Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
File: OuUFv8f9kXaGscizohj1UI9aNwo.mft (raw, json)
Hash identifier: pKVWtZxeUN7YEe9kcv1d0b885YBJhJoyGnkN7zX/l2o=
Subject key identifier: D8:65:C3:E8:78:B1:03:9F:A4:5E:6A:1D:97:B9:17:8D:59:88:A7:B0
Authority key identifier: 3A:E5:05:BF:C7:FD:91:76:86:B1:C8:B3:A2:18:F5:50:8F:5A:37:0A
Certificate issuer: /CN=3ae505bfc7fd917686b1c8b3a218f5508f5a370a
Certificate serial: 019FAA1A89F8FB4743DE39E0E51120557EEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuUFv8f9kXaGscizohj1UI9aNwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
Manifest number: 0623
Signing time: Tue 28 Jul 2026 19:01:33 +0000
Manifest this update: Tue 28 Jul 2026 19:01:33 +0000
Manifest next update: Wed 29 Jul 2026 19:01:33 +0000
Files and hashes: 1: OuUFv8f9kXaGscizohj1UI9aNwo.crl (hash: F+sj+7UdX17NypHbLTglso2b2frH9EdNE27cMSBRfN4=)
2: zMm9JKVVKWKfD1DDKP4qsT59tOg.roa (hash: C1WJK5Q9adCFTqiEMvgoPvMhAn7ou/puIqaX1v5Q3vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OuUFv8f9kXaGscizohj1UI9aNwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:89:f8:fb:47:43:de:39:e0:e5:11:20:55:7e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ae505bfc7fd917686b1c8b3a218f5508f5a370a
Validity
Not Before: Jul 28 19:01:33 2026 GMT
Not After : Jul 29 19:01:33 2026 GMT
Subject: CN=d865c3e878b1039fa45e6a1d97b9178d5988a7b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8c:93:f6:cd:ee:82:ea:95:dc:42:63:c6:07:
3f:21:ce:31:1a:5b:38:e2:ee:88:61:85:95:42:a0:
42:c9:28:01:b8:fd:a1:f4:88:50:4a:e6:87:0b:63:
db:b2:31:6c:36:a7:78:a7:64:79:8a:c5:c7:1a:3b:
40:af:c2:3c:42:d8:3d:22:a6:0c:44:87:4f:39:e7:
50:98:e3:a5:ae:80:4f:1f:54:13:16:74:c2:20:07:
5e:8c:8d:79:bd:ba:2d:74:3c:b8:2f:95:63:4f:c4:
3b:21:2d:ea:a0:a6:81:34:ab:4f:68:91:15:02:ef:
f3:e4:f5:ef:97:02:54:33:64:d9:3b:3c:69:ae:e1:
5a:c3:20:cd:b9:2c:e5:7e:cd:f2:82:45:e5:bd:dd:
cd:78:90:a9:f8:02:30:12:a3:65:d1:e7:22:4c:32:
c4:0b:99:f6:aa:4c:45:ca:8b:c8:b8:5a:45:55:28:
c8:91:a6:4b:67:7c:2e:6b:e6:53:41:57:02:1d:f3:
a2:06:96:45:fd:93:a8:85:29:df:62:76:33:5f:c2:
bf:40:54:59:dd:f7:4b:9e:34:50:af:c9:e8:af:ec:
04:0e:9b:8e:b6:3e:0c:cc:c3:d5:87:a7:7b:bb:14:
97:69:86:53:34:b1:48:87:40:21:9b:a0:3b:d5:1b:
34:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:65:C3:E8:78:B1:03:9F:A4:5E:6A:1D:97:B9:17:8D:59:88:A7:B0
X509v3 Authority Key Identifier:
keyid:3A:E5:05:BF:C7:FD:91:76:86:B1:C8:B3:A2:18:F5:50:8F:5A:37:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuUFv8f9kXaGscizohj1UI9aNwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:6d:69:9b:cf:bf:6d:24:be:41:82:c1:58:82:ec:19:d5:93:
55:26:74:37:6e:45:12:40:31:bc:c8:a2:0c:ea:0d:42:20:59:
94:89:9f:c0:28:98:a1:17:9d:05:46:0f:02:8f:27:58:1e:cf:
75:6c:54:10:9a:b1:d4:70:c6:45:18:40:3f:43:5c:d2:de:0b:
83:21:64:41:7f:27:69:06:a9:62:3e:7d:60:65:ad:ad:7f:49:
8b:8e:b8:98:a8:ef:38:c0:d0:e0:80:af:cf:aa:f5:27:f5:b1:
19:90:d4:b5:05:c7:43:39:c8:4a:6c:aa:a9:ce:1b:3b:9c:e4:
94:4a:43:4a:77:86:73:6d:9d:81:da:98:27:4e:9e:1a:1a:75:
37:9a:1b:fa:e7:bd:c7:56:20:d6:c6:54:77:9e:4f:3c:3e:34:
61:72:5a:e7:c3:7b:58:cb:1f:bb:05:e7:1e:27:5a:78:f0:61:
ad:ae:6a:ad:40:db:58:b5:ff:94:56:ea:54:5b:5b:ac:0a:31:
55:fe:d2:75:cb:2f:3e:f9:69:d3:42:d8:1d:7b:1f:49:1e:70:
d1:81:99:42:f8:4a:5b:50:a9:9a:55:71:b9:39:33:44:b7:63:
f1:7a:a9:34:91:6e:92:f7:7b:eb:1d:49:63:6c:83:f4:05:32:
ae:0c:59:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:25:29 2026 by rpki-client