Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
File: Ou655pK6npPYuVpkiNXIdWCdSuw.mft (raw, json)
Hash identifier: wBi1Mn6wcJ5TXC7b44F+q1202NEIYT4U/7dAnk2lMKA=
Subject key identifier: B7:AE:47:08:06:CE:0C:91:ED:AD:08:EE:C3:A0:6F:77:30:72:0F:F1
Authority key identifier: 3A:EE:B9:E6:92:BA:9E:93:D8:B9:5A:64:88:D5:C8:75:60:9D:4A:EC
Certificate issuer: /CN=3aeeb9e692ba9e93d8b95a6488d5c875609d4aec
Certificate serial: 01A0F15536122FD1A8C74B239062C4D6E768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
Manifest number: 183C
Signing time: Wed 30 Sep 2026 08:01:28 +0000
Manifest this update: Wed 30 Sep 2026 08:01:28 +0000
Manifest next update: Thu 01 Oct 2026 08:01:28 +0000
Files and hashes: 1: OSQYUaSf3gbMxgKVGaSRUtdNHTA.roa (hash: r4nA30trmkd0vBXPfRkmROxsmgpOrH0HeKPaS+ubN0w=)
2: Ou655pK6npPYuVpkiNXIdWCdSuw.crl (hash: 7sY5QkueXKJpDJ+IUCEazyawyyo4WfiHyShltzR2KAw=)
3: pVERtNhFi8FWjU9Y4DiQboSkUcg.roa (hash: zXHM3oZaOO62QcqG4BH7LRDl6S8yZxF21aaBpfwYUVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 08:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:55:36:12:2f:d1:a8:c7:4b:23:90:62:c4:d6:e7:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aeeb9e692ba9e93d8b95a6488d5c875609d4aec
Validity
Not Before: Sep 30 08:01:28 2026 GMT
Not After : Oct 1 08:01:28 2026 GMT
Subject: CN=b7ae470806ce0c91edad08eec3a06f7730720ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3f:3e:c6:86:b4:79:b3:b4:35:eb:02:04:fb:
fe:01:b1:57:ce:d5:62:4a:58:da:b4:6f:3e:b9:d0:
86:7f:59:aa:a7:5c:ce:f8:2c:d9:45:16:41:4e:bb:
2a:30:e0:23:ff:5f:ee:98:c8:11:31:66:36:65:5b:
0e:88:c2:a8:21:3a:6e:cd:ed:f7:5d:37:80:cc:1f:
ce:75:21:57:fd:7d:83:8c:38:b4:0e:16:b8:9e:c1:
15:f8:96:f4:ce:66:52:1f:33:62:29:b4:8b:46:7c:
8f:e2:b4:a7:50:1c:52:88:60:73:4a:7c:33:26:3c:
94:96:e2:d5:9c:02:f1:e6:57:2d:f0:9d:8d:78:a3:
57:d5:ac:5c:ba:ad:6f:d2:27:36:11:64:00:e3:45:
2d:88:65:1b:02:f9:6a:1d:07:f3:f4:0d:99:9e:fd:
41:55:fa:0a:81:20:bd:b1:5a:bb:a1:ad:22:b8:75:
9b:e2:8d:e1:5c:a5:e3:68:f9:4e:45:54:c5:5a:aa:
79:a3:c9:1a:24:8c:0b:55:0c:f7:c7:73:c8:a8:c2:
8a:72:a6:3c:71:bb:dc:d5:d6:d1:0c:47:e8:ea:85:
4c:be:95:9f:33:99:3a:c9:72:1c:49:e9:51:9b:5b:
58:e9:47:1a:64:6c:78:e3:74:f3:16:39:64:cb:48:
39:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:AE:47:08:06:CE:0C:91:ED:AD:08:EE:C3:A0:6F:77:30:72:0F:F1
X509v3 Authority Key Identifier:
keyid:3A:EE:B9:E6:92:BA:9E:93:D8:B9:5A:64:88:D5:C8:75:60:9D:4A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:6e:db:40:09:3e:a5:6d:88:90:9f:2f:40:cc:b4:a0:51:62:
65:02:e1:5c:3e:1c:b9:de:3e:8d:04:aa:f9:59:13:ea:fc:cb:
12:31:1c:51:c9:03:94:c5:66:84:b5:f0:49:28:e9:2d:ec:9a:
08:fb:2f:71:cc:a0:fd:82:44:8f:2e:1e:2f:a1:42:fd:0f:90:
3e:d5:07:d3:6a:86:5c:62:05:69:54:54:67:53:0e:96:99:85:
b9:d1:86:a8:00:a3:54:4f:b1:6d:f5:66:ec:a5:54:73:69:dd:
0e:98:c9:15:0a:2c:71:eb:61:3e:bd:6f:72:2c:bd:cd:28:85:
81:54:73:f3:d4:5a:a2:8b:a8:e0:70:44:4c:69:23:e8:33:aa:
0e:dc:f3:58:0b:21:7f:05:af:3f:3f:89:95:cd:47:b4:e3:16:
a8:e1:6b:bb:6c:30:0a:12:f6:4d:88:38:13:57:7a:3c:17:97:
45:c2:6a:21:f2:27:44:5c:c7:d2:74:55:f3:5e:98:d8:09:f7:
c3:3f:b0:e1:3e:3c:db:89:8e:9e:cb:c5:e5:a2:30:21:e8:3f:
9e:25:5f:9a:47:8c:91:2d:65:5a:b7:d2:26:db:b4:3d:1d:78:
c0:65:86:8f:4d:23:f6:79:85:0c:dc:7e:9b:8a:70:42:f7:6b:
f8:18:df:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 17:12:08 2026 by rpki-client