Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft
File: ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft (raw, json)
Hash identifier: JztdkaExkaUEWW4tHdspx9pSF0Vz1JsvNcO2sVksI/E=
Subject key identifier: 6A:8B:1F:98:F2:04:86:A0:2C:DE:4A:EE:3B:44:29:46:12:FC:26:3F
Authority key identifier: A2:E3:C4:EC:7B:36:11:2F:CE:52:1F:5B:EF:28:73:C7:B4:CC:88:D1
Certificate issuer: /CN=a2e3c4ec7b36112fce521f5bef2873c7b4cc88d1
Certificate serial: 019CABA25BA1D54333A531046CF7AE164806
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft
Manifest number: 146D
Signing time: Sun 01 Mar 2026 23:01:10 +0000
Manifest this update: Sun 01 Mar 2026 23:01:10 +0000
Manifest next update: Mon 02 Mar 2026 23:01:10 +0000
Files and hashes: 1: Ieo-AC5YDpT5XaC-tbGvdsSwkLE.roa (hash: sib5MLrWFBDEBml1a5atNNLAsn61q4TVzPsWvIidTuU=)
2: ouPE7Hs2ES_OUh9b7yhzx7TMiNE.crl (hash: yb5a2cbpWXdrNkS/JfFroR0st0KS1iw2P/JTqd2zP48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:5b:a1:d5:43:33:a5:31:04:6c:f7:ae:16:48:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e3c4ec7b36112fce521f5bef2873c7b4cc88d1
Validity
Not Before: Mar 1 23:01:10 2026 GMT
Not After : Mar 2 23:01:10 2026 GMT
Subject: CN=6a8b1f98f20486a02cde4aee3b44294612fc263f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:98:6b:e2:38:9f:d8:38:bb:27:68:a2:48:d4:
12:23:5d:61:42:64:78:60:06:ee:2c:49:26:7a:86:
7e:95:a1:89:d5:a8:37:cf:c6:22:f6:33:8f:a4:84:
1a:53:c7:b4:1f:fd:1f:1c:79:d9:ab:e6:d8:32:43:
33:f5:8f:04:38:4e:08:64:b2:f7:a2:39:b3:e7:e9:
07:92:4f:18:d2:d3:b0:7e:f2:c5:97:b5:b4:34:65:
39:58:6b:ba:49:66:d4:aa:89:8a:41:1e:56:56:c8:
b9:65:33:b0:e5:d7:24:0b:93:a3:ca:10:55:3d:a1:
db:b6:e9:6c:83:c5:7e:44:23:fa:72:2c:c3:96:86:
6a:4c:b3:ff:0c:9b:aa:23:b4:06:92:cd:85:72:7c:
c6:cf:a4:7b:0c:76:9b:54:a8:42:c9:f4:15:11:91:
f7:ec:f1:16:9d:c6:c5:89:da:22:b2:d1:9a:ce:7c:
89:ee:d5:b6:2e:a4:f2:13:5f:c5:97:59:19:52:c5:
f3:8f:1d:3d:f9:c5:10:e9:a0:19:4b:e9:5e:57:be:
a5:35:40:c4:39:96:12:e9:93:dc:85:99:17:82:57:
c5:fc:a9:a0:e5:ac:ba:a5:c7:cc:6b:af:52:8c:9f:
ef:a6:f9:bb:b2:37:4c:e2:1f:eb:42:ea:b6:90:6f:
53:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:8B:1F:98:F2:04:86:A0:2C:DE:4A:EE:3B:44:29:46:12:FC:26:3F
X509v3 Authority Key Identifier:
keyid:A2:E3:C4:EC:7B:36:11:2F:CE:52:1F:5B:EF:28:73:C7:B4:CC:88:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:36:91:90:4d:d6:a3:c9:2d:8e:31:40:93:3b:a2:50:5a:93:
be:8d:7d:33:3a:15:9d:4e:48:f6:76:2b:d1:29:b9:81:df:77:
79:a2:2c:2b:4d:dc:a6:4b:8d:bd:a5:7d:9a:d1:83:fa:19:c7:
de:9d:51:53:d4:bd:58:fc:a8:7c:97:fa:02:0b:10:8c:95:a8:
2a:56:0f:be:c2:f5:a7:a1:16:60:e0:25:9b:6c:14:7f:d8:57:
58:04:1f:53:c6:72:5b:85:7b:f1:c7:7e:e0:d7:81:32:eb:cd:
ad:a2:14:7a:ad:b1:18:43:8f:73:54:71:7e:b2:8d:cc:90:da:
86:58:22:42:f5:1a:82:b7:cd:f9:9a:59:f4:8d:b8:cb:e6:ec:
c7:63:6a:97:b5:c6:7e:4b:08:66:5c:33:1f:8d:f7:70:26:41:
96:32:31:8d:7a:15:09:ee:6c:8b:52:a1:3d:12:8f:05:a5:3a:
37:64:44:a6:73:cf:ce:aa:b9:6d:d4:98:42:95:9a:ad:a9:7c:
3b:e1:87:28:dd:f0:58:e5:43:5b:da:e3:fe:ef:c3:3c:0c:a8:
bd:7a:d3:05:63:fd:68:72:96:c4:ad:53:7f:af:93:be:8f:87:
1a:94:7b:1e:6a:0d:3c:3a:b6:4b:a8:0e:0e:d5:f9:95:3e:87:
2c:4f:e9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:18:27 2026 by rpki-client