d:48:19:08:cb:b1:d0:7a:e0:
2e:a2:63:db:3e:a7:c4:1f:c3:2c:46:67:a2:d5:b3:5f:d8:0c:
eb:ec:06:fa:fd:3f:ec:96:5e:6d:c1:08:f1:22:57:9d:24:23:
4f:2d:4f:61:4c:e0:90:a9:b8:67:ac:54:cb:cd:47:d1:a0:3b:
9d:05:22:a1:9f:80:75:e5:38:68:0e:3d:5a:4e:19:5a:7b:c5:
61:ad:20:86:5a:2e:e2:91:08:6f:3c:4c:53:70:b6:e2:69:be:
59:75:2c:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZaEJxQjVLo2zi1H4I/1vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4NDFhYmFhM2U3NWM0NmQ5OGI2ZmE4Njc4ZDM0ZmVmMmFj
Mzg1YjAwHhcNMjYwMzI5MDcwMTE3WhcNMjYwMzMwMDcwMTE3WjAzMTEwLwYDVQQD
EyhjZTJhZDYxNTYzOGFiZTk1NDUxNDM1NzQyYTY1NTg1ZjRmNGI4ODdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRuQPdnZ1L7oyQZllUf+AwMg8CAD
UtfqXrF5+J9alflhzMwx1llso5y3qPBwGGnLp0Rnu6ZZ/t9Y4lknJ3N3q8J7afsk
oIfCmwDu7t59UeEB3qUoyzheHJNrwIuncoEdLAzllXR1VRa1ID76bk2N9K5AU/ZS
AFymINHWIZ/9q55R/wKtsbO2Hy7+L2aOb8+/+8oowvmmQ7w+pkKwQa37RgURWVuv
Oz3u3cfDGfyxLIi1q9/asIYHoq4xu/z5kpX8ZZ99u29ErTmNTlmEbMSwQZ+/jGou
X22PvKjtEy1n+n57T77SU9TmejgxVH3psorO/a/iwSIHYjYLpycV+CfcWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM4q1hVjir6VRRQ1dCplWF9PS4h9MB8GA1UdIwQY
MBaAFDhBq6o+dcRtmLb6hnjTT+8qw4WwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0VHcnFqNTF4RzJZdHZxR2VOTlA3eXJEaGJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8xMTI5ZGUtYmY0My00OTY3LThjMDQt
ZjIyNjEwZTYzYzkyLzEvT0VHcnFqNTF4RzJZdHZxR2VOTlA3eXJEaGJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8xMTI5ZGUtYmY0My00OTY3LThjMDQtZjIyNjEwZTYzYzky
LzEvT0VHcnFqNTF4RzJZdHZxR2VOTlA3eXJEaGJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdVg6HqEb
Y4lciYwl6ux7tPgBNUQquY/lHVD9efaN/a9N024ESn6FjzORFvNEk0ktOhdeuw4c
Mp8GhpCHy95d7cy/GHz3FWrhoH9RTrDJ5wm5AFNV6R8BFsjFrWVWbSuHI9QcnePh
4QXDMJMxvYYxXH7mD3vRDjc1KItNkmPfqECkxhTbTNNnUh8XnK9l0uMOkv3zTd6h
dSRebUgZCMux0HrgLqJj2z6nxB/DLEZnotWzX9gM6+wG+v0/7JZebcEI8SJXnSQj
Ty1PYUzgkKm4Z6xUy81H0aA7nQUioZ+AdeU4aA49Wk4ZWnvFYa0ghlou4pEIbzxM
U3C24mm+WXUsGQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:55:28 2026 by rpki-client