Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
File: Ou655pK6npPYuVpkiNXIdWCdSuw.mft (raw, json)
Hash identifier: ZWfezjkOUgJYxOUWZfnJIeCxBYj3apAUd4ZUtJf89gs=
Subject key identifier: F8:6B:CB:D0:95:D7:62:2E:5F:8A:63:52:BC:0B:E5:08:4A:23:4D:03
Authority key identifier: 3A:EE:B9:E6:92:BA:9E:93:D8:B9:5A:64:88:D5:C8:75:60:9D:4A:EC
Certificate issuer: /CN=3aeeb9e692ba9e93d8b95a6488d5c875609d4aec
Certificate serial: 019D27E09647956E642CE22C3246C8B4039F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
Manifest number: 1646
Signing time: Thu 26 Mar 2026 02:02:03 +0000
Manifest this update: Thu 26 Mar 2026 02:02:03 +0000
Manifest next update: Fri 27 Mar 2026 02:02:03 +0000
Files and hashes: 1: OSQYUaSf3gbMxgKVGaSRUtdNHTA.roa (hash: r4nA30trmkd0vBXPfRkmROxsmgpOrH0HeKPaS+ubN0w=)
2: Ou655pK6npPYuVpkiNXIdWCdSuw.crl (hash: jTE12AEjHufTKd5kQpibsik5+u0jlSEgV8vTAvT/wfo=)
3: pVERtNhFi8FWjU9Y4DiQboSkUcg.roa (hash: zXHM3oZaOO62QcqG4BH7LRDl6S8yZxF21aaBpfwYUVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:96:47:95:6e:64:2c:e2:2c:32:46:c8:b4:03:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aeeb9e692ba9e93d8b95a6488d5c875609d4aec
Validity
Not Before: Mar 26 02:02:03 2026 GMT
Not After : Mar 27 02:02:03 2026 GMT
Subject: CN=f86bcbd095d7622e5f8a6352bc0be5084a234d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1c:0f:60:22:27:9f:e3:b6:b1:41:f3:19:89:
b4:22:58:c4:8c:b2:f0:43:fa:79:8f:49:17:a3:16:
c4:40:29:85:37:bc:61:a5:e3:24:89:7e:bb:dd:45:
51:e8:46:2b:58:b8:47:61:37:50:82:f2:dc:90:d9:
11:5d:12:8d:6b:68:40:9b:14:91:0c:b6:45:a6:7c:
ca:d2:e1:dd:3d:0c:19:51:8f:d8:ae:95:81:f3:8b:
4c:24:33:08:8a:33:22:11:33:8f:27:5b:63:de:e8:
5c:7a:80:98:a7:6a:d3:1a:f5:ad:c0:ed:84:df:95:
a7:81:44:58:8d:ab:91:93:01:b5:ec:ed:84:7a:36:
4f:84:f9:6f:0e:b9:97:c7:b8:a8:2b:95:29:71:67:
ef:2d:56:61:12:e6:d7:52:11:8a:33:91:c9:a8:b6:
2c:d3:e8:63:8d:c6:ed:0d:40:e1:d3:f3:90:c5:ac:
ad:1a:2c:bd:7f:0e:ce:96:46:ea:4d:8c:e7:ba:6e:
04:61:9a:0b:5e:f2:6d:94:9e:80:f4:d5:90:11:04:
e9:f0:cc:49:2b:df:94:33:95:65:ca:40:89:3a:b0:
a1:ba:61:f0:13:f6:21:13:46:8d:b5:a0:7c:08:11:
5a:b3:06:db:72:8f:14:c7:87:15:68:df:d3:ba:ad:
cc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:6B:CB:D0:95:D7:62:2E:5F:8A:63:52:BC:0B:E5:08:4A:23:4D:03
X509v3 Authority Key Identifier:
keyid:3A:EE:B9:E6:92:BA:9E:93:D8:B9:5A:64:88:D5:C8:75:60:9D:4A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:54:96:a2:f3:28:67:1c:83:aa:e5:d3:19:12:9b:e4:7c:84:
68:a0:4e:21:03:b2:24:7a:10:31:2a:b4:36:a5:e5:cf:6b:3a:
6d:e6:c7:99:3c:a2:ce:7f:ba:00:15:c0:9f:d4:5f:d3:80:5e:
bc:f3:07:90:96:c2:da:93:d8:d1:e4:4b:cc:e8:e9:ff:3c:7c:
1c:fa:17:7c:5d:fb:0c:ef:45:40:88:5f:dd:57:86:40:05:30:
b0:5b:a4:81:5d:1b:f3:fd:cb:fe:5e:4a:3c:c3:70:cd:1c:be:
fd:e2:77:61:56:2a:0e:c4:51:d5:3c:31:68:7e:da:7b:94:14:
bb:a3:0a:d7:3a:d6:9e:24:fd:36:37:4e:8f:0a:64:31:54:d6:
96:44:7d:e5:05:fe:4e:2f:54:1a:43:9f:57:ce:3c:7b:8e:9e:
3f:5e:45:ff:b3:55:9d:9c:c5:6d:54:3d:c2:21:cd:66:b5:22:
93:1b:5a:4b:b8:5f:89:c2:a2:47:0a:88:b8:5c:42:fb:39:08:
3f:59:a7:7a:fb:38:5c:62:c1:e8:18:3a:e8:80:58:94:df:e8:
59:a8:ec:92:48:41:db:d8:21:3d:f8:04:64:12:ea:0e:69:6a:
b9:10:8e:26:65:f4:1e:8b:65:8d:de:e8:57:53:8b:e9:5c:93:
2f:4b:06:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4JZHlW5kLOIsMkbItAOfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZWViOWU2OTJiYTllOTNkOGI5NWE2NDg4ZDVjODc1NjA5
ZDRhZWMwHhcNMjYwMzI2MDIwMjAzWhcNMjYwMzI3MDIwMjAzWjAzMTEwLwYDVQQD
EyhmODZiY2JkMDk1ZDc2MjJlNWY4YTYzNTJiYzBiZTUwODRhMjM0ZDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxwPYCInn+O2sUHzGYm0IljEjLLw
Q/p5j0kXoxbEQCmFN7xhpeMkiX673UVR6EYrWLhHYTdQgvLckNkRXRKNa2hAmxSR
DLZFpnzK0uHdPQwZUY/YrpWB84tMJDMIijMiETOPJ1tj3uhceoCYp2rTGvWtwO2E
35WngURYjauRkwG17O2EejZPhPlvDrmXx7ioK5UpcWfvLVZhEubXUhGKM5HJqLYs
0+hjjcbtDUDh0/OQxaytGiy9fw7OlkbqTYznum4EYZoLXvJtlJ6A9NWQEQTp8MxJ
K9+UM5VlykCJOrChumHwE/YhE0aNtaB8CBFaswbbco8Ux4cVaN/Tuq3MNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPhry9CV12IuX4pjUrwL5QhKI00DMB8GA1UdIwQY
MBaAFDruueaSup6T2LlaZIjVyHVgnUrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3U2NTVwSzZucFBZdVZwa2lOWElkV0NkU3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8zZTI1OWItYjZkYy00Y2Y0LWFjMTkt
NTAzM2Y4ZDc5YmU3LzEvT3U2NTVwSzZucFBZdVZwa2lOWElkV0NkU3V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8zZTI1OWItYjZkYy00Y2Y0LWFjMTktNTAzM2Y4ZDc5YmU3
LzEvT3U2NTVwSzZucFBZdVZwa2lOWElkV0NkU3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp1SWovMo
ZxyDquXTGRKb5HyEaKBOIQOyJHoQMSq0NqXlz2s6bebHmTyizn+6ABXAn9Rf04Be
vPMHkJbC2pPY0eRLzOjp/zx8HPoXfF37DO9FQIhf3VeGQAUwsFukgV0b8/3L/l5K
PMNwzRy+/eJ3YVYqDsRR1TwxaH7ae5QUu6MK1zrWniT9NjdOjwpkMVTWlkR95QX+
Ti9UGkOfV848e46eP15F/7NVnZzFbVQ9wiHNZrUikxtaS7hficKiRwqIuFxC+zkI
P1mnevs4XGLB6Bg66IBYlN/oWajskkhB29ghPfgEZBLqDmlquRCOJmX0Hotljd7o
V1OL6VyTL0sG+A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:53 2026 by rpki-client