Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
File: oej-6X2jZbZICCGxi-35_CNVOCY.mft (raw, json)
Hash identifier: 3fNf07E+j8Sut0kfgkXJ5qkhJKMDDAwdm+gbvpmCT8E=
Subject key identifier: 12:04:D1:68:74:57:BC:1B:FF:5E:88:FE:1A:E1:1E:ED:6B:48:FD:13
Authority key identifier: A1:E8:FE:E9:7D:A3:65:B6:48:08:21:B1:8B:ED:F9:FC:23:55:38:26
Certificate issuer: /CN=a1e8fee97da365b6480821b18bedf9fc23553826
Certificate serial: 01A0B61B2692B8A3BB8F8B2C3A18A3BCEFEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
Manifest number: 1144
Signing time: Fri 18 Sep 2026 20:00:27 +0000
Manifest this update: Fri 18 Sep 2026 20:00:27 +0000
Manifest next update: Sat 19 Sep 2026 20:00:27 +0000
Files and hashes: 1: jRCRVJYAGBXYgrtW6iJFIwl-3T4.roa (hash: zd3vqx8SZ7kQ7l/rKEA4mZdGGLkEyNUj7EHXRniiHWs=)
2: oej-6X2jZbZICCGxi-35_CNVOCY.crl (hash: qBystodtNBVTRpxDIkvuFJYU4567qABDlZsSlSYKffg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b6:1b:26:92:b8:a3:bb:8f:8b:2c:3a:18:a3:bc:ef:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1e8fee97da365b6480821b18bedf9fc23553826
Validity
Not Before: Sep 18 20:00:27 2026 GMT
Not After : Sep 19 20:00:27 2026 GMT
Subject: CN=1204d1687457bc1bff5e88fe1ae11eed6b48fd13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b0:8a:c6:24:83:92:be:0b:6f:db:0c:35:c4:
e9:68:fd:02:56:16:59:d8:52:a3:6b:05:fc:4c:8e:
55:a4:82:c2:ed:51:c8:70:77:72:88:28:97:38:9a:
cb:82:44:14:6b:20:76:81:87:64:63:a1:5a:f5:82:
4d:3f:ca:d7:5b:dc:d5:fa:29:80:1a:48:7e:ee:71:
de:7e:f8:fa:72:85:bd:7c:7c:d8:a0:a3:50:9b:f4:
b1:0b:3a:b3:ef:8e:c0:2c:ba:91:a2:85:e3:20:32:
34:7e:a1:a8:c8:c5:59:a9:34:63:91:2a:ab:7e:3f:
a1:65:c6:5f:43:2b:a3:c0:38:53:c6:97:33:b9:b6:
00:4d:81:ca:ab:28:f9:fb:f1:4f:66:c0:17:b1:33:
b9:29:7c:e2:ab:f6:fe:bc:59:11:02:0e:3a:8b:1e:
64:00:f8:7f:da:15:54:4e:b3:62:0a:10:61:25:d6:
ff:e3:81:06:f9:5e:87:c8:ab:10:29:36:63:e7:c8:
70:21:17:5b:65:ea:a8:19:b5:72:76:d9:29:6a:6c:
5f:ea:b8:4d:b8:66:43:9a:74:eb:58:de:61:08:be:
30:52:05:98:b0:7c:71:a8:12:b1:c0:5d:d1:c9:ee:
cf:16:cc:63:04:4e:23:de:32:68:ee:1a:42:f2:67:
df:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:04:D1:68:74:57:BC:1B:FF:5E:88:FE:1A:E1:1E:ED:6B:48:FD:13
X509v3 Authority Key Identifier:
keyid:A1:E8:FE:E9:7D:A3:65:B6:48:08:21:B1:8B:ED:F9:FC:23:55:38:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:a9:11:bb:f0:8e:ec:9d:bb:84:8b:22:a0:fd:0e:8a:73:40:
3e:08:6b:53:72:bb:85:e5:a2:eb:10:27:58:50:e0:35:fa:99:
20:66:15:f7:25:ef:6a:0c:98:5c:9f:ca:ea:00:6e:96:e3:12:
62:1b:83:4d:99:a7:5e:c1:6f:74:1b:c1:76:7d:e4:99:5c:01:
53:4e:d1:d7:bd:2b:ee:c7:34:1d:b9:78:30:a4:a1:42:28:10:
bd:49:6e:f1:85:30:ad:9e:05:e3:d3:31:cb:0c:0c:1f:95:2c:
54:82:a4:d7:67:46:6a:65:8a:1b:9d:15:69:81:c1:1a:be:a3:
0d:f2:64:72:4f:70:b4:5a:01:bb:45:56:91:70:4b:16:a4:bd:
fd:0e:b7:c4:06:f5:ad:91:b5:aa:75:b4:6b:78:bf:16:ac:f8:
02:61:bb:2b:28:d8:2c:df:ba:a4:8e:72:03:0e:0c:34:d9:94:
d4:2d:61:9f:2f:97:a8:b5:7b:09:b3:03:6e:3d:87:71:bd:b4:
92:3b:86:9a:f2:c0:82:ff:5b:52:55:cd:27:7b:14:83:f5:97:
4c:c3:4b:f8:e4:8f:60:ff:d4:2e:82:0c:99:00:72:48:32:6d:
64:f7:a2:2b:c7:03:38:99:f7:db:87:00:7c:07:ea:55:b4:89:
6b:32:e0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 06:05:13 2026 by rpki-client