Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
File: OuUFv8f9kXaGscizohj1UI9aNwo.mft (raw, json)
Hash identifier: d2oWWp16xeaWwpfm/a0ISe+tVb9+e5R3orWMdDpeQsc=
Subject key identifier: 87:09:20:99:C7:3E:2E:FA:84:EF:36:F5:75:55:A2:0E:A8:3F:10:7A
Authority key identifier: 3A:E5:05:BF:C7:FD:91:76:86:B1:C8:B3:A2:18:F5:50:8F:5A:37:0A
Certificate issuer: /CN=3ae505bfc7fd917686b1c8b3a218f5508f5a370a
Certificate serial: 019EBE7F25B6A006B00DFC96FAF00D0ECAAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuUFv8f9kXaGscizohj1UI9aNwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
Manifest number: 05A9
Signing time: Sat 13 Jun 2026 01:01:04 +0000
Manifest this update: Sat 13 Jun 2026 01:01:04 +0000
Manifest next update: Sun 14 Jun 2026 01:01:04 +0000
Files and hashes: 1: OuUFv8f9kXaGscizohj1UI9aNwo.crl (hash: QSs9AnrVYc01/RigSfoTmDPtSaP3msYAr0RpqQvX74A=)
2: zMm9JKVVKWKfD1DDKP4qsT59tOg.roa (hash: C1WJK5Q9adCFTqiEMvgoPvMhAn7ou/puIqaX1v5Q3vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OuUFv8f9kXaGscizohj1UI9aNwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7f:25:b6:a0:06:b0:0d:fc:96:fa:f0:0d:0e:ca:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ae505bfc7fd917686b1c8b3a218f5508f5a370a
Validity
Not Before: Jun 13 01:01:04 2026 GMT
Not After : Jun 14 01:01:04 2026 GMT
Subject: CN=87092099c73e2efa84ef36f57555a20ea83f107a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e3:fa:11:0a:5e:56:d2:94:db:ce:f7:ad:3c:
ce:80:4c:8d:35:68:38:c3:2f:c9:0c:46:97:6e:82:
3b:59:e3:3a:bb:f5:95:3c:0f:0e:ce:1c:84:12:bf:
16:de:73:c0:25:e6:20:f3:5b:29:ad:e5:01:a5:0b:
76:49:dc:4f:5c:ef:fd:20:c4:1a:71:4b:9b:d5:dd:
7f:cb:cc:b0:7c:97:49:8c:3a:89:94:56:3e:89:57:
88:6b:34:7e:98:bc:b8:46:eb:fb:dd:aa:a9:de:52:
a9:51:5d:8d:46:52:e0:ef:0e:b8:f3:55:d3:2c:53:
ab:84:a8:ad:a1:4f:bb:06:f7:c7:94:8f:cd:05:0a:
4f:fd:c5:b8:f0:fc:11:4d:46:48:e9:c4:0b:27:bf:
68:1c:45:8a:2c:7e:0a:43:50:fd:65:34:2f:5f:88:
de:9e:98:91:cb:7c:06:17:94:48:ba:6f:6a:e6:d6:
ed:81:0b:7e:2b:cb:15:6f:81:23:b2:23:f1:63:b5:
a6:00:aa:63:f9:48:01:fe:42:c1:81:bf:40:ed:5f:
27:8f:70:7f:af:bc:5b:0f:1f:1f:10:39:a0:e5:a8:
c7:52:ef:8a:e3:46:7e:15:c4:f6:c6:8d:47:82:8d:
e7:7c:41:b2:22:43:24:a9:45:e1:12:76:38:ae:4b:
67:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:09:20:99:C7:3E:2E:FA:84:EF:36:F5:75:55:A2:0E:A8:3F:10:7A
X509v3 Authority Key Identifier:
keyid:3A:E5:05:BF:C7:FD:91:76:86:B1:C8:B3:A2:18:F5:50:8F:5A:37:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuUFv8f9kXaGscizohj1UI9aNwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:a2:df:ba:52:e9:b4:b7:92:eb:8e:a9:80:11:2e:8c:b1:f3:
a6:12:b9:8d:3b:d1:6a:09:62:51:33:88:06:62:0f:0b:96:cc:
65:ee:ef:81:ce:03:d0:fa:23:9b:00:a5:99:ef:68:74:a2:ea:
c7:7a:a9:1c:b1:78:94:72:5f:9a:07:2f:6c:7a:ee:31:5c:73:
05:b5:29:7e:08:7c:8e:01:0b:ac:47:39:94:c7:3d:88:c9:9c:
eb:40:a0:56:09:e1:b8:23:d3:21:d9:18:b1:9c:56:8d:80:40:
91:4a:8f:47:81:18:79:bd:92:62:18:c2:46:e8:5c:ff:87:04:
b0:b7:2c:a8:86:c8:97:a1:02:85:e3:9c:a5:df:79:33:10:ba:
2d:c9:74:51:6f:90:86:ee:f3:c7:bb:50:40:c2:01:1a:0d:f2:
a0:ff:9a:a8:94:56:cd:17:e8:c8:56:6e:36:33:08:d8:df:d7:
00:53:be:52:f2:c5:6b:d6:e2:f2:cb:08:40:e3:1d:7b:a9:71:
bc:cc:fd:e6:8d:cf:26:59:12:eb:8b:5e:50:79:a0:5a:ff:91:
b6:c6:74:0d:17:83:db:51:0d:36:b3:e5:b1:66:d7:4e:5d:69:
25:72:65:be:e3:d1:e1:d5:b0:2a:ab:d3:1f:e1:8b:af:70:5e:
79:75:e3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:51:13 2026 by rpki-client