Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
File: OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft (raw, json)
Hash identifier: /fwgc3kYZ3RFamp7puVASogxGH/ZLV2KBYgz5Jwe2RQ=
Subject key identifier: DD:EA:F3:89:9C:85:C4:7F:F8:42:F4:7F:F2:E0:20:92:DB:73:06:FB
Authority key identifier: 3A:EA:4D:AE:3E:99:4F:D9:FE:7B:E7:43:3E:42:F9:6F:67:15:93:78
Certificate issuer: /CN=3aea4dae3e994fd9fe7be7433e42f96f67159378
Certificate serial: 01A0E964C79189CCC840E289B37F3007E2EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
Manifest number: 1268
Signing time: Mon 28 Sep 2026 19:01:30 +0000
Manifest this update: Mon 28 Sep 2026 19:01:30 +0000
Manifest next update: Tue 29 Sep 2026 19:01:30 +0000
Files and hashes: 1: OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl (hash: wwQVLgkgpt3L1fYMipfRO8emJ2jvpBI9ch1HVyPoZ48=)
2: ZO-qcdvK7BzzeLOkMttoxYvxl4E.roa (hash: m6/e1cwgXC/4hA09rZcRl2fyViBKxPhi7mCSBLfbjRs=)
3: mdi8isJF9ZQ0I7Jg6Yr0cVHa8Ic.asa (hash: 54Ei/fKavstT42M7Nu3Fn+AfVQtGsu2BCI644ANc1Xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:64:c7:91:89:cc:c8:40:e2:89:b3:7f:30:07:e2:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aea4dae3e994fd9fe7be7433e42f96f67159378
Validity
Not Before: Sep 28 19:01:30 2026 GMT
Not After : Sep 29 19:01:30 2026 GMT
Subject: CN=ddeaf3899c85c47ff842f47ff2e02092db7306fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d0:90:45:83:f3:c3:14:de:19:b5:2f:39:c8:
d7:9b:bb:b2:ee:b7:f5:4e:2a:28:d2:e0:ef:21:60:
be:2d:e8:d7:17:4d:e3:99:91:3e:19:d2:a0:d0:0f:
65:8a:82:f8:a8:41:20:4f:93:31:e0:12:66:42:6a:
4a:88:b9:09:7f:51:82:cc:00:cf:3a:e6:8b:4b:c1:
cc:4d:94:a9:89:74:7b:e9:1a:c8:03:df:c9:c7:18:
aa:f7:f2:ce:3c:76:b8:e8:41:42:46:07:27:f7:1e:
01:6f:00:34:27:1b:e8:38:8c:fe:69:36:a0:d8:bd:
6a:07:c0:98:c9:6b:10:29:78:c7:1d:49:64:fc:3c:
d0:b5:89:f2:ed:e5:81:9c:2f:57:09:68:e6:6c:66:
28:a4:07:d5:c5:6c:20:69:29:d0:ef:29:a8:81:de:
84:e6:ca:ee:b7:80:5d:ed:e5:9b:d4:df:6a:45:ab:
7d:52:4b:a5:90:f1:ec:92:e4:99:34:c2:cc:0b:e2:
d6:80:66:c5:72:a6:98:bb:30:31:4f:75:11:9e:e9:
9c:56:d4:bd:9d:00:51:a9:a8:af:26:3c:95:38:e1:
8c:ff:29:f4:87:1a:da:4b:ae:16:f9:f8:90:2a:3d:
e8:cd:88:f5:2f:e5:ab:12:f5:f7:8e:45:e8:db:d9:
b9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:EA:F3:89:9C:85:C4:7F:F8:42:F4:7F:F2:E0:20:92:DB:73:06:FB
X509v3 Authority Key Identifier:
keyid:3A:EA:4D:AE:3E:99:4F:D9:FE:7B:E7:43:3E:42:F9:6F:67:15:93:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:27:67:16:4c:49:39:01:29:2c:70:05:9d:3c:9e:0c:75:15:
ad:87:74:b0:c4:3e:56:ea:fb:a5:66:60:52:74:da:3a:21:25:
74:7b:60:23:ca:98:1a:0f:9c:cf:06:ef:d3:98:8e:91:26:99:
2f:91:03:0e:03:de:e9:f4:c5:33:3b:b0:11:3b:32:d7:07:50:
62:52:b7:57:bc:c6:8d:55:f9:dc:cd:1d:fc:51:64:81:e2:c9:
eb:63:1c:2d:bc:ab:7f:b1:dd:bb:40:80:49:6d:c5:30:5e:f8:
b4:10:75:0d:bf:45:2d:36:ab:69:a6:6b:84:7c:a0:40:99:4f:
2f:09:d0:c9:41:bc:0c:74:db:b6:a1:c4:6a:72:54:9f:a1:f4:
b0:fc:1f:dc:fc:06:25:8d:f8:f3:28:6d:1e:a3:6d:f5:eb:06:
97:d2:65:90:a7:34:ef:16:b9:26:e1:92:bc:e2:2e:d3:89:72:
db:3c:05:f3:31:85:1a:9f:68:a5:2b:1b:f2:4f:93:4e:21:11:
8f:3b:85:56:49:75:f3:4d:2e:ce:71:9c:13:02:71:f1:a6:14:
c5:3d:4f:60:9b:ae:d1:08:6a:a7:19:10:e9:38:51:d3:be:ec:
94:6c:be:45:7c:1a:90:da:6a:5c:96:f0:33:b0:d0:51:ac:c7:
4a:88:dd:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:30:07 2026 by rpki-client