Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
File: oej-6X2jZbZICCGxi-35_CNVOCY.mft (raw, json)
Hash identifier: uGx+LKPEWtkPL66cYNLH1C4dkUORCBAX+5MWXZXpKHw=
Subject key identifier: 15:4D:FA:74:AC:C1:C9:46:97:41:91:84:FD:AD:02:FF:FA:51:3E:95
Authority key identifier: A1:E8:FE:E9:7D:A3:65:B6:48:08:21:B1:8B:ED:F9:FC:23:55:38:26
Certificate issuer: /CN=a1e8fee97da365b6480821b18bedf9fc23553826
Certificate serial: 019EE88DF832AEF28DF0ED84945CCA024B19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
Manifest number: 1055
Signing time: Sun 21 Jun 2026 05:01:18 +0000
Manifest this update: Sun 21 Jun 2026 05:01:18 +0000
Manifest next update: Mon 22 Jun 2026 05:01:18 +0000
Files and hashes: 1: jRCRVJYAGBXYgrtW6iJFIwl-3T4.roa (hash: zd3vqx8SZ7kQ7l/rKEA4mZdGGLkEyNUj7EHXRniiHWs=)
2: oej-6X2jZbZICCGxi-35_CNVOCY.crl (hash: Oqp/TpeiS8HB61cHoD321SYmRXY76ZvsJ1OZwZH0Yug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Jun 2026 21:52:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e8:8d:f8:32:ae:f2:8d:f0:ed:84:94:5c:ca:02:4b:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1e8fee97da365b6480821b18bedf9fc23553826
Validity
Not Before: Jun 21 05:01:18 2026 GMT
Not After : Jun 22 05:01:18 2026 GMT
Subject: CN=154dfa74acc1c94697419184fdad02fffa513e95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:56:6a:e6:74:2b:55:f1:3f:94:09:f8:7d:a8:
30:8a:ee:22:66:56:5b:c3:c2:79:88:93:95:33:61:
1b:f1:06:48:97:b6:7a:fd:bb:cc:36:fc:65:5a:80:
72:89:25:0d:dd:91:1e:f0:de:4a:43:04:c7:5f:15:
05:14:87:42:16:80:88:7f:35:85:7c:ae:85:4c:c7:
aa:c9:18:53:65:ac:55:45:5c:e3:41:34:85:9e:8b:
3a:ac:00:e3:3f:7e:cc:13:7b:a0:5f:99:14:86:47:
98:64:4c:5d:b5:a8:62:37:5f:f1:cf:a5:d1:9a:3d:
08:ad:a1:f4:b1:b8:31:5c:a4:c1:d3:4b:03:a1:5d:
68:dd:67:95:48:8e:25:09:58:89:b1:ef:56:a3:1a:
c5:94:3d:f3:3a:ff:58:6e:7a:71:57:de:68:56:a7:
35:7e:35:57:5e:f4:80:d3:25:07:56:b9:80:f5:a8:
6d:6c:30:b5:57:5e:fe:de:45:99:c6:0c:f8:40:52:
89:11:c0:e3:83:87:de:7a:b2:e7:65:c7:31:3a:68:
12:35:91:5d:99:e6:c8:3a:66:95:fa:83:a5:55:d3:
32:5c:e6:01:28:d0:32:ed:63:f9:6b:08:3c:6f:aa:
04:f5:d1:6f:99:64:07:cc:26:b4:b0:88:d8:f1:52:
17:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4D:FA:74:AC:C1:C9:46:97:41:91:84:FD:AD:02:FF:FA:51:3E:95
X509v3 Authority Key Identifier:
keyid:A1:E8:FE:E9:7D:A3:65:B6:48:08:21:B1:8B:ED:F9:FC:23:55:38:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ce:3b:20:d0:56:d6:2b:8a:c5:62:b3:4e:80:24:bf:24:a0:
e6:fd:d0:b4:c4:c1:34:e7:2b:f3:f6:2d:d5:e5:11:cc:a0:e6:
11:50:25:52:57:2a:93:78:5e:c6:37:fe:81:ce:b8:3c:52:48:
d0:9e:c9:67:ab:0c:5e:33:99:ee:69:87:31:2c:01:f5:8e:2e:
b8:3c:91:24:b6:8f:c4:52:b4:9c:26:75:b6:57:cb:56:81:8c:
18:f4:ed:37:1e:79:fa:52:86:fa:4a:a8:e6:88:0d:23:3b:cb:
ab:0e:95:37:33:1e:1b:da:d6:cb:4f:dd:8d:4e:62:0e:00:51:
e4:bc:f7:2d:d0:67:d0:3b:0f:07:ec:3e:a2:35:4d:1d:35:40:
36:96:97:1c:cc:c1:45:20:1d:cc:d5:8a:f9:f7:c6:5b:df:fc:
fc:61:67:b8:a3:e9:e9:71:dd:74:88:b1:b8:98:d7:8d:ec:b6:
dd:8e:48:3e:b1:9b:35:b4:be:92:e4:10:9a:c0:ad:04:87:0d:
eb:40:bf:89:ce:9b:a7:a6:91:6a:09:43:69:34:f9:56:f4:f4:
77:fa:cc:13:e4:49:aa:8c:bc:76:56:fc:e8:ee:16:d2:d3:7e:
13:58:10:4b:1e:5f:b0:a3:9e:05:de:6d:13:99:da:c1:fc:9d:
ac:09:c2:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 08:20:05 2026 by rpki-client