Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft
File: ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft (raw, json)
Hash identifier: ZdFO3WXkRT48xebkEW+o41yBmxnFNk9UyqW6R/LTJRA=
Subject key identifier: D7:70:FA:ED:AD:44:4F:6D:A4:47:B5:A2:84:36:33:A4:FC:34:D2:EA
Authority key identifier: A2:E6:06:C7:E9:3F:ED:36:EF:90:D4:2C:E4:A9:72:60:BB:8A:A9:C1
Certificate issuer: /CN=a2e606c7e93fed36ef90d42ce4a97260bb8aa9c1
Certificate serial: 019DA378D317CD06237AA8B3A8ABFF3745B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft
Manifest number: 18C9
Signing time: Sun 19 Apr 2026 02:01:37 +0000
Manifest this update: Sun 19 Apr 2026 02:01:37 +0000
Manifest next update: Mon 20 Apr 2026 02:01:37 +0000
Files and hashes: 1: FomC0OD_NwetWkEPOTha3fWVMKU.roa (hash: dczkmLKUdcB3drX74PqMZvKfYmTs+5M5HtjBYhjGfvk=)
2: drBhV9alP4OW6ofNZOxW9TLw2f0.roa (hash: lbZ8swZRlTMR5bgvRpyD4YhMPyncb/ksvL8xrpAMysA=)
3: ouYGx-k_7TbvkNQs5KlyYLuKqcE.crl (hash: AKpT1C6xCaTf4+lFWv/uooFdkrtivjakmSiAIrLwpiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:d3:17:cd:06:23:7a:a8:b3:a8:ab:ff:37:45:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e606c7e93fed36ef90d42ce4a97260bb8aa9c1
Validity
Not Before: Apr 19 02:01:37 2026 GMT
Not After : Apr 20 02:01:37 2026 GMT
Subject: CN=d770faedad444f6da447b5a2843633a4fc34d2ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:c3:c1:12:1b:63:21:97:7e:0f:2f:fe:b4:30:
bd:df:f3:5e:62:30:f3:e0:16:e2:c0:47:65:22:03:
00:52:36:81:34:c2:ef:25:df:ab:2e:3f:4c:7a:c3:
39:90:fa:7f:c3:30:d2:f7:69:aa:38:06:55:72:bc:
49:5e:44:d4:71:2e:9c:92:82:08:f2:05:32:ae:09:
37:ee:10:11:66:a3:88:68:b0:56:fa:83:3d:ef:c7:
0c:2f:43:e7:c3:50:fc:2a:08:8c:01:ba:61:8b:f4:
6c:9c:90:ef:d4:4c:28:ef:35:4f:25:66:63:e6:a3:
d5:86:29:61:68:d5:1c:09:b9:96:8a:45:76:8f:25:
5d:bb:02:84:fc:a2:7e:87:ba:20:6f:15:db:87:ed:
5e:e0:d8:ae:41:1d:3b:ca:b7:2f:93:57:85:93:b1:
62:6b:1d:aa:03:bb:64:19:90:95:c4:48:2e:5a:d6:
77:6f:25:19:b8:b7:9a:fc:f7:75:ec:20:0e:bf:cf:
b0:e6:39:0d:e0:c0:4c:ea:9b:15:3f:91:04:b7:6a:
d8:76:62:77:5c:d4:0f:8d:bd:f1:62:b0:5c:ab:83:
01:21:43:b7:b2:0e:01:28:35:30:82:e6:4c:65:bd:
58:38:b3:9e:38:04:0c:e1:b2:b2:97:e5:43:98:1f:
7c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:70:FA:ED:AD:44:4F:6D:A4:47:B5:A2:84:36:33:A4:FC:34:D2:EA
X509v3 Authority Key Identifier:
keyid:A2:E6:06:C7:E9:3F:ED:36:EF:90:D4:2C:E4:A9:72:60:BB:8A:A9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:21:96:33:1f:49:6a:f7:f4:aa:ba:25:62:be:b7:40:6f:e7:
d9:ba:5f:75:cd:30:d0:55:e1:de:92:9b:9a:62:c1:fe:c2:95:
0c:4b:cd:2e:ce:2b:89:bd:96:22:da:30:78:9e:b4:72:3b:ac:
11:7e:5e:2c:48:96:f3:6c:8b:7f:f1:a3:3b:7d:99:ac:5d:9b:
3b:6e:b0:6d:54:d8:55:08:36:9d:3b:59:11:b0:fd:07:54:e4:
96:61:08:e4:3f:2d:db:b5:92:41:cc:e9:95:31:07:99:46:0d:
3e:46:2b:33:9f:d5:59:92:05:59:ab:39:cb:e7:6c:03:c1:42:
f5:52:85:5e:d0:74:dd:28:2a:ee:9e:6e:6e:58:76:79:41:7c:
95:fa:21:45:ed:a2:28:2d:bf:5b:d3:93:b5:98:c2:11:55:8d:
e5:5f:9d:bc:44:7b:72:85:c1:e3:e0:03:dc:b4:1a:d1:76:03:
31:67:23:5f:c9:ab:68:4f:c3:5e:58:c9:1b:5c:ce:11:0f:8f:
00:1e:2c:75:c9:c5:19:05:f1:fa:6e:5f:2e:d0:af:6d:7f:1b:
07:8a:f6:27:5e:f9:5f:e7:29:5f:4b:b9:a0:23:4c:60:ec:bb:
f3:9a:57:9b:72:47:2e:ab:2f:92:80:cf:88:e1:03:ef:77:23:
69:fa:c9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:40:22 2026 by rpki-client