Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft
File: OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft (raw, json)
Hash identifier: qyfzRk5cG7F4croImNsgrpZy+BKnAQzc5xylubw5XTc=
Subject key identifier: 82:75:06:B4:73:3F:4E:71:74:BB:D5:4F:8B:FE:0D:60:C6:E2:BF:B0
Authority key identifier: 3A:E0:09:62:47:A8:C5:4E:5D:E8:C1:B0:DA:F1:05:4A:EC:8C:C4:50
Certificate issuer: /CN=3ae0096247a8c54e5de8c1b0daf1054aec8cc450
Certificate serial: 019CAD5A0CCD66E96B2AFEEEAFC7DC2E36C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuAJYkeoxU5d6MGw2vEFSuyMxFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 07:01:25 +0000
Manifest this update: Mon 02 Mar 2026 07:01:25 +0000
Manifest next update: Tue 03 Mar 2026 07:01:25 +0000
Files and hashes: 1: OuAJYkeoxU5d6MGw2vEFSuyMxFA.crl (hash: 1OkShBcL+z3KFl9m7zVakV+FNiIzazGK7ugNO4LgNzQ=)
2: r2XaIkvbtNRIA7GDmackHk60QAM.roa (hash: 5qhD+1z/Ukex+udgPBqOlQgjbCAqwLAXHXdPV8FaxfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OuAJYkeoxU5d6MGw2vEFSuyMxFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:0c:cd:66:e9:6b:2a:fe:ee:af:c7:dc:2e:36:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ae0096247a8c54e5de8c1b0daf1054aec8cc450
Validity
Not Before: Mar 2 07:01:25 2026 GMT
Not After : Mar 3 07:01:25 2026 GMT
Subject: CN=827506b4733f4e7174bbd54f8bfe0d60c6e2bfb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4a:ce:3b:24:62:5c:57:df:23:46:b8:77:fd:
62:6f:4e:ad:07:d0:9d:f8:ee:de:db:7c:0a:8d:ce:
ea:d4:6d:67:64:d7:ee:c3:92:ed:dd:5e:a9:4d:09:
b8:91:83:4b:43:50:6e:53:17:83:19:25:c2:03:57:
20:f5:0b:24:56:11:0d:c1:c3:e3:4e:23:d6:fa:22:
db:94:61:f1:dc:86:e7:22:e7:3b:6b:09:6b:c0:d7:
bb:8c:13:26:d4:2e:98:18:9d:72:34:2c:75:fa:6c:
ed:5b:9a:cb:c0:96:20:e5:66:ae:4b:d5:3a:52:aa:
44:51:2f:e2:01:4a:6e:b3:ad:f5:c7:b0:30:14:32:
e5:ab:30:bd:a0:4a:76:f6:8b:6b:06:8c:76:fc:07:
de:f7:b8:14:cf:80:2d:85:55:6f:a9:76:6c:4f:ca:
3e:39:f0:6d:2f:aa:a2:04:96:33:f3:f6:5c:73:17:
16:4d:a9:7b:58:16:e1:25:7b:1d:bb:b5:96:db:18:
80:cd:90:39:fc:c6:77:6c:85:82:b1:5a:84:69:7c:
d2:75:39:de:8c:b3:e4:e9:dd:03:34:4f:3f:08:fc:
82:e6:be:55:ca:29:04:08:a3:9c:f8:27:f9:40:96:
68:7a:c3:d7:a8:fc:18:12:80:c0:85:6c:d9:5a:53:
2c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:75:06:B4:73:3F:4E:71:74:BB:D5:4F:8B:FE:0D:60:C6:E2:BF:B0
X509v3 Authority Key Identifier:
keyid:3A:E0:09:62:47:A8:C5:4E:5D:E8:C1:B0:DA:F1:05:4A:EC:8C:C4:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuAJYkeoxU5d6MGw2vEFSuyMxFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:a9:9f:bd:1c:84:11:72:2a:e4:19:45:ac:86:98:21:5d:7c:
54:7e:44:8a:fb:74:ed:54:b8:a1:b6:fb:c1:fa:df:07:7c:6c:
f5:ec:39:fc:6e:15:30:b3:98:fe:a4:af:89:28:9d:7b:cb:09:
0f:ab:7e:d2:88:8b:be:bc:5d:85:d3:55:9a:86:c2:bf:2d:7a:
85:1d:2f:0f:b8:cb:3b:44:3c:23:1d:08:e8:c4:3f:81:a8:98:
44:52:b6:27:09:9e:b7:33:e3:5f:07:f3:5b:df:9f:d6:f9:1c:
4a:15:17:35:3a:65:64:97:ec:5a:7b:49:85:92:a7:ec:61:b2:
de:b1:b9:64:58:c6:99:9e:4f:e5:1e:e9:a4:d8:53:5c:3e:7d:
a0:fd:b6:22:33:7b:d0:24:cc:c1:e7:ee:38:a6:b4:8a:0a:ae:
61:ad:b9:c2:99:cf:af:68:79:bf:15:7e:6b:39:11:08:d5:b2:
48:d8:64:ad:f6:45:0d:a5:39:6d:39:00:dd:4c:67:ae:7d:9a:
bf:53:9c:5e:6c:46:ad:fa:2c:5a:78:f9:bc:8b:d1:3f:4d:c1:
84:37:9f:23:95:b2:20:13:d0:b9:a1:fb:94:2f:e1:19:92:b0:
9f:27:f5:5c:e5:4e:e0:e3:26:be:c4:82:ea:b8:8f:bc:47:54:
25:31:2a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:44:54 2026 by rpki-client