Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
File: OeQFnlGefK0FNr1U2RvJeHVkTNs.mft (raw, json)
Hash identifier: h1KF7Byk/cQu9fpI1Po5A6UUqS6WHYK1R0taS0ilR28=
Subject key identifier: 2B:64:2A:B5:AF:4D:A3:4C:A7:C1:87:9E:69:16:62:E5:59:31:C1:5B
Authority key identifier: 39:E4:05:9E:51:9E:7C:AD:05:36:BD:54:D9:1B:C9:78:75:64:4C:DB
Certificate issuer: /CN=39e4059e519e7cad0536bd54d91bc97875644cdb
Certificate serial: 019D375263A500C240051B9BD54399C3D778
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
Manifest number: 181F
Signing time: Sun 29 Mar 2026 02:00:39 +0000
Manifest this update: Sun 29 Mar 2026 02:00:39 +0000
Manifest next update: Mon 30 Mar 2026 02:00:39 +0000
Files and hashes: 1: OeQFnlGefK0FNr1U2RvJeHVkTNs.crl (hash: qtJeqB1+0R9q8bTvy2BiBJCqPmWxKgTluXjWuk8W/Ao=)
2: qOowaPdAtIoEeA8UwWKl0WeOo_E.roa (hash: qf6D/9fKMsy5vRBqrt+Mp9eken3A/z5tlK1SkhHLKO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:63:a5:00:c2:40:05:1b:9b:d5:43:99:c3:d7:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39e4059e519e7cad0536bd54d91bc97875644cdb
Validity
Not Before: Mar 29 02:00:39 2026 GMT
Not After : Mar 30 02:00:39 2026 GMT
Subject: CN=2b642ab5af4da34ca7c1879e691662e55931c15b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:07:1a:af:e3:9b:3c:4a:36:3d:45:24:e2:82:
ce:c2:e8:b6:84:67:b3:5e:50:22:73:df:c6:ac:47:
82:7c:ae:be:60:73:a2:8f:a4:87:59:ae:e0:49:38:
30:b7:de:fb:53:83:62:37:95:db:52:21:6b:11:28:
1b:85:60:34:e8:ee:36:a0:4e:e4:d0:ba:c4:a7:12:
8c:7c:71:4f:50:89:bf:24:01:bb:48:34:20:d8:3c:
29:9e:66:7c:4b:56:4c:67:e4:f9:11:30:d5:92:a4:
2c:c0:b6:7a:3c:87:29:17:f2:bd:57:23:eb:68:e9:
71:98:aa:5c:62:2e:0c:88:c4:57:f7:b0:c4:6d:1a:
45:65:84:a5:78:f6:16:de:07:3a:e5:fa:5a:c0:df:
10:46:9e:cd:9a:dd:1d:44:9a:97:17:40:d8:23:ab:
95:ad:e9:a8:6e:73:23:81:c7:0a:a5:ac:37:af:df:
c8:2b:1d:73:59:00:ea:dc:e9:da:bc:62:73:ea:f2:
5d:4f:e4:7f:1f:2a:4c:f8:60:01:0c:ed:35:6a:a3:
a5:60:e4:6e:b4:d1:c5:01:1c:a0:82:26:23:b1:4b:
22:25:f9:5c:7f:77:ef:e7:9f:07:ca:de:1a:63:93:
55:be:d8:cb:6d:74:99:99:aa:2b:73:e6:21:a0:ae:
29:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:64:2A:B5:AF:4D:A3:4C:A7:C1:87:9E:69:16:62:E5:59:31:C1:5B
X509v3 Authority Key Identifier:
keyid:39:E4:05:9E:51:9E:7C:AD:05:36:BD:54:D9:1B:C9:78:75:64:4C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:23:83:5d:a1:a0:ed:c2:23:b8:e1:40:56:55:1f:ee:2a:24:
4a:cf:71:f1:4b:f4:e4:36:cb:b5:04:fd:02:81:9a:42:e0:b8:
03:23:c9:79:2f:d4:43:c0:23:d7:89:1b:46:c0:50:57:80:cf:
5c:0b:86:ae:e3:c6:64:83:34:bd:ea:a7:aa:1a:38:80:32:72:
58:e9:ed:a6:77:90:14:b7:45:81:56:1f:97:ef:a8:8e:db:94:
65:08:d1:8c:77:e4:35:a0:57:59:eb:78:03:49:32:c2:88:2e:
9d:82:cd:34:3c:75:e1:4d:bc:79:37:e2:0a:c0:bd:f2:f3:29:
61:d1:4c:34:05:da:3b:1d:9a:13:3e:62:b0:de:c1:bd:f5:8b:
1e:6a:41:06:5c:cb:bf:e8:8a:d4:18:95:c0:67:a9:2c:49:9b:
a8:d2:05:79:94:dc:2b:23:ea:c8:39:53:96:07:19:43:16:5e:
3c:58:d7:ef:b5:32:f8:0b:58:ac:d2:db:fb:af:29:96:96:91:
6b:90:e5:36:bc:6d:3b:fb:ca:8f:74:5a:3a:24:b8:40:26:1f:
9a:46:f0:f8:7f:39:28:5b:21:e3:76:dd:49:2d:a9:f4:ce:a3:
43:a4:2b:62:a2:07:92:d3:33:05:ce:97:75:71:82:9a:b8:eb:
1a:56:58:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UmOlAMJABRub1UOZw9d4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5ZTQwNTllNTE5ZTdjYWQwNTM2YmQ1NGQ5MWJjOTc4NzU2
NDRjZGIwHhcNMjYwMzI5MDIwMDM5WhcNMjYwMzMwMDIwMDM5WjAzMTEwLwYDVQQD
EygyYjY0MmFiNWFmNGRhMzRjYTdjMTg3OWU2OTE2NjJlNTU5MzFjMTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQcar+ObPEo2PUUk4oLOwui2hGez
XlAic9/GrEeCfK6+YHOij6SHWa7gSTgwt977U4NiN5XbUiFrESgbhWA06O42oE7k
0LrEpxKMfHFPUIm/JAG7SDQg2DwpnmZ8S1ZMZ+T5ETDVkqQswLZ6PIcpF/K9VyPr
aOlxmKpcYi4MiMRX97DEbRpFZYSlePYW3gc65fpawN8QRp7Nmt0dRJqXF0DYI6uV
remobnMjgccKpaw3r9/IKx1zWQDq3OnavGJz6vJdT+R/HypM+GABDO01aqOlYORu
tNHFARyggiYjsUsiJflcf3fv558Hyt4aY5NVvtjLbXSZmaorc+YhoK4pUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCtkKrWvTaNMp8GHnmkWYuVZMcFbMB8GA1UdIwQY
MBaAFDnkBZ5RnnytBTa9VNkbyXh1ZEzbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2VRRm5sR2VmSzBGTnIxVTJSdkplSFZrVE5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9lZjkyMjEtYzM1NC00ZTY3LWEzMmYt
ODRlNTk2YTNjMTIxLzEvT2VRRm5sR2VmSzBGTnIxVTJSdkplSFZrVE5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9lZjkyMjEtYzM1NC00ZTY3LWEzMmYtODRlNTk2YTNjMTIx
LzEvT2VRRm5sR2VmSzBGTnIxVTJSdkplSFZrVE5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAACODXaGg
7cIjuOFAVlUf7iokSs9x8Uv05DbLtQT9AoGaQuC4AyPJeS/UQ8Aj14kbRsBQV4DP
XAuGruPGZIM0veqnqho4gDJyWOntpneQFLdFgVYfl++ojtuUZQjRjHfkNaBXWet4
A0kywogunYLNNDx14U28eTfiCsC98vMpYdFMNAXaOx2aEz5isN7BvfWLHmpBBlzL
v+iK1BiVwGepLEmbqNIFeZTcKyPqyDlTlgcZQxZePFjX77Uy+AtYrNLb+68plpaR
a5DlNrxtO/vKj3RaOiS4QCYfmkbw+H85KFsh43bdSS2p9M6jQ6QrYqIHktMzBc6X
dXGCmrjrGlZYuQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:57 2026 by rpki-client