
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
File: Ou655pK6npPYuVpkiNXIdWCdSuw.mft (raw, json)
Hash identifier: jYpq3d7ukBW6o62iSUrdkk9nqC7bcv6sT6S8mws6eVM=
Subject key identifier: 13:FC:74:2C:63:F9:C6:02:0E:B1:D3:33:26:8E:02:48:B4:EB:3A:FA
Authority key identifier: 3A:EE:B9:E6:92:BA:9E:93:D8:B9:5A:64:88:D5:C8:75:60:9D:4A:EC
Certificate issuer: /CN=3aeeb9e692ba9e93d8b95a6488d5c875609d4aec
Certificate serial: 019EC1493B41DA18C425366D33DB78A8C7F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
Manifest number: 171A
Signing time: Sat 13 Jun 2026 14:01:02 +0000
Manifest this update: Sat 13 Jun 2026 14:01:02 +0000
Manifest next update: Sun 14 Jun 2026 14:01:02 +0000
Files and hashes: 1: OSQYUaSf3gbMxgKVGaSRUtdNHTA.roa (hash: r4nA30trmkd0vBXPfRkmROxsmgpOrH0HeKPaS+ubN0w=)
2: Ou655pK6npPYuVpkiNXIdWCdSuw.crl (hash: uzf6WqBThoWcgSnUJuJPK1nzYn12tt9WjKa0aZQMaig=)
3: pVERtNhFi8FWjU9Y4DiQboSkUcg.roa (hash: zXHM3oZaOO62QcqG4BH7LRDl6S8yZxF21aaBpfwYUVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:49:3b:41:da:18:c4:25:36:6d:33:db:78:a8:c7:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aeeb9e692ba9e93d8b95a6488d5c875609d4aec
Validity
Not Before: Jun 13 14:01:02 2026 GMT
Not After : Jun 14 14:01:02 2026 GMT
Subject: CN=13fc742c63f9c6020eb1d333268e0248b4eb3afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:84:e8:23:4b:a2:bd:60:ab:b8:97:16:bf:70:
c9:37:6b:d8:77:42:59:1f:b8:3d:43:86:4e:4a:fe:
cb:26:23:97:c5:fd:d4:ec:9b:be:72:f9:8f:25:8f:
18:f8:b5:21:a8:02:0a:f8:04:a1:2d:73:c8:7c:48:
0c:24:bb:77:06:6b:c1:28:48:87:f9:b1:89:e2:59:
45:ca:52:2d:f8:c9:16:52:c8:f5:ca:74:b4:6d:d2:
f5:32:86:4b:47:d3:9e:07:a5:ba:d3:50:20:5f:2c:
1b:03:da:ca:8f:e2:42:ee:4c:30:bf:18:8e:db:04:
6f:12:2b:26:ff:40:11:0b:44:22:0a:e2:86:f4:45:
00:ac:a8:81:d1:c7:89:d6:88:40:5d:1d:2f:a0:1f:
27:e3:71:7c:5b:f8:e2:61:bf:c9:34:e8:d7:74:1c:
d5:24:63:2e:c5:a2:21:07:43:06:5c:00:b4:c5:3e:
2b:26:98:2c:8a:b5:f9:29:ef:e9:bd:ab:14:9c:d9:
4f:e7:3e:3c:9f:27:da:d9:c6:6d:02:d3:cf:f7:16:
98:2e:7e:e0:71:c8:3f:39:0d:7c:f7:64:96:be:fb:
69:bf:51:54:93:db:06:d7:3b:93:d8:90:f6:16:fd:
e6:f2:91:06:3c:2a:11:18:ba:66:0c:d5:7a:c4:0c:
e5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:FC:74:2C:63:F9:C6:02:0E:B1:D3:33:26:8E:02:48:B4:EB:3A:FA
X509v3 Authority Key Identifier:
keyid:3A:EE:B9:E6:92:BA:9E:93:D8:B9:5A:64:88:D5:C8:75:60:9D:4A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ec:df:5d:8a:29:30:e0:79:62:51:36:fd:14:ec:ff:47:89:63:
8f:f4:58:54:5d:ec:13:b9:a7:5f:d9:db:04:00:2f:5a:d7:5f:
35:fa:3a:c4:12:9b:2f:b5:0d:ce:5e:35:36:58:ec:91:cb:b6:
59:10:f9:20:bd:4e:3d:80:52:af:99:1c:0a:b5:f9:bb:04:07:
b6:2e:03:46:ea:8d:f3:4c:17:e9:9a:b5:69:39:f3:a8:d2:0b:
f8:63:4a:5a:30:aa:6a:a3:02:d7:37:8a:f0:9b:75:82:74:56:
de:1d:9d:72:8b:e3:f9:d9:46:9a:28:c9:1d:72:0c:7e:d4:de:
0b:0f:71:18:65:b8:0b:bc:b4:ef:6c:0b:f9:72:a8:78:2d:3a:
7e:00:c8:fd:d1:64:10:6a:22:ec:83:1e:48:e8:ea:2b:25:ce:
39:da:c6:85:32:50:79:f5:38:09:7d:48:bb:dd:0b:9c:8b:20:
84:d0:b3:70:4a:e1:f8:00:fd:12:28:d5:c4:0b:5a:d6:de:fd:
76:6a:60:f1:91:3a:18:5d:20:95:8e:35:3c:09:f6:63:dc:17:
49:a8:1f:cd:a9:ae:88:e7:15:9d:d2:d7:b1:d6:ee:c8:3d:48:
0f:e9:ed:fb:4c:ca:a6:4b:fd:ef:db:3d:23:37:c2:49:01:ee:
de:a5:54:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:45:11 2026 by rpki-client