Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
File: Oe6oRlUcbkGblH4NoQfuywBwQZo.mft (raw, json)
Hash identifier: gDHNJSu15eyh4JAQ/U3YG2Of3pSk5hsaHPbze+oBLQA=
Subject key identifier: F0:FB:0C:98:48:32:5B:AA:19:55:05:0A:70:D6:0B:8C:6C:5E:5D:34
Authority key identifier: 39:EE:A8:46:55:1C:6E:41:9B:94:7E:0D:A1:07:EE:CB:00:70:41:9A
Certificate issuer: /CN=39eea846551c6e419b947e0da107eecb0070419a
Certificate serial: 019DCDBD7A73FEDE7EF8FFD20DF2CBB79240
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
Manifest number: 1660
Signing time: Mon 27 Apr 2026 07:00:39 +0000
Manifest this update: Mon 27 Apr 2026 07:00:39 +0000
Manifest next update: Tue 28 Apr 2026 07:00:39 +0000
Files and hashes: 1: NwT9W71qDLuM68yfor7jaPtZ31g.roa (hash: Oy3RbTWtLZU6r3g8zZub3EsVqMVs7mpKUAZ+3t3L7eo=)
2: Oe6oRlUcbkGblH4NoQfuywBwQZo.crl (hash: jOrfHebWQz5jQk7kpWMryn979ubycumjXyeqv7u+TTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:bd:7a:73:fe:de:7e:f8:ff:d2:0d:f2:cb:b7:92:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39eea846551c6e419b947e0da107eecb0070419a
Validity
Not Before: Apr 27 07:00:39 2026 GMT
Not After : Apr 28 07:00:39 2026 GMT
Subject: CN=f0fb0c9848325baa1955050a70d60b8c6c5e5d34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:99:63:82:30:37:2f:04:17:ea:b1:26:ca:41:
d6:82:12:fc:30:ff:62:8c:9d:7c:25:52:9f:6b:8c:
52:24:9c:a7:8b:b8:95:d1:10:77:06:59:a8:67:4f:
b3:35:47:c1:d7:d9:7c:66:34:83:f7:2f:86:8d:d7:
d0:d4:29:23:8e:c6:f6:1f:b0:f7:02:32:87:05:a3:
75:02:44:a4:a1:4a:cf:c8:74:d3:ad:e8:c6:6f:3b:
3e:6e:b8:c4:36:9f:e5:5c:93:58:71:64:cd:a4:cc:
5c:5f:f0:4a:3e:89:30:1a:09:10:9f:2e:fe:8c:33:
4b:8c:ee:dd:32:a9:7d:ca:96:a9:a7:b2:8d:e8:a2:
52:c7:42:87:10:33:dd:bd:8d:99:05:71:93:fc:9d:
c0:18:12:53:9b:9c:8f:a8:1e:a0:f8:1f:43:8b:72:
12:1c:df:12:6f:4e:72:fd:9e:1f:a5:56:5d:ba:56:
ef:fa:d7:5a:95:18:22:28:a1:53:87:b7:2b:8f:7a:
32:c6:90:e8:74:70:21:72:0f:9a:65:79:b4:a1:27:
ac:cf:e2:d9:5d:75:90:26:27:94:5d:be:73:c7:23:
51:ae:cb:42:00:a2:dd:80:6a:ca:e0:5a:86:6a:8c:
62:43:cf:83:01:18:bf:9d:99:48:8c:1e:01:69:10:
32:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:FB:0C:98:48:32:5B:AA:19:55:05:0A:70:D6:0B:8C:6C:5E:5D:34
X509v3 Authority Key Identifier:
keyid:39:EE:A8:46:55:1C:6E:41:9B:94:7E:0D:A1:07:EE:CB:00:70:41:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:c7:fd:10:42:9c:d6:cc:db:ee:6d:06:dd:ff:60:12:71:9a:
15:72:5e:2b:da:b0:c9:c5:25:ca:e7:13:4a:f5:c2:08:36:1f:
f6:c1:80:31:92:95:56:74:6c:97:42:c2:c5:f0:80:6f:9e:77:
da:bc:70:e3:22:38:87:09:e9:84:be:66:14:a6:f3:4c:fc:88:
41:73:d4:99:a4:7d:ec:b5:c6:87:c5:cd:8d:c1:7a:d2:08:82:
57:ea:f9:f9:b2:6c:76:3b:e1:19:7a:b2:6e:df:99:56:e5:b1:
ae:8d:a3:a0:17:c0:90:dd:7d:19:4e:9a:e5:f0:93:87:a1:98:
51:0b:6b:e6:ad:28:d4:6c:59:3b:b5:45:de:9d:ae:da:cb:db:
b2:dd:30:ca:d3:99:be:d2:80:65:f6:48:67:1c:3b:dc:6b:1f:
06:37:3b:1c:8d:7c:e6:d2:ce:0c:5f:d9:21:ad:0d:92:1f:6c:
09:c4:39:08:45:7f:6b:51:b1:9b:41:9b:57:01:e1:33:e3:93:
27:f0:42:aa:9a:48:87:ec:87:86:9e:6d:76:ce:f1:e0:34:59:
0d:38:d5:23:15:8b:8a:ba:c3:37:49:77:51:1a:7c:2b:90:5f:
8e:9a:1b:46:21:c0:53:93:85:46:3f:88:c9:77:57:56:d3:32:
3d:c7:f2:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:14:47 2026 by rpki-client