Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
File: Oe6oRlUcbkGblH4NoQfuywBwQZo.mft (raw, json)
Hash identifier: ierOu1qjue91SrwCB60GHuEy0RiXFQcn7rSPjzcW1UQ=
Subject key identifier: 0F:43:E6:0C:0C:7E:2C:79:2D:B6:08:66:47:06:BD:75:1A:8F:87:85
Authority key identifier: 39:EE:A8:46:55:1C:6E:41:9B:94:7E:0D:A1:07:EE:CB:00:70:41:9A
Certificate issuer: /CN=39eea846551c6e419b947e0da107eecb0070419a
Certificate serial: 019FA1170DE980D5FFC2CFB41A9F86CDC76C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
Manifest number: 1752
Signing time: Mon 27 Jul 2026 01:01:10 +0000
Manifest this update: Mon 27 Jul 2026 01:01:10 +0000
Manifest next update: Tue 28 Jul 2026 01:01:10 +0000
Files and hashes: 1: NwT9W71qDLuM68yfor7jaPtZ31g.roa (hash: Oy3RbTWtLZU6r3g8zZub3EsVqMVs7mpKUAZ+3t3L7eo=)
2: Oe6oRlUcbkGblH4NoQfuywBwQZo.crl (hash: SlDcwdJq7MOf5xvQti3yvJs1GB7E1Za/B3xrcAKdD5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:17:0d:e9:80:d5:ff:c2:cf:b4:1a:9f:86:cd:c7:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39eea846551c6e419b947e0da107eecb0070419a
Validity
Not Before: Jul 27 01:01:10 2026 GMT
Not After : Jul 28 01:01:10 2026 GMT
Subject: CN=0f43e60c0c7e2c792db608664706bd751a8f8785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:38:9e:73:8b:ca:8c:28:d4:60:95:58:a3:cc:
21:ea:81:5c:ff:ea:d0:ab:4f:48:a4:57:f4:61:4d:
88:27:ca:28:ad:e9:b6:dc:ad:49:84:8b:d2:b4:b6:
90:db:d2:5c:a7:2a:45:cd:cf:0d:28:c7:34:7f:1b:
4c:a8:6a:3f:63:8c:3e:a9:46:ad:b8:22:2e:0b:9c:
69:28:73:c8:5d:4a:06:0a:86:7a:de:18:3a:1f:52:
14:51:37:51:d1:9e:0f:79:05:b2:6e:f4:39:9e:7e:
a5:a6:38:6c:73:41:b2:c7:31:72:25:15:43:79:dd:
6f:06:5b:92:dc:cb:96:9a:fc:7b:dd:9c:6f:d7:b5:
99:d0:42:c9:a3:32:a4:d4:b6:0a:61:3a:6d:ea:2d:
04:0b:f4:e1:8e:d9:a9:25:a3:fd:dd:b3:c6:92:5d:
8e:79:89:51:9f:8b:d8:c4:26:6d:cc:bb:f1:9c:8d:
c3:4e:e0:7f:d6:f4:13:9b:8f:7e:bc:ee:54:ac:92:
c2:74:b7:97:08:a5:63:ef:9a:b0:72:ce:fa:81:6a:
bb:95:a3:30:4a:46:d2:7c:e5:bd:02:9d:32:4e:3a:
d7:3a:b4:2f:a8:cf:bc:48:16:6f:4f:fa:3e:43:b5:
b0:a6:50:b1:df:e4:19:b2:54:07:c6:52:c3:9a:bc:
78:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:43:E6:0C:0C:7E:2C:79:2D:B6:08:66:47:06:BD:75:1A:8F:87:85
X509v3 Authority Key Identifier:
keyid:39:EE:A8:46:55:1C:6E:41:9B:94:7E:0D:A1:07:EE:CB:00:70:41:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:cc:0d:af:12:11:5c:e6:7d:4c:c1:e8:8d:f5:08:65:c7:5d:
39:27:85:a4:dd:16:50:18:27:7d:ca:64:aa:a0:4c:92:ca:ee:
e6:61:bc:4b:19:33:a7:22:9e:82:5b:af:9e:18:e4:ae:30:e4:
ef:b8:b3:26:dd:63:19:0e:3d:36:48:ef:ac:f6:69:a6:6a:d9:
1b:dd:5b:3f:74:14:bc:0a:59:4e:d1:13:3b:85:2e:51:db:8b:
39:71:98:3f:cd:ba:cf:43:9a:29:4d:c3:60:63:3d:d7:68:dc:
4d:a8:c8:22:d2:e1:b4:68:91:98:e6:6e:82:fa:3b:29:66:fb:
9b:67:40:bb:42:be:c8:09:94:f4:41:92:ec:69:9d:54:b9:2b:
1e:fc:b1:e3:39:9f:af:c1:f6:78:51:92:84:48:35:0a:05:cc:
5b:6d:f4:3c:28:95:5a:11:9d:ab:57:8c:89:d8:47:01:42:2a:
a4:77:c6:b9:30:7b:64:9b:88:ba:05:a0:5f:3e:cb:5d:26:de:
d5:c6:94:2e:69:25:5a:a6:ae:46:45:d0:4b:41:f2:4f:0f:f7:
3c:5c:7c:a3:12:40:13:35:ff:ca:b2:c7:e0:cb:e6:2a:68:bc:
f3:2e:f4:1c:ec:02:ab:4b:62:97:1a:37:85:ba:10:f0:c0:4f:
71:04:91:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+hFw3pgNX/ws+0Gp+GzcdsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5ZWVhODQ2NTUxYzZlNDE5Yjk0N2UwZGExMDdlZWNiMDA3
MDQxOWEwHhcNMjYwNzI3MDEwMTEwWhcNMjYwNzI4MDEwMTEwWjAzMTEwLwYDVQQD
EygwZjQzZTYwYzBjN2UyYzc5MmRiNjA4NjY0NzA2YmQ3NTFhOGY4Nzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTiec4vKjCjUYJVYo8wh6oFc/+rQ
q09IpFf0YU2IJ8oorem23K1JhIvStLaQ29JcpypFzc8NKMc0fxtMqGo/Y4w+qUat
uCIuC5xpKHPIXUoGCoZ63hg6H1IUUTdR0Z4PeQWybvQ5nn6lpjhsc0GyxzFyJRVD
ed1vBluS3MuWmvx73Zxv17WZ0ELJozKk1LYKYTpt6i0EC/ThjtmpJaP93bPGkl2O
eYlRn4vYxCZtzLvxnI3DTuB/1vQTm49+vO5UrJLCdLeXCKVj75qwcs76gWq7laMw
SkbSfOW9Ap0yTjrXOrQvqM+8SBZvT/o+Q7WwplCx3+QZslQHxlLDmrx4JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA9D5gwMfix5LbYIZkcGvXUaj4eFMB8GA1UdIwQY
MBaAFDnuqEZVHG5Bm5R+DaEH7ssAcEGaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2U2b1JsVWNia0dibEg0Tm9RZnV5d0J3UVpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8wOWQzMjktN2ZmZS00NTFiLWJjODIt
MjgzMWE0ODUwNjQ1LzEvT2U2b1JsVWNia0dibEg0Tm9RZnV5d0J3UVpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8wOWQzMjktN2ZmZS00NTFiLWJjODItMjgzMWE0ODUwNjQ1
LzEvT2U2b1JsVWNia0dibEg0Tm9RZnV5d0J3UVpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPcwNrxIR
XOZ9TMHojfUIZcddOSeFpN0WUBgnfcpkqqBMksru5mG8SxkzpyKegluvnhjkrjDk
77izJt1jGQ49NkjvrPZppmrZG91bP3QUvApZTtETO4UuUduLOXGYP826z0OaKU3D
YGM912jcTajIItLhtGiRmOZugvo7KWb7m2dAu0K+yAmU9EGS7GmdVLkrHvyx4zmf
r8H2eFGShEg1CgXMW230PCiVWhGdq1eMidhHAUIqpHfGuTB7ZJuIugWgXz7LXSbe
1caULmklWqauRkXQS0HyTw/3PFx8oxJAEzX/yrLH4MvmKmi88y70HOwCq0tilxo3
hboQ8MBPcQSRMQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 08:01:11 2026 by rpki-client