Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
File: OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft (raw, json)
Hash identifier: nEwQmlbJlHSKZAY6eUPNqgxfraGkAcYl6sM/Eu1ZFXY=
Subject key identifier: 7D:54:7C:ED:97:8B:EF:B9:72:28:48:DF:08:24:A5:B1:BA:33:27:A3
Authority key identifier: 3A:EA:4D:AE:3E:99:4F:D9:FE:7B:E7:43:3E:42:F9:6F:67:15:93:78
Certificate issuer: /CN=3aea4dae3e994fd9fe7be7433e42f96f67159378
Certificate serial: 01A1DEA73C9D0D1B7F44C1CF8D4E9E1581AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
Manifest number: 12E7
Signing time: Sun 15 Nov 2026 10:01:04 +0000
Manifest this update: Sun 15 Nov 2026 10:01:04 +0000
Manifest next update: Mon 16 Nov 2026 10:01:04 +0000
Files and hashes: 1: OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl (hash: 6ORs4mmD0JE6RyHlS8aqtHfMlKSRH335/Ibhri6Pk00=)
2: ZO-qcdvK7BzzeLOkMttoxYvxl4E.roa (hash: m6/e1cwgXC/4hA09rZcRl2fyViBKxPhi7mCSBLfbjRs=)
3: mdi8isJF9ZQ0I7Jg6Yr0cVHa8Ic.asa (hash: 54Ei/fKavstT42M7Nu3Fn+AfVQtGsu2BCI644ANc1Xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:a7:3c:9d:0d:1b:7f:44:c1:cf:8d:4e:9e:15:81:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aea4dae3e994fd9fe7be7433e42f96f67159378
Validity
Not Before: Nov 15 10:01:04 2026 GMT
Not After : Nov 16 10:01:04 2026 GMT
Subject: CN=7d547ced978befb9722848df0824a5b1ba3327a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:98:2d:83:aa:01:f0:c9:14:90:8b:65:a1:d4:
41:ec:fb:40:86:9d:81:ca:ba:9c:3f:60:e2:1c:d4:
67:75:c0:68:d6:3c:6f:19:01:59:f8:8e:c4:2f:7d:
ef:6f:2c:df:28:e8:74:4d:31:a9:8b:4a:bb:41:d5:
ba:60:9c:ff:a1:2a:b9:15:a7:72:6e:ba:14:62:25:
a5:b4:4f:6d:94:2f:48:87:79:d0:5b:2d:3a:4c:eb:
e0:be:a9:77:9e:bf:f9:99:44:16:71:9d:9d:08:fe:
95:58:d7:f0:79:06:23:a2:2c:db:5f:49:5b:ac:db:
45:0b:f7:5a:17:7b:0a:e2:f4:34:d4:75:8a:aa:02:
e8:97:f5:2b:45:3c:6d:c3:ca:e8:77:52:c1:af:ae:
b0:64:da:23:c1:d1:98:be:85:4d:53:f6:ca:eb:92:
55:da:9d:2d:51:6a:9a:4c:61:9e:d9:04:05:72:74:
47:dc:9c:9e:39:4b:86:53:9c:90:5f:9d:e7:a9:7c:
65:82:69:0b:7c:3f:f2:12:a2:c2:33:cd:b5:ca:1f:
a4:25:ea:e3:20:97:5d:7a:51:b7:73:c0:21:97:e1:
8a:47:cf:aa:04:f1:c7:3c:0d:54:45:9b:b0:f4:bf:
68:9c:97:7d:53:75:59:8c:26:67:41:0b:e4:d8:3e:
d2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:54:7C:ED:97:8B:EF:B9:72:28:48:DF:08:24:A5:B1:BA:33:27:A3
X509v3 Authority Key Identifier:
keyid:3A:EA:4D:AE:3E:99:4F:D9:FE:7B:E7:43:3E:42:F9:6F:67:15:93:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:2d:33:05:7e:8c:2f:62:44:31:4d:ad:df:d5:99:55:f2:1f:
ab:97:e5:36:f7:9f:84:3f:a4:74:b8:e3:6a:f5:82:f5:06:98:
e2:e6:c2:03:99:78:0d:0e:b0:41:21:89:7b:56:49:a6:38:80:
5f:21:d9:f7:74:09:a7:61:41:9e:65:f7:75:2e:97:24:ea:c5:
d9:5e:a5:93:f7:62:3d:6f:56:0c:f2:2a:35:2f:ee:60:4f:d3:
eb:6d:22:6d:9d:cd:07:da:7d:89:ab:49:0d:1b:d1:29:3c:02:
42:bf:cc:d7:d7:86:6f:03:38:47:33:0c:9b:ce:37:51:51:6d:
08:22:1f:cf:a0:10:ca:c5:76:79:24:6d:11:39:e2:3d:8d:60:
40:e1:4c:eb:aa:a2:51:3f:f7:25:12:b6:e7:c9:e7:d6:60:b5:
18:fc:a3:ae:ce:02:83:93:b4:0d:19:2c:f7:0a:79:fa:3d:fb:
37:10:05:45:26:ce:b1:d5:98:69:2f:eb:f8:94:76:00:da:11:
22:86:4c:83:e9:51:06:0d:3f:f8:de:78:54:21:9a:bd:2a:04:
1f:b6:48:c8:3b:f2:5b:10:20:d6:09:f9:67:ac:43:e1:98:f0:
47:13:2f:d7:5c:f7:1c:7f:99:26:9c:87:a8:10:22:25:bb:e1:
61:d6:d9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:49:47 2026 by rpki-client