Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
File: OuUFv8f9kXaGscizohj1UI9aNwo.mft (raw, json)
Hash identifier: 1QnsKwME2aSKWQ8fWbn7s6E9L9xKg2HoP9qkBFF2C+k=
Subject key identifier: 8D:4C:84:32:68:1F:48:5C:CB:09:B8:62:C8:46:48:78:D2:A1:78:BF
Authority key identifier: 3A:E5:05:BF:C7:FD:91:76:86:B1:C8:B3:A2:18:F5:50:8F:5A:37:0A
Certificate issuer: /CN=3ae505bfc7fd917686b1c8b3a218f5508f5a370a
Certificate serial: 01A0E6D330F0441AAB309ED1AFCFD0380C7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuUFv8f9kXaGscizohj1UI9aNwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
Manifest number: 06C7
Signing time: Mon 28 Sep 2026 07:03:15 +0000
Manifest this update: Mon 28 Sep 2026 07:03:15 +0000
Manifest next update: Tue 29 Sep 2026 07:03:15 +0000
Files and hashes: 1: OuUFv8f9kXaGscizohj1UI9aNwo.crl (hash: PW+Ux8772EymSi5I5rXaMsdLSsPxYeyO3zgz0QX/TVQ=)
2: zMm9JKVVKWKfD1DDKP4qsT59tOg.roa (hash: C1WJK5Q9adCFTqiEMvgoPvMhAn7ou/puIqaX1v5Q3vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OuUFv8f9kXaGscizohj1UI9aNwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 07:03:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:d3:30:f0:44:1a:ab:30:9e:d1:af:cf:d0:38:0c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ae505bfc7fd917686b1c8b3a218f5508f5a370a
Validity
Not Before: Sep 28 07:03:15 2026 GMT
Not After : Sep 29 07:03:15 2026 GMT
Subject: CN=8d4c8432681f485ccb09b862c8464878d2a178bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ce:fc:d0:fc:d7:05:a0:2c:d5:b8:13:cf:7d:
a5:ea:b0:86:fd:b2:58:d5:1a:21:0e:39:8a:1d:21:
fc:b5:bc:55:2d:ad:1c:fe:18:75:19:42:45:56:40:
15:cd:97:b9:65:e6:bd:af:da:ed:4f:e3:78:d7:f1:
7b:b8:33:b1:7f:95:79:f5:bb:08:fd:e2:e7:5c:cd:
7a:f6:13:0a:58:68:ea:4b:28:d4:b4:14:4a:95:0b:
40:19:76:7b:b3:13:60:36:89:65:34:e9:33:6e:c2:
d1:43:dd:74:50:f5:71:a6:3f:e1:18:dd:29:88:64:
d3:ed:11:7c:61:8b:c1:de:2c:6f:95:20:83:c4:db:
e8:12:22:26:09:0b:a6:3a:9a:2a:54:0e:6c:7c:b1:
11:19:ab:d2:31:4b:5d:e9:9b:a6:db:08:1a:45:c6:
6e:c5:5c:d3:7f:28:13:69:4b:1f:1a:f3:66:93:01:
cb:fe:89:50:f1:74:3a:f8:fd:50:fc:af:7d:6c:4f:
ca:82:bf:67:ff:9b:ee:dc:63:23:34:43:83:25:04:
e0:a2:eb:45:d4:7e:ac:78:1d:de:51:8c:64:d5:38:
f7:ba:65:f1:93:1a:a4:6a:d4:12:64:b5:ed:b2:41:
51:a1:0f:28:97:7e:67:28:62:14:9c:32:52:85:a1:
fc:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:4C:84:32:68:1F:48:5C:CB:09:B8:62:C8:46:48:78:D2:A1:78:BF
X509v3 Authority Key Identifier:
keyid:3A:E5:05:BF:C7:FD:91:76:86:B1:C8:B3:A2:18:F5:50:8F:5A:37:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuUFv8f9kXaGscizohj1UI9aNwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:ed:bb:ae:7c:54:62:15:c4:f2:7e:a7:cd:53:44:05:42:80:
3e:14:9a:f3:93:c1:e1:2b:64:77:11:bd:d1:e3:99:7d:2d:42:
1b:fe:97:26:5a:2c:66:bb:9f:67:f3:11:b0:8e:45:30:54:09:
67:40:97:32:55:cf:e7:78:ca:2b:69:18:65:49:b9:8d:5c:90:
5e:0c:dd:81:a9:2a:97:00:57:9c:f0:73:84:64:23:c4:04:02:
2c:73:8d:02:ff:f9:57:3d:aa:fc:fe:60:1b:e0:a9:6f:b1:b7:
09:b9:38:4d:e8:ac:64:e8:11:c6:f2:85:d8:f2:4b:64:16:34:
2c:75:cc:33:d8:c9:e7:37:2f:9c:f8:dc:e7:66:8b:b3:7a:1b:
f2:0e:a3:22:35:29:0f:88:61:81:34:f1:39:77:48:87:1d:35:
67:a9:08:7e:2e:b7:28:30:4f:d1:fa:7f:93:0b:06:6e:6e:b7:
fc:b2:40:37:5a:bc:8e:d9:04:a7:4e:15:5a:da:c1:66:7e:e2:
63:c1:30:c9:35:cd:24:70:f1:1c:04:e9:9d:2e:16:4b:c5:e5:
1a:a1:42:04:57:ef:c1:ca:f0:c0:b8:77:c0:31:9d:a5:4d:c5:
89:7f:24:e5:50:ee:ee:c6:0f:4c:37:06:84:9e:e6:27:5c:40:
25:c8:05:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDm0zDwRBqrMJ7Rr8/QOAx9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZTUwNWJmYzdmZDkxNzY4NmIxYzhiM2EyMThmNTUwOGY1
YTM3MGEwHhcNMjYwOTI4MDcwMzE1WhcNMjYwOTI5MDcwMzE1WjAzMTEwLwYDVQQD
Eyg4ZDRjODQzMjY4MWY0ODVjY2IwOWI4NjJjODQ2NDg3OGQyYTE3OGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArs780PzXBaAs1bgTz32l6rCG/bJY
1RohDjmKHSH8tbxVLa0c/hh1GUJFVkAVzZe5Zea9r9rtT+N41/F7uDOxf5V59bsI
/eLnXM169hMKWGjqSyjUtBRKlQtAGXZ7sxNgNollNOkzbsLRQ910UPVxpj/hGN0p
iGTT7RF8YYvB3ixvlSCDxNvoEiImCQumOpoqVA5sfLERGavSMUtd6Zum2wgaRcZu
xVzTfygTaUsfGvNmkwHL/olQ8XQ6+P1Q/K99bE/Kgr9n/5vu3GMjNEODJQTgoutF
1H6seB3eUYxk1Tj3umXxkxqkatQSZLXtskFRoQ8ol35nKGIUnDJShaH8CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI1MhDJoH0hcywm4YshGSHjSoXi/MB8GA1UdIwQY
MBaAFDrlBb/H/ZF2hrHIs6IY9VCPWjcKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3VVRnY4ZjlrWGFHc2Npem9oajFVSTlhTndvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS80MTkzZWEtYzgzZi00YmViLWEyMWUt
YTFjNzhhMGE2YmZkLzEvT3VVRnY4ZjlrWGFHc2Npem9oajFVSTlhTndvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS80MTkzZWEtYzgzZi00YmViLWEyMWUtYTFjNzhhMGE2YmZk
LzEvT3VVRnY4ZjlrWGFHc2Npem9oajFVSTlhTndvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGO27rnxU
YhXE8n6nzVNEBUKAPhSa85PB4StkdxG90eOZfS1CG/6XJlosZrufZ/MRsI5FMFQJ
Z0CXMlXP53jKK2kYZUm5jVyQXgzdgakqlwBXnPBzhGQjxAQCLHONAv/5Vz2q/P5g
G+Cpb7G3Cbk4TeisZOgRxvKF2PJLZBY0LHXMM9jJ5zcvnPjc52aLs3ob8g6jIjUp
D4hhgTTxOXdIhx01Z6kIfi63KDBP0fp/kwsGbm63/LJAN1q8jtkEp04VWtrBZn7i
Y8EwyTXNJHDxHATpnS4WS8XlGqFCBFfvwcrwwLh3wDGdpU3FiX8k5VDu7sYPTDcG
hJ7mJ1xAJcgFWQ==
-----END CERTIFICATE-----
Generated at Mon Sep 28 13:06:56 2026 by rpki-client