Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft
File: ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft (raw, json)
Hash identifier: fT8ydFIGJit25baRdfJZDPe7r7jH0Y/Ex53hh3Q2WaA=
Subject key identifier: 81:21:C3:0C:B2:69:F9:92:2E:9A:C5:B0:E5:B3:71:95:C4:39:47:FA
Authority key identifier: A2:E3:C4:EC:7B:36:11:2F:CE:52:1F:5B:EF:28:73:C7:B4:CC:88:D1
Certificate issuer: /CN=a2e3c4ec7b36112fce521f5bef2873c7b4cc88d1
Certificate serial: 01A0CFA3D864DC32B4C6795C577C4C0D20E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft
Manifest number: 1699
Signing time: Wed 23 Sep 2026 19:00:16 +0000
Manifest this update: Wed 23 Sep 2026 19:00:16 +0000
Manifest next update: Thu 24 Sep 2026 19:00:16 +0000
Files and hashes: 1: jOJexkDXSAKU_-HKNDagqEhFQhQ.asa (hash: KeiHn4aRyjzV0pdDSbfv01HgfCa1tMqxOinqb4oolAs=)
2: o9Ss8pZOMtCQFMYmaOI1iiVvKck.roa (hash: yQ2lKEVWTGb2qSCYFb6mTOwCLiNtvAVdOqsP+3WUfe4=)
3: ouPE7Hs2ES_OUh9b7yhzx7TMiNE.crl (hash: R8zpXNpPbhHne8KKzcoQk/Pjcfn1B9hBvahlK3M3s1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a3:d8:64:dc:32:b4:c6:79:5c:57:7c:4c:0d:20:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e3c4ec7b36112fce521f5bef2873c7b4cc88d1
Validity
Not Before: Sep 23 19:00:16 2026 GMT
Not After : Sep 24 19:00:16 2026 GMT
Subject: CN=8121c30cb269f9922e9ac5b0e5b37195c43947fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b5:54:01:3a:ab:b9:95:2f:c2:2c:7d:87:0c:
f7:bf:d5:b3:4f:75:d3:b9:75:ac:c5:37:eb:7f:79:
34:0d:bb:f3:f9:7d:4f:a1:fd:f9:4d:f3:72:c4:06:
ff:18:4c:4b:f5:bc:ee:d9:0c:4c:1b:c6:e4:13:97:
f0:d5:e5:78:93:5f:01:52:32:34:09:a2:39:6b:c3:
8c:8a:d7:7f:45:27:83:eb:7a:0d:f6:4d:a4:0e:c3:
9c:d2:91:2e:c7:3e:3c:80:46:63:42:0f:34:80:01:
ba:19:c2:74:52:0a:77:47:3e:19:a4:b8:7f:10:a7:
df:9a:ba:d5:c4:be:f2:e6:0f:f0:19:ff:81:51:9f:
8a:b2:c7:66:f8:b7:6c:e3:90:34:62:12:e8:c4:16:
41:1f:a9:47:fd:bc:09:8c:db:b6:41:b9:1b:c2:10:
10:de:d5:cb:d8:ae:b2:3e:b7:13:86:66:e3:04:da:
3e:a5:af:1c:aa:32:8d:da:e1:47:c4:8a:c1:e9:97:
e6:d2:25:ae:bd:45:f9:35:33:e9:fd:47:ff:af:a0:
d5:e2:8c:4e:33:ff:e0:67:95:f2:4f:2d:32:51:3c:
de:98:94:89:bf:eb:fa:1b:86:4f:97:25:f2:c7:32:
cf:55:9e:39:84:57:77:b4:23:07:90:5b:08:d8:a5:
9c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:21:C3:0C:B2:69:F9:92:2E:9A:C5:B0:E5:B3:71:95:C4:39:47:FA
X509v3 Authority Key Identifier:
keyid:A2:E3:C4:EC:7B:36:11:2F:CE:52:1F:5B:EF:28:73:C7:B4:CC:88:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:1a:3b:2b:47:11:cf:0d:6b:2f:29:bc:2a:4e:a7:4e:fa:0d:
68:65:b4:51:43:0d:d6:96:75:00:7e:01:6a:a0:57:76:26:5c:
f9:b8:44:4d:5f:f8:59:18:a5:4f:19:65:7e:3e:60:4b:64:5e:
63:c3:3e:66:2c:38:38:de:26:8a:55:31:8b:49:0b:70:33:66:
0f:6d:9c:f0:c0:50:03:8d:12:e4:7b:de:44:87:9e:cc:44:eb:
2c:39:f2:5f:c8:c9:04:23:d7:90:56:95:90:b7:9a:8c:28:9e:
e2:ba:33:e9:bc:32:08:77:e5:ab:87:2b:fa:5a:4b:9e:a8:27:
93:4d:c3:f9:09:fe:5d:85:91:12:b2:2d:ed:50:8b:85:91:6b:
02:21:db:72:53:c9:fd:f4:28:57:96:3a:a5:23:c4:fa:a1:18:
0e:6d:17:74:e3:a3:e4:65:14:d1:e9:95:9d:db:6e:79:bd:5d:
fc:99:40:50:cc:78:48:fc:30:6e:79:78:22:30:df:93:14:84:
25:6c:1a:b5:8a:ee:e6:57:12:c5:ca:06:27:0f:ce:28:65:e3:
25:a1:4d:dd:17:68:75:64:3f:84:9f:2a:0f:6e:e3:be:83:64:
06:8b:74:c5:43:68:81:03:83:13:4c:cc:24:61:ad:91:1e:bf:
ce:78:4a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:47:09 2026 by rpki-client