Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3fa411-af98-4af8-b5b8-50e22ab71f84/1/OeHApbBM1BmsHvkjvI1lcDIwYdo.mft
File: OeHApbBM1BmsHvkjvI1lcDIwYdo.mft (raw, json)
Hash identifier: slpRU2+syudoN7W9bLIaQ6tbw0P+nlSLJOVa3aSYDyQ=
Subject key identifier: AE:FD:C0:8B:96:6A:56:AC:9F:E2:A9:E8:7B:AC:82:96:C7:0F:4F:3F
Authority key identifier: 39:E1:C0:A5:B0:4C:D4:19:AC:1E:F9:23:BC:8D:65:70:32:30:61:DA
Certificate issuer: /CN=39e1c0a5b04cd419ac1ef923bc8d6570323061da
Certificate serial: 019D856E1AF6CC8671EE320FEECC97D345F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OeHApbBM1BmsHvkjvI1lcDIwYdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3fa411-af98-4af8-b5b8-50e22ab71f84/1/OeHApbBM1BmsHvkjvI1lcDIwYdo.mft
Manifest number: 18B2
Signing time: Mon 13 Apr 2026 06:01:18 +0000
Manifest this update: Mon 13 Apr 2026 06:01:18 +0000
Manifest next update: Tue 14 Apr 2026 06:01:18 +0000
Files and hashes: 1: OeHApbBM1BmsHvkjvI1lcDIwYdo.crl (hash: wNOAc6QH6jsPHn1SUyntJ/GK7Vn9zHCZStPsCz+8XhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3fa411-af98-4af8-b5b8-50e22ab71f84/1/OeHApbBM1BmsHvkjvI1lcDIwYdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3fa411-af98-4af8-b5b8-50e22ab71f84/1/OeHApbBM1BmsHvkjvI1lcDIwYdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OeHApbBM1BmsHvkjvI1lcDIwYdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Apr 2026 06:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:85:6e:1a:f6:cc:86:71:ee:32:0f:ee:cc:97:d3:45:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39e1c0a5b04cd419ac1ef923bc8d6570323061da
Validity
Not Before: Apr 13 06:01:18 2026 GMT
Not After : Apr 14 06:01:18 2026 GMT
Subject: CN=aefdc08b966a56ac9fe2a9e87bac8296c70f4f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3f:57:1f:64:9d:c2:03:f5:14:19:78:54:6b:
21:ea:d4:8f:98:17:e3:19:42:bf:f0:00:d2:5c:23:
d1:7e:63:d7:d6:7a:b1:f2:60:53:a1:d3:c2:d4:0e:
cc:d8:32:fb:9d:47:54:5a:c1:53:da:b4:b1:43:cb:
26:c2:cb:99:56:8d:fd:ca:bf:98:4e:c1:15:0d:4d:
98:1f:dd:44:8c:12:2f:75:b4:ef:46:33:37:6a:f8:
8b:94:71:42:2a:ef:4d:7e:0f:f0:f8:d4:8f:7c:54:
ce:a8:4c:2a:74:73:ce:1d:e7:6c:9a:77:dc:65:44:
af:85:91:f1:25:a4:15:b5:3f:16:01:03:4c:5f:4a:
28:97:9b:a0:ba:dd:b1:52:22:9b:90:ba:1d:cf:10:
11:96:2d:1a:f5:f5:1d:62:11:9f:9e:32:0b:29:0f:
39:5d:42:80:59:85:d6:a7:3d:cb:11:16:ac:ea:9f:
1a:c5:64:95:bd:bc:cc:eb:5a:94:0f:b6:31:3d:99:
fd:a3:34:d2:c5:a3:40:af:55:0d:cc:7b:b2:b7:3b:
c7:1d:29:3d:af:ad:53:da:b5:68:5d:1f:fd:3f:a7:
ea:08:7b:9c:19:85:4d:a9:22:a4:11:eb:e1:ec:25:
b2:85:c1:2c:ef:0d:0c:30:0a:13:4d:3b:7b:b2:26:
fb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:FD:C0:8B:96:6A:56:AC:9F:E2:A9:E8:7B:AC:82:96:C7:0F:4F:3F
X509v3 Authority Key Identifier:
keyid:39:E1:C0:A5:B0:4C:D4:19:AC:1E:F9:23:BC:8D:65:70:32:30:61:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OeHApbBM1BmsHvkjvI1lcDIwYdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3fa411-af98-4af8-b5b8-50e22ab71f84/1/OeHApbBM1BmsHvkjvI1lcDIwYdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3fa411-af98-4af8-b5b8-50e22ab71f84/1/OeHApbBM1BmsHvkjvI1lcDIwYdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:24:d0:ba:e0:be:d2:37:80:69:94:8f:86:26:8a:44:f7:0d:
18:2c:8f:a8:ce:11:3c:48:14:36:49:e2:62:22:a0:85:b6:3c:
75:ad:78:9b:9d:85:19:29:96:ca:d4:86:ec:00:f3:0d:eb:03:
56:8d:28:84:b7:47:bd:26:4c:67:72:62:b1:df:37:63:51:08:
df:83:ed:17:cc:02:17:b2:98:fb:f6:66:c9:de:fe:1e:be:a0:
28:62:98:3d:02:d8:bd:57:6b:16:76:2b:c8:70:70:8d:31:53:
a6:4d:09:9b:98:4f:05:25:c2:d3:68:12:f8:c7:31:a8:bb:0a:
9a:a1:c8:b8:04:0e:b0:6b:6c:86:b4:3b:f2:92:7a:a4:b6:1e:
f6:fc:3c:58:fc:63:41:1a:78:ea:c5:75:9e:87:ec:8e:eb:00:
de:24:55:30:07:e9:ca:f4:86:01:9a:ec:54:ce:7f:dc:68:6a:
85:c0:07:fa:be:15:08:77:54:f7:45:0b:47:8b:56:25:45:68:
50:af:ac:69:8e:22:4c:6b:2f:6e:6f:a2:90:e7:0a:4a:04:49:
b0:b7:19:58:a4:08:5d:64:ff:55:ad:47:57:58:38:3d:38:b3:
37:a5:be:5d:6a:12:2f:13:aa:f9:d6:9f:52:3b:1f:72:ed:83:
eb:6e:2c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:29:14 2026 by rpki-client