Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
File: OUKesL2HA74uXwrMwoG_IhYEsM4.mft (raw, json)
Hash identifier: vehpFOeyPBYkMDPizuwg5E1m52m2pf5nmXF1PdcMvBg=
Subject key identifier: BD:49:78:46:CB:28:7E:59:69:8F:DC:C7:85:D2:DC:53:A8:AD:ED:8A
Authority key identifier: 39:42:9E:B0:BD:87:03:BE:2E:5F:0A:CC:C2:81:BF:22:16:04:B0:CE
Certificate issuer: /CN=39429eb0bd8703be2e5f0accc281bf221604b0ce
Certificate serial: 019CAA21CEE00822C7603E24B6843EE859E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
Manifest number: 0962
Signing time: Sun 01 Mar 2026 16:01:08 +0000
Manifest this update: Sun 01 Mar 2026 16:01:08 +0000
Manifest next update: Mon 02 Mar 2026 16:01:08 +0000
Files and hashes: 1: OUKesL2HA74uXwrMwoG_IhYEsM4.crl (hash: FvUO7NuxJZprUY0qHcNClmehzD5V01fpqoUs6O+5QWw=)
2: futCv-J21MxYYna1NlT0XMLEUxQ.roa (hash: Nuw/WTHENdY0hVuqEP9gOdFLaQ350WDyvFQ78Xtrdks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:ce:e0:08:22:c7:60:3e:24:b6:84:3e:e8:59:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39429eb0bd8703be2e5f0accc281bf221604b0ce
Validity
Not Before: Mar 1 16:01:08 2026 GMT
Not After : Mar 2 16:01:08 2026 GMT
Subject: CN=bd497846cb287e59698fdcc785d2dc53a8aded8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:35:f0:b6:37:dc:bf:7b:5e:4d:90:03:55:a7:
8f:73:0f:cc:91:79:bd:78:b8:be:2d:f5:36:1f:d3:
3d:28:79:5c:8b:37:80:99:c6:53:83:8b:80:86:ab:
0d:ac:c8:0b:94:d3:f5:1a:2c:49:dd:9f:30:19:f9:
7f:6f:74:60:ba:99:06:6d:5c:2c:eb:c8:8f:4d:b2:
93:98:de:9f:d8:17:7e:d3:93:80:cc:76:44:95:37:
2f:27:db:80:45:1d:17:c1:e8:d8:25:bf:c0:5d:3c:
1c:5c:ea:81:3f:88:0c:28:12:b9:30:6c:4b:a5:b0:
2a:86:06:13:63:29:b9:06:9f:3c:75:0f:8a:9f:bc:
9c:dc:b1:f8:42:9e:17:08:a5:a7:32:32:56:31:31:
4b:87:82:53:76:1f:dd:55:d0:ac:8a:bf:4c:ce:4c:
49:c8:72:86:71:40:7d:a6:44:55:b7:25:5d:1f:19:
9b:21:37:4b:66:1f:ea:23:91:1a:d1:0f:d3:ff:81:
9a:f4:3d:4e:1c:74:3c:92:7a:2f:db:cf:5b:57:99:
f5:6b:a1:c0:0e:c0:39:11:2a:b4:21:40:8b:b0:94:
93:8c:c2:54:d7:34:57:13:f5:63:79:18:83:f8:6f:
96:3e:56:12:ea:df:0d:2b:85:4f:40:6d:5f:91:6d:
6d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:49:78:46:CB:28:7E:59:69:8F:DC:C7:85:D2:DC:53:A8:AD:ED:8A
X509v3 Authority Key Identifier:
keyid:39:42:9E:B0:BD:87:03:BE:2E:5F:0A:CC:C2:81:BF:22:16:04:B0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:59:35:db:b7:6b:b1:5a:a7:db:d8:42:e1:74:96:7d:1f:84:
7e:7f:d6:6d:66:d3:cf:73:34:4e:79:6e:b0:1b:6e:8a:d1:ae:
c4:15:6e:8a:26:14:de:cc:e1:13:dd:e3:c7:23:be:c8:b5:ef:
6c:df:d3:30:fc:93:a7:69:27:ca:51:d6:27:6e:59:bf:38:ae:
0d:89:24:6e:dd:73:46:f0:60:3e:99:ba:6a:b4:1e:24:d2:51:
bc:34:13:01:a6:f7:10:4c:44:4e:8c:44:d9:d0:c2:14:c3:1a:
eb:7a:94:56:4a:98:61:db:2f:b2:ed:94:ae:bf:99:0e:ce:da:
43:e5:0b:34:29:56:35:e9:3d:a8:07:81:e7:b0:a1:2d:7b:76:
b3:55:90:ce:dd:8b:bc:65:db:20:32:cc:cf:38:9d:e7:8b:6a:
0a:17:7f:85:2d:39:ba:0d:4f:07:a5:8c:b3:d0:04:3d:c1:ac:
35:d7:60:c1:d9:07:6b:5e:dc:d4:f2:86:93:81:76:90:f8:a7:
77:70:54:05:0e:35:f0:9a:90:3d:f1:4c:24:35:9d:f0:75:95:
59:39:f1:83:e9:cd:45:a2:2c:37:22:79:a7:bb:84:98:29:ad:
81:0d:11:05:9a:f4:fe:e7:12:d1:d5:e8:a1:8e:fe:e7:f1:8a:
57:21:69:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqIc7gCCLHYD4ktoQ+6FngMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5NDI5ZWIwYmQ4NzAzYmUyZTVmMGFjY2MyODFiZjIyMTYw
NGIwY2UwHhcNMjYwMzAxMTYwMTA4WhcNMjYwMzAyMTYwMTA4WjAzMTEwLwYDVQQD
EyhiZDQ5Nzg0NmNiMjg3ZTU5Njk4ZmRjYzc4NWQyZGM1M2E4YWRlZDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzXwtjfcv3teTZADVaePcw/MkXm9
eLi+LfU2H9M9KHlcizeAmcZTg4uAhqsNrMgLlNP1GixJ3Z8wGfl/b3RgupkGbVws
68iPTbKTmN6f2Bd+05OAzHZElTcvJ9uARR0XwejYJb/AXTwcXOqBP4gMKBK5MGxL
pbAqhgYTYym5Bp88dQ+Kn7yc3LH4Qp4XCKWnMjJWMTFLh4JTdh/dVdCsir9MzkxJ
yHKGcUB9pkRVtyVdHxmbITdLZh/qI5Ea0Q/T/4Ga9D1OHHQ8knov289bV5n1a6HA
DsA5ESq0IUCLsJSTjMJU1zRXE/VjeRiD+G+WPlYS6t8NK4VPQG1fkW1t1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL1JeEbLKH5ZaY/cx4XS3FOore2KMB8GA1UdIwQY
MBaAFDlCnrC9hwO+Ll8KzMKBvyIWBLDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1VLZXNMMkhBNzR1WHdyTXdvR19JaFlFc000LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8wMWVhZmMtZDY1YS00YTc3LWJhNzMt
ZjJjNDhmYWY3ZjNkLzEvT1VLZXNMMkhBNzR1WHdyTXdvR19JaFlFc000Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8wMWVhZmMtZDY1YS00YTc3LWJhNzMtZjJjNDhmYWY3ZjNk
LzEvT1VLZXNMMkhBNzR1WHdyTXdvR19JaFlFc000LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABlk127dr
sVqn29hC4XSWfR+Efn/WbWbTz3M0TnlusBtuitGuxBVuiiYU3szhE93jxyO+yLXv
bN/TMPyTp2knylHWJ25ZvziuDYkkbt1zRvBgPpm6arQeJNJRvDQTAab3EExEToxE
2dDCFMMa63qUVkqYYdsvsu2Urr+ZDs7aQ+ULNClWNek9qAeB57ChLXt2s1WQzt2L
vGXbIDLMzzid54tqChd/hS05ug1PB6WMs9AEPcGsNddgwdkHa17c1PKGk4F2kPin
d3BUBQ418JqQPfFMJDWd8HWVWTnxg+nNRaIsNyJ5p7uEmCmtgQ0RBZr0/ucS0dXo
oY7+5/GKVyFp3w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:11:08 2026 by rpki-client