Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
File: OuUFv8f9kXaGscizohj1UI9aNwo.mft (raw, json)
Hash identifier: 0RsxfR/7oEzd0QD8XdnRm2pe7vmwuqeAHjVbGNR/l+w=
Subject key identifier: AE:E4:B2:C6:A3:AC:35:E0:2A:D5:D5:39:F9:B5:0A:E7:EB:99:70:4D
Authority key identifier: 3A:E5:05:BF:C7:FD:91:76:86:B1:C8:B3:A2:18:F5:50:8F:5A:37:0A
Certificate issuer: /CN=3ae505bfc7fd917686b1c8b3a218f5508f5a370a
Certificate serial: 019D27044D25ECC5DEAC2D187D0B0350A274
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuUFv8f9kXaGscizohj1UI9aNwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
Manifest number: 04D6
Signing time: Wed 25 Mar 2026 22:01:26 +0000
Manifest this update: Wed 25 Mar 2026 22:01:26 +0000
Manifest next update: Thu 26 Mar 2026 22:01:26 +0000
Files and hashes: 1: OuUFv8f9kXaGscizohj1UI9aNwo.crl (hash: NFl2G6Stoc6e8ys9QhxXg5dKoNcxk5d+RcNVGDVAKO0=)
2: zMm9JKVVKWKfD1DDKP4qsT59tOg.roa (hash: C1WJK5Q9adCFTqiEMvgoPvMhAn7ou/puIqaX1v5Q3vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OuUFv8f9kXaGscizohj1UI9aNwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:4d:25:ec:c5:de:ac:2d:18:7d:0b:03:50:a2:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ae505bfc7fd917686b1c8b3a218f5508f5a370a
Validity
Not Before: Mar 25 22:01:26 2026 GMT
Not After : Mar 26 22:01:26 2026 GMT
Subject: CN=aee4b2c6a3ac35e02ad5d539f9b50ae7eb99704d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:23:4a:70:ad:2d:f5:fd:38:6f:bc:56:a6:a7:
cf:46:be:2d:17:8d:0d:64:de:0e:9e:44:ab:02:10:
c1:94:ec:ec:78:6e:66:07:04:7b:0b:5c:60:59:92:
ba:98:b0:bd:4c:c6:73:b1:bd:e3:fb:bb:fa:91:15:
00:c4:c0:bd:ca:ae:e3:9d:69:6a:78:8b:d6:ba:63:
af:d5:18:25:f4:d6:20:0d:af:ae:f0:9b:5e:08:cd:
15:dc:00:b3:f4:ea:0c:28:89:55:46:f4:53:d2:da:
a0:83:d6:8c:c5:58:db:66:5a:87:8a:0c:d0:bf:e6:
bf:2c:11:a5:d9:c3:14:a6:e6:e8:af:67:37:16:f3:
26:e2:81:53:4d:a3:d9:57:4e:a0:9c:5e:e0:ff:b4:
67:0a:9f:da:89:d1:fd:85:2e:0a:0c:98:11:4b:cb:
3c:a0:95:38:d8:ae:9b:e6:ca:1a:f8:ac:52:2b:d1:
4e:96:ec:16:ca:b8:a2:9a:e6:13:1a:0a:00:29:31:
81:69:fb:53:7d:9e:c3:55:38:82:64:9a:b7:e4:a7:
19:ba:de:ef:ca:6d:ab:af:9d:b1:b8:e9:d7:b0:00:
83:d6:04:18:05:d0:f7:4d:ab:63:91:5f:9e:b0:ae:
a2:2e:93:85:ae:9f:f7:3c:e9:70:b6:a3:cc:c1:c6:
9a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E4:B2:C6:A3:AC:35:E0:2A:D5:D5:39:F9:B5:0A:E7:EB:99:70:4D
X509v3 Authority Key Identifier:
keyid:3A:E5:05:BF:C7:FD:91:76:86:B1:C8:B3:A2:18:F5:50:8F:5A:37:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuUFv8f9kXaGscizohj1UI9aNwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ef:4c:d4:c6:c5:bf:b2:fd:89:f0:e0:ba:e8:15:75:8d:ba:
3f:68:ad:fd:c6:11:99:bb:28:b1:6c:10:09:fe:49:22:d6:12:
3d:65:38:60:09:65:0a:1f:3f:6f:12:c8:64:bd:83:0d:c1:30:
13:da:e0:c0:1a:02:ab:dc:b2:4c:0a:82:47:e7:2a:3e:da:09:
51:68:c9:9a:13:24:85:d4:f9:d5:da:d4:3b:90:24:b2:e0:19:
a7:6c:2f:b0:78:ef:78:6f:39:0b:cd:94:fc:d1:df:66:3b:3f:
9b:0f:45:61:04:1b:47:19:e0:ea:fc:e7:f2:c6:54:30:84:ee:
f7:0e:27:3e:e3:36:dd:2b:eb:5f:09:7d:36:0c:00:a4:6a:b1:
a1:d6:7b:f8:9d:aa:a1:8e:de:14:20:50:81:a0:07:75:30:b8:
38:df:6a:49:a0:bd:fd:91:5d:dc:69:a7:aa:44:e2:eb:00:07:
c7:fa:40:53:82:20:a0:a7:cb:21:c9:6d:a5:b4:a0:e6:b3:b7:
27:cd:7a:00:8e:07:b3:dc:bb:af:0f:d1:4b:48:b0:98:b0:14:
bb:89:8b:a8:6c:5a:ab:8b:ca:5a:e1:ee:ae:30:e2:df:7e:1e:
ff:de:06:a3:8b:b0:ad:57:b4:bc:4c:fb:4b:21:28:83:26:07:
b8:eb:47:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:56:22 2026 by rpki-client