Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
File: Ou655pK6npPYuVpkiNXIdWCdSuw.mft (raw, json)
Hash identifier: OuWQzQa5uO8tn6QZWpKyOiEWFsYfcJC9yCoik4lB3Sc=
Subject key identifier: FA:4A:FF:00:27:BB:46:D1:CE:9F:A7:ED:B1:2D:56:05:4F:24:FC:70
Authority key identifier: 3A:EE:B9:E6:92:BA:9E:93:D8:B9:5A:64:88:D5:C8:75:60:9D:4A:EC
Certificate issuer: /CN=3aeeb9e692ba9e93d8b95a6488d5c875609d4aec
Certificate serial: 019D99D047966D9C16770B9DB0EAB1E5BBA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
Manifest number: 1681
Signing time: Fri 17 Apr 2026 05:00:57 +0000
Manifest this update: Fri 17 Apr 2026 05:00:57 +0000
Manifest next update: Sat 18 Apr 2026 05:00:57 +0000
Files and hashes: 1: OSQYUaSf3gbMxgKVGaSRUtdNHTA.roa (hash: r4nA30trmkd0vBXPfRkmROxsmgpOrH0HeKPaS+ubN0w=)
2: Ou655pK6npPYuVpkiNXIdWCdSuw.crl (hash: QjKVCfw+MJ/m/8wpielKdkRs/L599cFkO7eZ0EBMtlo=)
3: pVERtNhFi8FWjU9Y4DiQboSkUcg.roa (hash: zXHM3oZaOO62QcqG4BH7LRDl6S8yZxF21aaBpfwYUVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:47:96:6d:9c:16:77:0b:9d:b0:ea:b1:e5:bb:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aeeb9e692ba9e93d8b95a6488d5c875609d4aec
Validity
Not Before: Apr 17 05:00:57 2026 GMT
Not After : Apr 18 05:00:57 2026 GMT
Subject: CN=fa4aff0027bb46d1ce9fa7edb12d56054f24fc70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:45:fd:3a:48:b9:fa:2e:95:2c:26:eb:b4:1a:
1c:80:a3:81:e3:cf:33:5a:76:bc:42:dd:c3:f2:21:
86:8f:a4:fa:40:da:c7:34:4a:d0:f6:5b:9d:50:49:
50:4a:ac:f8:2f:57:01:7e:a2:29:49:8e:db:cd:98:
8d:40:d5:24:1c:87:72:85:19:8f:98:e6:6e:71:3e:
cd:c2:83:43:46:a4:1b:c0:37:8e:4c:bf:38:d2:32:
70:4f:be:f2:79:c8:c5:37:db:2c:8e:c3:18:f3:0c:
f7:f2:5b:f7:e1:6e:a5:75:c0:e0:78:45:73:2d:05:
8e:5d:44:f2:bb:5f:ef:b9:3f:9b:3c:ec:e3:7b:4f:
17:d8:b9:8e:b6:95:63:c3:e6:a7:87:c1:42:c6:3e:
f5:ff:fa:fc:d2:96:fe:2e:65:67:66:76:95:cb:0e:
17:b1:55:68:fb:f8:ec:4c:a3:ef:2e:5a:55:db:7b:
df:65:1a:b7:2f:e3:b1:5a:b9:44:74:6f:76:92:c8:
7b:22:9d:74:2b:58:ef:48:a7:3a:70:06:c1:59:a3:
83:ed:c4:dc:b4:fd:4d:55:6d:fa:c3:31:9d:c7:1a:
41:ed:3a:ed:8a:54:37:3c:38:f2:70:bb:f5:70:85:
46:15:1e:b7:da:5b:65:bc:7d:57:1f:60:9a:db:a7:
ae:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:4A:FF:00:27:BB:46:D1:CE:9F:A7:ED:B1:2D:56:05:4F:24:FC:70
X509v3 Authority Key Identifier:
keyid:3A:EE:B9:E6:92:BA:9E:93:D8:B9:5A:64:88:D5:C8:75:60:9D:4A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:02:76:28:a1:e8:15:5a:6c:95:f8:21:d7:c4:01:34:e7:31:
81:01:0e:e3:b4:01:9e:45:08:ba:33:95:99:a5:6d:74:98:8b:
34:58:48:f3:e8:36:34:22:a9:99:ce:84:b5:a4:cf:5f:1b:8c:
d0:3a:51:e2:1a:94:ca:5f:b1:23:cf:cb:05:ae:db:7c:42:1d:
64:86:3e:5f:73:f8:cb:24:42:b7:80:d3:79:e6:ea:d5:28:6c:
e2:bf:14:2b:2f:a9:9f:18:35:20:fc:70:e1:6f:b5:8d:cc:b9:
ea:4b:0b:8a:99:5c:67:1a:dd:40:ba:7c:a3:3c:0b:21:46:1a:
16:62:f1:4a:b4:75:f1:64:27:86:63:b8:25:52:a7:35:c4:c4:
73:47:bb:ee:55:6f:49:33:5b:80:2b:bf:81:fa:53:3b:9c:af:
2c:20:08:b8:0e:e3:0a:ea:bc:d2:cf:b5:50:ca:cd:25:a9:76:
b0:cb:48:f1:51:a9:5f:4b:43:e2:b7:67:ba:0e:75:a2:c5:41:
a1:99:2d:16:8e:af:43:ad:02:f3:5e:31:63:2c:1c:e6:ed:19:
c4:51:82:c1:1d:83:dc:85:85:a5:8f:f4:2d:9d:f8:38:f0:2a:
c0:93:dc:25:f8:a9:25:d1:4b:68:73:aa:f0:85:6e:a6:92:10:
e2:36:68:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:48:18 2026 by rpki-client