Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.mft
File: OuFF_jt5sr9oqtvgB9721yrvKsM.mft (raw, json)
Hash identifier: Z0KKF8N7RmTo2hsbDqF/D/5GnndVTECI6zCYNA/T7HQ=
Subject key identifier: 38:61:3D:D1:26:89:08:E6:FD:59:AA:B5:2F:EA:B4:24:AD:C3:D3:91
Authority key identifier: 3A:E1:45:FE:3B:79:B2:BF:68:AA:DB:E0:07:DE:F6:D7:2A:EF:2A:C3
Certificate issuer: /CN=3ae145fe3b79b2bf68aadbe007def6d72aef2ac3
Certificate serial: 01A10392A27A3B31E7B40E85C377E02CBB9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuFF_jt5sr9oqtvgB9721yrvKsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.mft
Manifest number: 1397
Signing time: Sat 03 Oct 2026 21:01:43 +0000
Manifest this update: Sat 03 Oct 2026 21:01:43 +0000
Manifest next update: Sun 04 Oct 2026 21:01:43 +0000
Files and hashes: 1: 9dlwjsoeaynXvLD6hU--GhYSrqM.roa (hash: mUWy20UuJGJ5BznEAMczwLkiJHHJsFmSVmANdbalu+k=)
2: OuFF_jt5sr9oqtvgB9721yrvKsM.crl (hash: wZZdBy+3eKX6seOFR1WxTUyTECvT6XZFvtQsXVrYSC4=)
3: rM_jdXy84vXGo0-WUXb97B2X5Vc.roa (hash: GjuFk6jemR6ii4hI/oxG1vqpEf4r+3pyDc+nTJsViK0=)
4: sEmorA-ZRll0p0UMYOTfT8auHu8.roa (hash: NXJluQHm5Ujqo8vGjkexvbDRO7wfW2RmWXBToETA0t4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OuFF_jt5sr9oqtvgB9721yrvKsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 21:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:92:a2:7a:3b:31:e7:b4:0e:85:c3:77:e0:2c:bb:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ae145fe3b79b2bf68aadbe007def6d72aef2ac3
Validity
Not Before: Oct 3 21:01:43 2026 GMT
Not After : Oct 4 21:01:43 2026 GMT
Subject: CN=38613dd1268908e6fd59aab52feab424adc3d391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ad:f0:bb:2f:bc:03:c2:1f:6f:ba:c1:87:68:
d1:3e:b0:a0:e1:1f:a1:dd:6c:f0:c9:3b:6b:b0:4e:
8c:7d:a1:76:11:e5:4d:7e:f6:80:d6:e7:25:22:e1:
38:f2:29:b0:c1:37:0f:3d:43:2a:22:73:1b:59:2f:
63:ab:8f:b8:55:71:59:e6:a9:99:c3:f5:44:16:87:
6f:c8:f7:65:33:35:8d:a7:d4:e1:bc:e0:b5:c9:68:
2d:fe:9b:07:cd:1c:96:55:b1:47:81:7c:b9:66:51:
99:58:a9:b3:a8:85:e2:e4:e2:4c:6f:5b:cd:03:30:
63:9a:74:6f:24:8f:5a:61:32:39:e0:cc:e8:70:b1:
02:da:30:38:11:0e:e1:fb:89:db:28:6a:22:97:c2:
1f:62:cf:13:66:90:02:7e:5a:4a:08:23:32:8c:26:
83:1c:9a:cb:f4:9d:cf:1e:8f:c9:06:47:a2:db:e9:
0a:41:39:83:ef:25:81:5f:bf:0a:af:03:69:53:5b:
24:44:fe:7b:92:35:23:b7:c2:10:8d:30:1f:7f:f7:
86:34:f1:b2:d6:d1:12:6d:80:cf:31:1f:f9:e3:21:
17:38:d8:2f:9c:e8:6d:0b:19:f5:92:44:02:ee:03:
df:3f:d7:d7:56:75:3e:aa:f9:b9:ac:8d:2c:b2:9c:
c2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:61:3D:D1:26:89:08:E6:FD:59:AA:B5:2F:EA:B4:24:AD:C3:D3:91
X509v3 Authority Key Identifier:
keyid:3A:E1:45:FE:3B:79:B2:BF:68:AA:DB:E0:07:DE:F6:D7:2A:EF:2A:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuFF_jt5sr9oqtvgB9721yrvKsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:b9:68:07:a1:a8:23:a6:01:80:2b:89:c3:85:09:72:2d:d1:
68:59:26:25:2a:dd:46:eb:a3:be:fb:d4:f7:dc:4c:11:4c:7d:
8b:4d:a8:91:cf:25:a5:52:95:60:ee:36:0d:fb:2f:90:af:70:
08:c4:80:1f:7c:fb:69:67:76:c0:89:3d:a3:fa:c2:21:c9:e4:
73:f1:17:93:b3:76:f1:2f:30:31:df:f9:ab:8e:47:8d:16:3f:
b9:1f:66:eb:88:85:a6:7e:7f:51:e8:bc:05:32:33:19:e9:1f:
1d:7f:c3:23:7a:13:e5:95:09:2b:43:33:23:2f:3a:fb:86:58:
a8:1b:ac:7a:74:2c:a5:fa:b0:60:c0:1e:ba:c9:49:9b:a3:8d:
46:48:cc:ed:d0:9a:8d:8c:de:63:8b:97:09:15:88:68:50:d0:
8b:5b:c6:fb:22:45:06:53:d2:9a:91:a6:39:b5:e5:28:1c:97:
21:c1:0e:95:f9:23:08:f7:56:48:81:5a:c2:26:fa:73:be:73:
4a:2e:40:93:f4:f9:79:fe:8c:59:26:e2:bc:11:d4:c9:91:14:
36:2c:b5:42:77:b2:3d:f5:89:4b:49:48:69:e7:db:85:7f:90:
11:ae:20:81:0b:24:d1:11:23:5c:f0:53:e6:3f:4e:b3:dd:87:
55:29:0d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:56:27 2026 by rpki-client