Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
File: OUiGnOVLnTsvPjmu4snI6xnLWw8.mft (raw, json)
Hash identifier: tBl0YcCDHKJmg4CKtC+CpWo2ExbZSBm9rAEwRtNwVJE=
Subject key identifier: CE:FF:1F:CA:89:21:45:13:53:66:2A:25:20:B2:3D:05:61:01:2E:C5
Authority key identifier: 39:48:86:9C:E5:4B:9D:3B:2F:3E:39:AE:E2:C9:C8:EB:19:CB:5B:0F
Certificate issuer: /CN=3948869ce54b9d3b2f3e39aee2c9c8eb19cb5b0f
Certificate serial: 019D2703CA9D7592468625EC2F6B3BE07A76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUiGnOVLnTsvPjmu4snI6xnLWw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 22:00:52 +0000
Manifest this update: Wed 25 Mar 2026 22:00:52 +0000
Manifest next update: Thu 26 Mar 2026 22:00:52 +0000
Files and hashes: 1: OUiGnOVLnTsvPjmu4snI6xnLWw8.crl (hash: hmn8f60SgGboYXwXGXkiIkEt9uDudcpFOpDzd7uP+ek=)
2: mBkIIhBUokxiDs7U62dP6EGJ28A.roa (hash: KThHm1xgh12oiiD8xAb/mt2PPatVJSHJqHsKnrjqp7Q=)
3: uEzMp8gZyoHebkBdiY9KRs9lacE.asa (hash: x7WXJvWldueVaogAt4aCHUIb6RJurPgI+nLyD+k45kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OUiGnOVLnTsvPjmu4snI6xnLWw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:ca:9d:75:92:46:86:25:ec:2f:6b:3b:e0:7a:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3948869ce54b9d3b2f3e39aee2c9c8eb19cb5b0f
Validity
Not Before: Mar 25 22:00:52 2026 GMT
Not After : Mar 26 22:00:52 2026 GMT
Subject: CN=ceff1fca8921451353662a2520b23d0561012ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7a:5b:0d:f9:91:7e:f6:b5:ec:13:45:3f:db:
05:e9:89:1f:77:e1:6a:23:65:f3:c8:2f:82:4f:11:
6f:9b:85:54:c3:22:f1:52:56:a8:e3:5a:22:0a:23:
e5:28:62:25:b9:0e:3c:17:7d:87:db:db:ce:c8:6b:
d8:d8:fd:2d:e1:82:70:b1:43:ca:96:64:24:ee:3e:
06:9a:fb:b3:9e:f9:4a:67:78:e7:97:19:d8:d8:66:
d9:2e:b0:65:b6:04:1c:e8:19:64:31:ce:1a:6a:3c:
16:66:25:9a:25:07:7e:0e:62:42:4c:bb:b4:ed:11:
cc:2b:5a:dd:96:98:0a:fe:5d:35:5d:59:95:de:80:
78:77:3a:5c:8f:eb:37:c2:ba:8b:3f:d4:45:b5:c4:
56:30:9a:3a:96:7a:d9:94:30:02:cc:04:c0:45:43:
9f:cb:04:54:ff:f9:a9:c2:92:35:2e:97:11:5a:fb:
ad:5b:fa:ad:79:4c:8d:1a:73:50:c7:45:92:42:57:
42:40:38:48:57:8d:b6:dd:35:7f:16:13:65:44:f6:
e4:32:07:47:ab:48:b0:a7:cb:81:40:4e:bf:cf:1b:
c0:5e:22:ed:db:c0:37:eb:03:c1:40:f1:28:09:f6:
39:e0:69:bd:9a:99:54:0e:da:8a:dd:21:53:99:d2:
fa:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:FF:1F:CA:89:21:45:13:53:66:2A:25:20:B2:3D:05:61:01:2E:C5
X509v3 Authority Key Identifier:
keyid:39:48:86:9C:E5:4B:9D:3B:2F:3E:39:AE:E2:C9:C8:EB:19:CB:5B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUiGnOVLnTsvPjmu4snI6xnLWw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:83:15:0e:9a:7d:04:b3:11:2f:9f:50:34:b3:5c:22:29:fc:
91:27:38:f8:8e:0f:5c:49:e6:df:81:bc:52:75:bc:61:a4:be:
1c:c7:c4:d7:23:f1:1a:0b:4c:38:89:8c:d5:73:39:40:7a:be:
aa:bb:fd:24:2d:6e:12:77:ba:b4:04:81:11:87:37:ab:34:7b:
5d:81:45:39:29:b8:d9:b1:32:1c:62:2a:c1:20:7c:b5:86:25:
73:9a:3b:e5:40:f8:1b:aa:20:03:53:29:05:a5:d4:f9:79:3f:
2a:11:ca:be:02:c3:dc:cd:ed:e1:f8:cb:c7:6f:4d:ff:0b:0f:
1d:b1:ed:4e:4d:75:24:7a:33:55:db:f0:1f:7c:29:fa:86:33:
f3:2a:21:fe:bc:b9:a0:a0:c2:b3:d7:ff:71:7e:b7:5f:35:bb:
aa:9b:0f:dd:1c:47:13:99:db:be:2b:c6:04:9a:46:ad:a2:4c:
99:88:1f:2e:d4:02:c1:50:d7:26:fc:4b:fe:e1:11:94:97:93:
ae:59:03:c6:98:96:c2:66:e9:b4:9e:e3:3c:54:01:af:a9:b7:
61:79:ad:a7:24:18:2b:56:e1:b5:0f:91:cc:95:fb:79:3e:d1:
6b:6a:87:1f:46:d6:b4:da:4b:46:4f:d6:cd:2d:72:28:7d:66:
7c:40:f1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:56:59 2026 by rpki-client