Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
File: OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft (raw, json)
Hash identifier: KP5/NNDBPspeRV3QQhEVQxTGgd2g2VQu13jsZtpP1xw=
Subject key identifier: DC:4B:02:A6:49:0F:FA:18:60:BC:38:77:2D:EF:75:84:BA:86:B4:66
Authority key identifier: 3A:EA:4D:AE:3E:99:4F:D9:FE:7B:E7:43:3E:42:F9:6F:67:15:93:78
Certificate issuer: /CN=3aea4dae3e994fd9fe7be7433e42f96f67159378
Certificate serial: 019D37F73ECF30CE8E475938459759D945D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
Manifest number: 107E
Signing time: Sun 29 Mar 2026 05:00:43 +0000
Manifest this update: Sun 29 Mar 2026 05:00:43 +0000
Manifest next update: Mon 30 Mar 2026 05:00:43 +0000
Files and hashes: 1: OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl (hash: u6kyeZqi6o1Zr6qqMED4X/cupAOKqA/CuqG7NRSivpQ=)
2: ZO-qcdvK7BzzeLOkMttoxYvxl4E.roa (hash: m6/e1cwgXC/4hA09rZcRl2fyViBKxPhi7mCSBLfbjRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:3e:cf:30:ce:8e:47:59:38:45:97:59:d9:45:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aea4dae3e994fd9fe7be7433e42f96f67159378
Validity
Not Before: Mar 29 05:00:43 2026 GMT
Not After : Mar 30 05:00:43 2026 GMT
Subject: CN=dc4b02a6490ffa1860bc38772def7584ba86b466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3c:1a:5a:f2:ef:9b:0c:4a:37:5b:43:85:f9:
c3:14:65:f5:ab:cf:35:c8:1a:9f:c0:9a:88:f6:a5:
fe:a4:d0:ba:af:99:c3:07:0a:5f:27:92:12:27:da:
4e:47:5c:b4:ee:94:67:e8:6e:47:02:49:c7:a2:2a:
ca:c4:20:f5:b6:96:31:e6:d6:12:9e:79:77:e9:05:
72:20:fc:3c:72:e0:ba:43:f3:10:f5:75:04:86:97:
a1:30:3b:53:05:61:8c:81:9e:85:65:a2:56:89:d1:
06:5c:77:e1:08:2a:d5:f2:77:00:ba:13:14:75:af:
f3:e5:e4:64:13:05:62:09:de:05:60:a1:eb:50:96:
0f:17:61:10:76:ca:b2:ab:96:9f:0a:37:4b:84:43:
20:ad:77:48:d9:60:c2:3c:5e:b8:bf:68:4e:f5:cc:
f5:cd:66:8d:d0:f1:d3:b4:7f:fe:20:ba:70:ec:7a:
ca:c6:24:c3:86:5c:f2:9a:eb:30:7d:b8:9b:09:fe:
77:7c:18:52:b2:45:69:f2:41:08:dd:a3:e9:96:c1:
8b:54:fe:88:34:ec:74:6f:ab:20:ae:e6:99:96:cf:
88:c7:36:f1:03:a2:5f:03:98:69:0b:09:88:00:1e:
b7:07:76:07:da:9e:2e:24:8a:cb:d3:2d:c6:61:6f:
3e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:4B:02:A6:49:0F:FA:18:60:BC:38:77:2D:EF:75:84:BA:86:B4:66
X509v3 Authority Key Identifier:
keyid:3A:EA:4D:AE:3E:99:4F:D9:FE:7B:E7:43:3E:42:F9:6F:67:15:93:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:41:7a:8e:ce:87:6c:21:54:22:82:e9:3d:68:4c:72:34:9d:
be:2d:82:ed:0c:4d:48:3a:f9:52:44:8a:64:8c:3b:4e:b1:97:
0e:ee:38:9f:9f:b0:7b:2a:6f:87:57:28:27:2a:24:f7:ce:93:
93:64:5b:52:40:4d:17:80:78:21:96:a5:1f:0c:1e:d3:15:3b:
06:9d:85:5d:55:1c:fe:9d:d5:8c:a5:32:86:76:7c:15:e8:b7:
71:89:d4:bb:a9:3d:17:45:c4:66:20:99:04:a7:38:c5:16:a1:
9c:13:06:69:22:52:05:13:76:aa:e5:d8:75:ed:9f:34:62:a3:
20:6c:05:36:12:a2:1b:bc:12:f3:38:0e:78:31:27:85:93:d9:
b1:a4:5d:7f:3c:4c:0b:55:8b:09:65:49:16:06:72:3e:2b:d4:
93:1d:d3:02:0c:b0:c5:fe:e6:04:e6:dd:1a:2d:29:de:bf:d7:
02:86:e4:66:f8:c1:00:6a:fa:12:9d:b6:48:b8:f9:22:a2:7d:
e0:4d:aa:bc:cf:fe:84:56:d8:74:d3:d8:ab:38:00:c2:d8:25:
39:7b:cf:c1:8a:9a:1f:58:c3:83:5c:44:e1:18:78:72:53:6c:
30:b8:d8:2e:67:32:4d:63:9b:d3:24:a0:93:dc:c6:24:50:a5:
9b:cd:07:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039z7PMM6OR1k4RZdZ2UXZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZWE0ZGFlM2U5OTRmZDlmZTdiZTc0MzNlNDJmOTZmNjcx
NTkzNzgwHhcNMjYwMzI5MDUwMDQzWhcNMjYwMzMwMDUwMDQzWjAzMTEwLwYDVQQD
EyhkYzRiMDJhNjQ5MGZmYTE4NjBiYzM4NzcyZGVmNzU4NGJhODZiNDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDwaWvLvmwxKN1tDhfnDFGX1q881
yBqfwJqI9qX+pNC6r5nDBwpfJ5ISJ9pOR1y07pRn6G5HAknHoirKxCD1tpYx5tYS
nnl36QVyIPw8cuC6Q/MQ9XUEhpehMDtTBWGMgZ6FZaJWidEGXHfhCCrV8ncAuhMU
da/z5eRkEwViCd4FYKHrUJYPF2EQdsqyq5afCjdLhEMgrXdI2WDCPF64v2hO9cz1
zWaN0PHTtH/+ILpw7HrKxiTDhlzymuswfbibCf53fBhSskVp8kEI3aPplsGLVP6I
NOx0b6sgruaZls+IxzbxA6JfA5hpCwmIAB63B3YH2p4uJIrL0y3GYW8+OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNxLAqZJD/oYYLw4dy3vdYS6hrRmMB8GA1UdIwQY
MBaAFDrqTa4+mU/Z/nvnQz5C+W9nFZN4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3VwTnJqNlpUOW4tZS1kRFBrTDViMmNWazNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zMjU3ZDktM2ZiOC00Y2RmLTk4YWEt
OTNlOTQwM2ViMDE5LzEvT3VwTnJqNlpUOW4tZS1kRFBrTDViMmNWazNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8zMjU3ZDktM2ZiOC00Y2RmLTk4YWEtOTNlOTQwM2ViMDE5
LzEvT3VwTnJqNlpUOW4tZS1kRFBrTDViMmNWazNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQEF6js6H
bCFUIoLpPWhMcjSdvi2C7QxNSDr5UkSKZIw7TrGXDu44n5+weypvh1coJyok986T
k2RbUkBNF4B4IZalHwwe0xU7Bp2FXVUc/p3VjKUyhnZ8Fei3cYnUu6k9F0XEZiCZ
BKc4xRahnBMGaSJSBRN2quXYde2fNGKjIGwFNhKiG7wS8zgOeDEnhZPZsaRdfzxM
C1WLCWVJFgZyPivUkx3TAgywxf7mBObdGi0p3r/XAobkZvjBAGr6Ep22SLj5IqJ9
4E2qvM/+hFbYdNPYqzgAwtglOXvPwYqaH1jDg1xE4Rh4clNsMLjYLmcyTWOb0ySg
k9zGJFClm80H8A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:30 2026 by rpki-client