Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
File: OuUFv8f9kXaGscizohj1UI9aNwo.mft (raw, json)
Hash identifier: 9QYAOf9FMrN9hpTvBMT2LihRlLDPtWvtGaOT4SgH/kY=
Subject key identifier: 13:AE:20:FD:B6:14:A1:A1:42:17:B9:74:50:4E:85:B8:3D:D4:34:C0
Authority key identifier: 3A:E5:05:BF:C7:FD:91:76:86:B1:C8:B3:A2:18:F5:50:8F:5A:37:0A
Certificate issuer: /CN=3ae505bfc7fd917686b1c8b3a218f5508f5a370a
Certificate serial: 019D98F41B1C34241F1AD788D8107E8300C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuUFv8f9kXaGscizohj1UI9aNwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
Manifest number: 0511
Signing time: Fri 17 Apr 2026 01:00:27 +0000
Manifest this update: Fri 17 Apr 2026 01:00:27 +0000
Manifest next update: Sat 18 Apr 2026 01:00:27 +0000
Files and hashes: 1: OuUFv8f9kXaGscizohj1UI9aNwo.crl (hash: zAaLiaT9a4UzOPpLhq0K8HFQspsS2ZaAB31iJWjA8V0=)
2: zMm9JKVVKWKfD1DDKP4qsT59tOg.roa (hash: C1WJK5Q9adCFTqiEMvgoPvMhAn7ou/puIqaX1v5Q3vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OuUFv8f9kXaGscizohj1UI9aNwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:1b:1c:34:24:1f:1a:d7:88:d8:10:7e:83:00:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ae505bfc7fd917686b1c8b3a218f5508f5a370a
Validity
Not Before: Apr 17 01:00:27 2026 GMT
Not After : Apr 18 01:00:27 2026 GMT
Subject: CN=13ae20fdb614a1a14217b974504e85b83dd434c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1a:26:6b:0a:a7:94:3f:f4:ee:72:fd:48:59:
e5:a7:90:8b:50:9c:6b:69:8a:20:28:76:e9:3c:17:
bd:d7:5a:2d:e0:16:f0:9b:9f:80:c9:a5:ed:81:57:
94:b0:92:bc:b4:6f:32:eb:5a:bd:92:d0:63:08:1d:
c8:f6:29:8f:b1:dd:f0:37:3f:86:cf:94:d2:79:f8:
e2:04:90:9e:64:17:8c:df:33:b1:90:71:09:7a:86:
3e:11:32:b3:a6:2b:72:0d:6a:d6:7f:19:87:3a:8a:
40:b4:b1:7a:a3:7e:a0:03:b4:8d:d5:3d:07:98:cb:
69:04:5e:76:60:79:97:75:62:19:12:8e:10:bd:25:
1c:45:a7:c3:ed:ba:0e:a9:f5:f2:f8:4f:a5:a2:7f:
8b:4d:60:f7:ec:4f:c2:46:86:f6:f3:46:5f:09:6c:
83:7e:70:5a:04:db:fb:69:61:e8:19:37:bb:a8:87:
cd:c0:e4:07:9f:9c:da:21:22:15:1e:9c:4d:0c:7c:
2a:1c:ae:17:c5:9f:42:e8:5d:4b:9b:9b:f6:a9:62:
74:d9:fc:c8:bc:8e:92:2d:75:ca:8c:7b:fa:8d:06:
b1:90:28:8b:ef:df:da:75:b3:ed:f6:c7:77:1a:8c:
2a:42:fb:1e:32:64:ad:f7:f4:34:0b:79:2c:e7:8b:
02:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:AE:20:FD:B6:14:A1:A1:42:17:B9:74:50:4E:85:B8:3D:D4:34:C0
X509v3 Authority Key Identifier:
keyid:3A:E5:05:BF:C7:FD:91:76:86:B1:C8:B3:A2:18:F5:50:8F:5A:37:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuUFv8f9kXaGscizohj1UI9aNwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:08:1d:1c:f9:07:a5:7f:03:84:57:a0:e9:c7:95:32:8c:af:
7c:1c:fa:a8:eb:af:bc:ae:34:11:69:c7:96:06:b9:ea:73:fa:
fc:57:3c:fc:f0:c3:ff:c1:39:e7:a2:88:9d:55:40:eb:c4:43:
15:62:7b:91:7c:4b:b7:a4:fc:47:cb:95:34:04:74:8a:23:ed:
6b:40:3c:9c:6f:07:9d:b0:7b:a8:e4:ed:78:7e:bd:cc:38:96:
21:64:e5:0d:18:c8:b5:26:7a:22:79:6c:32:ce:98:4e:02:f5:
fe:7a:4e:cd:43:88:2f:7b:a2:6d:64:c8:1b:66:35:37:62:97:
9a:b8:06:84:d5:7a:d7:69:a8:bb:34:d9:f5:c2:62:84:8e:86:
f0:9a:e8:dd:c3:72:b3:72:41:c0:18:07:26:3f:15:1a:7a:50:
2f:79:d6:91:38:59:d5:b4:e0:5f:24:3f:04:00:22:f7:5a:b5:
1a:e1:d4:91:a6:97:a6:49:eb:32:8c:49:c2:38:66:1a:9c:44:
48:c1:b9:89:e6:d3:57:25:be:6c:d4:67:7c:c7:c9:1b:a0:49:
cb:fa:80:23:6c:ea:47:d4:50:c4:28:15:67:bc:06:9b:ca:05:
4e:03:e9:c5:1c:4c:66:62:7c:ce:0e:5a:33:38:43:b0:e5:b1:
93:d8:68:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:54:21 2026 by rpki-client