Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.mft
File: ouOnZzp5md1JaggNu6-hB3rZgPs.mft (raw, json)
Hash identifier: BW4RGHHttiKzNcikNUMBhVWaJ2/wSL4EI4X7gu7Y8uM=
Subject key identifier: 36:AA:62:69:46:80:54:7F:7C:F5:03:51:D8:7B:1F:0C:B6:BD:1F:27
Authority key identifier: A2:E3:A7:67:3A:79:99:DD:49:6A:08:0D:BB:AF:A1:07:7A:D9:80:FB
Certificate issuer: /CN=a2e3a7673a7999dd496a080dbbafa1077ad980fb
Certificate serial: 019D99D01FC1BF773A9F8BC1E6D251D06CD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ouOnZzp5md1JaggNu6-hB3rZgPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.mft
Manifest number: 0BCC
Signing time: Fri 17 Apr 2026 05:00:46 +0000
Manifest this update: Fri 17 Apr 2026 05:00:46 +0000
Manifest next update: Sat 18 Apr 2026 05:00:46 +0000
Files and hashes: 1: k1jUiB18FcQkB0JlR9kMswQdw1M.roa (hash: CfSBzFps5ykYGRlVBhnlga1YMIkO7XIfB2LTKOI9Iko=)
2: ouOnZzp5md1JaggNu6-hB3rZgPs.crl (hash: CtueNvIS/4c8zC5VRS9RoU4g/3VtC2Mbrb5TI7MQJWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ouOnZzp5md1JaggNu6-hB3rZgPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:1f:c1:bf:77:3a:9f:8b:c1:e6:d2:51:d0:6c:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e3a7673a7999dd496a080dbbafa1077ad980fb
Validity
Not Before: Apr 17 05:00:46 2026 GMT
Not After : Apr 18 05:00:46 2026 GMT
Subject: CN=36aa62694680547f7cf50351d87b1f0cb6bd1f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1d:cb:46:4d:e3:fd:66:8e:e3:35:b3:88:46:
f0:28:2e:80:06:8d:9e:e7:e5:2a:b2:51:61:bc:e3:
8e:dd:7a:de:3b:c9:4c:c5:e5:ee:47:f1:71:f7:8a:
c3:ae:fe:dc:f2:47:54:05:ac:c7:e8:bb:c7:7c:7d:
87:c6:3a:03:9b:e9:b2:1d:a3:f4:ef:37:b4:a3:90:
b2:f0:89:b9:24:1d:a6:ed:ed:fa:ca:ee:1d:50:69:
db:8d:2c:fa:ab:8e:4d:0a:f4:07:d3:33:76:17:4e:
fb:59:0b:df:b0:8c:b6:cd:80:8d:bc:09:83:9d:44:
18:e9:1a:6c:da:ce:b7:99:c8:ce:f7:f4:d1:ea:8a:
a0:4e:8d:0c:0f:d2:b2:52:7c:53:b4:f2:1a:71:04:
ed:22:34:42:27:6e:6e:35:03:17:36:4d:8a:98:c8:
75:b4:5d:a9:2e:7c:4d:71:36:5e:d8:77:42:20:f7:
79:60:0d:31:a5:91:25:35:29:8f:25:62:54:9e:ef:
b6:a4:31:2e:1c:3f:d9:94:ba:8d:65:91:8a:12:ba:
e5:4b:a8:3b:fc:fc:c8:14:6e:8d:d5:15:96:a4:63:
75:b4:1a:98:e6:fa:c7:d9:c9:bd:10:75:83:2f:c5:
ba:bb:d1:63:bb:c0:ec:91:b5:61:9d:8f:94:8e:81:
2e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:AA:62:69:46:80:54:7F:7C:F5:03:51:D8:7B:1F:0C:B6:BD:1F:27
X509v3 Authority Key Identifier:
keyid:A2:E3:A7:67:3A:79:99:DD:49:6A:08:0D:BB:AF:A1:07:7A:D9:80:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouOnZzp5md1JaggNu6-hB3rZgPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:7a:df:02:d8:24:cd:2a:aa:3f:90:21:74:87:18:18:3e:e2:
89:d6:39:dd:94:6b:d5:84:0b:2c:89:e4:20:37:61:e4:97:83:
1e:e5:a0:dc:55:c7:9b:fd:46:26:e4:5f:08:29:67:a6:c4:e4:
3d:6d:ea:1e:6c:bd:0c:55:70:38:19:aa:ca:0e:a0:01:9a:02:
41:42:27:6c:ea:d8:b8:4f:82:d9:bd:c7:63:ca:60:77:e3:18:
d2:a2:20:dc:fe:d9:36:42:fa:5f:8d:74:b1:c7:68:bd:cf:ee:
9b:6c:24:4e:4f:59:4f:90:0a:aa:c3:f5:29:53:81:62:9b:42:
11:dd:bb:83:6d:e3:c1:c8:53:e5:1e:cf:1b:d5:3a:1c:e2:ec:
77:0b:ba:fc:d4:08:61:12:e9:6a:d4:64:c8:9e:77:fe:f1:d1:
09:81:12:d0:5e:e3:b7:0c:bf:d4:97:b0:cf:8b:fa:02:0f:c1:
a0:25:1b:80:53:d0:80:99:6d:ef:73:0f:91:46:49:31:af:bc:
c1:d3:53:52:35:36:7b:83:05:3e:66:97:1c:ed:ca:50:c0:e5:
0b:d6:02:77:f2:67:5f:f3:ed:44:f4:68:ab:da:df:cc:c5:f0:
5d:57:8d:d0:f7:bd:1e:f8:7f:df:09:08:c7:af:8b:f6:96:9b:
f9:b7:da:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:27:20 2026 by rpki-client