Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
File: Ou655pK6npPYuVpkiNXIdWCdSuw.mft (raw, json)
Hash identifier: 1jDmpR3YHPq1xyvy0s+6jvhg0WPvp3hrGPi56CDisEI=
Subject key identifier: D5:42:F6:C4:89:B4:D2:B5:88:11:3C:9B:8D:E7:D2:64:9B:01:38:8C
Authority key identifier: 3A:EE:B9:E6:92:BA:9E:93:D8:B9:5A:64:88:D5:C8:75:60:9D:4A:EC
Certificate issuer: /CN=3aeeb9e692ba9e93d8b95a6488d5c875609d4aec
Certificate serial: 019EC3374D7B3AB2D61DC8FB72F6A2C4FFE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
Manifest number: 171B
Signing time: Sat 13 Jun 2026 23:00:41 +0000
Manifest this update: Sat 13 Jun 2026 23:00:41 +0000
Manifest next update: Sun 14 Jun 2026 23:00:41 +0000
Files and hashes: 1: OSQYUaSf3gbMxgKVGaSRUtdNHTA.roa (hash: r4nA30trmkd0vBXPfRkmROxsmgpOrH0HeKPaS+ubN0w=)
2: Ou655pK6npPYuVpkiNXIdWCdSuw.crl (hash: SI4BkjiAXT5N4pDA2lddvisVkHEFy7WHnAIecwJsyyc=)
3: pVERtNhFi8FWjU9Y4DiQboSkUcg.roa (hash: zXHM3oZaOO62QcqG4BH7LRDl6S8yZxF21aaBpfwYUVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:37:4d:7b:3a:b2:d6:1d:c8:fb:72:f6:a2:c4:ff:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aeeb9e692ba9e93d8b95a6488d5c875609d4aec
Validity
Not Before: Jun 13 23:00:41 2026 GMT
Not After : Jun 14 23:00:41 2026 GMT
Subject: CN=d542f6c489b4d2b588113c9b8de7d2649b01388c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0f:20:1c:ac:6d:a8:90:ed:4f:55:41:53:c7:
b6:09:9e:be:a4:fb:0d:fc:55:de:42:3c:78:d8:af:
38:cf:11:33:88:59:31:38:23:d8:a7:20:58:c8:44:
27:9a:b7:63:f3:b0:d9:99:ad:52:be:7d:92:7d:8a:
4e:6a:1e:18:b9:56:a8:ff:ba:ec:5d:7c:ab:06:17:
7a:f6:cb:63:74:f7:a2:82:45:e7:33:0b:bc:cd:65:
65:ee:6f:9f:ae:66:03:8a:f7:e1:1b:0c:94:3c:47:
b1:94:b4:28:93:1b:74:53:8a:7a:3e:f2:1e:2f:13:
f1:24:4c:5b:c8:a0:7b:04:23:33:90:de:ab:87:7f:
a3:9f:2a:b1:97:6a:13:3e:5b:97:40:65:c1:ca:5a:
63:fb:59:7e:4d:ae:7c:62:4d:90:e3:99:4c:5e:d4:
0a:38:d5:6c:aa:ee:4b:f7:b5:18:0d:9f:d3:c6:b4:
a8:56:37:60:1e:49:81:88:66:1c:e9:d7:a5:c0:f3:
69:02:59:b2:58:4f:ac:94:0f:bc:e0:25:f7:10:ff:
64:8a:b1:e9:e2:33:21:fa:1b:49:d9:f7:4a:cb:bc:
f6:c2:98:3b:63:01:a2:71:0d:10:c9:57:51:2c:32:
b1:7d:4f:20:90:d0:b5:c4:e4:ff:7f:c8:4f:78:85:
a7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:42:F6:C4:89:B4:D2:B5:88:11:3C:9B:8D:E7:D2:64:9B:01:38:8C
X509v3 Authority Key Identifier:
keyid:3A:EE:B9:E6:92:BA:9E:93:D8:B9:5A:64:88:D5:C8:75:60:9D:4A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
eb:ea:f5:c1:65:09:74:67:66:36:8c:b6:58:bc:3a:40:41:0d:
17:df:32:9a:ee:2f:2c:af:3a:ec:3c:49:a3:a6:d5:77:68:fc:
ea:60:90:66:9a:6c:d7:f8:67:27:05:0b:06:84:d8:3d:43:a5:
9c:f8:d8:32:8e:09:ea:b2:1d:32:fd:f9:d9:16:9e:03:dc:08:
3b:0a:f6:c4:16:d6:5c:a3:34:c1:73:e9:8c:e6:01:8d:c7:39:
17:d5:bf:8b:3a:68:2c:7d:1e:39:6f:aa:fc:95:17:d8:e5:d4:
f3:35:88:1e:9d:f7:42:17:7c:68:91:30:8a:97:69:54:a9:90:
cb:6d:e4:ab:81:27:b1:f4:99:41:f5:2b:a4:73:d7:9f:96:c4:
87:da:7e:64:81:28:85:d5:16:29:3d:7b:63:e6:1e:ee:3f:17:
0c:d3:c6:00:53:bb:d9:4e:61:2e:1d:be:2d:55:57:69:18:02:
99:6b:f7:e0:46:04:ed:47:3b:7f:9f:f5:eb:09:63:1d:bb:51:
50:8e:f8:7b:dc:b3:67:82:73:a5:0f:19:ed:b1:39:85:ca:66:
66:88:58:68:d0:93:bc:d0:b7:f2:0c:94:4a:e4:ea:b8:2a:76:
7b:15:12:cd:a8:36:a3:a3:bd:31:e8:d0:8d:19:56:ae:72:1b:
5d:f8:83:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:25:25 2026 by rpki-client