Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
File: oEhFrx3ACHsnTO5SpKngiAM1Q10.mft (raw, json)
Hash identifier: Hhn9CQs48rbsVELwj/U8ll+64Z5d3Wz22XLmoaumAmw=
Subject key identifier: 26:87:EB:29:B7:F0:98:B2:40:70:81:2D:96:E4:45:09:D6:3C:53:C4
Authority key identifier: A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
Certificate issuer: /CN=a04845af1dc0087b274cee52a4a9e0880335435d
Certificate serial: 019DCDBE0630AD1FA33EB79C62D49F12D6EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
Manifest number: 18F8
Signing time: Mon 27 Apr 2026 07:01:15 +0000
Manifest this update: Mon 27 Apr 2026 07:01:15 +0000
Manifest next update: Tue 28 Apr 2026 07:01:15 +0000
Files and hashes: 1: 7YBZcKVViMTWDrcb33ThKGDDu_M.roa (hash: IHCu4cQWdFxSyysMTzK5fSm+R+NUGrWc2Oz3D3xdFh4=)
2: GPGTgFwiYsVJWbSqO1-Vy4YA5-U.roa (hash: pErOAng/hMAVplt5BEW7zkhrPBcrawDRAlwBfNH3YGU=)
3: oEhFrx3ACHsnTO5SpKngiAM1Q10.crl (hash: ERr1Lo/sd4xjGhZrZQrTJUuB1Old0ySet6+Wg0zQANM=)
4: tLFRg_bTx97O6i5WBrjpjR1Uclg.roa (hash: tAKe6SFpNg6TVOf+ij5N/AwpZZGW6IDo9qGmcBBSkj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 07:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:be:06:30:ad:1f:a3:3e:b7:9c:62:d4:9f:12:d6:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04845af1dc0087b274cee52a4a9e0880335435d
Validity
Not Before: Apr 27 07:01:15 2026 GMT
Not After : Apr 28 07:01:15 2026 GMT
Subject: CN=2687eb29b7f098b24070812d96e44509d63c53c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:57:71:94:6a:2a:1f:d0:cf:9d:46:80:86:b4:
aa:78:19:2b:2d:35:65:7a:42:75:bd:62:97:2f:85:
f0:48:19:9e:52:4b:be:49:6c:3b:15:b6:2b:37:a7:
c4:e9:f2:a7:70:e2:d8:d4:d4:4a:be:0a:87:be:a9:
b4:1f:20:b7:23:2d:6f:d7:ca:37:04:07:81:9d:26:
2d:ea:5d:b5:33:86:b1:26:19:2c:4e:0d:75:91:a7:
bb:e5:9e:4d:42:d3:6a:26:9a:e0:bc:94:c7:3e:7b:
c2:c8:6a:b2:03:c6:cb:89:d3:80:46:53:5e:4d:e2:
f4:93:e6:dd:9f:4e:4f:88:07:f7:77:2c:3c:c9:a5:
ea:80:09:0a:80:1b:69:76:25:32:75:68:b4:cb:a8:
fe:e2:8e:f1:65:7b:ac:b7:5a:0f:14:e9:03:9c:a4:
3f:4f:78:9f:3b:8c:21:fc:fa:62:3b:1f:58:8d:34:
a5:52:9f:2e:d5:6d:e7:b4:0d:4f:d9:5a:4d:cc:9c:
29:8c:f6:90:da:7b:9e:8a:24:43:6d:b4:d7:47:c8:
ab:89:df:fe:f9:f9:9a:9d:0f:e2:7c:1a:1b:4d:b4:
ef:2f:0b:e6:20:ca:22:90:60:3d:64:b1:eb:a2:cb:
6d:d2:b5:46:3a:a8:87:0a:cc:d5:4d:00:37:25:aa:
8a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:87:EB:29:B7:F0:98:B2:40:70:81:2D:96:E4:45:09:D6:3C:53:C4
X509v3 Authority Key Identifier:
keyid:A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:6e:27:2c:a2:0d:fb:d7:c1:3b:93:f4:25:9f:34:54:e7:7b:
cb:87:76:95:a2:6b:9a:e4:c9:20:2e:ee:07:ac:48:b4:c5:a7:
cc:9a:1e:80:ed:f4:23:72:c6:f4:15:1a:2d:35:b6:f8:c2:6b:
de:13:61:0d:ee:53:ab:76:09:68:49:8f:14:9e:42:f2:71:40:
38:8e:2e:94:ad:51:03:fd:5e:c9:51:39:1d:2c:24:c8:91:dd:
40:ad:4c:73:6e:9f:5d:4e:c6:56:d7:bb:9a:bb:03:4f:b0:4c:
d7:ce:4a:4c:16:00:90:f3:6e:6b:41:60:f5:40:83:cd:2d:08:
aa:41:b1:f0:26:d8:87:87:9b:ef:2e:52:55:eb:d3:e2:55:0a:
a1:11:66:17:e8:3c:fc:a6:d7:50:3a:b8:14:fa:31:57:ec:fd:
64:2d:44:07:af:11:58:cd:9e:96:d7:79:2a:c0:f0:99:6d:86:
74:5f:5d:80:c1:a0:6f:c3:db:d9:9e:fb:94:f4:be:97:c0:1f:
b2:a6:48:19:e5:29:71:6f:21:98:8e:78:56:2c:6d:39:e8:74:
33:4e:f9:50:11:ea:36:97:11:4b:3f:c1:6a:f1:a1:a5:45:c6:
30:72:f6:7f:f3:74:cd:4f:66:aa:fc:10:e0:7c:21:f4:e9:9e:
1b:67:2b:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3NvgYwrR+jPrecYtSfEtbqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwNDg0NWFmMWRjMDA4N2IyNzRjZWU1MmE0YTllMDg4MDMz
NTQzNWQwHhcNMjYwNDI3MDcwMTE1WhcNMjYwNDI4MDcwMTE1WjAzMTEwLwYDVQQD
EygyNjg3ZWIyOWI3ZjA5OGIyNDA3MDgxMmQ5NmU0NDUwOWQ2M2M1M2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVdxlGoqH9DPnUaAhrSqeBkrLTVl
ekJ1vWKXL4XwSBmeUku+SWw7FbYrN6fE6fKncOLY1NRKvgqHvqm0HyC3Iy1v18o3
BAeBnSYt6l21M4axJhksTg11kae75Z5NQtNqJprgvJTHPnvCyGqyA8bLidOARlNe
TeL0k+bdn05PiAf3dyw8yaXqgAkKgBtpdiUydWi0y6j+4o7xZXust1oPFOkDnKQ/
T3ifO4wh/PpiOx9YjTSlUp8u1W3ntA1P2VpNzJwpjPaQ2nueiiRDbbTXR8irid/+
+fmanQ/ifBobTbTvLwvmIMoikGA9ZLHrostt0rVGOqiHCszVTQA3JaqK/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCaH6ym38JiyQHCBLZbkRQnWPFPEMB8GA1UdIwQY
MBaAFKBIRa8dwAh7J0zuUqSp4IgDNUNdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0VoRnJ4M0FDSHNuVE81U3BLbmdpQU0xUTEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9lNTVlMzAtOTdjNi00MGU2LTgxYjct
NTA3MDExNTcwZWU2LzEvb0VoRnJ4M0FDSHNuVE81U3BLbmdpQU0xUTEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9lNTVlMzAtOTdjNi00MGU2LTgxYjctNTA3MDExNTcwZWU2
LzEvb0VoRnJ4M0FDSHNuVE81U3BLbmdpQU0xUTEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEG4nLKIN
+9fBO5P0JZ80VOd7y4d2laJrmuTJIC7uB6xItMWnzJoegO30I3LG9BUaLTW2+MJr
3hNhDe5Tq3YJaEmPFJ5C8nFAOI4ulK1RA/1eyVE5HSwkyJHdQK1Mc26fXU7GVte7
mrsDT7BM185KTBYAkPNua0Fg9UCDzS0IqkGx8CbYh4eb7y5SVevT4lUKoRFmF+g8
/KbXUDq4FPoxV+z9ZC1EB68RWM2eltd5KsDwmW2GdF9dgMGgb8Pb2Z77lPS+l8Af
sqZIGeUpcW8hmI54VixtOeh0M075UBHqNpcRSz/BavGhpUXGMHL2f/N0zU9mqvwQ
4Hwh9OmeG2crxQ==
-----END CERTIFICATE-----
Generated at Mon Apr 27 13:59:47 2026 by rpki-client