Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
File: OeQFnlGefK0FNr1U2RvJeHVkTNs.mft (raw, json)
Hash identifier: I/NSoXrw/B1Sy6MxVs0+JUnRiWgOOIcxS/ON6dZ6H/w=
Subject key identifier: A4:8E:75:B9:D1:EC:64:23:6D:3D:26:28:41:98:83:80:24:9E:32:1C
Authority key identifier: 39:E4:05:9E:51:9E:7C:AD:05:36:BD:54:D9:1B:C9:78:75:64:4C:DB
Certificate issuer: /CN=39e4059e519e7cad0536bd54d91bc97875644cdb
Certificate serial: 019E3261805DC665D86C0B5E8142334D6582
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
Manifest number: 18A1
Signing time: Sat 16 May 2026 20:01:51 +0000
Manifest this update: Sat 16 May 2026 20:01:51 +0000
Manifest next update: Sun 17 May 2026 20:01:51 +0000
Files and hashes: 1: OeQFnlGefK0FNr1U2RvJeHVkTNs.crl (hash: 477gxeHStqjLHUy1Jb743U6miE3qDyliBSELviGL0rw=)
2: qOowaPdAtIoEeA8UwWKl0WeOo_E.roa (hash: qf6D/9fKMsy5vRBqrt+Mp9eken3A/z5tlK1SkhHLKO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:61:80:5d:c6:65:d8:6c:0b:5e:81:42:33:4d:65:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39e4059e519e7cad0536bd54d91bc97875644cdb
Validity
Not Before: May 16 20:01:51 2026 GMT
Not After : May 17 20:01:51 2026 GMT
Subject: CN=a48e75b9d1ec64236d3d262841988380249e321c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:04:f2:d1:8f:86:08:f9:96:0f:2f:a2:d4:be:
63:95:11:72:e4:3c:db:d1:ac:65:9a:3f:79:68:96:
e6:ea:87:01:c4:82:35:6c:36:08:23:e7:84:91:82:
d2:41:11:f6:b9:21:e9:3e:1a:f1:5f:55:dd:f8:eb:
7f:5d:77:96:bc:6a:2a:9a:88:68:10:cb:0f:98:3c:
b4:45:c6:64:ce:81:22:fa:78:19:f3:c4:f9:47:0b:
fa:fc:3d:f2:3d:5f:ec:59:c8:f3:ad:88:cf:63:93:
c1:be:31:80:3c:84:e8:ec:bf:1d:09:15:78:44:15:
2d:82:8a:9d:aa:3a:2e:78:a4:a8:9c:4d:20:d0:13:
19:4c:be:ab:6e:73:48:66:8a:13:8e:df:8c:af:5f:
ab:d2:ca:d4:05:7a:d0:cb:90:2f:bf:3e:02:6a:44:
3d:4c:ed:87:37:a1:6c:ac:65:2a:ef:36:8b:8f:29:
ee:7b:d9:e5:11:03:70:a8:e4:ab:74:a7:02:8e:a9:
dc:87:39:ee:2d:b0:0f:df:e0:97:d0:19:07:24:c0:
84:4a:ad:55:84:20:8e:4e:b9:73:86:51:4a:96:46:
9c:5f:09:cf:b7:51:80:ff:81:99:20:6d:4b:21:eb:
b1:0c:0f:d2:3e:6a:ae:e7:b4:92:18:a4:7e:21:8f:
93:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:8E:75:B9:D1:EC:64:23:6D:3D:26:28:41:98:83:80:24:9E:32:1C
X509v3 Authority Key Identifier:
keyid:39:E4:05:9E:51:9E:7C:AD:05:36:BD:54:D9:1B:C9:78:75:64:4C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:e3:96:21:d0:b9:52:89:9c:9c:22:ad:c1:a2:b1:6c:81:18:
e3:1f:1a:8f:c1:3b:e2:be:b5:b8:8d:0d:a5:fc:a8:68:c2:26:
47:d4:5e:98:b0:b0:19:b2:10:49:08:11:57:0d:73:68:d5:79:
9c:86:19:43:7a:83:b7:65:b5:bf:d2:38:84:1c:91:3f:b8:23:
d7:45:8f:f8:a3:ff:d4:1d:3d:6d:65:39:89:06:8b:6c:20:c0:
93:44:01:3a:62:f5:20:77:f5:1c:76:42:65:6e:0f:c7:b0:c3:
d9:50:6e:dd:8f:49:15:e7:c2:48:fd:e6:c4:9e:f3:90:0b:49:
2a:5a:35:a5:2c:26:ac:f8:78:af:3e:9e:8a:ae:4b:c3:54:8e:
af:51:f1:a9:ca:35:41:7f:3b:75:ab:0f:8e:d3:08:b3:e2:36:
e1:77:c4:40:0e:72:31:88:48:51:92:8b:01:fa:d1:e6:81:f2:
4c:cf:de:6a:ce:02:db:e3:92:8a:da:ce:21:e7:33:b7:83:1f:
f9:64:52:e4:d7:6f:18:16:2f:47:d5:c3:63:b5:d9:eb:f3:24:
a7:36:f3:57:69:f7:98:aa:26:c7:3a:6a:6a:63:84:5c:3a:14:
40:56:d4:0d:99:39:98:a6:b3:30:19:61:db:3c:4b:50:78:00:
65:ae:04:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:01:01 2026 by rpki-client