Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.mft
File: ouOnZzp5md1JaggNu6-hB3rZgPs.mft (raw, json)
Hash identifier: zmoMFIcxP60WX3STSu7N+4x+HeclrrMkAEVyfFhiLAk=
Subject key identifier: E9:9A:86:0A:1B:A9:18:D4:8F:88:4A:73:4B:7E:4E:11:14:CF:86:51
Authority key identifier: A2:E3:A7:67:3A:79:99:DD:49:6A:08:0D:BB:AF:A1:07:7A:D9:80:FB
Certificate issuer: /CN=a2e3a7673a7999dd496a080dbbafa1077ad980fb
Certificate serial: 019D25F150D32B511141C267C90043EFFC12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ouOnZzp5md1JaggNu6-hB3rZgPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.mft
Manifest number: 0B90
Signing time: Wed 25 Mar 2026 17:01:04 +0000
Manifest this update: Wed 25 Mar 2026 17:01:04 +0000
Manifest next update: Thu 26 Mar 2026 17:01:04 +0000
Files and hashes: 1: k1jUiB18FcQkB0JlR9kMswQdw1M.roa (hash: CfSBzFps5ykYGRlVBhnlga1YMIkO7XIfB2LTKOI9Iko=)
2: ouOnZzp5md1JaggNu6-hB3rZgPs.crl (hash: vHBJXy3BK7to97ukQkMbwM5EvH6aLJ/LMdNCQOP1T9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ouOnZzp5md1JaggNu6-hB3rZgPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:50:d3:2b:51:11:41:c2:67:c9:00:43:ef:fc:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e3a7673a7999dd496a080dbbafa1077ad980fb
Validity
Not Before: Mar 25 17:01:04 2026 GMT
Not After : Mar 26 17:01:04 2026 GMT
Subject: CN=e99a860a1ba918d48f884a734b7e4e1114cf8651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:77:42:0e:b4:54:1c:07:7d:8f:a3:7e:d1:0d:
65:3e:44:aa:77:65:a8:16:13:44:93:c4:b9:51:c5:
2c:88:de:ba:9f:dd:2a:0b:d7:51:ad:be:6a:5e:c3:
29:d9:20:fc:86:a1:93:ff:6c:bf:1c:ee:3c:2e:69:
6f:af:a4:66:7e:72:01:a9:22:d5:b8:de:31:45:94:
71:30:38:44:10:ad:3e:50:bc:d1:b2:2d:6e:e5:42:
5c:39:aa:71:f1:df:89:c4:f9:e9:de:75:70:ca:4d:
ec:2b:72:f3:ba:2e:d2:49:11:f5:00:92:6f:b2:38:
b8:79:0e:8e:74:b1:7c:c1:07:8a:c5:ca:fe:75:da:
81:19:04:96:d7:b1:fd:6f:a4:65:a2:10:72:a9:de:
ae:cd:52:ce:4f:e7:c9:53:61:9b:d4:b8:8e:86:02:
ce:3f:8a:c2:92:cc:ef:63:47:7f:fe:65:8a:97:c0:
5d:6c:b8:00:b4:c3:80:53:1c:fd:93:3f:e4:f9:d7:
ea:9d:c1:88:4f:f3:68:26:b9:74:92:fa:a3:89:a4:
03:cd:be:97:4f:8d:73:a5:f9:1c:d8:8c:c2:4c:b4:
6e:13:8b:ef:1c:e9:7a:59:43:74:69:ea:11:64:35:
4e:56:3a:df:85:82:1c:07:55:05:e0:1a:8c:d4:84:
32:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:9A:86:0A:1B:A9:18:D4:8F:88:4A:73:4B:7E:4E:11:14:CF:86:51
X509v3 Authority Key Identifier:
keyid:A2:E3:A7:67:3A:79:99:DD:49:6A:08:0D:BB:AF:A1:07:7A:D9:80:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouOnZzp5md1JaggNu6-hB3rZgPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:13:3b:71:dd:83:73:c8:70:da:c0:41:8b:74:2b:25:b9:83:
80:33:75:ce:ae:f2:bb:42:3d:91:54:ea:c4:23:39:cb:fb:01:
f4:e5:52:70:93:64:5d:87:9e:68:ed:0d:aa:73:51:0e:4e:0e:
d1:4a:f8:5b:82:dd:e6:78:04:7c:7f:f6:cf:a1:a5:cf:e3:0d:
a2:a0:bb:64:2c:7e:47:00:5e:0f:87:fa:1f:67:ca:58:ef:a9:
80:b1:62:45:8e:c0:35:fa:9f:a0:b2:9b:db:b0:a5:68:ca:a8:
00:0c:35:06:8b:f0:97:ef:93:2e:70:76:15:3b:07:8f:fe:c7:
3d:7a:ea:65:40:a5:8e:87:1d:f7:e1:e8:9b:83:29:9e:81:7e:
08:0e:e4:36:78:66:4d:d3:c9:d9:91:00:b1:3d:07:f2:02:79:
82:fd:ff:5c:ef:66:8d:44:3b:cc:1e:db:29:48:fc:a2:1a:90:
00:80:c6:8a:a6:5f:df:84:a4:96:e2:39:b9:bd:92:88:67:30:
a7:51:2f:3c:95:37:0f:f4:73:26:29:0f:b9:c7:2a:8f:59:0e:
da:52:cf:83:72:15:2a:32:bb:f6:29:d4:d4:06:5c:06:9b:c8:
90:49:9c:ac:b9:9a:b5:0c:08:d5:96:54:5b:8f:56:5b:12:20:
1e:3d:85:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:27 2026 by rpki-client