Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
File: Oe6oRlUcbkGblH4NoQfuywBwQZo.mft (raw, json)
Hash identifier: hcPftR+Pgr1VmLRKHmv/H3cIm2vmnzDhqOcznNLH1jY=
Subject key identifier: 6B:96:FB:65:15:DB:3A:33:C0:36:9A:A5:68:DC:31:FB:F0:B6:B4:25
Authority key identifier: 39:EE:A8:46:55:1C:6E:41:9B:94:7E:0D:A1:07:EE:CB:00:70:41:9A
Certificate issuer: /CN=39eea846551c6e419b947e0da107eecb0070419a
Certificate serial: 01A19355D892473B3F6A8C04D0B0FFB7F337
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
Manifest number: 1854
Signing time: Sat 31 Oct 2026 19:00:38 +0000
Manifest this update: Sat 31 Oct 2026 19:00:38 +0000
Manifest next update: Sun 01 Nov 2026 19:00:38 +0000
Files and hashes: 1: NwT9W71qDLuM68yfor7jaPtZ31g.roa (hash: Oy3RbTWtLZU6r3g8zZub3EsVqMVs7mpKUAZ+3t3L7eo=)
2: Oe6oRlUcbkGblH4NoQfuywBwQZo.crl (hash: RwzpQ/xtpkAyW9tcuJRmjn4okZhzu0XapO9MUFN+dvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 19:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:93:55:d8:92:47:3b:3f:6a:8c:04:d0:b0:ff:b7:f3:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39eea846551c6e419b947e0da107eecb0070419a
Validity
Not Before: Oct 31 19:00:38 2026 GMT
Not After : Nov 1 19:00:38 2026 GMT
Subject: CN=6b96fb6515db3a33c0369aa568dc31fbf0b6b425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:5d:7c:51:18:21:46:84:24:a7:d4:ae:00:b0:
69:4e:12:e9:50:52:a6:a1:fb:5a:db:a7:04:75:ab:
30:53:b6:e0:8c:cb:9f:d4:cc:21:8e:cb:73:ed:2c:
f7:69:ea:b8:4f:57:da:b7:94:be:d9:29:91:06:d2:
9c:df:17:b0:b0:6c:6e:15:a4:1d:ba:8e:15:2e:cc:
ff:a4:86:cd:a6:3d:21:da:5a:1c:2e:79:ee:72:a9:
ad:89:06:0f:8d:3a:7c:9a:bf:1c:7f:fb:0b:e3:46:
d4:35:15:e8:a8:4f:57:51:a7:0a:90:70:03:3d:bf:
26:d6:9c:ba:40:74:50:a9:ec:d9:e2:b9:e5:0c:c0:
6f:c7:45:25:86:fa:f0:f1:36:0c:17:56:e0:14:a9:
19:54:0d:c5:52:bf:93:ea:e8:bc:9d:a2:35:7e:66:
91:ec:31:4b:25:56:50:32:02:ad:b8:ce:17:eb:b0:
89:a5:06:14:23:64:43:e6:ff:58:93:7a:1a:77:20:
00:4d:a2:34:86:75:87:99:fd:ab:54:be:65:8c:fa:
56:c8:90:dd:28:2b:c3:15:91:fa:bd:6a:b0:c3:ff:
ea:e5:09:e3:b4:9d:17:98:17:46:2d:23:48:5b:98:
9a:25:b2:9b:3c:98:92:9a:92:c8:ec:55:58:a4:cf:
8d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:96:FB:65:15:DB:3A:33:C0:36:9A:A5:68:DC:31:FB:F0:B6:B4:25
X509v3 Authority Key Identifier:
keyid:39:EE:A8:46:55:1C:6E:41:9B:94:7E:0D:A1:07:EE:CB:00:70:41:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:98:37:36:67:83:b1:8c:5c:c1:53:e3:9c:01:3b:f0:56:88:
ac:17:5e:19:59:f8:d9:20:17:c6:4b:bc:e6:d4:f9:8c:53:79:
5c:4e:41:7d:eb:4a:44:c9:14:ae:36:aa:8c:47:b7:e5:fa:4c:
20:03:b2:8c:55:4a:d8:d7:d9:0f:f1:8e:e1:02:31:99:ec:77:
8f:8d:ea:68:b5:58:37:a9:39:38:78:2d:f4:fc:f4:c1:2b:f6:
e0:04:a9:db:ae:4d:ca:97:65:52:7e:3b:ee:f1:13:6a:a7:49:
e0:20:71:b9:c3:fa:aa:32:d2:e4:be:fe:e7:67:0b:ee:b0:27:
28:02:ae:d3:03:f4:c3:28:44:8a:7c:31:64:2c:9b:80:07:d2:
fe:2d:20:b4:92:8d:6f:6e:51:6a:ce:58:f1:c1:e4:ca:0b:59:
88:c8:4b:cc:c1:36:59:f3:62:43:e7:a4:b3:86:0c:c5:9e:5d:
ee:c1:ff:b3:17:2e:6d:5f:cd:71:da:30:10:df:70:33:40:01:
0d:2f:34:a8:49:9c:48:d3:4c:2d:d4:16:fc:71:30:0d:c6:45:
fa:66:78:3b:d9:09:a9:43:ea:90:60:9f:2a:c9:1f:48:b0:75:
d6:d2:98:06:aa:fe:c3:aa:db:08:a6:02:5a:5c:93:c3:b8:ce:
96:83:36:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 03:04:16 2026 by rpki-client