Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft
File: ouRVapV54gL1TBWTRUWLySRfkOQ.mft (raw, json)
Hash identifier: 4RzWXJfYtH1E0mYcVkDUbGtJV89rsvl5iSzfqcinoJw=
Subject key identifier: 2F:F7:43:85:BE:E2:47:4D:4B:57:5B:90:2A:3E:A4:32:42:3B:A4:19
Authority key identifier: A2:E4:55:6A:95:79:E2:02:F5:4C:15:93:45:45:8B:C9:24:5F:90:E4
Certificate issuer: /CN=a2e4556a9579e202f54c159345458bc9245f90e4
Certificate serial: 019D28F27C1AA257DCF218BC2F7126402922
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ouRVapV54gL1TBWTRUWLySRfkOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft
Manifest number: 094A
Signing time: Thu 26 Mar 2026 07:01:13 +0000
Manifest this update: Thu 26 Mar 2026 07:01:13 +0000
Manifest next update: Fri 27 Mar 2026 07:01:13 +0000
Files and hashes: 1: 4yP3WwU1ktq8_0e1Hi61Tn4PWPg.roa (hash: n+qnuFeSxpGyizkAO7C0ETLCpnUHGbgFWmdL3r1mtxY=)
2: ouRVapV54gL1TBWTRUWLySRfkOQ.crl (hash: tbTTp/LapRkkUdfSKRCIplwOIx4OoKE24mZyUtCJ5uY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ouRVapV54gL1TBWTRUWLySRfkOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:7c:1a:a2:57:dc:f2:18:bc:2f:71:26:40:29:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e4556a9579e202f54c159345458bc9245f90e4
Validity
Not Before: Mar 26 07:01:13 2026 GMT
Not After : Mar 27 07:01:13 2026 GMT
Subject: CN=2ff74385bee2474d4b575b902a3ea432423ba419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3e:4d:3a:80:9f:10:8f:57:e1:e2:98:6e:c7:
7b:55:d8:63:4d:d4:84:83:ae:b9:cc:9b:fb:cb:e3:
d5:27:d4:92:04:9e:9a:c3:8c:1a:c5:1c:15:0c:1e:
7c:75:87:4a:ea:1e:83:b2:3c:7a:15:3a:6e:06:91:
0c:1b:de:4c:0c:30:af:f1:c3:27:d7:0d:de:cd:dd:
3e:9d:68:67:88:70:25:f9:69:91:0a:3c:49:b6:c3:
ab:19:55:1a:3b:ca:63:37:55:b3:cd:75:a9:d4:c9:
6f:b3:66:43:c6:94:6e:d1:55:cc:1e:06:82:77:cb:
b7:d0:e4:09:f2:bf:90:d7:11:59:4b:5a:11:c2:46:
b3:ba:80:20:78:fd:0a:04:67:16:65:84:67:3f:bc:
cf:53:15:57:57:79:ce:89:0a:5d:6c:e0:5f:90:29:
43:9b:07:54:7c:18:fc:93:77:7f:01:03:c6:24:5c:
ab:96:b7:97:96:8b:b1:2a:c9:c0:e8:31:b4:fe:86:
f1:af:aa:00:c0:51:dc:11:6d:24:cb:c6:5c:fa:63:
57:b6:e8:64:63:41:57:0a:1e:72:58:5e:88:93:40:
03:ca:71:0b:56:17:51:a0:d1:5b:6e:5e:72:e0:c3:
40:36:c7:ec:5d:a1:80:58:63:52:72:8c:a5:1d:2e:
41:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F7:43:85:BE:E2:47:4D:4B:57:5B:90:2A:3E:A4:32:42:3B:A4:19
X509v3 Authority Key Identifier:
keyid:A2:E4:55:6A:95:79:E2:02:F5:4C:15:93:45:45:8B:C9:24:5F:90:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouRVapV54gL1TBWTRUWLySRfkOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:63:04:79:6d:72:5a:e2:78:9d:56:09:fd:fb:52:58:d0:6b:
35:a0:08:93:91:a2:ac:59:7c:51:90:80:3d:97:45:68:d1:8c:
98:d1:b8:42:fc:e8:f2:de:73:fb:cd:e5:eb:e6:46:dc:cb:04:
08:a3:f1:fa:87:bc:d3:63:13:2d:ea:96:60:64:83:c1:51:a8:
bf:4c:e5:e5:fb:fb:86:6b:57:e3:da:5b:ad:e7:41:ba:4e:e3:
b6:3c:7b:42:f0:b8:53:2c:da:a7:71:87:b0:41:73:9c:ed:81:
97:a1:42:b6:52:72:b5:3f:ed:52:cf:95:bc:4a:6f:75:43:be:
09:af:ed:0d:9a:d2:17:de:ba:ac:f5:29:96:af:48:b3:f2:51:
06:fb:4b:c0:4a:53:57:69:ba:be:a8:68:a6:ce:2f:2b:d3:ac:
43:c5:1e:a0:f6:80:70:82:3b:3f:a9:b6:ee:f2:81:23:14:38:
e8:76:4e:28:d7:b6:d6:11:99:e3:78:8a:70:e6:76:6a:08:ba:
3b:b8:6d:e4:81:a3:3d:27:60:ac:e4:db:2f:67:48:be:ae:22:
95:99:d5:5a:66:de:92:66:91:00:78:c6:23:0c:70:ad:9d:7c:
2b:2e:54:f2:8f:21:bd:0b:fa:04:55:38:f5:1e:2f:9f:75:ba:
8d:81:7b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:27:21 2026 by rpki-client