Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
File: OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft (raw, json)
Hash identifier: 4/MO2BkpNiN95IZFJ4k1cCliviu7WgpGTWAUD5di+NY=
Subject key identifier: 44:3A:C2:A8:68:F4:26:D7:31:28:6A:E2:59:2E:D4:E9:AE:EA:D1:E1
Authority key identifier: 3A:EA:4D:AE:3E:99:4F:D9:FE:7B:E7:43:3E:42:F9:6F:67:15:93:78
Certificate issuer: /CN=3aea4dae3e994fd9fe7be7433e42f96f67159378
Certificate serial: 019F927EE33D93DE74794CAFADE149CC8E52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
Manifest number: 11B6
Signing time: Fri 24 Jul 2026 05:00:16 +0000
Manifest this update: Fri 24 Jul 2026 05:00:16 +0000
Manifest next update: Sat 25 Jul 2026 05:00:16 +0000
Files and hashes: 1: OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl (hash: FmUhv0RaVfGv1A9uZNFQaQFV9VjtxnWKvkGGKpv1fb8=)
2: ZO-qcdvK7BzzeLOkMttoxYvxl4E.roa (hash: m6/e1cwgXC/4hA09rZcRl2fyViBKxPhi7mCSBLfbjRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7e:e3:3d:93:de:74:79:4c:af:ad:e1:49:cc:8e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aea4dae3e994fd9fe7be7433e42f96f67159378
Validity
Not Before: Jul 24 05:00:16 2026 GMT
Not After : Jul 25 05:00:16 2026 GMT
Subject: CN=443ac2a868f426d731286ae2592ed4e9aeead1e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e0:68:4d:85:1b:6b:ad:1c:f1:39:28:17:77:
89:e4:38:75:7c:84:35:c3:2e:d5:b1:8e:ca:3a:1e:
f8:09:56:42:61:01:e8:98:1f:62:0b:fc:af:2e:fc:
73:88:34:bc:8b:cd:52:81:8c:88:14:74:6c:f5:03:
f7:26:dd:54:c4:f2:79:0d:0e:93:97:14:90:b3:a0:
5a:a8:3b:fa:fc:4b:e5:d3:39:0b:26:13:ae:89:10:
c5:ad:e9:48:d2:52:f5:2e:75:33:aa:c4:f2:01:83:
30:66:97:de:3e:d0:32:79:3d:09:08:95:c8:2d:d9:
46:35:88:74:81:7e:72:ea:c2:f2:bb:a3:f4:bf:9f:
e9:bf:47:42:45:03:9b:21:ac:78:69:da:75:2d:1e:
7c:ea:6f:e9:6b:c3:c8:71:6f:c1:af:ac:96:59:4d:
9d:1f:5b:63:80:9d:d7:de:f8:06:ae:91:9b:91:9d:
c3:90:9b:52:f2:77:e3:0a:4e:5f:66:b5:70:3c:7d:
98:8b:71:5c:73:34:b9:cf:5b:1f:63:74:1f:d0:49:
a7:5b:e1:22:70:0c:ad:0f:65:2e:e8:ae:ba:e3:cc:
c9:5c:cb:84:50:38:61:f4:e0:94:3d:bc:ca:e3:3d:
7d:10:c6:19:88:1e:2b:e7:e6:e6:2a:0f:18:2c:7e:
56:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:3A:C2:A8:68:F4:26:D7:31:28:6A:E2:59:2E:D4:E9:AE:EA:D1:E1
X509v3 Authority Key Identifier:
keyid:3A:EA:4D:AE:3E:99:4F:D9:FE:7B:E7:43:3E:42:F9:6F:67:15:93:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:8a:57:a8:08:f4:cb:f3:80:e6:fc:ea:b2:08:02:8c:59:f1:
0c:c8:06:e6:0c:f6:0c:1c:37:9c:23:08:05:18:2f:e1:a9:8c:
f5:e1:2f:ef:ce:1e:1b:89:0c:53:34:84:c6:27:fa:80:a9:97:
a1:c6:81:31:26:4d:c9:57:f6:0d:0c:66:d8:54:29:45:f6:f8:
bf:e6:72:f6:b0:f1:fb:ff:db:5a:f3:9a:d6:23:be:37:6c:0a:
7d:a0:ba:1c:53:52:a3:06:4d:37:b9:51:be:ff:8e:c7:0e:38:
78:e7:d7:bc:f3:a1:7e:2f:78:96:d9:0b:f1:cd:c2:26:ea:28:
fb:d7:7d:c4:5c:5c:1a:1c:56:89:ca:05:80:4e:2f:1f:26:28:
e6:da:3b:33:33:21:a8:5b:51:bc:0a:ee:19:01:7e:e0:a0:ad:
11:b6:94:bc:1f:ec:a7:d7:25:52:06:89:80:2e:0e:21:98:3d:
2c:02:40:44:f1:f6:76:81:f8:4f:a7:7a:c3:33:3c:fd:65:ff:
2d:da:1e:f5:4f:20:fa:b7:63:d4:67:56:43:ef:d6:67:eb:b3:
43:6b:6d:4d:51:9c:46:3a:f7:5c:82:ef:c7:11:d5:65:6f:66:
c7:17:36:f5:d2:ee:d4:65:83:f8:bc:c0:7e:41:8a:c0:91:a6:
45:f5:b2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:39:54 2026 by rpki-client