Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.mft
File: OUxvc7PIOIH_yOZgOmtk9FNlrPE.mft (raw, json)
Hash identifier: F5vwd9S2/VZlUItBabB0Nhf0m6CjCW7KZi5B1QZxElg=
Subject key identifier: 64:DC:35:41:30:05:87:5A:7D:0F:8B:45:AF:9D:F5:C7:73:CE:2A:93
Authority key identifier: 39:4C:6F:73:B3:C8:38:81:FF:C8:E6:60:3A:6B:64:F4:53:65:AC:F1
Certificate issuer: /CN=394c6f73b3c83881ffc8e6603a6b64f45365acf1
Certificate serial: 019CAC46A08600EA298436DCD1626175D63A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUxvc7PIOIH_yOZgOmtk9FNlrPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 02:00:35 +0000
Manifest this update: Mon 02 Mar 2026 02:00:35 +0000
Manifest next update: Tue 03 Mar 2026 02:00:35 +0000
Files and hashes: 1: 6VFxjGZ8bOih2br-G1vsbpV4A1k.roa (hash: Bf69rzBJpwQt9lR7pHLJHrwn+ppr7MyMbshU+Z/vpy4=)
2: OUxvc7PIOIH_yOZgOmtk9FNlrPE.crl (hash: qvqbgsEInIPeKv2kgKyg0trXzFS1JPNR214yY9I0Xdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OUxvc7PIOIH_yOZgOmtk9FNlrPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:a0:86:00:ea:29:84:36:dc:d1:62:61:75:d6:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=394c6f73b3c83881ffc8e6603a6b64f45365acf1
Validity
Not Before: Mar 2 02:00:35 2026 GMT
Not After : Mar 3 02:00:35 2026 GMT
Subject: CN=64dc35413005875a7d0f8b45af9df5c773ce2a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5c:67:8a:eb:5d:e7:ea:2c:9a:81:15:ae:3c:
12:26:29:76:87:0c:d7:c9:4d:e2:c0:cd:05:1f:09:
b2:cd:84:f3:c1:2b:68:e8:28:ac:62:f0:cb:4e:e1:
37:b2:7d:84:87:11:9a:65:30:85:ba:47:0d:b8:7a:
ac:84:68:dc:6b:18:44:c5:3a:2a:bc:fb:05:7a:6f:
81:1a:02:80:1a:c8:eb:e8:8b:27:aa:52:e4:e8:81:
be:f4:b9:ec:96:c9:31:e1:46:b9:f6:7c:12:f4:09:
e4:86:8b:1e:97:73:6a:86:21:0a:46:31:ba:35:13:
9b:8d:66:99:e4:77:8e:cb:6b:49:5b:4e:9f:40:2e:
6a:67:38:ac:0a:04:76:d9:9a:cb:0b:17:5b:e7:e1:
4c:8b:81:26:5d:61:c2:1e:a5:2b:a1:c8:e0:2e:42:
73:f4:37:d4:cb:4f:fc:8b:c7:14:f2:5f:01:15:19:
9b:cc:89:01:5b:d4:36:1f:c6:25:5a:30:ea:6c:4e:
b1:8a:24:26:0c:d9:98:e9:ce:1b:ce:94:77:c4:5c:
4e:85:8b:73:9c:6a:24:a2:c9:f1:68:53:0e:1c:28:
2f:3e:74:27:06:dd:d0:e5:b8:15:90:9f:9e:cc:85:
72:ee:5f:cd:b4:9f:8a:f2:32:dd:79:be:3c:87:39:
a6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:DC:35:41:30:05:87:5A:7D:0F:8B:45:AF:9D:F5:C7:73:CE:2A:93
X509v3 Authority Key Identifier:
keyid:39:4C:6F:73:B3:C8:38:81:FF:C8:E6:60:3A:6B:64:F4:53:65:AC:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUxvc7PIOIH_yOZgOmtk9FNlrPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:22:69:aa:41:c3:f0:34:e2:a6:5b:b1:65:b3:8e:f9:39:bc:
7f:43:88:79:2c:1e:b5:c5:0d:68:68:7e:2f:8e:10:2b:29:fa:
34:3d:b5:70:e7:98:8d:94:5b:18:59:c8:3f:ed:ea:e7:a5:fe:
80:43:26:4d:9a:ad:a4:be:47:ad:d2:74:51:94:af:2d:37:8f:
ec:1c:6a:66:ec:96:26:2a:be:39:fd:ec:bf:58:39:1f:1b:c6:
ac:b2:52:f1:ef:c4:c5:9e:3b:9f:c4:9c:60:48:6e:e1:25:ed:
b0:8f:b4:a2:f7:b6:58:04:f3:a1:35:9c:ea:12:fe:85:c2:58:
00:a5:44:a2:e3:f4:10:aa:75:a7:e7:c3:ae:40:99:b6:3e:f5:
a0:09:82:6a:36:b9:20:05:f1:c9:3b:fb:d4:9f:d8:c7:6b:00:
dc:4a:3e:d6:c1:40:20:78:68:de:03:10:f9:14:06:52:d5:f0:
91:78:38:61:02:aa:dc:82:a0:23:f3:5f:fb:ea:40:69:e5:d5:
29:b6:5b:2f:9d:b7:8e:16:b8:7a:e1:15:1d:aa:6c:e7:ec:c3:
e5:5f:3b:04:7c:9e:5f:6d:86:cf:f5:66:74:c5:18:c4:ee:f5:
4c:00:f3:57:94:6b:e7:e0:b5:f8:ac:41:6b:8c:6b:8f:95:83:
39:7e:74:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:13:27 2026 by rpki-client