Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
File: OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft (raw, json)
Hash identifier: u1uxgyyZlnxLHVhltw4o6MWLP/jw9zKkeB4xSwtRie8=
Subject key identifier: D5:DC:91:6B:2D:43:F4:59:9B:F7:66:7D:22:B0:AD:C5:0B:4D:AC:73
Authority key identifier: 3A:EA:4D:AE:3E:99:4F:D9:FE:7B:E7:43:3E:42:F9:6F:67:15:93:78
Certificate issuer: /CN=3aea4dae3e994fd9fe7be7433e42f96f67159378
Certificate serial: 019E7C67FE4E39B9A387CC358A5E9DC0A716
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
Manifest number: 1126
Signing time: Sun 31 May 2026 05:00:50 +0000
Manifest this update: Sun 31 May 2026 05:00:50 +0000
Manifest next update: Mon 01 Jun 2026 05:00:50 +0000
Files and hashes: 1: OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl (hash: Ot4AJNTzTsFgZuxTpqpvOdXD5G7ZN7RVI2UANlz9RGs=)
2: ZO-qcdvK7BzzeLOkMttoxYvxl4E.roa (hash: m6/e1cwgXC/4hA09rZcRl2fyViBKxPhi7mCSBLfbjRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jun 2026 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:7c:67:fe:4e:39:b9:a3:87:cc:35:8a:5e:9d:c0:a7:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aea4dae3e994fd9fe7be7433e42f96f67159378
Validity
Not Before: May 31 05:00:50 2026 GMT
Not After : Jun 1 05:00:50 2026 GMT
Subject: CN=d5dc916b2d43f4599bf7667d22b0adc50b4dac73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cf:7d:97:f3:90:4f:71:e3:1c:35:0d:75:62:
bb:97:5a:50:24:5e:86:71:d2:d0:11:14:45:80:8b:
e3:74:88:70:b4:e8:7e:58:e6:6f:e4:24:8c:ea:26:
a4:65:e9:43:79:f7:8a:6d:40:b2:86:04:eb:c5:0c:
35:26:70:e8:f1:24:3e:e9:5b:e6:fe:26:42:fd:7c:
98:ff:83:44:d1:35:8a:a6:df:7f:7a:26:a9:db:22:
79:48:28:ea:bc:e9:f3:f1:aa:6b:77:40:7c:db:95:
f6:d8:41:70:13:a3:22:fa:e8:9d:dd:5d:29:23:8c:
88:d5:53:ef:cb:00:c4:ad:56:ef:ad:c6:f0:8c:f8:
32:4c:e1:22:7c:fe:61:79:f2:c9:ea:60:1f:17:f0:
dd:e2:3d:9b:3b:4f:cd:5e:a8:99:82:b9:b3:3d:14:
83:0e:25:bb:ed:2d:a2:be:6a:15:d6:3d:2a:d0:83:
a3:a1:e6:fd:d1:85:24:83:8f:8e:ee:55:8d:c9:5e:
6a:6c:14:43:ff:b7:d2:c1:ae:25:7d:36:c2:a7:7c:
a9:bd:4d:22:34:10:97:88:e0:24:62:8f:c4:d5:32:
27:ce:87:56:04:6a:ce:11:0f:14:fa:72:d3:e0:a8:
b7:9d:e8:1a:3c:30:22:05:af:07:24:ab:b4:be:aa:
20:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:DC:91:6B:2D:43:F4:59:9B:F7:66:7D:22:B0:AD:C5:0B:4D:AC:73
X509v3 Authority Key Identifier:
keyid:3A:EA:4D:AE:3E:99:4F:D9:FE:7B:E7:43:3E:42:F9:6F:67:15:93:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:88:ff:3c:22:5c:56:4a:1d:d7:b4:42:08:65:da:61:ec:fe:
b8:72:24:95:6b:e1:14:7f:2f:3f:ad:85:40:a8:ee:e4:cc:7c:
ec:09:dc:26:9b:9f:19:f2:77:df:1c:79:ff:45:d3:8a:6a:63:
2f:58:98:f5:93:7a:f3:ee:0a:9b:66:ef:88:c1:fa:f9:7b:f6:
1b:80:38:93:5d:6c:34:f1:db:d6:cd:a5:2d:27:f2:bf:2f:0e:
56:5e:5a:56:43:4a:58:fc:ab:e6:fe:78:1d:1a:b9:2b:b5:b2:
64:28:07:2e:1b:00:d0:95:12:ca:20:52:29:c1:31:13:e2:e2:
10:eb:a7:d3:9a:6a:21:63:5a:2b:80:3a:39:16:a4:74:0c:cb:
44:d2:90:ff:74:0c:cc:83:81:4c:f0:62:e6:ce:f4:0e:f9:b3:
09:38:8c:8a:67:5a:be:02:34:84:2e:fb:0e:12:ec:59:f2:15:
de:85:f7:bf:1b:a7:3f:12:9e:04:fe:96:40:9d:dc:7b:84:80:
e1:7a:b7:46:c2:ea:e2:26:74:6f:2e:88:e9:e7:54:21:9b:be:
8f:b3:30:ed:15:dd:ee:5f:4e:8d:60:d3:95:ec:d9:f2:88:35:
a5:1e:db:cb:fa:13:3d:10:74:ff:b9:8a:fa:62:d0:63:7f:f6:
e2:0e:9a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 10:48:46 2026 by rpki-client