Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
File: OUKesL2HA74uXwrMwoG_IhYEsM4.mft (raw, json)
Hash identifier: PvNeNCMmrdj8UeteT5S6jmFxHoSk1iyufl0GpmYLivY=
Subject key identifier: FA:C7:41:C9:D5:34:75:47:02:81:2C:7B:29:73:68:D8:A4:96:71:95
Authority key identifier: 39:42:9E:B0:BD:87:03:BE:2E:5F:0A:CC:C2:81:BF:22:16:04:B0:CE
Certificate issuer: /CN=39429eb0bd8703be2e5f0accc281bf221604b0ce
Certificate serial: 019F91A36CFFB1F3E03C7C60A1FD4DC901DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
Manifest number: 0AE3
Signing time: Fri 24 Jul 2026 01:00:34 +0000
Manifest this update: Fri 24 Jul 2026 01:00:34 +0000
Manifest next update: Sat 25 Jul 2026 01:00:34 +0000
Files and hashes: 1: OUKesL2HA74uXwrMwoG_IhYEsM4.crl (hash: puH9EZJrlOdsLdjKpNwy1OISrod5DoiL6l4fa22asLI=)
2: futCv-J21MxYYna1NlT0XMLEUxQ.roa (hash: Nuw/WTHENdY0hVuqEP9gOdFLaQ350WDyvFQ78Xtrdks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 01:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:6c:ff:b1:f3:e0:3c:7c:60:a1:fd:4d:c9:01:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39429eb0bd8703be2e5f0accc281bf221604b0ce
Validity
Not Before: Jul 24 01:00:34 2026 GMT
Not After : Jul 25 01:00:34 2026 GMT
Subject: CN=fac741c9d534754702812c7b297368d8a4967195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:bf:9f:3e:fc:95:35:96:ff:26:e4:c2:b1:dc:
99:55:6f:93:11:55:ca:fa:08:66:cf:80:47:51:74:
fd:f8:56:07:74:e7:91:8a:55:93:4d:aa:3e:39:f4:
8f:c2:c4:c9:54:5c:89:45:1d:a8:2c:ab:54:ce:35:
12:dc:dc:0b:dc:80:67:7c:c0:71:7c:68:8a:22:39:
51:1c:27:26:81:e3:17:0c:70:73:88:12:06:68:18:
40:b8:84:66:8f:a4:ff:1a:bb:f2:bc:d6:cb:fc:72:
04:60:a9:96:47:2a:44:49:23:14:21:82:98:e8:33:
24:86:89:27:dc:3a:49:eb:61:c8:e6:74:e4:ac:03:
38:39:fc:31:e3:f0:7e:93:79:d1:7e:8c:71:f7:4a:
40:f3:ee:62:1d:06:db:42:4c:f3:69:f0:63:64:91:
18:ce:57:8c:e2:b5:07:b1:9a:e8:b9:61:76:34:82:
43:9a:fe:9e:25:14:5f:d3:9e:8b:c4:0f:f8:c0:1a:
80:d9:a0:fc:da:c5:02:dc:d3:2f:a3:01:6d:aa:af:
12:23:87:89:de:1a:42:3d:12:4d:bf:99:9c:f2:fc:
7b:19:a8:be:95:bf:da:0d:b2:0a:a8:03:04:c2:94:
0e:7b:16:8b:40:2a:b4:25:4f:79:60:94:aa:40:bb:
e1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C7:41:C9:D5:34:75:47:02:81:2C:7B:29:73:68:D8:A4:96:71:95
X509v3 Authority Key Identifier:
keyid:39:42:9E:B0:BD:87:03:BE:2E:5F:0A:CC:C2:81:BF:22:16:04:B0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:9c:ab:5e:13:b3:44:97:b5:5a:ea:95:07:4e:0e:3b:dd:45:
76:d3:36:94:84:b7:7a:3a:68:47:2e:7d:46:c9:62:90:f9:fa:
db:24:44:b2:eb:fa:1c:7f:a3:69:e9:90:a4:d8:8f:3d:69:42:
1d:18:ed:a0:d0:4a:44:7f:56:d3:45:4a:ff:86:f4:8c:c9:93:
da:59:e9:71:78:5d:e5:3c:51:bc:4d:cb:21:aa:5f:62:5e:9e:
42:3c:fd:7b:45:95:04:50:1a:87:cd:4a:66:97:c3:b4:52:2a:
b2:b4:2f:86:a3:b4:fa:9a:d6:ec:f1:e8:f6:a3:f2:89:39:d4:
fa:3f:ab:ec:17:e4:0b:99:87:50:2d:46:9f:98:be:41:63:0e:
3d:2a:68:ad:c1:b0:40:8d:a7:b1:55:f5:20:5e:18:b2:65:c2:
9e:c9:b9:60:42:b9:f0:f6:0e:2a:c0:2f:73:61:b6:72:35:c4:
55:30:59:dc:e3:64:0c:eb:e3:e4:6a:dd:ef:df:c7:ec:40:8b:
cb:ae:29:cb:99:75:ed:82:70:3e:1b:15:d7:50:8b:a6:94:8d:
9b:d1:2f:14:e6:14:25:80:24:52:8a:77:e4:6d:7a:5f:27:bc:
52:63:23:61:0c:57:86:21:95:7e:e0:23:81:d8:29:d6:5c:38:
10:7e:55:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:07:46 2026 by rpki-client