Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/837e64-c744-45d5-8ad8-e5240073909b/1/zOUMq7b3OGIWDvH59QVPSQqJ3_g.mft
File: zOUMq7b3OGIWDvH59QVPSQqJ3_g.mft (raw, json)
Hash identifier: kFW+Gw0MgOYWWrdjaQHSo/zwUkGRHi5/kZ6pP8D2dAM=
Subject key identifier: BE:90:77:60:71:DA:35:24:AF:AA:B9:99:22:90:BF:4E:2F:87:12:6F
Authority key identifier: CC:E5:0C:AB:B6:F7:38:62:16:0E:F1:F9:F5:05:4F:49:0A:89:DF:F8
Certificate issuer: /CN=cce50cabb6f73862160ef1f9f5054f490a89dff8
Certificate serial: 019D2C609C9F776142C692145291700CC4AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zOUMq7b3OGIWDvH59QVPSQqJ3_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/837e64-c744-45d5-8ad8-e5240073909b/1/zOUMq7b3OGIWDvH59QVPSQqJ3_g.mft
Manifest number: 011E
Signing time: Thu 26 Mar 2026 23:00:22 +0000
Manifest this update: Thu 26 Mar 2026 23:00:22 +0000
Manifest next update: Fri 27 Mar 2026 23:00:22 +0000
Files and hashes: 1: s7t_akC7zKi1bxuEfE-gecZOJkw.roa (hash: hOOmqhwtS/j3wjfpIaMddw7GnavqbISUHa+AEjysuQA=)
2: zOUMq7b3OGIWDvH59QVPSQqJ3_g.crl (hash: ELUrpTB2EJg5xGcc/RRCeg3l4uQ+zPTpNeLi+5HPRyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/837e64-c744-45d5-8ad8-e5240073909b/1/zOUMq7b3OGIWDvH59QVPSQqJ3_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/837e64-c744-45d5-8ad8-e5240073909b/1/zOUMq7b3OGIWDvH59QVPSQqJ3_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/zOUMq7b3OGIWDvH59QVPSQqJ3_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 23:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:60:9c:9f:77:61:42:c6:92:14:52:91:70:0c:c4:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cce50cabb6f73862160ef1f9f5054f490a89dff8
Validity
Not Before: Mar 26 23:00:22 2026 GMT
Not After : Mar 27 23:00:22 2026 GMT
Subject: CN=be90776071da3524afaab9992290bf4e2f87126f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:88:60:c0:75:5b:d9:7b:70:68:c3:dc:b4:c0:
9d:10:1a:f7:b5:47:0c:64:1b:e3:2e:0f:ff:97:06:
28:d1:4e:4c:3b:a8:32:07:83:65:63:36:03:55:b0:
df:3d:30:01:10:7d:cc:49:9c:6e:73:8e:a0:0b:08:
54:1c:ee:8a:94:77:f6:68:8a:a5:b3:c4:1b:0a:98:
0b:89:c4:50:b0:ae:09:a7:96:5a:5f:86:b9:ac:c5:
fd:44:6d:e7:ca:09:22:65:dc:0a:c1:45:55:f1:84:
53:20:3c:b7:b2:c6:cf:5d:c0:7f:ff:38:c2:ba:57:
bb:5a:c4:c4:b9:9f:31:c8:53:dd:ef:8a:b2:66:0f:
4f:6d:67:ab:73:ab:23:31:77:29:5e:bf:b6:be:d3:
fb:c1:ad:15:cf:20:6b:e9:6a:0f:f2:2c:99:c6:f6:
3c:ac:e6:d1:e9:c9:60:02:94:e2:b9:10:8a:fc:7d:
ea:ae:93:8a:a8:0e:6a:5f:26:0f:61:0a:89:68:a1:
8d:ab:34:2e:16:f7:c2:b5:e2:99:8f:15:97:01:88:
9f:79:90:00:ab:be:eb:bd:9c:bb:a3:fb:c0:d7:35:
36:d2:fa:84:19:bd:5e:00:47:b4:99:f4:ea:a9:04:
45:2c:ac:50:16:57:a6:f5:34:22:9b:8a:c3:ed:94:
bd:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:90:77:60:71:DA:35:24:AF:AA:B9:99:22:90:BF:4E:2F:87:12:6F
X509v3 Authority Key Identifier:
keyid:CC:E5:0C:AB:B6:F7:38:62:16:0E:F1:F9:F5:05:4F:49:0A:89:DF:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zOUMq7b3OGIWDvH59QVPSQqJ3_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/837e64-c744-45d5-8ad8-e5240073909b/1/zOUMq7b3OGIWDvH59QVPSQqJ3_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/837e64-c744-45d5-8ad8-e5240073909b/1/zOUMq7b3OGIWDvH59QVPSQqJ3_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:fb:51:aa:69:32:fd:bf:a5:32:16:6e:69:37:b4:17:36:07:
65:19:8c:19:90:4f:92:71:11:5f:99:da:00:67:7d:2e:d1:a2:
15:4a:a2:f4:54:eb:3f:a9:1c:6a:3c:f2:8b:14:51:2f:d2:02:
bb:3d:6d:29:d0:a4:7c:3f:18:1a:a1:74:7b:95:41:f0:6e:88:
a8:65:00:36:1f:7b:25:9a:fe:e3:f4:b9:bf:0d:5b:a1:e5:a4:
d3:4c:b3:81:1a:7f:d0:ec:a8:d0:09:8f:bf:03:00:d2:b6:af:
83:9e:77:fc:a5:5e:43:60:fc:fc:3a:2d:72:42:50:56:d7:ef:
d5:85:99:ab:b0:2c:a6:c9:3f:4b:98:72:56:fe:6e:14:34:48:
ef:f8:9c:0c:35:6d:4d:f7:86:b3:07:67:aa:f5:1a:76:98:e2:
d4:65:16:cc:01:ca:0e:0a:c8:96:74:e3:67:a2:39:b2:2a:6a:
b4:a9:08:11:18:9c:53:40:db:e8:7e:60:7d:f3:78:6c:18:11:
25:fd:1e:61:e8:1e:c6:cd:ff:61:aa:ec:1b:77:64:5a:88:64:
fe:26:49:56:db:1e:b8:e6:3d:d3:8c:17:c8:aa:4e:bc:95:2e:
af:96:77:0d:b0:01:7f:b5:11:1d:08:c6:06:6f:c9:9c:2c:03:
47:7b:1b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:39:02 2026 by rpki-client