Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
File: Oe6oRlUcbkGblH4NoQfuywBwQZo.mft (raw, json)
Hash identifier: yAWdIZTqp9zFwZ5flp6D5zF1K44mYnSjCO3UdUgsxYg=
Subject key identifier: 7F:C7:45:E5:B6:32:12:B6:BE:4F:AB:44:E0:83:D8:07:9B:0B:BE:72
Authority key identifier: 39:EE:A8:46:55:1C:6E:41:9B:94:7E:0D:A1:07:EE:CB:00:70:41:9A
Certificate issuer: /CN=39eea846551c6e419b947e0da107eecb0070419a
Certificate serial: 019CE5FF67078CFFF65E510EA4BCC50166AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
Manifest number: 15E8
Signing time: Fri 13 Mar 2026 07:00:46 +0000
Manifest this update: Fri 13 Mar 2026 07:00:46 +0000
Manifest next update: Sat 14 Mar 2026 07:00:46 +0000
Files and hashes: 1: NwT9W71qDLuM68yfor7jaPtZ31g.roa (hash: Oy3RbTWtLZU6r3g8zZub3EsVqMVs7mpKUAZ+3t3L7eo=)
2: Oe6oRlUcbkGblH4NoQfuywBwQZo.crl (hash: BhbHzF+lBZRSsq2rCvP+cs0XJsXHJXOHU49WC46bC68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:ff:67:07:8c:ff:f6:5e:51:0e:a4:bc:c5:01:66:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39eea846551c6e419b947e0da107eecb0070419a
Validity
Not Before: Mar 13 07:00:46 2026 GMT
Not After : Mar 14 07:00:46 2026 GMT
Subject: CN=7fc745e5b63212b6be4fab44e083d8079b0bbe72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b7:0c:74:53:1f:fe:32:7c:ce:0a:2e:ac:bc:
d2:fc:aa:90:48:b3:fc:4c:da:0e:b0:d7:c3:cb:ab:
01:9e:44:e6:d7:0b:32:4b:df:fa:88:a0:7e:19:12:
f1:6a:2b:4d:d1:0f:9c:1c:58:92:6c:32:2e:ff:54:
7e:ce:26:aa:32:c5:cb:db:54:4a:7f:0f:26:33:63:
cf:09:79:cc:d3:2b:b4:66:12:56:66:13:78:6d:53:
7e:fc:e7:35:20:85:c2:f8:00:7b:3f:f5:4f:31:a5:
e3:a2:c4:34:38:b1:2e:fc:62:f8:f3:e6:56:c1:df:
66:ba:cc:3d:a3:0e:83:68:17:ff:e5:fe:98:0d:45:
8c:67:8c:f0:66:85:b6:61:98:56:27:14:ea:22:cb:
be:1c:a3:51:6b:62:d6:2b:aa:1c:f7:e2:b9:fb:4c:
23:5c:a0:55:86:23:6b:50:33:df:bc:32:0e:44:e3:
67:2f:97:de:08:f6:1f:16:6a:60:8f:49:21:ed:8b:
12:b4:72:a5:f2:47:48:87:bc:15:b0:07:94:14:d3:
1e:92:e6:97:a0:71:9a:f7:d4:c9:59:1c:e6:bc:87:
29:e9:bf:72:ef:10:52:fc:02:2c:5f:3a:b3:6f:a2:
23:90:fe:86:2f:fc:e6:ba:d0:fd:4e:34:5c:6c:77:
f4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C7:45:E5:B6:32:12:B6:BE:4F:AB:44:E0:83:D8:07:9B:0B:BE:72
X509v3 Authority Key Identifier:
keyid:39:EE:A8:46:55:1C:6E:41:9B:94:7E:0D:A1:07:EE:CB:00:70:41:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:1e:a9:4c:c8:b8:62:91:7b:af:09:90:dd:cb:2a:62:32:52:
0b:17:f8:7c:fd:b8:bf:d2:30:8b:63:c2:11:88:06:ca:1c:3d:
b9:1c:48:48:17:46:66:30:53:f4:cd:bd:a5:89:1f:02:ad:d9:
6d:99:16:08:d6:78:ce:a7:f1:c9:35:40:87:45:b7:50:be:59:
23:80:2a:5a:3a:bc:f2:2d:fc:0a:da:15:d5:f5:c3:08:42:68:
23:e6:e7:f0:5f:23:cb:e2:70:93:d4:4c:53:8e:48:cd:73:41:
64:89:75:51:09:3c:e8:1f:cb:6b:07:54:38:d1:f4:46:fb:70:
8f:66:6e:61:97:b6:e1:3b:cc:70:89:6c:1e:24:ca:12:ac:d0:
1f:63:f5:13:2a:dc:74:89:90:e6:87:82:cb:26:e2:22:25:22:
da:29:b0:92:6c:5f:92:65:1f:11:c5:0e:26:c8:4b:60:24:ce:
b8:00:d3:af:de:43:ed:e0:ff:64:8e:9a:96:62:ca:23:8f:94:
0d:ae:fb:43:f9:c1:16:5b:bc:82:97:18:36:4c:09:ef:ff:9d:
ce:b7:5c:8b:0b:86:59:2c:4d:8f:08:ca:26:6e:2a:45:ec:95:
02:3f:75:e3:40:52:91:89:bc:7a:9e:83:8e:3a:2c:65:1a:72:
6f:d3:5f:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzl/2cHjP/2XlEOpLzFAWaqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5ZWVhODQ2NTUxYzZlNDE5Yjk0N2UwZGExMDdlZWNiMDA3
MDQxOWEwHhcNMjYwMzEzMDcwMDQ2WhcNMjYwMzE0MDcwMDQ2WjAzMTEwLwYDVQQD
Eyg3ZmM3NDVlNWI2MzIxMmI2YmU0ZmFiNDRlMDgzZDgwNzliMGJiZTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4LcMdFMf/jJ8zgourLzS/KqQSLP8
TNoOsNfDy6sBnkTm1wsyS9/6iKB+GRLxaitN0Q+cHFiSbDIu/1R+ziaqMsXL21RK
fw8mM2PPCXnM0yu0ZhJWZhN4bVN+/Oc1IIXC+AB7P/VPMaXjosQ0OLEu/GL48+ZW
wd9musw9ow6DaBf/5f6YDUWMZ4zwZoW2YZhWJxTqIsu+HKNRa2LWK6oc9+K5+0wj
XKBVhiNrUDPfvDIORONnL5feCPYfFmpgj0kh7YsStHKl8kdIh7wVsAeUFNMekuaX
oHGa99TJWRzmvIcp6b9y7xBS/AIsXzqzb6IjkP6GL/zmutD9TjRcbHf0gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH/HReW2MhK2vk+rROCD2AebC75yMB8GA1UdIwQY
MBaAFDnuqEZVHG5Bm5R+DaEH7ssAcEGaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2U2b1JsVWNia0dibEg0Tm9RZnV5d0J3UVpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8wOWQzMjktN2ZmZS00NTFiLWJjODIt
MjgzMWE0ODUwNjQ1LzEvT2U2b1JsVWNia0dibEg0Tm9RZnV5d0J3UVpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8wOWQzMjktN2ZmZS00NTFiLWJjODItMjgzMWE0ODUwNjQ1
LzEvT2U2b1JsVWNia0dibEg0Tm9RZnV5d0J3UVpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPx6pTMi4
YpF7rwmQ3csqYjJSCxf4fP24v9Iwi2PCEYgGyhw9uRxISBdGZjBT9M29pYkfAq3Z
bZkWCNZ4zqfxyTVAh0W3UL5ZI4AqWjq88i38CtoV1fXDCEJoI+bn8F8jy+Jwk9RM
U45IzXNBZIl1UQk86B/LawdUONH0Rvtwj2ZuYZe24TvMcIlsHiTKEqzQH2P1Eyrc
dImQ5oeCyybiIiUi2imwkmxfkmUfEcUOJshLYCTOuADTr95D7eD/ZI6almLKI4+U
Da77Q/nBFlu8gpcYNkwJ7/+dzrdciwuGWSxNjwjKJm4qReyVAj9140BSkYm8ep6D
jjosZRpyb9NfRA==
-----END CERTIFICATE-----
Generated at Fri Mar 13 08:51:43 2026 by rpki-client