Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
File: oej-6X2jZbZICCGxi-35_CNVOCY.mft (raw, json)
Hash identifier: khaQDYGgZYx8OHqtZIOOcQASRRY2frRsb2wCOdyrtEE=
Subject key identifier: 7D:7A:8D:AA:02:50:15:FE:6A:1D:2E:86:B0:30:25:47:71:1D:C0:93
Authority key identifier: A1:E8:FE:E9:7D:A3:65:B6:48:08:21:B1:8B:ED:F9:FC:23:55:38:26
Certificate issuer: /CN=a1e8fee97da365b6480821b18bedf9fc23553826
Certificate serial: 019CE4EC34B4D7B5DA04F1BACA0486158BD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
Manifest number: 0F4A
Signing time: Fri 13 Mar 2026 02:00:11 +0000
Manifest this update: Fri 13 Mar 2026 02:00:11 +0000
Manifest next update: Sat 14 Mar 2026 02:00:11 +0000
Files and hashes: 1: jRCRVJYAGBXYgrtW6iJFIwl-3T4.roa (hash: zd3vqx8SZ7kQ7l/rKEA4mZdGGLkEyNUj7EHXRniiHWs=)
2: oej-6X2jZbZICCGxi-35_CNVOCY.crl (hash: WdLs1Mj8ZZx08N90hDgTgkq5W7dth0s6sZ68sN9wUig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:ec:34:b4:d7:b5:da:04:f1:ba:ca:04:86:15:8b:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1e8fee97da365b6480821b18bedf9fc23553826
Validity
Not Before: Mar 13 02:00:11 2026 GMT
Not After : Mar 14 02:00:11 2026 GMT
Subject: CN=7d7a8daa025015fe6a1d2e86b0302547711dc093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3a:81:d4:21:43:bf:8e:ef:4c:67:f9:d4:6a:
af:ea:0f:d9:87:a6:8b:2f:82:fb:f1:22:6f:a0:4c:
59:a6:df:1c:ff:69:f2:e4:2a:99:06:b5:dc:d0:29:
d4:2b:31:ac:e4:a6:43:42:76:6c:d6:07:d6:39:43:
8d:51:0f:85:0b:cd:0b:e4:e8:57:b5:ff:c6:93:75:
44:05:75:cc:85:1d:a5:ad:ef:c6:64:3d:f7:22:fc:
94:b0:bb:d5:a2:c4:b2:15:b3:db:47:e3:d1:8b:73:
d7:3b:10:fd:8e:9d:27:2e:18:71:cf:ae:3a:2a:3a:
45:30:03:ad:ce:09:67:e7:a4:a8:9d:17:a9:8d:23:
34:a5:1b:cb:5b:2b:b4:b8:b5:2c:2b:d4:9f:e4:a1:
ed:55:de:2c:ee:2b:3d:df:ef:15:07:c5:57:c5:27:
94:74:11:b1:3f:15:a1:8c:f8:7c:51:33:51:27:44:
6b:a9:11:8d:77:04:86:35:3f:96:fd:86:ae:02:d1:
b6:b4:28:6e:73:20:03:2d:f4:46:90:80:53:3d:f0:
1c:a0:95:2b:93:5d:25:76:90:f0:f6:0d:b4:70:b0:
70:00:7c:58:6f:3f:b3:e2:26:c4:19:1e:8d:c4:de:
33:9b:26:cb:c4:78:63:de:ba:99:c5:90:8f:91:8f:
9d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:7A:8D:AA:02:50:15:FE:6A:1D:2E:86:B0:30:25:47:71:1D:C0:93
X509v3 Authority Key Identifier:
keyid:A1:E8:FE:E9:7D:A3:65:B6:48:08:21:B1:8B:ED:F9:FC:23:55:38:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:77:a5:7c:a7:78:b0:3b:b8:0f:25:a3:ae:e8:33:53:b8:b4:
47:33:12:93:96:40:5c:ef:3b:77:97:b4:00:dc:e7:98:e8:54:
97:cc:0d:18:aa:c5:7d:14:80:37:9a:e5:11:47:c4:f8:18:9d:
b8:5f:d5:13:49:1c:99:14:d1:34:c4:36:05:36:2e:27:fa:f6:
60:9b:33:bc:eb:fe:e1:b0:fb:d8:0d:76:fc:02:22:f1:2c:bb:
79:d2:d4:45:84:37:65:78:64:8b:53:40:e4:4a:37:ca:cb:69:
45:93:67:0a:c5:d8:22:d2:e5:72:54:ab:cd:41:f4:04:df:9c:
f2:09:69:51:3d:f3:f1:21:df:94:1c:78:86:fb:6d:d7:e2:a7:
b2:62:1c:c9:2e:2e:27:07:83:d8:7b:dc:4c:7a:e8:f1:7c:36:
9d:0e:be:3f:82:55:53:0b:e6:6f:79:5a:3c:db:b4:90:f5:2a:
b1:4c:65:07:de:6f:0f:c2:bc:e2:3c:cb:f3:4e:9a:e2:bf:6a:
ad:28:69:68:ce:9f:9d:5f:b3:b5:16:26:13:80:31:58:18:e0:
c3:36:39:4a:08:ac:18:d3:df:f7:9d:92:af:70:b7:c1:32:2b:
75:20:8a:10:96:fc:9f:a4:a3:ec:69:5a:cb:65:26:7f:52:a3:
e5:a3:92:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:58:21 2026 by rpki-client