Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
File: Ou655pK6npPYuVpkiNXIdWCdSuw.mft (raw, json)
Hash identifier: 1BLyOMujfUFHm7snWZ5qZ+NOgsQPRSfd+Sc3b2wnBj4=
Subject key identifier: B9:6F:CD:47:83:B1:D7:A9:9E:F1:10:5C:4C:1A:1E:9C:35:BC:91:C8
Authority key identifier: 3A:EE:B9:E6:92:BA:9E:93:D8:B9:5A:64:88:D5:C8:75:60:9D:4A:EC
Certificate issuer: /CN=3aeeb9e692ba9e93d8b95a6488d5c875609d4aec
Certificate serial: 019CAA588E7278736F5D24B4E2AD97EC6A8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
Manifest number: 1605
Signing time: Sun 01 Mar 2026 17:00:56 +0000
Manifest this update: Sun 01 Mar 2026 17:00:56 +0000
Manifest next update: Mon 02 Mar 2026 17:00:56 +0000
Files and hashes: 1: OSQYUaSf3gbMxgKVGaSRUtdNHTA.roa (hash: r4nA30trmkd0vBXPfRkmROxsmgpOrH0HeKPaS+ubN0w=)
2: Ou655pK6npPYuVpkiNXIdWCdSuw.crl (hash: LnNz3zWdqRgxCpWWO756QxepagH6e8Nz31s+EnzC/po=)
3: pVERtNhFi8FWjU9Y4DiQboSkUcg.roa (hash: zXHM3oZaOO62QcqG4BH7LRDl6S8yZxF21aaBpfwYUVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:8e:72:78:73:6f:5d:24:b4:e2:ad:97:ec:6a:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aeeb9e692ba9e93d8b95a6488d5c875609d4aec
Validity
Not Before: Mar 1 17:00:56 2026 GMT
Not After : Mar 2 17:00:56 2026 GMT
Subject: CN=b96fcd4783b1d7a99ef1105c4c1a1e9c35bc91c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:47:36:7d:30:a3:47:c7:4f:a5:e5:ce:11:af:
ce:10:7b:e1:40:40:84:a2:11:20:fb:43:1a:7e:2e:
41:5f:7d:f6:02:f6:a9:cb:65:5b:9e:96:45:31:d9:
b6:13:78:7e:2c:bc:1a:be:8b:da:d9:c3:54:54:12:
24:60:96:3a:e7:2d:41:9b:fc:72:2a:de:9a:ef:00:
d6:8e:d5:a7:d8:6e:dd:57:27:15:b5:b4:06:5a:5f:
75:2b:dc:d2:5c:5f:60:a7:05:f0:a3:7c:10:0a:c3:
3a:50:d7:57:84:e0:74:4c:5e:69:23:83:c9:fd:d2:
17:28:9e:13:5d:02:f5:01:e3:3d:80:af:ff:83:89:
6e:19:c3:63:63:27:f7:cb:7d:36:57:67:bc:a3:67:
1e:22:be:1a:77:ec:58:c3:90:a9:9d:60:42:24:da:
9a:a5:b1:a6:38:e0:c1:fb:25:e6:3b:32:05:55:03:
5d:66:16:42:5a:ff:7c:e4:99:64:61:b8:d8:1f:9a:
ec:0d:f3:0c:ac:d1:b9:dd:78:5e:31:99:28:7e:35:
74:d6:be:2d:7f:e9:53:4c:d4:47:97:0a:61:85:ca:
93:b3:3e:df:c7:4b:86:8e:90:7f:98:96:3e:3c:45:
1a:82:fd:80:8c:6c:27:df:65:64:8f:60:e2:05:fa:
41:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:6F:CD:47:83:B1:D7:A9:9E:F1:10:5C:4C:1A:1E:9C:35:BC:91:C8
X509v3 Authority Key Identifier:
keyid:3A:EE:B9:E6:92:BA:9E:93:D8:B9:5A:64:88:D5:C8:75:60:9D:4A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:7a:ca:81:b1:f7:44:00:0a:cf:ba:b3:b2:6d:01:fd:2a:9f:
71:55:6e:ce:eb:53:f0:01:3c:80:0d:99:06:6f:b7:fa:96:c1:
33:0a:5c:9f:b3:c0:30:8b:bc:cd:4e:3f:be:3c:fe:b0:39:6b:
5b:0b:1f:d1:0b:1a:ea:07:1a:cd:5c:fe:8b:70:fd:8a:bd:32:
a2:02:e8:d2:f2:be:f3:6f:33:85:16:e1:78:6b:31:8e:34:fc:
bf:82:23:6b:42:c9:e3:c7:3b:b9:70:ac:4d:7d:06:4f:2a:bc:
3b:02:30:55:d3:cb:b9:59:bb:b8:01:af:d7:3d:f6:04:53:4f:
74:f4:20:65:00:2b:35:41:76:d0:c4:c2:aa:71:27:57:2b:c9:
96:bd:ea:a7:d3:8d:57:f2:32:d3:27:7d:c3:5d:de:74:0e:df:
89:38:a3:25:60:55:b8:45:01:88:9e:b1:ad:62:b3:87:81:b2:
db:13:6c:36:cd:28:d3:27:a7:1f:9e:4d:11:31:f9:43:b7:b6:
1a:1f:0d:72:42:8b:17:c6:d1:ef:08:75:03:e1:39:f3:16:4e:
2b:7d:f9:53:45:df:6e:c9:ee:ce:9c:f0:8e:30:43:96:da:70:
9f:c0:49:55:c9:79:3a:f3:b5:0d:39:22:e3:6b:95:5d:08:5c:
99:36:56:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:26:39 2026 by rpki-client