
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft
File: ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft (raw, json)
Hash identifier: LB+D+JHH1fGx2WXSoKv2d9NxbhPHHPzXaPSd3o1voFA=
Subject key identifier: F7:C7:8C:82:B3:36:78:42:22:87:B2:2F:AE:43:0D:75:DD:18:AE:7D
Authority key identifier: A2:E6:06:C7:E9:3F:ED:36:EF:90:D4:2C:E4:A9:72:60:BB:8A:A9:C1
Certificate issuer: /CN=a2e606c7e93fed36ef90d42ce4a97260bb8aa9c1
Certificate serial: 019CAA594190E3C1C92EF1199A91AF584B55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 17:01:42 +0000
Manifest this update: Sun 01 Mar 2026 17:01:42 +0000
Manifest next update: Mon 02 Mar 2026 17:01:42 +0000
Files and hashes: 1: FomC0OD_NwetWkEPOTha3fWVMKU.roa (hash: dczkmLKUdcB3drX74PqMZvKfYmTs+5M5HtjBYhjGfvk=)
2: drBhV9alP4OW6ofNZOxW9TLw2f0.roa (hash: lbZ8swZRlTMR5bgvRpyD4YhMPyncb/ksvL8xrpAMysA=)
3: ouYGx-k_7TbvkNQs5KlyYLuKqcE.crl (hash: +mzOC7txFmvYesz5kcLBjNL+3gJCwSAUdoB4yC0+fQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:41:90:e3:c1:c9:2e:f1:19:9a:91:af:58:4b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e606c7e93fed36ef90d42ce4a97260bb8aa9c1
Validity
Not Before: Mar 1 17:01:42 2026 GMT
Not After : Mar 2 17:01:42 2026 GMT
Subject: CN=f7c78c82b33678422287b22fae430d75dd18ae7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:26:ae:1d:47:39:08:8a:e4:9d:ae:ef:26:d0:
fe:1d:e8:20:04:e3:9e:16:a7:1a:d2:28:6b:4c:7f:
d5:05:e7:69:a4:60:53:f8:5c:55:c0:96:f8:7a:2b:
9d:81:24:53:a5:c0:6d:3d:7f:6d:62:8f:56:46:c3:
7e:87:03:86:ec:af:2e:aa:96:08:5b:87:cc:06:3a:
7d:13:f5:67:82:ba:2a:32:43:ab:09:0a:c8:e0:62:
2e:ca:9b:5b:0d:3f:6c:bf:6b:75:00:d8:49:e7:84:
30:62:91:2c:0d:87:5c:19:0e:73:ee:8b:53:b0:f5:
93:9b:be:76:9b:8a:4d:46:ee:05:bd:83:80:ae:c3:
f6:87:03:49:f8:eb:03:32:3e:83:7f:6d:88:c8:75:
71:33:e6:df:76:26:80:05:ea:93:a8:36:02:38:5c:
ce:d9:3e:7e:22:89:24:51:3b:bb:1a:63:a5:15:bd:
d6:79:f5:ec:b0:55:1c:a0:50:fe:2a:e4:29:99:1b:
2e:9a:f6:85:29:28:2e:60:61:04:f7:d9:3a:87:1b:
e4:0e:9f:70:00:ff:19:d3:80:89:5d:d8:30:d5:8e:
46:9a:9b:c3:cf:d5:19:7b:4c:bb:2a:68:49:6e:f4:
ce:88:51:f1:dc:a3:f0:72:df:05:f7:36:33:41:c1:
b2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C7:8C:82:B3:36:78:42:22:87:B2:2F:AE:43:0D:75:DD:18:AE:7D
X509v3 Authority Key Identifier:
keyid:A2:E6:06:C7:E9:3F:ED:36:EF:90:D4:2C:E4:A9:72:60:BB:8A:A9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:3e:f1:45:61:2a:86:f6:93:56:c1:17:0f:f4:23:0f:5e:a0:
ca:35:95:7d:37:69:ee:b3:62:5d:ac:43:41:92:7a:e2:91:c0:
60:d4:26:61:39:2f:11:dd:37:54:9d:04:0e:8c:af:a7:3c:31:
61:5e:bd:8e:75:71:d2:ed:d4:4e:6a:f3:a9:f7:31:2e:7a:d2:
69:5b:c5:d4:93:d3:00:29:58:31:b2:ad:42:21:10:d0:ff:81:
0c:d9:69:fb:77:34:71:77:ba:67:37:e4:1f:be:6f:eb:43:a9:
52:39:8d:09:bd:7f:9b:f4:89:66:25:87:56:93:52:7e:a0:91:
cb:6b:4d:93:7a:83:56:40:2d:42:ba:1a:8d:38:ae:5d:14:d1:
2f:af:1c:31:27:34:66:c5:a2:df:fa:92:07:0f:1e:e0:96:ee:
90:ef:6b:af:48:4b:9b:6a:f1:1e:cc:0c:5d:71:88:63:4e:cf:
74:85:6e:38:7e:ff:14:bf:5f:7e:9b:8c:fb:ae:dd:d1:5a:db:
87:b4:74:a0:84:57:9f:dd:0b:62:35:f9:30:8f:0d:3b:56:86:
ba:dc:8b:a5:19:f1:42:d1:77:f0:72:35:8b:32:ed:a2:88:68:
42:f3:5f:6e:5f:c6:be:9a:60:25:98:2d:2c:ea:26:d0:6c:af:
f7:c6:76:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:17:32 2026 by rpki-client