Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/ba0b0e-7cea-4b9a-9b6d-0c0292167f95/1/Ou5vE-TaDy5DIqGnWqfn189xekI.mft
File: Ou5vE-TaDy5DIqGnWqfn189xekI.mft (raw, json)
Hash identifier: Bb0vSbGiDJ7C3tqFHe9KFzXm4MVIkrRSHB3tL9Ri6OM=
Subject key identifier: C3:C4:6B:E7:A4:40:ED:69:13:E5:5B:65:7B:CA:20:8E:23:D0:5F:2B
Authority key identifier: 3A:EE:6F:13:E4:DA:0F:2E:43:22:A1:A7:5A:A7:E7:D7:CF:71:7A:42
Certificate issuer: /CN=3aee6f13e4da0f2e4322a1a75aa7e7d7cf717a42
Certificate serial: 019CAD5A4F40CB19F6AC8FB8BDF6DF77EBD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ou5vE-TaDy5DIqGnWqfn189xekI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/ba0b0e-7cea-4b9a-9b6d-0c0292167f95/1/Ou5vE-TaDy5DIqGnWqfn189xekI.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 07:01:42 +0000
Manifest this update: Mon 02 Mar 2026 07:01:42 +0000
Manifest next update: Tue 03 Mar 2026 07:01:42 +0000
Files and hashes: 1: Ou5vE-TaDy5DIqGnWqfn189xekI.crl (hash: 2uST1lmN/x/kw9j9pkNJQsp+IocOhaEJje6AGrFGowM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/ba0b0e-7cea-4b9a-9b6d-0c0292167f95/1/Ou5vE-TaDy5DIqGnWqfn189xekI.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/ba0b0e-7cea-4b9a-9b6d-0c0292167f95/1/Ou5vE-TaDy5DIqGnWqfn189xekI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ou5vE-TaDy5DIqGnWqfn189xekI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:4f:40:cb:19:f6:ac:8f:b8:bd:f6:df:77:eb:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aee6f13e4da0f2e4322a1a75aa7e7d7cf717a42
Validity
Not Before: Mar 2 07:01:42 2026 GMT
Not After : Mar 3 07:01:42 2026 GMT
Subject: CN=c3c46be7a440ed6913e55b657bca208e23d05f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ce:7c:76:6c:76:55:84:75:36:8c:f6:5e:43:
8b:97:77:05:6a:75:75:5a:bd:f4:d7:a8:a9:7e:26:
78:36:1a:28:d4:1d:53:ea:53:98:d0:b5:09:be:f9:
bc:26:dd:f5:d7:4c:63:a8:78:52:30:f1:03:fe:46:
6f:75:26:cc:3f:d6:bf:a9:63:9c:31:60:a6:50:ed:
d0:95:a0:f2:ec:cf:4a:52:74:a9:9b:fa:82:21:ca:
7c:b8:2b:30:4d:82:96:8a:94:06:54:fc:b4:d5:f2:
fa:9f:62:68:fb:82:f5:cf:41:dc:bc:00:22:ff:24:
6b:05:1e:5f:65:c7:b7:07:45:a5:40:e3:c6:6d:50:
90:1b:ea:19:0f:a9:7e:56:03:10:a1:73:a1:18:f7:
25:e9:08:9b:5f:d4:ae:d6:d3:e6:3d:32:a5:39:c4:
ff:cb:49:cc:30:26:2b:e7:24:fd:36:5b:d1:3a:f6:
fc:2e:36:b8:b3:d5:e5:99:7f:61:1c:dd:b3:66:c1:
a3:7f:0e:88:35:d2:9f:35:e7:eb:8b:5d:39:2e:bd:
3f:86:f4:fa:d1:f2:73:94:1a:7c:e7:a6:10:00:44:
ac:0d:33:f7:81:e6:71:f0:13:1f:d5:88:94:23:e3:
c2:6e:22:01:97:44:f7:12:ce:8f:53:3a:ca:a0:87:
07:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C4:6B:E7:A4:40:ED:69:13:E5:5B:65:7B:CA:20:8E:23:D0:5F:2B
X509v3 Authority Key Identifier:
keyid:3A:EE:6F:13:E4:DA:0F:2E:43:22:A1:A7:5A:A7:E7:D7:CF:71:7A:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ou5vE-TaDy5DIqGnWqfn189xekI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/ba0b0e-7cea-4b9a-9b6d-0c0292167f95/1/Ou5vE-TaDy5DIqGnWqfn189xekI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/ba0b0e-7cea-4b9a-9b6d-0c0292167f95/1/Ou5vE-TaDy5DIqGnWqfn189xekI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:8e:79:5b:14:40:4a:da:1e:72:a2:9d:51:63:91:be:c2:d9:
eb:50:26:dc:46:b4:26:86:e6:1a:7f:47:ba:1d:c8:5d:c4:ca:
24:17:15:b1:b0:67:0e:8f:d1:a3:fd:2a:0c:9b:ed:d0:e8:f7:
13:86:ba:0e:61:92:c4:21:b1:f1:0a:c1:e6:1b:33:5b:8f:b0:
97:c1:dc:45:90:e4:ab:a8:2a:40:7f:08:3d:21:d1:51:a4:a3:
ff:0b:e5:7f:01:ce:db:39:1c:09:96:6a:0e:dc:08:f9:17:3f:
ca:ee:b5:b2:7e:cb:9c:3d:8f:bd:ee:56:23:99:be:c9:c9:d5:
07:f9:64:b8:3c:60:d3:ec:8e:0d:98:23:2c:cb:5e:f1:84:41:
6e:fc:2d:0a:4e:95:86:b8:a7:77:d4:14:5a:e9:91:48:21:30:
47:88:2f:ac:33:98:3c:59:c5:23:7a:60:78:d1:c0:1b:4a:fc:
94:f4:44:20:a6:3f:07:8d:b3:17:1d:22:76:30:ae:45:24:bf:
af:3d:fe:fb:4d:aa:04:27:1c:a9:6f:c3:f4:bc:d2:97:70:94:
8e:0f:30:ec:ca:7d:75:16:e8:9c:6e:fb:52:54:db:b0:9d:f9:
80:fa:d5:c1:ce:7d:be:18:d6:a9:b5:e2:bb:c8:3b:e4:92:cc:
2c:99:e2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:30:34 2026 by rpki-client