Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
File: OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft (raw, json)
Hash identifier: yhsGFUeLiwkirxyruM0yLWtHcb3nD3mGX09RS5ugC9s=
Subject key identifier: C1:96:1B:77:B5:44:49:33:DC:81:2D:98:07:27:25:7B:FD:C2:49:27
Authority key identifier: 3A:EA:4D:AE:3E:99:4F:D9:FE:7B:E7:43:3E:42:F9:6F:67:15:93:78
Certificate issuer: /CN=3aea4dae3e994fd9fe7be7433e42f96f67159378
Certificate serial: 01A0C88F8CF604D4ACD5BEA7CD98D4C633B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
Manifest number: 1257
Signing time: Tue 22 Sep 2026 10:00:45 +0000
Manifest this update: Tue 22 Sep 2026 10:00:45 +0000
Manifest next update: Wed 23 Sep 2026 10:00:45 +0000
Files and hashes: 1: OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl (hash: sHT62Dahid6EwkpT2AnnjBBynFbNWUequtIHi+IOHiU=)
2: ZO-qcdvK7BzzeLOkMttoxYvxl4E.roa (hash: m6/e1cwgXC/4hA09rZcRl2fyViBKxPhi7mCSBLfbjRs=)
3: mdi8isJF9ZQ0I7Jg6Yr0cVHa8Ic.asa (hash: 54Ei/fKavstT42M7Nu3Fn+AfVQtGsu2BCI644ANc1Xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 10:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:8f:8c:f6:04:d4:ac:d5:be:a7:cd:98:d4:c6:33:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aea4dae3e994fd9fe7be7433e42f96f67159378
Validity
Not Before: Sep 22 10:00:45 2026 GMT
Not After : Sep 23 10:00:45 2026 GMT
Subject: CN=c1961b77b5444933dc812d980727257bfdc24927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a8:cc:70:58:9e:ac:ce:a3:ab:79:c4:60:39:
d6:c2:fd:3c:ab:6f:f8:4c:00:8d:f7:19:6b:3f:be:
93:fa:16:c1:c4:4f:ed:dd:2b:a9:66:d3:ad:7d:2a:
d1:21:67:f9:67:c9:11:15:72:28:9b:ff:42:5e:40:
bc:d4:cd:95:d4:6c:a1:a8:b9:ba:c4:f5:9f:4a:67:
a5:a5:9f:21:53:3b:90:dc:e1:47:66:52:ca:d4:b9:
0b:04:71:00:ec:38:3a:7a:90:33:48:f7:a1:b8:6f:
9c:ca:c8:86:eb:17:ee:84:cd:cf:c7:de:1d:37:e3:
ee:05:f5:29:dc:64:94:57:d8:9d:16:7e:11:ba:e6:
1f:79:41:f0:3e:67:54:c4:0b:dd:e7:81:67:b6:bf:
40:ee:f3:6d:25:9a:c0:ed:9e:95:a1:34:5e:0c:c3:
3c:c2:af:77:80:3f:97:d6:c3:4d:ec:07:3f:88:cd:
9e:67:03:56:5b:93:9b:15:d3:5f:ab:35:87:04:01:
23:9f:2d:46:e2:69:13:2e:60:7c:be:c7:32:9d:15:
51:ea:36:88:b4:78:60:5f:96:c3:77:58:ce:dc:fa:
1b:3d:63:7c:86:00:13:1b:3f:6c:e4:01:e9:d3:62:
7b:42:66:d0:8e:8b:bb:6a:b8:4c:88:c3:c6:6d:00:
fb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:96:1B:77:B5:44:49:33:DC:81:2D:98:07:27:25:7B:FD:C2:49:27
X509v3 Authority Key Identifier:
keyid:3A:EA:4D:AE:3E:99:4F:D9:FE:7B:E7:43:3E:42:F9:6F:67:15:93:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:f6:c3:e8:5c:de:b3:a2:84:5e:67:09:27:85:7a:82:c1:f9:
88:97:47:af:42:ab:30:34:55:75:58:2f:46:a5:51:a6:50:4b:
71:91:4e:52:44:4b:14:21:c5:84:66:ac:02:20:36:ce:91:73:
0e:6d:f0:36:51:07:33:55:b9:aa:cf:54:86:e9:56:aa:6f:32:
e4:58:cc:8e:c7:24:9d:5f:a2:ff:6f:80:cf:bf:b0:4e:74:c2:
f0:a9:53:6d:c0:10:fc:18:09:71:4d:c8:82:20:58:d5:59:7f:
b0:09:7e:ad:65:9d:9d:75:e6:f6:45:93:01:86:1a:9d:52:3b:
d1:11:c3:b0:74:2d:2c:bc:10:4d:ad:99:c4:ec:35:32:a9:51:
8d:de:8a:cb:49:14:8a:22:b7:5a:7b:6c:2d:e5:d8:11:4e:bc:
f2:2e:56:a8:55:66:f6:ba:48:1e:62:6d:c6:e9:a3:99:aa:60:
b7:15:4f:77:e4:42:6d:11:2a:e6:e0:6e:12:a9:a8:75:1e:11:
5f:3f:4e:a5:5e:39:44:07:22:6f:19:b6:d4:92:ed:8f:1c:35:
36:9c:97:5d:82:89:8b:ec:53:31:e3:7a:91:31:61:9c:7b:0d:
fa:ae:52:de:3c:d9:0a:e7:89:fd:f3:65:36:b0:d9:b6:b8:de:
23:e8:6f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:17:05 2026 by rpki-client