Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
File: Oe6oRlUcbkGblH4NoQfuywBwQZo.mft (raw, json)
Hash identifier: SDFz4F3yUC/kdZ+Pj8nXp12v8m7SO8DEhAvJDcjwtjM=
Subject key identifier: 28:D5:1C:4D:6F:4D:83:9A:2E:75:58:AE:D4:EF:78:71:22:E2:67:73
Authority key identifier: 39:EE:A8:46:55:1C:6E:41:9B:94:7E:0D:A1:07:EE:CB:00:70:41:9A
Certificate issuer: /CN=39eea846551c6e419b947e0da107eecb0070419a
Certificate serial: 01A08CB1A6E14FC9886D5AE5B81AE23DA4E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
Manifest number: 17CC
Signing time: Thu 10 Sep 2026 19:00:47 +0000
Manifest this update: Thu 10 Sep 2026 19:00:47 +0000
Manifest next update: Fri 11 Sep 2026 19:00:47 +0000
Files and hashes: 1: NwT9W71qDLuM68yfor7jaPtZ31g.roa (hash: Oy3RbTWtLZU6r3g8zZub3EsVqMVs7mpKUAZ+3t3L7eo=)
2: Oe6oRlUcbkGblH4NoQfuywBwQZo.crl (hash: DUMVIvZUGsp3KaaJGBqDrKJjL9GHmTPkJnLru3ZVgOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 19:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:b1:a6:e1:4f:c9:88:6d:5a:e5:b8:1a:e2:3d:a4:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39eea846551c6e419b947e0da107eecb0070419a
Validity
Not Before: Sep 10 19:00:47 2026 GMT
Not After : Sep 11 19:00:47 2026 GMT
Subject: CN=28d51c4d6f4d839a2e7558aed4ef787122e26773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:88:05:f2:75:49:45:d8:2e:fc:9b:50:01:90:
48:03:f4:91:5f:23:c6:7a:23:56:a9:e1:c4:9f:d5:
ce:32:1d:e3:a6:a1:92:fb:bc:dc:02:e4:16:f0:71:
ac:81:c1:17:fb:3a:86:30:f2:81:c9:e7:9b:ba:a2:
52:56:56:76:11:8f:09:b2:49:53:c1:02:a8:6b:f9:
54:26:29:b0:89:6e:df:81:7f:87:cf:8b:6a:52:41:
a6:10:c1:cf:a1:4b:38:83:00:0f:f0:35:ed:33:6a:
1c:eb:e1:11:d7:05:a3:96:a3:3d:01:3b:29:e3:f9:
95:a7:25:b6:78:73:b1:23:bd:34:48:bb:2f:ba:97:
9c:b1:fc:61:9e:6d:5b:ae:49:22:1c:0c:2e:a6:35:
0f:de:0a:df:1b:3e:84:eb:8a:ff:f5:d6:ea:be:21:
0a:a0:d0:80:80:96:e8:17:82:43:e2:9f:3c:8c:e7:
65:6a:e3:ec:90:e2:7f:fe:62:18:f0:79:75:9c:16:
d9:6d:da:a0:25:e7:28:bc:ac:a0:78:b0:e5:ab:38:
5b:6d:d3:29:93:37:d2:19:3f:aa:d1:c9:4d:32:7e:
14:fb:1a:fc:b9:37:7e:e4:a6:ab:89:98:c8:07:c9:
e8:fb:9f:33:1e:fe:9f:7e:16:d9:78:59:7e:20:cc:
52:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D5:1C:4D:6F:4D:83:9A:2E:75:58:AE:D4:EF:78:71:22:E2:67:73
X509v3 Authority Key Identifier:
keyid:39:EE:A8:46:55:1C:6E:41:9B:94:7E:0D:A1:07:EE:CB:00:70:41:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:6a:49:7e:93:37:b5:3a:fe:a5:fb:c8:c1:39:f3:4b:a4:4d:
8f:a5:77:32:42:55:9c:1e:a6:83:f5:96:b4:ae:27:4f:24:b2:
ab:fd:ca:e0:cb:50:23:62:b6:0f:98:1d:38:93:66:3e:a1:7b:
87:d5:1e:90:65:2a:84:83:26:3f:79:a5:dc:cd:dc:c7:b6:b4:
fc:f2:7a:de:3b:85:f2:66:80:35:3c:ff:33:7f:9a:6c:44:ee:
3f:da:8b:ef:54:88:5b:8c:db:26:9d:72:03:fb:6b:57:89:28:
d0:0c:c8:40:b5:73:35:71:70:8c:86:bf:fe:32:da:a6:86:e2:
2c:88:aa:0b:29:d6:20:5c:cb:94:04:fc:2c:6f:f2:aa:c0:42:
f1:fe:9c:9b:1f:a7:f1:df:e2:69:8c:c6:30:55:57:37:73:e3:
59:37:ed:bb:b6:58:8f:d8:88:c3:f7:0e:ed:e4:86:19:e2:df:
a4:c8:08:3f:c3:c2:88:49:ba:31:ac:d7:10:92:73:f5:e6:ac:
b3:0f:90:4a:87:0c:d1:b9:d2:87:d6:f1:02:d1:a2:31:53:74:
eb:9f:d5:18:76:75:30:59:43:31:0a:f0:c1:99:b1:a0:a1:ac:
59:ee:12:4e:30:30:bd:c8:08:0c:5d:21:bc:95:96:21:68:0a:
2e:33:b0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:52:16 2026 by rpki-client