Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
File: Ou655pK6npPYuVpkiNXIdWCdSuw.mft (raw, json)
Hash identifier: 2wkaaNk6q4eu8qaB/weywcf9izhY7rIuYye1TquL6dk=
Subject key identifier: 22:40:1E:07:A5:A4:88:9E:0B:18:33:9B:89:3C:4D:26:0E:2E:EC:39
Authority key identifier: 3A:EE:B9:E6:92:BA:9E:93:D8:B9:5A:64:88:D5:C8:75:60:9D:4A:EC
Certificate issuer: /CN=3aeeb9e692ba9e93d8b95a6488d5c875609d4aec
Certificate serial: 01A0D26EDD097ED653F56564DF09AD41892D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
Manifest number: 182C
Signing time: Thu 24 Sep 2026 08:01:15 +0000
Manifest this update: Thu 24 Sep 2026 08:01:15 +0000
Manifest next update: Fri 25 Sep 2026 08:01:15 +0000
Files and hashes: 1: OSQYUaSf3gbMxgKVGaSRUtdNHTA.roa (hash: r4nA30trmkd0vBXPfRkmROxsmgpOrH0HeKPaS+ubN0w=)
2: Ou655pK6npPYuVpkiNXIdWCdSuw.crl (hash: WaT5MVC2mqfjEV5HqvN8ZVeoZOlhj/G5yLjDk1NgC3o=)
3: pVERtNhFi8FWjU9Y4DiQboSkUcg.roa (hash: zXHM3oZaOO62QcqG4BH7LRDl6S8yZxF21aaBpfwYUVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:6e:dd:09:7e:d6:53:f5:65:64:df:09:ad:41:89:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aeeb9e692ba9e93d8b95a6488d5c875609d4aec
Validity
Not Before: Sep 24 08:01:15 2026 GMT
Not After : Sep 25 08:01:15 2026 GMT
Subject: CN=22401e07a5a4889e0b18339b893c4d260e2eec39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6d:41:b6:e5:ad:54:59:08:9f:f7:02:f3:cc:
d2:5e:b5:ff:65:3a:18:6c:e4:aa:db:c0:22:7a:88:
79:69:25:7a:be:2f:78:93:45:10:6b:e0:4a:0f:1b:
ac:67:4c:a4:f7:5a:20:0a:27:6a:ae:ec:7a:fb:dc:
96:11:26:59:cc:8c:8e:a2:be:f2:31:0a:b9:c0:42:
a1:2a:54:44:19:1e:d4:08:d7:0f:d2:b8:c6:04:93:
cf:88:62:9a:92:6d:5e:d9:13:1e:7d:8a:c8:d1:4a:
ac:2f:1f:aa:e7:02:f3:3b:a2:b6:5e:2c:24:9e:23:
be:62:4b:ed:75:fa:ec:94:54:40:8a:85:4e:9d:52:
90:59:59:5f:8d:a6:ad:3f:0b:c8:2d:d0:4d:19:c1:
ae:92:c7:d4:59:14:ee:18:4c:d5:eb:1f:ea:66:9e:
c3:56:aa:99:4f:94:50:fc:98:4f:1a:e1:eb:6a:1c:
3a:72:2f:bb:ac:ae:56:5c:25:86:c6:a1:c8:2b:44:
49:ac:37:ff:67:70:7b:2b:02:e0:af:13:47:03:a7:
86:a8:f4:10:a7:b3:77:81:ca:6f:06:32:59:81:97:
88:34:fb:49:c0:e0:8a:7f:f9:40:67:da:3c:ec:a8:
ac:d8:cc:4d:25:3f:63:85:46:41:09:59:e4:c2:8d:
87:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:40:1E:07:A5:A4:88:9E:0B:18:33:9B:89:3C:4D:26:0E:2E:EC:39
X509v3 Authority Key Identifier:
keyid:3A:EE:B9:E6:92:BA:9E:93:D8:B9:5A:64:88:D5:C8:75:60:9D:4A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:a4:f1:00:90:44:c1:51:73:79:84:64:41:23:e2:ad:46:b8:
e9:34:09:71:0d:b5:31:6c:09:62:23:0e:f0:c1:54:ac:22:87:
9e:5e:e4:4b:7d:05:8b:87:89:00:49:e2:76:e1:f5:a2:ab:90:
9e:7f:a7:e5:52:8b:d8:cb:a4:cb:16:19:0c:7a:9b:17:6d:e9:
9b:e2:2d:7f:d2:71:04:69:03:f7:f8:a0:67:00:50:25:1d:8a:
c3:a2:4d:68:92:ea:b6:5d:84:92:37:c5:8f:27:67:11:21:44:
24:f6:49:f0:83:fa:d6:8b:b9:36:1c:76:ed:b8:d9:f9:01:f3:
12:56:8f:fa:05:18:57:4a:82:b7:93:a6:24:2e:4b:5e:1a:2e:
20:a8:0a:84:32:29:f1:65:2a:29:14:b2:45:84:ab:87:5c:f8:
e8:61:2b:9e:30:e7:92:6a:42:06:fe:a8:35:6e:82:a6:a4:8a:
d0:93:12:48:e5:aa:9c:48:3a:ff:3f:b7:09:32:63:70:ff:10:
8d:42:03:8c:af:8a:09:5f:39:72:6a:64:eb:f9:c5:e6:75:30:
93:3d:7e:d5:8c:a4:5a:c5:a9:41:dd:9d:df:90:8e:bd:65:b0:
d5:58:fb:a3:55:fa:68:df:50:8e:24:d3:fb:14:06:8c:f9:8a:
e6:0c:ab:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDSbt0JftZT9WVk3wmtQYktMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZWViOWU2OTJiYTllOTNkOGI5NWE2NDg4ZDVjODc1NjA5
ZDRhZWMwHhcNMjYwOTI0MDgwMTE1WhcNMjYwOTI1MDgwMTE1WjAzMTEwLwYDVQQD
EygyMjQwMWUwN2E1YTQ4ODllMGIxODMzOWI4OTNjNGQyNjBlMmVlYzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvm1BtuWtVFkIn/cC88zSXrX/ZToY
bOSq28Aieoh5aSV6vi94k0UQa+BKDxusZ0yk91ogCidqrux6+9yWESZZzIyOor7y
MQq5wEKhKlREGR7UCNcP0rjGBJPPiGKakm1e2RMefYrI0UqsLx+q5wLzO6K2Xiwk
niO+YkvtdfrslFRAioVOnVKQWVlfjaatPwvILdBNGcGuksfUWRTuGEzV6x/qZp7D
VqqZT5RQ/JhPGuHrahw6ci+7rK5WXCWGxqHIK0RJrDf/Z3B7KwLgrxNHA6eGqPQQ
p7N3gcpvBjJZgZeINPtJwOCKf/lAZ9o87Kis2MxNJT9jhUZBCVnkwo2H0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCJAHgelpIieCxgzm4k8TSYOLuw5MB8GA1UdIwQY
MBaAFDruueaSup6T2LlaZIjVyHVgnUrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3U2NTVwSzZucFBZdVZwa2lOWElkV0NkU3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8zZTI1OWItYjZkYy00Y2Y0LWFjMTkt
NTAzM2Y4ZDc5YmU3LzEvT3U2NTVwSzZucFBZdVZwa2lOWElkV0NkU3V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8zZTI1OWItYjZkYy00Y2Y0LWFjMTktNTAzM2Y4ZDc5YmU3
LzEvT3U2NTVwSzZucFBZdVZwa2lOWElkV0NkU3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGaTxAJBE
wVFzeYRkQSPirUa46TQJcQ21MWwJYiMO8MFUrCKHnl7kS30Fi4eJAEniduH1oquQ
nn+n5VKL2MukyxYZDHqbF23pm+Itf9JxBGkD9/igZwBQJR2Kw6JNaJLqtl2EkjfF
jydnESFEJPZJ8IP61ou5Nhx27bjZ+QHzElaP+gUYV0qCt5OmJC5LXhouIKgKhDIp
8WUqKRSyRYSrh1z46GErnjDnkmpCBv6oNW6CpqSK0JMSSOWqnEg6/z+3CTJjcP8Q
jUIDjK+KCV85cmpk6/nF5nUwkz1+1YykWsWpQd2d35COvWWw1Vj7o1X6aN9QjiTT
+xQGjPmK5gyrOw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 17:45:56 2026 by rpki-client