Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
File: OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft (raw, json)
Hash identifier: Ra2mM21j3RwPJRWt8AfHcKlE7/dsj2Lw1tz21pHe3zY=
Subject key identifier: 36:DC:10:18:4F:32:E1:9B:0E:AF:7B:D8:C0:E3:63:08:26:9B:85:DE
Authority key identifier: 3A:EA:4D:AE:3E:99:4F:D9:FE:7B:E7:43:3E:42:F9:6F:67:15:93:78
Certificate issuer: /CN=3aea4dae3e994fd9fe7be7433e42f96f67159378
Certificate serial: 019D2696444056D32AF43F858CB3F040EEE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
Manifest number: 1075
Signing time: Wed 25 Mar 2026 20:01:15 +0000
Manifest this update: Wed 25 Mar 2026 20:01:15 +0000
Manifest next update: Thu 26 Mar 2026 20:01:15 +0000
Files and hashes: 1: OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl (hash: uqhdJ27cueCMeqDce7myuinG+tZWAhW/biQA9Ah5tJA=)
2: ZO-qcdvK7BzzeLOkMttoxYvxl4E.roa (hash: m6/e1cwgXC/4hA09rZcRl2fyViBKxPhi7mCSBLfbjRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:44:40:56:d3:2a:f4:3f:85:8c:b3:f0:40:ee:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aea4dae3e994fd9fe7be7433e42f96f67159378
Validity
Not Before: Mar 25 20:01:15 2026 GMT
Not After : Mar 26 20:01:15 2026 GMT
Subject: CN=36dc10184f32e19b0eaf7bd8c0e36308269b85de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7a:36:8f:1c:93:bf:89:cb:bf:b7:28:db:12:
35:fa:98:c8:45:c6:0d:b5:7e:a0:1b:b1:09:17:84:
bc:50:94:b6:5d:fc:07:91:cc:10:fb:75:5c:74:c8:
f4:19:3e:27:e3:01:dd:ee:d8:02:66:05:17:aa:b1:
79:1e:a7:e4:90:1e:7a:9c:ce:91:70:1e:0b:a6:e9:
8f:8d:8d:4a:6f:51:7d:23:64:ab:9b:c0:d0:c0:cb:
a5:43:af:19:8b:e8:ae:02:88:2c:a5:17:cd:a0:74:
c4:cc:fc:3e:7a:42:e9:ee:e2:9d:61:2b:c2:66:bd:
f5:43:a8:a5:48:b3:dd:85:18:bc:c1:72:4b:09:fa:
75:dd:42:94:86:27:5e:dc:18:c6:44:a7:f1:2b:f2:
a8:95:a5:4c:23:94:c9:da:57:b1:48:6a:44:0e:2f:
40:c0:da:ac:f0:55:f1:cc:63:18:17:f3:8a:3e:62:
c1:1b:34:60:b3:af:e3:2b:0d:1c:a9:5f:6e:37:b3:
74:86:da:0c:52:59:6c:4b:4f:be:51:3a:1a:fa:ff:
94:0f:8c:83:31:f3:17:4a:7f:a4:57:cb:cc:0c:b5:
9a:d2:2a:dc:21:af:02:e7:ba:04:6c:29:b1:4c:70:
d6:fc:57:bf:b4:17:01:34:5c:07:ac:7f:79:28:2d:
35:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:DC:10:18:4F:32:E1:9B:0E:AF:7B:D8:C0:E3:63:08:26:9B:85:DE
X509v3 Authority Key Identifier:
keyid:3A:EA:4D:AE:3E:99:4F:D9:FE:7B:E7:43:3E:42:F9:6F:67:15:93:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:22:86:2c:48:ca:00:d7:c3:96:ab:fd:11:ad:6f:a8:d6:8b:
50:21:77:66:6b:9c:4e:10:85:bd:cd:75:a1:cb:40:2e:42:9f:
15:cf:47:9c:5c:0f:34:6f:9a:8d:cb:80:c1:db:a6:40:85:28:
73:68:8d:e6:6c:9c:db:80:4b:7c:ac:30:12:2c:1a:a8:cd:34:
d0:e9:ed:6a:b7:1e:db:35:00:73:61:d0:0d:15:70:87:87:43:
6d:85:b9:96:c3:ca:89:e7:43:eb:2e:10:5a:71:cd:23:90:54:
37:58:3e:be:89:e5:f6:b4:21:69:ed:a4:ab:ff:71:a5:a3:32:
c9:09:c9:1c:99:8b:5d:58:39:82:44:15:a4:b8:ca:21:27:2f:
4b:22:b6:64:91:ba:b2:ae:ed:af:f9:63:02:24:c6:28:15:7c:
e9:b8:14:8d:40:32:94:fa:36:c5:f4:d3:27:74:de:50:63:65:
24:a4:f8:75:81:61:fb:a4:d3:c8:f0:0b:16:db:e0:f0:92:16:
08:b2:bc:96:bd:10:9c:b1:f9:13:82:0e:e2:2d:6a:ae:aa:20:
ff:87:3f:88:b6:c5:62:59:4d:01:9a:94:2f:92:cb:64:a9:e5:
c4:30:ae:85:7f:05:b4:39:8d:4b:69:ad:f4:52:87:44:10:f0:
60:c3:4b:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mlkRAVtMq9D+FjLPwQO7nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZWE0ZGFlM2U5OTRmZDlmZTdiZTc0MzNlNDJmOTZmNjcx
NTkzNzgwHhcNMjYwMzI1MjAwMTE1WhcNMjYwMzI2MjAwMTE1WjAzMTEwLwYDVQQD
EygzNmRjMTAxODRmMzJlMTliMGVhZjdiZDhjMGUzNjMwODI2OWI4NWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtno2jxyTv4nLv7co2xI1+pjIRcYN
tX6gG7EJF4S8UJS2XfwHkcwQ+3VcdMj0GT4n4wHd7tgCZgUXqrF5HqfkkB56nM6R
cB4LpumPjY1Kb1F9I2Srm8DQwMulQ68Zi+iuAogspRfNoHTEzPw+ekLp7uKdYSvC
Zr31Q6ilSLPdhRi8wXJLCfp13UKUhide3BjGRKfxK/KolaVMI5TJ2lexSGpEDi9A
wNqs8FXxzGMYF/OKPmLBGzRgs6/jKw0cqV9uN7N0htoMUllsS0++UToa+v+UD4yD
MfMXSn+kV8vMDLWa0ircIa8C57oEbCmxTHDW/Fe/tBcBNFwHrH95KC01TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDbcEBhPMuGbDq972MDjYwgmm4XeMB8GA1UdIwQY
MBaAFDrqTa4+mU/Z/nvnQz5C+W9nFZN4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3VwTnJqNlpUOW4tZS1kRFBrTDViMmNWazNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zMjU3ZDktM2ZiOC00Y2RmLTk4YWEt
OTNlOTQwM2ViMDE5LzEvT3VwTnJqNlpUOW4tZS1kRFBrTDViMmNWazNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8zMjU3ZDktM2ZiOC00Y2RmLTk4YWEtOTNlOTQwM2ViMDE5
LzEvT3VwTnJqNlpUOW4tZS1kRFBrTDViMmNWazNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVCKGLEjK
ANfDlqv9Ea1vqNaLUCF3ZmucThCFvc11octALkKfFc9HnFwPNG+ajcuAwdumQIUo
c2iN5myc24BLfKwwEiwaqM000Ontarce2zUAc2HQDRVwh4dDbYW5lsPKiedD6y4Q
WnHNI5BUN1g+vonl9rQhae2kq/9xpaMyyQnJHJmLXVg5gkQVpLjKIScvSyK2ZJG6
sq7tr/ljAiTGKBV86bgUjUAylPo2xfTTJ3TeUGNlJKT4dYFh+6TTyPALFtvg8JIW
CLK8lr0QnLH5E4IO4i1qrqog/4c/iLbFYllNAZqUL5LLZKnlxDCuhX8FtDmNS2mt
9FKHRBDwYMNLpw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:13:51 2026 by rpki-client