Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
File: OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft (raw, json)
Hash identifier: rgX8/d0Xiky1qwfbc6JGWBxQg+rgbcg9AZRGYSEXZC4=
Subject key identifier: 2F:7E:08:9E:0B:07:6B:2E:54:C2:47:7B:A2:A9:C4:3F:71:EF:84:B1
Authority key identifier: 3A:EA:4D:AE:3E:99:4F:D9:FE:7B:E7:43:3E:42:F9:6F:67:15:93:78
Certificate issuer: /CN=3aea4dae3e994fd9fe7be7433e42f96f67159378
Certificate serial: 019F6426A815C5F8ABCD49BD79B7208436AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
Manifest number: 119E
Signing time: Wed 15 Jul 2026 05:01:22 +0000
Manifest this update: Wed 15 Jul 2026 05:01:22 +0000
Manifest next update: Thu 16 Jul 2026 05:01:22 +0000
Files and hashes: 1: OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl (hash: l3Z69xOhE0rVNO4qEAY6Fg/A9kVVFWvNzVsOFfzL4Gk=)
2: ZO-qcdvK7BzzeLOkMttoxYvxl4E.roa (hash: m6/e1cwgXC/4hA09rZcRl2fyViBKxPhi7mCSBLfbjRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Jul 2026 05:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:64:26:a8:15:c5:f8:ab:cd:49:bd:79:b7:20:84:36:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aea4dae3e994fd9fe7be7433e42f96f67159378
Validity
Not Before: Jul 15 05:01:22 2026 GMT
Not After : Jul 16 05:01:22 2026 GMT
Subject: CN=2f7e089e0b076b2e54c2477ba2a9c43f71ef84b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:09:75:ed:56:bf:c9:bc:8c:cd:8f:5d:54:46:
76:42:0f:d8:74:4b:55:1a:31:e5:77:38:cf:45:9b:
31:17:ea:0f:6a:56:f2:3d:36:6c:e9:56:a7:e3:de:
fa:18:fd:67:73:e3:7d:b6:4a:b3:c8:68:29:05:f6:
8c:f7:83:ba:d5:f6:d8:42:f8:26:72:b6:b8:de:96:
cb:21:3f:59:f7:73:14:3b:05:30:2b:93:fd:1a:fd:
36:19:2d:8c:8a:e0:a2:b8:1a:55:74:76:9f:d3:f3:
bd:c6:8e:c6:88:f0:bd:3b:c3:72:5a:91:f4:ab:f9:
28:82:88:bd:24:0f:e1:18:da:ad:e3:96:d7:cb:cc:
17:a1:87:b4:0b:c8:4a:bc:57:47:bd:14:74:b9:10:
d1:09:9b:91:72:7e:4f:c9:67:38:b9:e8:4a:8f:ba:
0e:9e:dd:74:27:3e:71:0b:08:0a:5e:55:ff:f5:71:
ad:2d:f9:8c:0d:2f:1a:d1:4f:64:fc:b0:ab:34:45:
e3:a6:3d:57:b1:4d:21:8a:3b:c6:43:88:f7:06:24:
43:c8:9c:36:31:f2:69:40:6f:e7:07:eb:5b:30:46:
38:b5:f6:44:c2:8b:75:11:53:59:61:6c:0d:8a:c4:
66:61:51:a9:fd:d4:a8:27:3f:1b:46:91:90:10:d1:
ec:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:7E:08:9E:0B:07:6B:2E:54:C2:47:7B:A2:A9:C4:3F:71:EF:84:B1
X509v3 Authority Key Identifier:
keyid:3A:EA:4D:AE:3E:99:4F:D9:FE:7B:E7:43:3E:42:F9:6F:67:15:93:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:8b:95:fe:ee:86:87:a8:30:73:3b:5b:db:61:e6:26:55:51:
ac:28:e9:56:f1:10:a3:24:90:ac:66:fd:d6:14:a0:8b:70:7e:
dc:c2:49:bf:cd:e0:03:98:3e:36:37:4f:08:4e:09:e7:1a:e4:
d1:ad:37:1c:68:5a:55:47:70:4f:43:2e:12:51:f2:f5:62:93:
e6:14:d9:8b:af:66:1c:d8:74:ed:62:1b:71:7c:bc:d8:9c:27:
7e:01:77:1f:8c:fe:d5:d5:b7:b6:13:06:bb:96:ab:5b:43:fb:
52:c7:49:38:ce:f7:ec:59:61:1b:9a:f6:b2:6a:78:69:ef:6c:
18:4f:d8:27:d5:e1:44:b1:83:47:4c:d7:eb:15:84:14:c7:c0:
0b:e6:5d:d8:1a:50:f1:35:64:7c:cc:72:8a:23:9b:c9:1d:25:
69:a9:79:5a:71:5f:7b:d2:ae:ac:06:ef:8a:8e:13:43:53:3c:
ea:d0:69:f4:13:60:25:21:3d:21:b1:af:52:c6:a1:74:32:f8:
9f:ef:2d:ef:21:3b:a2:5d:6f:a2:a2:6b:27:db:ab:52:48:76:
12:81:ef:b9:a9:f3:df:f2:67:ed:ce:75:f7:a9:a0:b3:61:e2:
f5:aa:9b:0e:be:c0:b7:a7:09:da:da:74:05:be:16:50:ba:4b:
c3:4b:a3:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 14:46:25 2026 by rpki-client