Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
File: OuUFv8f9kXaGscizohj1UI9aNwo.mft (raw, json)
Hash identifier: egEZ1DcTswqeyNB0t1ZPEFppFHcRhoYLztcO65L3hTI=
Subject key identifier: 84:CA:43:AF:11:20:97:CB:53:EF:D1:5F:A1:7B:C1:DF:5A:9C:14:A1
Authority key identifier: 3A:E5:05:BF:C7:FD:91:76:86:B1:C8:B3:A2:18:F5:50:8F:5A:37:0A
Certificate issuer: /CN=3ae505bfc7fd917686b1c8b3a218f5508f5a370a
Certificate serial: 019F92ECED534C0BE1CB5B6397AE5507F251
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuUFv8f9kXaGscizohj1UI9aNwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
Manifest number: 0617
Signing time: Fri 24 Jul 2026 07:00:28 +0000
Manifest this update: Fri 24 Jul 2026 07:00:28 +0000
Manifest next update: Sat 25 Jul 2026 07:00:28 +0000
Files and hashes: 1: OuUFv8f9kXaGscizohj1UI9aNwo.crl (hash: 1ex+Za1adn4QzjbEIoHPJvhHcdUoDVFKrHtI8hONP1A=)
2: zMm9JKVVKWKfD1DDKP4qsT59tOg.roa (hash: C1WJK5Q9adCFTqiEMvgoPvMhAn7ou/puIqaX1v5Q3vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OuUFv8f9kXaGscizohj1UI9aNwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ec:ed:53:4c:0b:e1:cb:5b:63:97:ae:55:07:f2:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ae505bfc7fd917686b1c8b3a218f5508f5a370a
Validity
Not Before: Jul 24 07:00:28 2026 GMT
Not After : Jul 25 07:00:28 2026 GMT
Subject: CN=84ca43af112097cb53efd15fa17bc1df5a9c14a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ea:cf:dd:1d:42:46:73:7d:d9:b2:dc:ae:88:
8d:84:a3:fd:19:8e:a9:94:06:08:86:ef:76:bb:3d:
08:12:4d:19:36:66:04:b6:1c:d7:d5:e9:8b:fd:59:
7f:68:a1:e1:d4:c6:1f:48:5f:a6:b5:da:84:c1:9e:
7d:4c:ca:c9:87:88:1e:28:0f:fb:a7:31:0f:c1:7f:
8d:81:58:b8:3c:78:c9:3f:31:a2:5b:f5:1b:ee:aa:
a4:78:69:02:b0:10:9c:3a:59:b0:9e:55:1e:71:4a:
32:2f:83:b9:e8:9d:a5:71:6d:cd:4f:52:be:01:72:
80:2b:6a:4d:f9:25:84:e6:da:39:f6:30:65:9d:c9:
45:ad:3a:64:cb:0c:39:29:cc:f0:0d:56:2f:84:06:
e8:80:b8:82:3a:55:1d:4a:93:62:c1:6f:78:72:39:
be:fe:40:31:94:61:54:81:fa:bd:be:74:ae:e0:11:
3b:f1:db:e1:81:4c:67:12:52:6e:6f:2d:a5:b6:39:
bb:ab:d3:2a:d5:f9:4b:c4:b6:b6:7c:40:87:9d:29:
3d:35:dc:61:c8:14:e1:1c:7a:d6:6c:d2:f0:93:52:
2a:ec:f7:23:25:73:18:6b:9c:76:c8:6e:43:56:12:
42:c5:df:04:4a:34:c0:1b:c4:92:30:59:69:10:a2:
cc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:CA:43:AF:11:20:97:CB:53:EF:D1:5F:A1:7B:C1:DF:5A:9C:14:A1
X509v3 Authority Key Identifier:
keyid:3A:E5:05:BF:C7:FD:91:76:86:B1:C8:B3:A2:18:F5:50:8F:5A:37:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuUFv8f9kXaGscizohj1UI9aNwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:3c:93:71:6a:b8:11:c2:c1:99:9d:fa:68:fa:e9:77:25:00:
d9:73:66:d9:c1:fd:a5:65:ef:ca:cf:a0:00:ea:c2:d5:37:06:
19:0e:e5:09:06:a3:d4:f7:cb:8b:50:f7:b6:0d:af:cd:7d:58:
e0:44:28:30:90:46:c0:4c:0b:81:31:fb:bf:e7:46:04:92:27:
b3:e2:dc:cd:44:9c:45:45:89:56:37:ee:8d:e8:8c:d5:93:74:
b6:6b:3e:5e:ac:16:e0:1d:0b:3e:85:23:7d:52:e7:9e:6b:1a:
2d:57:d4:31:49:3a:ca:0e:72:53:2a:f3:f8:9f:85:ef:38:9c:
be:50:66:a0:af:48:f2:de:5a:a8:bf:73:8a:ed:31:1a:99:2c:
82:7f:3c:da:fe:bb:e4:f4:2b:64:06:f7:09:3b:92:0d:85:8d:
9f:9e:dc:92:79:13:e8:95:80:b3:79:55:04:31:e5:85:8e:4c:
11:62:89:70:47:bb:d1:e7:2d:b2:e5:12:72:54:41:4b:51:4d:
ea:19:b5:a5:e6:43:b6:63:94:65:c9:96:7e:c8:fe:a1:07:02:
5b:08:77:23:cd:ca:5d:b2:86:9e:df:d7:46:cf:68:3f:3f:a7:
f4:9d:f2:75:88:a8:e5:59:3e:ef:43:b0:c5:b4:8d:6f:0b:81:
7c:3e:7b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:18:17 2026 by rpki-client