Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.mft
File: OUxvc7PIOIH_yOZgOmtk9FNlrPE.mft (raw, json)
Hash identifier: 1YSvK16LnoyOpJKupeab4C3FnnXvXrnKNCCKNnicNlo=
Subject key identifier: C1:0E:DF:7C:BC:09:55:E2:56:5D:86:18:AC:C7:B5:D8:E2:80:46:19
Authority key identifier: 39:4C:6F:73:B3:C8:38:81:FF:C8:E6:60:3A:6B:64:F4:53:65:AC:F1
Certificate issuer: /CN=394c6f73b3c83881ffc8e6603a6b64f45365acf1
Certificate serial: 019D27DF82C454610725845D3394413710B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUxvc7PIOIH_yOZgOmtk9FNlrPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 02:00:52 +0000
Manifest this update: Thu 26 Mar 2026 02:00:52 +0000
Manifest next update: Fri 27 Mar 2026 02:00:52 +0000
Files and hashes: 1: 6VFxjGZ8bOih2br-G1vsbpV4A1k.roa (hash: Bf69rzBJpwQt9lR7pHLJHrwn+ppr7MyMbshU+Z/vpy4=)
2: OUxvc7PIOIH_yOZgOmtk9FNlrPE.crl (hash: NpLEOkejG6St+/ijWzA/iwij73uEeGrjdIry20CSH/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OUxvc7PIOIH_yOZgOmtk9FNlrPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:82:c4:54:61:07:25:84:5d:33:94:41:37:10:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=394c6f73b3c83881ffc8e6603a6b64f45365acf1
Validity
Not Before: Mar 26 02:00:52 2026 GMT
Not After : Mar 27 02:00:52 2026 GMT
Subject: CN=c10edf7cbc0955e2565d8618acc7b5d8e2804619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1e:d8:2c:9e:a5:79:02:77:fd:a5:4e:0f:f9:
22:81:26:9b:42:4e:3a:e9:c1:c2:04:61:b8:8d:b2:
1e:c4:7d:4f:92:e6:4e:49:4f:d2:85:fa:73:03:01:
c1:7a:98:01:df:65:9b:95:9e:7e:5c:41:71:d8:1a:
7a:81:9f:12:64:8c:0f:9a:fb:a3:b8:2e:47:30:b9:
50:9c:82:e4:7a:7a:fe:11:4b:f3:3b:4b:b6:12:4f:
f0:d2:2f:68:e3:28:6c:cc:09:0a:0e:cd:8c:29:eb:
75:5e:66:18:0c:38:62:cc:1e:33:36:27:bf:4a:1b:
23:55:19:6c:82:f7:11:39:e9:2b:35:80:fa:87:80:
e1:d8:27:b1:d3:39:43:cb:67:6e:23:38:da:47:51:
75:c1:85:5c:13:4c:48:40:37:55:ae:66:70:a3:c0:
8b:26:65:77:a4:ef:1f:5f:de:46:56:1f:82:93:71:
ad:cb:82:af:26:72:ef:68:d1:63:2c:60:58:65:5c:
e0:f4:3f:c3:e3:e7:a3:44:65:81:40:58:68:77:16:
df:6a:b2:c2:18:6c:70:26:b0:e0:ca:4d:8e:7f:ce:
97:e4:6f:6c:d6:58:ab:0d:80:d3:2c:64:25:0b:7f:
a9:36:11:21:ae:3d:44:ff:fa:69:ba:e2:66:94:45:
8c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:0E:DF:7C:BC:09:55:E2:56:5D:86:18:AC:C7:B5:D8:E2:80:46:19
X509v3 Authority Key Identifier:
keyid:39:4C:6F:73:B3:C8:38:81:FF:C8:E6:60:3A:6B:64:F4:53:65:AC:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUxvc7PIOIH_yOZgOmtk9FNlrPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:86:94:de:0b:43:19:6a:16:45:da:26:df:14:57:ae:34:d5:
83:82:31:47:14:14:2f:b9:4f:be:20:cc:43:5b:3a:ff:b1:0c:
19:44:79:45:d3:8c:c3:cf:65:10:7f:c3:d2:88:54:a8:fb:88:
ba:4f:e3:ad:be:88:e3:c7:4f:77:21:92:b3:35:47:80:25:ef:
09:7b:83:15:68:f9:63:14:20:e7:5f:fb:07:77:4e:35:c4:c0:
6b:51:12:21:df:42:6b:74:2f:17:99:b4:19:21:91:d9:4e:28:
44:e9:cf:10:36:74:d0:ae:ac:fd:36:6c:33:23:77:96:eb:1b:
bc:89:d0:74:3e:71:e3:41:54:9e:91:7f:9a:22:1b:20:a7:01:
d5:1c:b5:c5:5d:5f:e7:75:0c:ca:f4:a2:8a:c1:ca:c2:62:0c:
61:ab:9a:c7:e4:6f:16:ab:90:37:bf:40:0b:6c:a2:a5:b9:e1:
c2:c6:82:84:42:2d:d0:76:23:76:23:c6:d6:a5:fa:50:17:b6:
2a:da:0b:61:80:76:95:5d:7e:04:3b:9e:9a:aa:c2:77:cf:4e:
ea:fe:a1:a9:96:d1:a5:6d:2c:ad:ae:36:c1:86:1b:be:a8:4f:
55:ce:dc:31:58:3f:6a:eb:15:7c:6c:b0:78:89:7c:1a:e0:95:
c0:f4:46:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:09:56 2026 by rpki-client