Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
File: OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft (raw, json)
Hash identifier: FUuBXFlnXNSwIGvlHP+JpL++fysHYgQMKQYxu0OnSIg=
Subject key identifier: BE:CD:02:E8:8A:10:64:F7:AF:C2:BF:59:66:D1:3D:EC:86:DD:25:75
Authority key identifier: 3A:EA:4D:AE:3E:99:4F:D9:FE:7B:E7:43:3E:42:F9:6F:67:15:93:78
Certificate issuer: /CN=3aea4dae3e994fd9fe7be7433e42f96f67159378
Certificate serial: 019CAAFD8487B37982765A0F0E63DAF5B9F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
Manifest number: 1035
Signing time: Sun 01 Mar 2026 20:01:07 +0000
Manifest this update: Sun 01 Mar 2026 20:01:07 +0000
Manifest next update: Mon 02 Mar 2026 20:01:07 +0000
Files and hashes: 1: OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl (hash: u2N2d0zipBMwhsBTE/jA8HPPLiowNKTABoTO5icYRPw=)
2: ZO-qcdvK7BzzeLOkMttoxYvxl4E.roa (hash: m6/e1cwgXC/4hA09rZcRl2fyViBKxPhi7mCSBLfbjRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:84:87:b3:79:82:76:5a:0f:0e:63:da:f5:b9:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aea4dae3e994fd9fe7be7433e42f96f67159378
Validity
Not Before: Mar 1 20:01:07 2026 GMT
Not After : Mar 2 20:01:07 2026 GMT
Subject: CN=becd02e88a1064f7afc2bf5966d13dec86dd2575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d4:73:79:d7:14:ba:62:5f:54:1e:7f:1d:16:
88:01:16:e1:9a:49:ed:8c:56:63:17:96:29:b3:9d:
e0:a2:65:98:a8:f8:ef:2e:96:2b:d4:a7:2d:03:c8:
81:07:de:68:3e:c0:19:40:9a:31:d4:2f:ec:13:c3:
de:50:ea:11:6a:94:9c:53:49:41:c2:8c:2f:fb:a5:
2f:06:50:0b:c5:0f:1b:2d:2c:12:a5:04:f1:c5:47:
6a:93:f6:3b:99:da:0b:c9:35:3f:2f:ad:b0:65:7f:
82:24:ab:20:b0:f6:f5:4c:c2:55:16:8b:7a:2b:53:
f0:0e:11:5c:1b:41:4e:80:40:78:6a:4d:bd:bb:c7:
fa:1d:f7:65:4c:f4:3f:88:ed:7a:7e:d0:0b:d4:1d:
37:b5:0e:39:b7:44:60:c8:8f:15:f9:08:c0:be:af:
74:2d:c7:64:aa:e3:8f:1d:4a:ab:be:81:ca:7b:ed:
a3:52:46:25:bd:82:3e:66:06:8a:a2:34:17:90:6f:
4b:2e:d1:2a:e2:07:a5:59:c9:b1:bf:d0:24:a1:9d:
6e:63:2e:95:9c:a1:0b:9b:61:3f:e1:50:68:ca:76:
56:b3:89:69:23:5a:80:82:47:4c:12:f1:50:42:87:
dd:40:50:ce:68:7d:dc:2a:47:dd:6c:92:46:3f:d8:
28:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:CD:02:E8:8A:10:64:F7:AF:C2:BF:59:66:D1:3D:EC:86:DD:25:75
X509v3 Authority Key Identifier:
keyid:3A:EA:4D:AE:3E:99:4F:D9:FE:7B:E7:43:3E:42:F9:6F:67:15:93:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:64:7e:7f:45:76:ff:3e:a0:73:aa:ae:db:65:f0:7d:f9:fd:
22:0c:f9:2a:2e:88:47:03:03:d2:55:2b:2e:3b:46:54:df:fc:
b2:5d:2a:9c:5e:27:f6:f1:c5:47:b8:9f:9f:68:4f:82:23:51:
7b:56:6c:44:29:14:57:77:1f:4b:57:65:e3:a5:83:04:c8:55:
94:2b:e8:83:0a:e9:97:f2:73:53:9e:ed:b7:2e:c0:bf:42:f4:
8d:77:bf:e1:25:b6:cc:3a:c7:90:e7:75:e1:dd:a7:a2:0f:be:
f2:cc:57:82:d9:17:d7:0e:1c:5c:55:f4:df:c9:9a:51:69:6b:
0c:06:95:dc:8d:67:6a:ce:4c:62:b0:b9:8f:01:22:88:7a:c8:
93:de:3d:25:72:16:1f:12:8a:82:0e:23:e4:c7:3d:75:57:81:
8b:f0:4c:80:d1:31:c6:4a:62:61:c4:a7:41:a0:e3:1e:95:79:
8a:fa:87:8e:d9:b0:f7:33:34:c5:ac:c3:88:d1:c4:29:fc:78:
df:c3:d5:b5:77:8e:e9:d8:ec:7a:53:6f:93:0e:4b:e4:7c:c8:
58:3c:e7:c0:1c:32:5f:1f:33:40:1f:d3:ef:9c:99:0f:90:6a:
b7:a7:5e:7e:cf:8c:4e:9b:2d:9b:7d:4a:dc:88:9c:11:fa:d9:
f7:d6:45:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:21:19 2026 by rpki-client