Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/3fa411-af98-4af8-b5b8-50e22ab71f84/1/OeHApbBM1BmsHvkjvI1lcDIwYdo.mft
File: OeHApbBM1BmsHvkjvI1lcDIwYdo.mft (raw, json)
Hash identifier: Q2Y4qIX4WbcW862SR4/e4YvSPgOQIOZ9UEsRdsiV/OI=
Subject key identifier: C2:AF:D5:44:02:C8:AC:7A:3B:5B:B3:56:11:70:CC:32:DD:53:82:A9
Authority key identifier: 39:E1:C0:A5:B0:4C:D4:19:AC:1E:F9:23:BC:8D:65:70:32:30:61:DA
Certificate issuer: /CN=39e1c0a5b04cd419ac1ef923bc8d6570323061da
Certificate serial: 01A04273FB661B7DD90877942DE0F12EC167
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OeHApbBM1BmsHvkjvI1lcDIwYdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3fa411-af98-4af8-b5b8-50e22ab71f84/1/OeHApbBM1BmsHvkjvI1lcDIwYdo.mft
Manifest number: 1A1D
Signing time: Thu 27 Aug 2026 09:01:32 +0000
Manifest this update: Thu 27 Aug 2026 09:01:32 +0000
Manifest next update: Fri 28 Aug 2026 09:01:32 +0000
Files and hashes: 1: OeHApbBM1BmsHvkjvI1lcDIwYdo.crl (hash: S3Vcfs4YmHjUAwxwReg+T7ViQhbapC8v3KNN7fKXYto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3fa411-af98-4af8-b5b8-50e22ab71f84/1/OeHApbBM1BmsHvkjvI1lcDIwYdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3fa411-af98-4af8-b5b8-50e22ab71f84/1/OeHApbBM1BmsHvkjvI1lcDIwYdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OeHApbBM1BmsHvkjvI1lcDIwYdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 08:49:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:73:fb:66:1b:7d:d9:08:77:94:2d:e0:f1:2e:c1:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39e1c0a5b04cd419ac1ef923bc8d6570323061da
Validity
Not Before: Aug 27 09:01:32 2026 GMT
Not After : Aug 28 09:01:32 2026 GMT
Subject: CN=c2afd54402c8ac7a3b5bb3561170cc32dd5382a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a5:16:dc:81:02:1e:6a:c7:cd:44:5e:79:7a:
24:3b:1e:89:3a:a4:9a:02:97:55:25:0c:21:47:02:
87:7b:db:20:36:86:8f:a0:1b:2d:fd:0a:a1:06:73:
9b:fe:b6:22:af:e1:2b:f9:7a:9b:79:bf:5d:c1:27:
35:c5:30:4d:d3:38:a3:2a:d4:b8:fa:1e:67:85:37:
48:df:81:74:69:89:00:60:2d:b5:0b:f5:7b:a8:54:
42:10:d0:a2:bd:56:aa:e4:68:31:0c:b3:9e:17:a8:
7f:01:2e:69:d3:8a:b1:8c:50:63:15:ae:bd:21:72:
f0:cf:b6:b5:91:5d:14:86:ae:d7:e3:6b:55:89:25:
71:ec:d7:76:04:e7:99:6f:e4:9d:d8:2a:8d:40:e1:
c4:1a:4b:f7:93:80:fe:ff:77:45:33:dc:bd:13:e8:
0a:5f:f5:e0:e9:80:a3:9a:f1:63:93:3b:f6:d4:78:
29:c2:29:86:5f:17:65:d9:4f:8c:83:45:d4:1d:0f:
72:2e:a9:93:70:58:f8:75:0e:5d:1f:76:1f:68:f3:
3f:e0:4f:fb:f5:5c:82:2b:f8:42:c3:93:c8:c1:a8:
43:ba:eb:cf:4c:ec:96:a7:1b:fd:29:66:7b:d2:a7:
e2:8d:fb:63:1d:f6:93:a3:c0:10:f6:61:35:1b:98:
11:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:AF:D5:44:02:C8:AC:7A:3B:5B:B3:56:11:70:CC:32:DD:53:82:A9
X509v3 Authority Key Identifier:
keyid:39:E1:C0:A5:B0:4C:D4:19:AC:1E:F9:23:BC:8D:65:70:32:30:61:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OeHApbBM1BmsHvkjvI1lcDIwYdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3fa411-af98-4af8-b5b8-50e22ab71f84/1/OeHApbBM1BmsHvkjvI1lcDIwYdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3fa411-af98-4af8-b5b8-50e22ab71f84/1/OeHApbBM1BmsHvkjvI1lcDIwYdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:a8:68:c8:9a:7e:f7:2d:d2:cb:06:4c:c1:eb:7b:e2:cf:6b:
e8:e4:bf:cf:67:d1:32:e5:20:19:f8:3e:8d:3d:3e:43:7c:1d:
5a:77:1c:d0:6c:79:dc:ed:39:c9:83:00:73:41:d1:c8:5d:d1:
16:8c:22:92:50:6a:35:23:ab:e1:18:40:db:d6:89:86:ab:86:
ec:38:bb:2a:e5:90:a2:61:7f:e1:12:84:a3:70:5b:98:2a:cb:
f5:24:fc:4c:1e:fb:7f:2b:9e:74:5e:0f:ad:4f:74:e4:16:04:
d2:f1:bc:9c:8c:e4:dd:56:2d:b5:21:c0:40:9f:28:99:e8:39:
8b:62:a6:54:11:91:29:e0:58:22:f9:c5:f2:43:89:34:b1:ed:
b1:ee:ec:70:63:fb:e6:b8:46:67:a9:74:b7:35:64:8c:65:aa:
5a:9d:41:01:68:67:0d:c1:9e:33:68:13:bf:be:9c:b2:5b:8d:
27:9e:9a:fe:cf:20:ad:d3:b1:8c:40:ff:97:a1:8c:82:c5:36:
a3:99:b4:d8:08:e4:20:21:1e:a1:18:b9:58:7e:81:31:87:7f:
ee:95:ab:45:80:9b:bc:9d:f7:be:fd:40:a0:e7:c8:f2:b6:dc:
12:2e:4e:3d:3a:83:e6:63:24:ee:0c:44:7d:aa:ac:bb:4a:53:
70:26:d4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 11:39:28 2026 by rpki-client