Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
File: Oe6oRlUcbkGblH4NoQfuywBwQZo.mft (raw, json)
Hash identifier: sk+4oWHylk4UHH9ZJr1//3vR9PJ8tHCe+ulOgcavGvI=
Subject key identifier: E8:9B:3A:35:8B:44:2D:FB:BF:92:FA:76:8D:33:49:A6:EA:FA:22:B2
Authority key identifier: 39:EE:A8:46:55:1C:6E:41:9B:94:7E:0D:A1:07:EE:CB:00:70:41:9A
Certificate issuer: /CN=39eea846551c6e419b947e0da107eecb0070419a
Certificate serial: 019EB76A0C4BE09F932D18378A4DD798DB82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
Manifest number: 16D9
Signing time: Thu 11 Jun 2026 16:00:40 +0000
Manifest this update: Thu 11 Jun 2026 16:00:40 +0000
Manifest next update: Fri 12 Jun 2026 16:00:40 +0000
Files and hashes: 1: NwT9W71qDLuM68yfor7jaPtZ31g.roa (hash: Oy3RbTWtLZU6r3g8zZub3EsVqMVs7mpKUAZ+3t3L7eo=)
2: Oe6oRlUcbkGblH4NoQfuywBwQZo.crl (hash: jvO78E2LaxToCQjrCLduvsUAYMP9eSdbMr+JBbDa9nU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:6a:0c:4b:e0:9f:93:2d:18:37:8a:4d:d7:98:db:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39eea846551c6e419b947e0da107eecb0070419a
Validity
Not Before: Jun 11 16:00:40 2026 GMT
Not After : Jun 12 16:00:40 2026 GMT
Subject: CN=e89b3a358b442dfbbf92fa768d3349a6eafa22b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:64:cc:85:90:ed:e5:76:88:5d:24:70:62:af:
25:7f:13:02:f0:8f:26:9a:64:68:d1:8f:b0:e4:0d:
8e:a1:5f:24:6c:ca:ed:34:20:f4:47:6a:b3:eb:c2:
22:3f:19:dc:6f:a8:9e:a5:40:e2:57:d9:da:bb:27:
c5:bd:bf:31:9e:1a:6e:ce:92:90:14:c3:bb:d4:4c:
bd:ad:09:b5:ea:e5:f9:78:5c:ac:da:c0:7d:ae:e7:
21:f1:36:c7:e0:72:47:c5:53:d7:b9:66:14:8e:bd:
dc:b8:70:ea:b8:d7:5d:f0:f3:3e:1a:42:33:fa:a5:
2b:65:66:ff:c7:fd:97:2c:e0:50:3e:7c:06:58:c6:
55:96:8e:f9:db:9c:1d:ba:8f:85:83:ec:0a:50:3d:
8b:8c:f5:5f:69:ae:c7:6b:c2:31:f9:1c:f2:43:08:
ff:c4:00:9c:b6:33:27:b5:fe:92:1f:49:ff:68:43:
87:24:0d:c4:19:99:90:6e:77:d9:e7:65:f0:3d:7b:
88:10:4f:7f:ff:15:50:83:d3:0d:db:fc:7a:2f:fc:
20:de:45:db:06:78:41:f9:64:61:90:8a:bb:30:1f:
d8:21:6f:83:da:a0:e6:7a:90:9b:08:50:b5:0f:a9:
1d:c7:b3:74:00:77:c9:8e:57:7c:e4:39:4e:80:02:
47:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9B:3A:35:8B:44:2D:FB:BF:92:FA:76:8D:33:49:A6:EA:FA:22:B2
X509v3 Authority Key Identifier:
keyid:39:EE:A8:46:55:1C:6E:41:9B:94:7E:0D:A1:07:EE:CB:00:70:41:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:59:24:a4:7f:90:76:5e:b2:20:04:1a:ba:73:65:b2:01:06:
c9:dd:c9:df:90:f6:31:b3:d1:83:9e:cd:85:f5:c6:e6:a2:a2:
b8:72:ca:fb:87:ee:fd:da:9c:a2:0a:9f:8c:88:66:7f:24:a7:
23:df:dd:44:ca:27:d0:10:56:80:b2:4c:48:95:4f:e7:ca:a1:
20:d2:63:8f:a7:e3:6d:01:84:68:48:00:36:26:d2:59:08:fa:
a2:5d:74:48:c0:89:56:2a:c5:b2:77:89:88:95:07:de:cd:ba:
80:62:17:59:b8:54:3a:83:0d:23:0f:a6:9d:f5:a7:d3:12:68:
6a:67:01:01:e1:39:e9:3e:d9:bd:21:1d:0f:6f:7c:2e:40:bd:
b5:15:1e:ca:89:b3:8b:d6:d3:08:f2:bc:30:f3:45:ee:3a:fd:
b7:5e:a7:f1:76:ad:af:ab:38:23:99:e8:c4:ab:07:6c:c5:04:
1c:c5:dc:27:db:33:ae:6e:40:1a:9d:ec:e2:f3:b8:2c:52:2d:
01:52:15:1a:fa:7f:d1:45:25:0a:4f:90:14:82:8b:68:8c:76:
a0:c9:c4:0f:42:0d:ef:b6:4a:2f:0c:95:ae:e9:49:4a:1d:ec:
ce:57:ee:36:a9:f2:94:ed:06:7e:03:d5:c2:dc:13:1b:a0:f9:
5b:af:3f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:18:04 2026 by rpki-client