Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.mft
File: Oeh-8DzxcaQLor7InmiLudOCWHM.mft (raw, json)
Hash identifier: kZ0gQN8rBnMdu8nsN06getSAr7UC5b0zE09PEPsbfz0=
Subject key identifier: 77:7D:0F:B4:2D:58:C9:67:B4:64:04:E4:FE:AF:62:91:F2:27:6D:6A
Authority key identifier: 39:E8:7E:F0:3C:F1:71:A4:0B:A2:BE:C8:9E:68:8B:B9:D3:82:58:73
Certificate issuer: /CN=39e87ef03cf171a40ba2bec89e688bb9d3825873
Certificate serial: 019EB7D789BF0A06B1BDB1CDFFF0BE8A7113
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oeh-8DzxcaQLor7InmiLudOCWHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.mft
Manifest number: 1954
Signing time: Thu 11 Jun 2026 18:00:16 +0000
Manifest this update: Thu 11 Jun 2026 18:00:16 +0000
Manifest next update: Fri 12 Jun 2026 18:00:16 +0000
Files and hashes: 1: Oeh-8DzxcaQLor7InmiLudOCWHM.crl (hash: 312hnFjEMH76pLfmlaIkSFAHIMXkE1KxN7XcVBCGlkU=)
2: eDMAR7PJPyAOpBqLeTLJ9cfWmlY.roa (hash: +nUDLc8VobBs/aZ0/WWl0V/gT+IU0wqtjeeOECCwgDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oeh-8DzxcaQLor7InmiLudOCWHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 18:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:d7:89:bf:0a:06:b1:bd:b1:cd:ff:f0:be:8a:71:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39e87ef03cf171a40ba2bec89e688bb9d3825873
Validity
Not Before: Jun 11 18:00:16 2026 GMT
Not After : Jun 12 18:00:16 2026 GMT
Subject: CN=777d0fb42d58c967b46404e4feaf6291f2276d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:10:e1:87:d2:fc:3c:85:3f:cb:9c:39:5a:32:
40:a9:7f:c4:dc:0a:c8:8c:65:c8:d8:75:27:46:e8:
aa:99:fa:32:5b:db:4e:9d:7d:33:d7:f3:f7:9a:4e:
cc:ed:b8:c0:81:58:0f:21:67:6a:b0:ff:63:4d:7c:
00:3b:ef:ae:be:f5:a3:52:62:bd:61:7c:80:54:9f:
cd:67:e4:b1:4c:2a:b0:95:d3:c5:23:8e:1c:a0:59:
ad:66:c4:e0:86:c3:ba:df:4b:5f:0e:5f:eb:1f:c0:
f1:95:fa:85:a3:78:a3:ce:90:3d:ed:43:a5:bb:65:
2c:75:48:3f:0e:33:83:9f:8b:c0:07:0d:3d:06:8e:
a2:eb:cf:f6:15:50:51:cb:c6:f2:01:f7:3f:9d:4e:
a1:9c:57:f5:99:a9:39:2a:99:ab:d8:58:b4:8f:d7:
c2:59:9e:31:12:85:ba:24:d8:48:9d:30:d4:d3:f5:
2a:a6:43:9a:f1:50:f9:3b:ff:fe:13:67:8a:e8:09:
9b:67:0e:e6:ce:1f:e4:7c:b3:43:dd:ff:80:d8:8a:
4a:8f:62:6e:22:d5:4e:79:3f:59:43:6e:00:95:67:
b8:81:a0:13:d0:6d:76:6d:4c:8c:83:66:11:cf:41:
5f:99:80:da:b2:8d:70:68:df:68:99:b7:8d:35:a3:
dd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:7D:0F:B4:2D:58:C9:67:B4:64:04:E4:FE:AF:62:91:F2:27:6D:6A
X509v3 Authority Key Identifier:
keyid:39:E8:7E:F0:3C:F1:71:A4:0B:A2:BE:C8:9E:68:8B:B9:D3:82:58:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oeh-8DzxcaQLor7InmiLudOCWHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:7d:65:e3:a9:2c:4c:da:d9:8a:10:d6:de:97:e6:af:af:85:
32:b7:95:ad:85:48:d3:d8:c7:62:9b:a4:e4:e0:fd:cf:2f:f3:
a1:6c:39:b7:80:71:2d:67:84:a0:c8:4b:76:8f:01:8c:51:f6:
67:bc:cc:a4:fd:df:a1:21:48:44:2d:6e:c4:03:1d:6c:45:6d:
bd:72:26:66:a7:f9:ec:32:c5:cd:19:8f:55:c4:dd:1d:3d:84:
51:d9:ff:a6:a7:2f:e1:92:a0:82:29:5e:59:cd:f3:8f:e1:d6:
bd:7a:1b:34:1f:a8:d2:ba:81:d7:46:b0:3e:2c:f5:71:d2:84:
da:32:74:4d:95:51:c9:48:82:bd:f6:70:e0:c2:e8:86:47:9c:
6d:77:b7:76:ed:35:fb:56:7c:2e:77:83:86:6c:dc:bc:db:50:
07:44:69:54:77:66:54:10:f5:ee:51:bf:59:9a:97:57:3e:4b:
d4:29:ee:9f:66:9d:9b:4f:08:bc:15:f8:b8:6c:c4:d5:e3:fa:
5b:ed:25:b8:b9:0a:9d:89:83:1c:11:78:b4:67:35:f4:81:9e:
30:9d:e9:f5:99:01:a6:8a:b9:1a:95:c9:06:96:33:19:b5:7b:
d1:25:35:90:30:85:fb:f9:90:21:b6:3f:dd:51:68:f6:08:83:
6e:ea:2b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:05:40 2026 by rpki-client