Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
File: OUKesL2HA74uXwrMwoG_IhYEsM4.mft (raw, json)
Hash identifier: zvZG95xLC4BHe3Y9AuTGYIC1Ag+n5X9NiVqpv0Xy2cQ=
Subject key identifier: DB:34:FF:23:02:F2:43:A4:09:7A:97:67:97:5C:80:9A:04:2E:F9:CF
Authority key identifier: 39:42:9E:B0:BD:87:03:BE:2E:5F:0A:CC:C2:81:BF:22:16:04:B0:CE
Certificate issuer: /CN=39429eb0bd8703be2e5f0accc281bf221604b0ce
Certificate serial: 019FAABE884FC7CB4844DD1500A4A22DC6C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
Manifest number: 0AF0
Signing time: Tue 28 Jul 2026 22:00:41 +0000
Manifest this update: Tue 28 Jul 2026 22:00:41 +0000
Manifest next update: Wed 29 Jul 2026 22:00:41 +0000
Files and hashes: 1: OUKesL2HA74uXwrMwoG_IhYEsM4.crl (hash: sNvGlX4ERs0PdiKeVbCAZZx0kZhOzXMXSQTkG2rT1Y8=)
2: futCv-J21MxYYna1NlT0XMLEUxQ.roa (hash: Nuw/WTHENdY0hVuqEP9gOdFLaQ350WDyvFQ78Xtrdks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:88:4f:c7:cb:48:44:dd:15:00:a4:a2:2d:c6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39429eb0bd8703be2e5f0accc281bf221604b0ce
Validity
Not Before: Jul 28 22:00:41 2026 GMT
Not After : Jul 29 22:00:41 2026 GMT
Subject: CN=db34ff2302f243a4097a9767975c809a042ef9cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:8b:9a:99:ba:89:74:b8:0a:2a:75:38:99:54:
dc:8f:2a:b9:7c:55:70:a5:0c:cb:78:10:0d:95:4e:
17:9a:72:5c:16:bb:d0:cc:00:e2:fc:91:2d:32:64:
dc:e2:75:8d:ba:f3:6e:43:25:b8:28:38:b0:c0:57:
e0:37:4f:33:88:28:a6:5e:57:ab:8f:56:0d:c4:0f:
a7:9d:04:14:32:07:b1:55:6d:f2:8e:7e:05:ad:e5:
dc:96:68:b3:2a:6f:aa:ef:4e:b2:af:2e:c8:d0:fe:
04:a3:80:50:b1:11:2e:75:b8:7c:a2:13:a5:38:f0:
b6:ec:85:b4:91:1b:bb:8a:ef:fc:c7:4f:d0:a6:e2:
be:76:67:6d:f3:e8:35:df:46:e2:76:e4:5c:c6:31:
a1:e3:7d:11:8c:cd:ee:f9:4d:0b:a5:d6:24:bf:2c:
b8:ae:88:a3:53:b3:cc:4e:2b:fc:22:26:7c:48:cb:
d8:99:5e:51:22:86:2e:f9:3c:c1:45:23:95:db:98:
de:72:a0:f5:de:3a:c9:ee:70:00:93:97:3f:21:4e:
df:39:8e:b4:79:16:50:03:97:e2:22:8e:52:e2:af:
dd:b5:31:a4:f9:95:93:de:93:3d:6e:1b:8a:c3:44:
03:81:b2:74:86:f6:7d:e9:47:ab:f9:73:0b:d4:19:
9b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:34:FF:23:02:F2:43:A4:09:7A:97:67:97:5C:80:9A:04:2E:F9:CF
X509v3 Authority Key Identifier:
keyid:39:42:9E:B0:BD:87:03:BE:2E:5F:0A:CC:C2:81:BF:22:16:04:B0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:5d:9a:79:7a:52:c3:70:b8:06:47:e7:8d:fe:90:23:1a:3d:
65:0e:86:e1:1f:b5:14:fa:00:7c:db:cd:bc:82:b7:f5:9c:ea:
88:e3:f5:c4:51:d8:60:6c:bb:40:c4:9b:be:44:b2:d6:97:8e:
5c:98:77:c0:46:a7:6b:ad:75:0a:d6:7e:6d:f8:33:10:c4:5a:
c2:a3:45:30:75:70:16:7f:d7:6c:e3:67:06:62:e1:16:6e:56:
a2:49:e6:d7:f5:d4:41:4c:08:1d:c4:b6:e5:42:e7:a6:57:b3:
10:3a:fd:5d:14:0d:e7:4c:dd:6a:a8:75:9f:71:aa:c3:41:40:
88:fb:19:61:b2:8b:8b:e6:88:2d:15:82:a3:af:fd:91:a4:6d:
22:50:0e:97:38:0c:a6:02:e6:d1:e2:3d:db:2d:f1:1b:6f:f8:
72:8d:67:c1:c2:45:12:3f:d9:6b:d9:44:11:a9:bb:e0:02:63:
a4:eb:c7:9e:05:1c:01:15:d5:78:44:4f:cd:05:c3:5b:5f:2c:
89:b4:3a:29:27:85:91:0e:fb:fb:69:32:03:66:5e:0c:53:e4:
fb:d7:76:ce:32:c8:ef:e9:2f:f3:62:c0:a3:7c:c4:5c:64:39:
84:d2:b6:4b:37:73:c8:2f:89:d5:dc:ce:bf:54:8d:d8:0a:16:
8a:66:f1:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:55:34 2026 by rpki-client