Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/OucTLOaCVLix_l3L-9IyLrkqctY.mft
File: OucTLOaCVLix_l3L-9IyLrkqctY.mft (raw, json)
Hash identifier: ONLwQ5qsg0iFAa9+vhlTAbM91OOp8mB7cct4GN1mCAY=
Subject key identifier: 8B:E7:BE:95:07:F3:FE:CA:80:48:B7:D8:D8:4A:1E:70:A0:7D:81:A9
Authority key identifier: 3A:E7:13:2C:E6:82:54:B8:B1:FE:5D:CB:FB:D2:32:2E:B9:2A:72:D6
Certificate issuer: /CN=3ae7132ce68254b8b1fe5dcbfbd2322eb92a72d6
Certificate serial: 01A0DD973D5554095D3D18F08AD4CD9C6186
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OucTLOaCVLix_l3L-9IyLrkqctY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/OucTLOaCVLix_l3L-9IyLrkqctY.mft
Manifest number: EC
Signing time: Sat 26 Sep 2026 12:01:11 +0000
Manifest this update: Sat 26 Sep 2026 12:01:11 +0000
Manifest next update: Sun 27 Sep 2026 12:01:11 +0000
Files and hashes: 1: BMNzg6EYr5M8zE4GFwahQLKFDj8.roa (hash: 8/w5/sefdEDU7vsG2GXfOV5wF3VjDyOddeHrv8h3r8c=)
2: OucTLOaCVLix_l3L-9IyLrkqctY.crl (hash: Ov0VPCy1CC94h0/rGqp3W6+duZfeEBjes/7wyeSEHjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/OucTLOaCVLix_l3L-9IyLrkqctY.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/OucTLOaCVLix_l3L-9IyLrkqctY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OucTLOaCVLix_l3L-9IyLrkqctY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:97:3d:55:54:09:5d:3d:18:f0:8a:d4:cd:9c:61:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ae7132ce68254b8b1fe5dcbfbd2322eb92a72d6
Validity
Not Before: Sep 26 12:01:11 2026 GMT
Not After : Sep 27 12:01:11 2026 GMT
Subject: CN=8be7be9507f3feca8048b7d8d84a1e70a07d81a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:38:ea:b7:9b:43:65:21:7e:20:ff:26:ef:a9:
fd:e4:4a:92:d5:2e:5d:48:e7:4b:94:9e:5b:74:33:
2b:79:73:a5:51:d9:85:ec:a9:6f:05:56:1a:32:41:
8c:0e:86:1b:c6:a6:29:74:a5:d7:d5:ab:63:73:44:
0e:29:44:83:f0:00:c0:2b:41:bf:2d:08:a8:3b:60:
df:ab:ed:3e:1e:12:e2:c6:f1:14:8f:54:e8:35:9b:
7c:ac:b0:27:7a:38:5e:3f:52:ea:1b:42:57:ac:fb:
4c:46:59:5c:dd:c4:ea:67:b1:9f:d3:10:32:86:91:
ad:44:19:cd:ee:41:d9:5a:48:03:0a:0d:2a:66:d2:
8f:e1:9e:d4:c6:e8:ab:5c:d0:1e:eb:2a:c9:a6:c2:
98:f4:93:8d:4e:52:70:f9:b3:e6:24:88:a5:1f:1e:
be:c9:01:6a:b9:47:04:44:87:f7:67:67:d9:71:84:
a5:7a:2a:02:2c:6f:a4:ce:17:e2:b0:14:a7:d7:ab:
7b:f4:8e:38:f3:fe:84:f2:6d:db:a7:9c:93:fc:9a:
22:27:95:05:db:9e:c8:bf:a1:83:f3:ea:75:1d:be:
04:bd:b0:64:45:ac:23:a7:06:88:10:9e:64:81:6e:
bc:ce:8b:96:ec:e7:ad:0f:24:dd:f1:08:65:f6:00:
71:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E7:BE:95:07:F3:FE:CA:80:48:B7:D8:D8:4A:1E:70:A0:7D:81:A9
X509v3 Authority Key Identifier:
keyid:3A:E7:13:2C:E6:82:54:B8:B1:FE:5D:CB:FB:D2:32:2E:B9:2A:72:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OucTLOaCVLix_l3L-9IyLrkqctY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/OucTLOaCVLix_l3L-9IyLrkqctY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/OucTLOaCVLix_l3L-9IyLrkqctY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:1a:4d:74:20:5b:26:73:1c:c5:bc:45:1d:88:d3:17:5f:6a:
aa:26:c8:46:cf:65:b3:ac:26:d2:43:5b:b0:91:5d:dc:fe:1a:
bb:cc:75:74:f9:98:52:09:04:9b:39:7e:71:80:c5:b6:0e:13:
b9:2a:f9:a1:9f:5a:e4:75:87:07:78:3e:2e:75:d8:b6:62:8a:
b9:07:8e:a8:26:b8:ca:5c:ce:5a:cc:89:b3:5a:62:7d:c2:e6:
b9:8a:04:d8:aa:11:8c:f1:72:c0:d9:2c:b3:bf:ed:a8:99:e4:
30:80:da:56:c6:d4:ee:2a:a9:75:3f:ed:3d:bc:e4:99:ba:a2:
21:85:49:1b:95:c3:a3:32:c3:f8:71:7a:55:de:9d:2f:19:14:
95:30:30:3a:3e:4a:ed:cc:34:2c:6d:ad:37:ae:db:ef:f7:bb:
c1:31:7d:91:e1:cf:cb:66:57:6e:fd:a5:27:a1:8f:4a:f4:ce:
55:1d:ef:a9:2e:18:71:b2:18:90:01:42:91:4d:16:79:34:b5:
14:8d:18:3b:b1:89:8d:3c:76:b1:2b:d6:bf:42:67:3c:d1:85:
30:8e:b1:e0:95:62:bb:fc:df:97:9f:81:0f:d5:af:66:5c:32:
f7:81:15:35:85:bd:5b:9e:81:0e:fc:95:60:f8:22:10:15:c9:
da:cb:e1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:10:08 2026 by rpki-client