Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
File: OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft (raw, json)
Hash identifier: ke+0Np6AuhR6BHs+R/7JRmiPaKzKthbTzn4toQF+JLo=
Subject key identifier: 85:F6:06:CB:EF:E9:76:E9:00:B5:CB:2B:41:6B:E6:6E:13:55:EF:73
Authority key identifier: 3A:EA:4D:AE:3E:99:4F:D9:FE:7B:E7:43:3E:42:F9:6F:67:15:93:78
Certificate issuer: /CN=3aea4dae3e994fd9fe7be7433e42f96f67159378
Certificate serial: 01A0D0488DFAAAF8D5F28A1C4D6E6AA56364
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
Manifest number: 125B
Signing time: Wed 23 Sep 2026 22:00:10 +0000
Manifest this update: Wed 23 Sep 2026 22:00:10 +0000
Manifest next update: Thu 24 Sep 2026 22:00:10 +0000
Files and hashes: 1: OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl (hash: 5zaRw+91pUMc6pANWnoi91s9lOvDQTdXNwxSDuCueeY=)
2: ZO-qcdvK7BzzeLOkMttoxYvxl4E.roa (hash: m6/e1cwgXC/4hA09rZcRl2fyViBKxPhi7mCSBLfbjRs=)
3: mdi8isJF9ZQ0I7Jg6Yr0cVHa8Ic.asa (hash: 54Ei/fKavstT42M7Nu3Fn+AfVQtGsu2BCI644ANc1Xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:48:8d:fa:aa:f8:d5:f2:8a:1c:4d:6e:6a:a5:63:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aea4dae3e994fd9fe7be7433e42f96f67159378
Validity
Not Before: Sep 23 22:00:10 2026 GMT
Not After : Sep 24 22:00:10 2026 GMT
Subject: CN=85f606cbefe976e900b5cb2b416be66e1355ef73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5e:09:d1:f8:3e:29:f3:2d:94:c9:96:21:2f:
fb:59:3e:f3:1d:7f:6a:a6:26:db:62:46:ab:02:eb:
90:89:1d:0d:ad:6d:39:a3:68:75:e9:39:59:2d:a5:
8c:7c:c1:21:16:0e:c6:b5:34:43:04:ac:fd:5d:8a:
c0:38:81:32:5d:21:d1:df:21:2e:d5:80:e9:14:c0:
06:03:92:28:9b:35:60:7e:8b:7a:c5:2d:ab:dd:e6:
d5:c8:6d:63:af:33:b8:f2:41:13:0e:f5:2d:a2:61:
5f:c8:ea:2d:18:76:36:67:7d:2f:ec:b4:03:5d:d9:
cd:fc:e4:48:46:08:b0:bd:6b:17:c1:fc:b1:c5:ee:
fb:d7:50:f9:b3:ee:c5:95:fd:05:24:de:ff:73:4a:
6c:5d:92:09:83:98:19:11:98:ad:80:23:7b:0f:8d:
8b:99:8a:35:fb:73:a8:d6:64:b2:52:5d:e6:37:6b:
10:2f:65:bc:b5:3c:25:be:cf:4b:f4:dc:2e:a4:72:
78:39:98:9c:9d:1c:d0:ac:6e:71:b4:12:89:ed:cc:
97:d0:2e:9b:95:31:d5:fc:9c:55:b8:f5:c8:43:28:
4d:ff:75:bf:e1:e9:55:a4:3f:59:90:79:86:bc:b6:
30:bf:f8:8e:2f:81:72:ec:1c:7e:30:c6:11:41:63:
c1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F6:06:CB:EF:E9:76:E9:00:B5:CB:2B:41:6B:E6:6E:13:55:EF:73
X509v3 Authority Key Identifier:
keyid:3A:EA:4D:AE:3E:99:4F:D9:FE:7B:E7:43:3E:42:F9:6F:67:15:93:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:c1:4d:90:56:bf:0f:ce:a9:e0:69:38:0d:a8:40:a4:64:9d:
2e:c7:27:c5:2a:39:db:75:85:54:04:dd:c8:97:0c:f6:fe:75:
40:f4:3c:fa:36:11:7b:02:2f:fd:0c:29:a8:25:e1:7a:31:ce:
e5:fc:54:fc:2c:d3:1e:e2:e7:c1:80:fa:05:c2:98:f8:1a:20:
8f:2f:4a:fc:c4:17:7b:83:6a:24:e4:f3:91:85:2d:d3:32:1e:
80:43:68:a4:a5:ac:18:52:4c:fb:8b:2b:d6:92:27:ef:e5:2c:
9a:9a:3b:ed:f2:96:85:c4:bf:40:73:e1:50:05:18:bf:65:27:
22:63:bd:a4:04:92:71:4f:fa:ae:04:2d:8a:c7:d6:24:68:6f:
d4:09:b4:34:26:dc:45:81:f2:bf:be:93:ba:75:d2:30:45:76:
76:17:2a:a6:25:3e:3c:52:02:7a:f5:94:d2:e7:c1:0b:9c:51:
eb:0c:5f:f3:20:45:5f:bf:05:88:6a:5e:58:ca:89:eb:ef:47:
ee:2b:e7:62:7d:7c:d9:e7:c9:a7:e5:eb:67:2e:27:f7:05:46:
39:a8:a7:61:0e:f5:f7:36:1f:de:30:1f:1a:92:c8:2f:77:03:
ec:81:a0:40:f9:8b:f1:19:b9:ac:68:9b:e7:0a:ae:3e:9e:80:
ed:68:b3:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:12:39 2026 by rpki-client