Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
File: Ou655pK6npPYuVpkiNXIdWCdSuw.mft (raw, json)
Hash identifier: z6k16GWb3EboZN7ECvY9+2xg5ihcp8ui+Z4DvBSHto0=
Subject key identifier: 7C:7A:64:56:0B:C6:24:6F:F5:A3:88:47:CB:C3:54:CD:B5:10:D8:8B
Authority key identifier: 3A:EE:B9:E6:92:BA:9E:93:D8:B9:5A:64:88:D5:C8:75:60:9D:4A:EC
Certificate issuer: /CN=3aeeb9e692ba9e93d8b95a6488d5c875609d4aec
Certificate serial: 01A06E034243721DE39539B8BA6D2D19D6F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
Manifest number: 17F8
Signing time: Fri 04 Sep 2026 20:01:42 +0000
Manifest this update: Fri 04 Sep 2026 20:01:42 +0000
Manifest next update: Sat 05 Sep 2026 20:01:42 +0000
Files and hashes: 1: OSQYUaSf3gbMxgKVGaSRUtdNHTA.roa (hash: r4nA30trmkd0vBXPfRkmROxsmgpOrH0HeKPaS+ubN0w=)
2: Ou655pK6npPYuVpkiNXIdWCdSuw.crl (hash: dTS/Vxei2ALaJxG7VPi1XSZ5ndisQnGmppnWQvPmlyE=)
3: pVERtNhFi8FWjU9Y4DiQboSkUcg.roa (hash: zXHM3oZaOO62QcqG4BH7LRDl6S8yZxF21aaBpfwYUVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:03:42:43:72:1d:e3:95:39:b8:ba:6d:2d:19:d6:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aeeb9e692ba9e93d8b95a6488d5c875609d4aec
Validity
Not Before: Sep 4 20:01:42 2026 GMT
Not After : Sep 5 20:01:42 2026 GMT
Subject: CN=7c7a64560bc6246ff5a38847cbc354cdb510d88b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:86:e1:c1:f9:08:94:f7:f5:43:7b:a6:12:f8:
37:0b:38:8b:98:49:32:85:b5:9b:9e:6a:36:6c:4e:
63:86:69:dc:1f:65:c4:1c:89:66:fe:b6:af:80:36:
b4:49:11:5b:ef:fd:b4:07:5c:c3:8d:a5:87:67:a5:
39:d3:e6:f7:ad:ac:13:50:76:e1:c6:89:c1:cd:e4:
c3:89:c5:c0:b9:6a:6e:35:4e:39:eb:ef:0e:a6:ab:
17:20:72:ea:8f:2a:c1:8c:96:1f:88:20:23:98:09:
c8:35:60:35:c1:39:f8:f2:88:34:06:eb:e8:0a:99:
72:c4:fc:99:5f:01:83:da:c5:e8:1a:28:2e:1c:2d:
fe:49:05:72:f1:14:49:ab:88:6e:30:59:d0:99:8c:
0a:e2:f2:b9:92:c5:2c:d3:f6:c6:10:7b:bb:72:d0:
35:10:0b:1c:c9:15:b7:a9:b0:10:e9:7f:ef:96:a2:
c8:94:fe:21:d0:b9:2f:5d:9b:64:15:92:92:5f:91:
0c:a2:f1:99:3a:0f:ed:8a:5c:88:a8:9c:08:c5:9a:
e9:0f:ea:58:00:5e:49:65:81:74:6c:d7:79:46:d9:
26:95:df:9b:f0:21:0a:09:44:6e:1c:76:59:f1:61:
27:60:c6:cf:c8:34:d6:f7:31:da:17:55:83:17:9e:
79:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:7A:64:56:0B:C6:24:6F:F5:A3:88:47:CB:C3:54:CD:B5:10:D8:8B
X509v3 Authority Key Identifier:
keyid:3A:EE:B9:E6:92:BA:9E:93:D8:B9:5A:64:88:D5:C8:75:60:9D:4A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:91:a5:a5:8d:fa:43:d9:48:6e:06:75:ed:12:72:67:02:63:
42:b6:7c:d8:9a:1a:3d:dd:57:4a:33:bd:29:59:6f:64:13:cb:
ca:de:cc:65:2f:0e:f6:75:78:09:b0:15:cf:9b:38:a9:01:5a:
5b:d2:bc:5e:e6:c9:65:00:e4:a5:ba:fe:48:5b:0b:6e:99:cd:
ce:24:04:4b:64:7b:42:c4:5c:5c:a7:1b:20:56:51:71:ab:c0:
98:0e:e6:11:5e:90:6b:e9:a3:74:ac:88:9f:fa:ed:f2:d0:75:
5c:2c:11:69:74:85:0d:a3:82:a6:f1:49:bc:35:ef:b6:8a:81:
43:76:7e:8a:b0:09:b1:ad:87:f3:93:49:55:f6:88:55:b7:8b:
52:7f:f3:64:b9:cf:79:0c:a8:18:52:5c:15:e5:26:b4:37:fb:
3a:7b:fb:47:a3:52:77:a9:9c:a2:da:5d:86:5a:13:09:76:89:
a8:7a:e5:65:2e:52:19:b5:f4:79:a0:52:11:c0:07:23:c8:f5:
32:ae:dd:c8:c7:71:88:a1:3c:63:ea:8d:cf:76:81:da:05:6e:
19:61:3f:48:89:8b:db:90:08:9e:a7:f4:6e:c1:3c:f3:73:25:
cb:93:9c:ec:7d:c3:14:83:81:98:3b:7f:af:85:dd:f1:e2:30:
d3:ac:9f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:29:29 2026 by rpki-client