Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
File: OUKesL2HA74uXwrMwoG_IhYEsM4.mft (raw, json)
Hash identifier: 2ZUzjY3qojSgK94AziYLKIVpMgeeQ6X/JZ6zuPI6718=
Subject key identifier: 68:A9:24:CB:D3:07:64:FC:91:4E:7E:34:D0:BF:50:A8:11:E4:9B:EC
Authority key identifier: 39:42:9E:B0:BD:87:03:BE:2E:5F:0A:CC:C2:81:BF:22:16:04:B0:CE
Certificate issuer: /CN=39429eb0bd8703be2e5f0accc281bf221604b0ce
Certificate serial: 019E1EDA922B1DEE207FF393C558370375A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
Manifest number: 0A23
Signing time: Wed 13 May 2026 01:01:41 +0000
Manifest this update: Wed 13 May 2026 01:01:41 +0000
Manifest next update: Thu 14 May 2026 01:01:41 +0000
Files and hashes: 1: OUKesL2HA74uXwrMwoG_IhYEsM4.crl (hash: 9eLISVYwswCxWdQkOOKQRHVKjE2JoQWjo8zZOfzcUyg=)
2: futCv-J21MxYYna1NlT0XMLEUxQ.roa (hash: Nuw/WTHENdY0hVuqEP9gOdFLaQ350WDyvFQ78Xtrdks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:92:2b:1d:ee:20:7f:f3:93:c5:58:37:03:75:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39429eb0bd8703be2e5f0accc281bf221604b0ce
Validity
Not Before: May 13 01:01:41 2026 GMT
Not After : May 14 01:01:41 2026 GMT
Subject: CN=68a924cbd30764fc914e7e34d0bf50a811e49bec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:99:20:20:58:30:a4:1c:9b:43:60:2a:13:be:
63:13:d4:2f:42:dd:95:37:6b:9f:fb:24:6a:be:89:
72:31:67:29:71:53:6b:1b:c7:1c:45:63:97:be:22:
0a:46:04:f9:04:51:c2:18:7a:1c:f2:f4:0f:47:4c:
96:76:e0:af:a4:f8:69:60:9a:14:a2:5b:35:96:cc:
05:7a:50:c3:06:84:06:a3:e7:11:6c:d9:ec:02:bd:
30:6b:4d:3f:2a:c1:a1:b5:b0:98:96:8d:51:69:a5:
1c:da:74:ec:12:aa:00:b0:5a:ee:cd:06:ce:a7:8d:
ff:2d:76:4e:91:98:c9:03:71:35:3d:8e:08:06:ca:
64:e5:37:f0:62:c9:ac:bb:29:64:6b:47:ac:91:cd:
38:e9:fc:46:ed:a4:d5:d4:bf:a1:8a:20:cd:5e:e2:
ef:11:d2:64:60:19:d4:ce:ad:47:6d:7c:b2:fc:3f:
7b:6f:66:aa:12:3d:fb:74:9f:94:81:e0:75:be:d4:
51:c8:61:7d:50:7c:cc:38:5c:95:71:73:92:4f:22:
23:24:a4:b6:8a:2c:6f:4a:33:36:fa:3b:8b:a6:93:
25:d3:9a:0b:74:88:76:12:23:47:6c:2e:fb:34:b6:
5c:e3:a0:e4:6a:ae:97:2a:2e:9d:3a:cb:b7:f5:ea:
90:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A9:24:CB:D3:07:64:FC:91:4E:7E:34:D0:BF:50:A8:11:E4:9B:EC
X509v3 Authority Key Identifier:
keyid:39:42:9E:B0:BD:87:03:BE:2E:5F:0A:CC:C2:81:BF:22:16:04:B0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:65:62:8a:a8:3f:62:8f:5d:cb:36:fb:eb:5e:3f:35:61:b8:
2a:d9:75:a3:ad:d6:85:93:f5:38:8e:e3:bd:86:93:b2:45:30:
42:43:a7:ae:ce:3c:e2:59:b6:13:91:f5:a4:0c:23:8b:99:53:
33:90:1f:31:1a:48:e8:71:5a:d8:35:b7:fb:c2:7d:3f:eb:bf:
5e:e3:64:91:b1:46:7d:31:7e:69:31:ed:52:98:55:13:75:74:
2a:b3:49:fa:cc:22:60:ef:f0:85:5f:f1:7e:af:7b:8c:d9:d3:
c4:be:3c:d2:cd:f4:3c:31:b3:cc:e5:5a:57:f7:91:04:d1:f3:
6d:28:71:74:7f:80:8a:fb:20:9f:44:61:77:0d:f5:81:57:0c:
8b:7b:28:26:93:1c:39:89:34:51:2f:7f:f1:28:32:27:5c:7e:
dd:23:bc:d3:1a:09:16:b5:8b:59:52:d7:69:fb:74:d5:c4:95:
c1:40:57:b2:d3:5d:8e:d1:96:55:7d:0a:be:4a:4c:5f:50:4c:
97:04:df:40:75:7e:e0:c0:8b:f4:6a:fd:b8:cb:d8:f5:1d:f3:
83:3f:80:93:95:06:0c:51:2d:3d:99:5a:9b:58:e0:79:21:a1:
3f:34:75:b1:f7:41:73:5b:2d:8c:ba:5c:f8:e4:1c:c3:16:ee:
1a:71:bf:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:17:43 2026 by rpki-client