Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft
File: ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft (raw, json)
Hash identifier: j41KyTQffCl9vUy1W2l18VhCmVFywW6qmNTK4sZHcj0=
Subject key identifier: DF:D1:A6:3C:99:18:5A:9F:68:1F:7B:6B:85:89:B8:E1:1A:2E:C0:CB
Authority key identifier: A2:E3:C4:EC:7B:36:11:2F:CE:52:1F:5B:EF:28:73:C7:B4:CC:88:D1
Certificate issuer: /CN=a2e3c4ec7b36112fce521f5bef2873c7b4cc88d1
Certificate serial: 01A0EAAE241F2E133AE723DA8309353EC4D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft
Manifest number: 16A7
Signing time: Tue 29 Sep 2026 01:01:16 +0000
Manifest this update: Tue 29 Sep 2026 01:01:16 +0000
Manifest next update: Wed 30 Sep 2026 01:01:16 +0000
Files and hashes: 1: jOJexkDXSAKU_-HKNDagqEhFQhQ.asa (hash: KeiHn4aRyjzV0pdDSbfv01HgfCa1tMqxOinqb4oolAs=)
2: o9Ss8pZOMtCQFMYmaOI1iiVvKck.roa (hash: yQ2lKEVWTGb2qSCYFb6mTOwCLiNtvAVdOqsP+3WUfe4=)
3: ouPE7Hs2ES_OUh9b7yhzx7TMiNE.crl (hash: IkbprL+6EVXO5XAT9QWIRuJgEdUSmHgvc8KGSp0MkbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:ae:24:1f:2e:13:3a:e7:23:da:83:09:35:3e:c4:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e3c4ec7b36112fce521f5bef2873c7b4cc88d1
Validity
Not Before: Sep 29 01:01:16 2026 GMT
Not After : Sep 30 01:01:16 2026 GMT
Subject: CN=dfd1a63c99185a9f681f7b6b8589b8e11a2ec0cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9a:13:24:a8:23:09:62:69:59:4c:dd:9d:13:
01:81:61:a8:25:11:e7:80:ab:69:18:91:51:fe:bc:
4d:d5:94:69:77:68:a4:75:ee:46:45:e5:98:54:a8:
40:42:6b:ba:e8:34:15:20:86:90:0b:91:04:40:6c:
ac:42:66:9c:25:0f:65:9c:25:eb:81:4d:05:89:5d:
39:0d:61:af:02:5b:51:1e:98:b0:8a:a2:50:1c:76:
b9:f6:1a:94:c9:55:cc:c1:43:21:20:04:c5:f1:7b:
d6:20:39:a8:38:01:2e:7d:80:f7:ab:3d:97:0b:6b:
9e:9e:99:8d:46:2b:d5:b4:7d:a4:b5:93:49:6a:36:
69:31:a9:18:56:0d:99:7c:2d:b5:95:e3:b8:78:f3:
e4:02:50:63:7a:d9:e8:23:68:81:09:9e:7e:51:8e:
8c:2d:f7:2f:cc:6a:f9:9e:83:4a:fb:83:fa:e8:e0:
df:d7:2c:da:ef:db:3a:51:c0:f0:35:55:fa:dd:df:
fe:01:96:25:ae:b9:23:d7:01:53:0c:35:c5:3c:c4:
73:a9:08:88:0f:bf:55:2c:19:ea:28:31:12:95:6e:
8e:7e:d0:ec:b2:6c:91:31:29:c8:ef:fb:6c:0c:e6:
17:12:64:75:f1:9a:46:6d:ba:7b:d8:16:1c:b1:42:
8f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D1:A6:3C:99:18:5A:9F:68:1F:7B:6B:85:89:B8:E1:1A:2E:C0:CB
X509v3 Authority Key Identifier:
keyid:A2:E3:C4:EC:7B:36:11:2F:CE:52:1F:5B:EF:28:73:C7:B4:CC:88:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:28:d4:4e:6d:ba:b3:c0:e6:f2:35:84:de:25:83:6f:eb:ce:
ae:31:e5:d4:f0:d3:6b:c5:5b:3d:1d:7c:45:c1:36:3b:c0:66:
8d:87:12:dd:08:ca:3f:b9:53:00:5e:cc:dd:37:9a:fa:24:13:
12:1c:00:8d:99:76:e7:4d:bd:09:40:59:de:4e:67:65:c5:8c:
94:be:45:d0:c5:7b:02:5c:f4:9e:b0:b2:24:73:fe:7e:95:d7:
85:74:93:f7:e7:b3:92:d8:79:9a:e2:ca:18:83:7b:ac:ba:82:
96:1e:a3:eb:2c:ef:ea:c5:91:17:08:02:ea:49:ef:3c:e2:6a:
5d:df:67:3a:10:bb:f5:2e:a1:57:19:94:30:54:1e:93:0a:a6:
3f:af:40:0c:50:a2:a6:f1:15:ad:09:ff:32:8d:b4:fc:25:8c:
52:f8:f3:16:13:c1:fd:41:be:ae:c9:c3:f4:4b:2e:32:e8:50:
50:80:e1:ee:99:6d:14:b4:32:86:5e:45:d4:7b:ff:ef:1e:02:
53:5c:ee:ea:5a:06:ef:59:02:78:07:8f:70:a2:38:06:49:0e:
0a:c2:d1:97:86:5b:15:7e:2f:b6:d8:c5:79:63:86:9a:83:de:
99:15:ca:40:8d:8e:6b:6f:b8:64:d2:17:7a:4e:09:3d:76:cc:
5c:d0:ea:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:57:23 2026 by rpki-client