Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
File: OUKesL2HA74uXwrMwoG_IhYEsM4.mft (raw, json)
Hash identifier: QKrn4BToO2nt78/fiolehp959DX3sugwGXRqwk1CQVQ=
Subject key identifier: 42:DC:AB:9D:CF:5D:96:17:8F:6E:E9:38:B9:8E:99:35:16:38:F4:01
Authority key identifier: 39:42:9E:B0:BD:87:03:BE:2E:5F:0A:CC:C2:81:BF:22:16:04:B0:CE
Certificate issuer: /CN=39429eb0bd8703be2e5f0accc281bf221604b0ce
Certificate serial: 019D299766E2322CE3AB9DF3EC6017FE2F91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
Manifest number: 09A4
Signing time: Thu 26 Mar 2026 10:01:21 +0000
Manifest this update: Thu 26 Mar 2026 10:01:21 +0000
Manifest next update: Fri 27 Mar 2026 10:01:21 +0000
Files and hashes: 1: OUKesL2HA74uXwrMwoG_IhYEsM4.crl (hash: Oz4xmfUPjV1UWXpt5IVfL8TlsdnORRuZq9XD24ZSpQ4=)
2: futCv-J21MxYYna1NlT0XMLEUxQ.roa (hash: Nuw/WTHENdY0hVuqEP9gOdFLaQ350WDyvFQ78Xtrdks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:66:e2:32:2c:e3:ab:9d:f3:ec:60:17:fe:2f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39429eb0bd8703be2e5f0accc281bf221604b0ce
Validity
Not Before: Mar 26 10:01:21 2026 GMT
Not After : Mar 27 10:01:21 2026 GMT
Subject: CN=42dcab9dcf5d96178f6ee938b98e99351638f401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:27:17:ba:02:13:79:e0:9b:a2:9e:62:81:3a:
6f:70:c6:a4:05:6d:41:4f:64:c1:cf:36:a9:01:4b:
f3:62:3f:07:0e:9f:70:d1:2e:ba:62:cb:ba:a0:20:
21:17:ed:7e:de:03:96:69:b1:46:7e:88:b4:f4:59:
c1:65:ab:0b:83:c1:bb:96:bf:07:47:50:86:36:a1:
22:31:ab:8b:51:99:1e:92:60:80:9d:d9:9d:30:08:
c8:7d:10:81:4c:98:e4:db:fc:6e:59:8a:5c:48:cb:
4a:75:9a:d9:15:30:56:90:8c:1f:21:6e:79:65:92:
cf:94:4b:dc:d8:76:2d:50:9c:dc:58:47:25:e5:ed:
81:cd:56:cc:61:af:79:48:e6:c6:5f:50:c9:58:59:
be:94:4b:ff:f6:23:bc:92:22:fb:0e:7a:7b:4f:18:
51:e2:88:33:4d:97:36:b9:1c:b9:ef:d1:92:8d:3a:
3d:21:70:0d:95:26:d9:91:3e:d2:66:04:a1:73:f5:
a5:91:ab:15:e9:6c:31:8b:7f:db:90:33:61:e9:ef:
b3:ff:75:a8:72:51:d5:ec:7c:71:90:5a:9e:b0:cb:
64:68:df:ee:c7:c6:f2:43:53:70:c9:dc:4e:4c:2f:
ff:b2:cb:79:b1:7f:b6:f1:50:ab:02:f8:c0:61:52:
53:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:DC:AB:9D:CF:5D:96:17:8F:6E:E9:38:B9:8E:99:35:16:38:F4:01
X509v3 Authority Key Identifier:
keyid:39:42:9E:B0:BD:87:03:BE:2E:5F:0A:CC:C2:81:BF:22:16:04:B0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:cd:6e:d2:39:e1:3b:8c:02:22:94:09:ea:83:ac:13:0a:44:
b3:b8:fe:f1:9a:48:e0:5a:6a:c5:ea:d5:e5:6d:f4:5a:e4:32:
24:4a:d9:4c:70:a6:fa:b7:2c:9e:94:a6:2e:25:29:2e:67:49:
44:bb:62:41:77:12:f1:b1:c0:2c:20:0a:d5:3e:aa:3e:8c:ea:
c1:af:39:50:4d:b0:ac:68:32:2d:3c:6d:fe:c6:84:ab:df:75:
82:41:3a:9c:24:c6:2b:e2:62:af:9d:c9:49:48:b0:76:78:55:
02:c5:97:fb:0a:70:1d:c5:ed:5f:6e:7a:d8:db:bb:5c:f0:f8:
56:0a:b6:dd:6b:37:ac:39:d7:ed:5b:85:13:de:1a:bc:a5:72:
84:a0:e4:d6:d6:88:08:a5:35:64:5d:89:fa:ed:ff:15:88:b1:
3c:e4:3f:00:b7:ca:17:15:0a:bc:29:71:e4:1f:79:5b:3f:28:
f3:12:04:2f:0f:21:68:4b:3a:2b:fc:da:1b:af:86:17:46:c4:
5b:fc:9e:f5:38:1e:eb:14:0a:46:88:fe:c9:3e:02:49:1d:fd:
7b:e4:a1:f3:53:62:43:7a:2b:f9:42:32:1e:a8:08:65:b7:b2:
05:9e:27:55:cc:54:25:5c:39:59:fa:93:47:fc:74:a0:a9:de:
0f:42:7f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:01:12 2026 by rpki-client