Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
File: OUKesL2HA74uXwrMwoG_IhYEsM4.mft (raw, json)
Hash identifier: 0r3ZeKLWABFQ/k+d4xIm7kZTgHCKEMIYmTGB7MCJVgQ=
Subject key identifier: 90:F6:FD:95:93:00:FB:BC:67:2E:39:78:5A:D9:5D:B5:59:4C:F4:D7
Authority key identifier: 39:42:9E:B0:BD:87:03:BE:2E:5F:0A:CC:C2:81:BF:22:16:04:B0:CE
Certificate issuer: /CN=39429eb0bd8703be2e5f0accc281bf221604b0ce
Certificate serial: 019D99994B16680B5458A0282D3A39215BC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
Manifest number: 09DE
Signing time: Fri 17 Apr 2026 04:00:53 +0000
Manifest this update: Fri 17 Apr 2026 04:00:53 +0000
Manifest next update: Sat 18 Apr 2026 04:00:53 +0000
Files and hashes: 1: OUKesL2HA74uXwrMwoG_IhYEsM4.crl (hash: DAO80Nx2+222fj/pQhcjxpUnvVTNaypLzNNjF1m9pqw=)
2: futCv-J21MxYYna1NlT0XMLEUxQ.roa (hash: Nuw/WTHENdY0hVuqEP9gOdFLaQ350WDyvFQ78Xtrdks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:4b:16:68:0b:54:58:a0:28:2d:3a:39:21:5b:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39429eb0bd8703be2e5f0accc281bf221604b0ce
Validity
Not Before: Apr 17 04:00:53 2026 GMT
Not After : Apr 18 04:00:53 2026 GMT
Subject: CN=90f6fd959300fbbc672e39785ad95db5594cf4d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:51:54:a8:01:fb:10:6a:f2:6c:7b:fc:c3:c8:
a4:78:a1:33:23:f9:3c:a9:3b:3b:f0:f6:e9:5c:dc:
77:6b:a0:d5:02:fc:bc:01:dc:8e:c3:a5:f4:4f:53:
f4:19:95:70:49:21:65:b7:51:99:35:5e:9d:20:9b:
9f:52:bf:62:4c:db:85:32:9d:42:bd:12:c8:e8:8a:
31:a4:08:78:42:78:78:70:b1:f9:db:95:c4:02:b4:
0e:d2:75:8b:e0:cc:22:01:cc:95:88:6b:ce:e0:19:
9c:9b:ae:5c:8b:4c:a7:4a:68:4f:ba:59:bf:13:81:
14:f3:c7:52:af:11:1b:e8:20:eb:b7:ac:77:7b:f8:
e2:3f:88:18:71:05:34:83:e6:4a:23:13:cf:79:c1:
5d:6c:9a:99:14:97:65:25:13:2e:b9:97:f6:c1:18:
e7:ac:2e:7e:29:73:ad:04:2a:f9:61:b6:33:73:3a:
f6:9a:53:f8:c5:26:9b:33:d6:4c:1e:03:db:85:b0:
b6:51:d2:df:a4:5f:9f:ba:ec:41:cf:9b:a1:86:8a:
58:45:ca:92:a4:b4:50:40:54:7c:4e:10:e9:9c:49:
47:ae:1e:db:63:be:c1:7c:c4:40:f8:95:76:c5:ab:
59:8c:58:4e:27:f0:f2:1f:26:38:16:e6:16:4c:ec:
70:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F6:FD:95:93:00:FB:BC:67:2E:39:78:5A:D9:5D:B5:59:4C:F4:D7
X509v3 Authority Key Identifier:
keyid:39:42:9E:B0:BD:87:03:BE:2E:5F:0A:CC:C2:81:BF:22:16:04:B0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:55:c3:33:ba:01:77:1d:0a:43:29:0b:5d:cf:c8:aa:4f:30:
28:f0:13:97:de:c0:09:4a:d2:9c:96:b3:93:6e:2b:52:96:30:
a4:c5:96:75:61:56:99:a3:db:7e:c9:39:23:3b:50:9c:19:88:
be:7d:9c:aa:23:53:ef:ca:9f:ba:6d:67:17:01:e2:d6:49:02:
78:49:00:8c:ff:05:28:87:72:ef:59:24:69:a7:56:da:6d:4b:
eb:09:86:9d:31:90:9e:16:6f:d1:75:7e:3f:29:b8:fe:4b:58:
35:97:67:b6:0b:62:eb:63:1d:25:cb:2b:e1:bb:4d:cf:cd:30:
ed:0a:05:36:9f:45:bc:ca:25:9a:ff:ac:7e:d5:4d:30:79:f4:
b8:3d:02:45:96:ef:25:47:26:f5:8f:ec:2b:78:3f:14:5d:a2:
6a:45:7a:26:13:fb:e3:9c:cd:ac:26:06:9f:05:dd:fe:73:13:
95:be:d7:d0:bc:51:ed:6d:21:ea:a0:d2:fb:87:36:8a:2b:63:
ca:d4:24:53:a3:14:e6:f1:4c:37:28:e2:ec:b0:ef:f4:f5:08:
c4:1a:05:40:7e:82:f1:15:fc:75:46:30:6a:90:91:c2:9b:1d:
cd:52:49:54:76:47:da:5e:12:41:8c:55:ea:06:6d:55:41:8f:
d9:09:8f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:29:44 2026 by rpki-client