Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
File: OuUFv8f9kXaGscizohj1UI9aNwo.mft (raw, json)
Hash identifier: esTdItrkhr5QDqu/9oQ+UklcaIvN+JdFAwPrjsOywok=
Subject key identifier: 6B:94:CF:E8:9A:D9:4D:27:EC:31:56:1E:68:D8:05:72:4E:70:AB:51
Authority key identifier: 3A:E5:05:BF:C7:FD:91:76:86:B1:C8:B3:A2:18:F5:50:8F:5A:37:0A
Certificate issuer: /CN=3ae505bfc7fd917686b1c8b3a218f5508f5a370a
Certificate serial: 019CAB6B302FFBD285A6C9F3E60CF182E21F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuUFv8f9kXaGscizohj1UI9aNwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
Manifest number: 0496
Signing time: Sun 01 Mar 2026 22:00:54 +0000
Manifest this update: Sun 01 Mar 2026 22:00:54 +0000
Manifest next update: Mon 02 Mar 2026 22:00:54 +0000
Files and hashes: 1: OuUFv8f9kXaGscizohj1UI9aNwo.crl (hash: ImPePfeCxS0xRP5jOOSepUJXz0J1MFQzHbrd5ojrUZg=)
2: zMm9JKVVKWKfD1DDKP4qsT59tOg.roa (hash: C1WJK5Q9adCFTqiEMvgoPvMhAn7ou/puIqaX1v5Q3vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OuUFv8f9kXaGscizohj1UI9aNwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:30:2f:fb:d2:85:a6:c9:f3:e6:0c:f1:82:e2:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ae505bfc7fd917686b1c8b3a218f5508f5a370a
Validity
Not Before: Mar 1 22:00:54 2026 GMT
Not After : Mar 2 22:00:54 2026 GMT
Subject: CN=6b94cfe89ad94d27ec31561e68d805724e70ab51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:01:52:0c:c8:70:83:b1:b2:b6:6d:f1:2e:cc:
2c:5c:39:f0:d8:ef:bf:b0:5b:e5:3d:4d:4b:cc:e4:
3e:d9:3d:01:d6:c9:93:c7:86:73:9c:bd:40:18:47:
f6:0e:91:48:cc:8b:88:90:9f:cf:31:76:e1:35:e3:
91:6c:f8:16:4f:92:6b:d8:8d:e2:92:d7:c4:66:40:
68:8d:d1:bc:8e:43:ae:2b:52:be:83:ea:29:35:b8:
7f:4d:50:a8:04:a6:ba:15:e1:56:27:2c:f6:3f:52:
fa:5b:ac:b6:1f:ae:e9:77:b4:c8:6c:53:98:8c:26:
b6:ee:5e:11:3d:f3:de:d8:e8:a6:74:17:3a:d8:73:
08:b7:ec:bf:b5:00:b5:09:83:38:8a:f8:de:9f:7a:
25:c2:d2:05:64:2f:9b:a0:0b:af:d7:b1:29:cf:c5:
96:c1:cc:34:9e:93:02:62:09:70:88:28:88:0b:c1:
ff:a6:9a:3c:0e:3a:56:ea:38:33:dc:a4:b4:bc:32:
50:e9:f7:f8:b6:c8:2e:34:7a:3a:f1:9b:e2:b7:72:
e9:f6:6f:d0:ee:70:b9:e7:0c:c2:9b:be:56:38:a1:
c7:6c:bd:d3:8c:95:15:56:28:ea:08:3b:4a:7f:7e:
94:84:58:1c:92:d9:7c:59:00:1c:1c:ae:92:8d:21:
00:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:94:CF:E8:9A:D9:4D:27:EC:31:56:1E:68:D8:05:72:4E:70:AB:51
X509v3 Authority Key Identifier:
keyid:3A:E5:05:BF:C7:FD:91:76:86:B1:C8:B3:A2:18:F5:50:8F:5A:37:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuUFv8f9kXaGscizohj1UI9aNwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:db:c7:33:fb:54:50:f4:22:e7:c7:a6:d9:4f:98:b9:ac:6f:
08:86:60:e0:29:a2:2c:33:67:23:02:55:6b:53:57:a9:96:e2:
f9:32:b2:5e:c0:10:c4:e0:d1:bc:89:0e:2d:ff:81:20:87:bf:
1d:15:2b:a3:6b:05:bf:35:cb:7e:af:81:21:83:f1:56:4d:d9:
48:4b:90:39:35:24:3b:a9:fe:ec:08:48:e4:12:66:5a:5b:f1:
18:30:6f:0d:ae:b8:5a:7c:74:ea:b7:42:ff:ce:e6:38:32:1d:
f1:fa:76:b8:27:d4:30:d9:9b:46:a8:51:0c:4d:42:80:db:2a:
62:16:86:9b:3b:21:43:5d:46:bf:e3:0e:f4:7f:e2:19:bc:26:
53:e9:fb:69:ca:b7:ba:84:3a:41:d4:1f:13:a7:e6:60:7e:4f:
a1:f0:19:6f:e9:a7:d6:fa:80:ed:82:1d:99:33:ef:6b:1c:25:
dc:b9:d2:6c:aa:0b:88:a8:d6:34:3b:1d:a5:4b:29:ce:9b:ee:
f1:42:fc:4f:54:e6:52:63:6b:15:a2:01:8a:78:be:01:e5:0e:
29:a4:0e:6d:67:23:be:d5:30:c7:22:29:0c:54:48:24:e2:04:
f4:08:ff:14:e9:7e:31:70:ee:3d:da:68:a0:a9:46:a3:3c:06:
ae:a1:21:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:54 2026 by rpki-client