Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft
File: ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft (raw, json)
Hash identifier: os9+GpTjo53YbP+/f2tvP/BVVVXp3N6pb+z6GwprvYw=
Subject key identifier: 2E:38:96:A8:65:18:CA:1F:91:A3:4A:F0:0E:B9:90:C6:E9:8F:09:97
Authority key identifier: A2:E3:C4:EC:7B:36:11:2F:CE:52:1F:5B:EF:28:73:C7:B4:CC:88:D1
Certificate issuer: /CN=a2e3c4ec7b36112fce521f5bef2873c7b4cc88d1
Certificate serial: 01A0E4E2D7A57C11F6D755FE19257DB16CA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft
Manifest number: 16A4
Signing time: Sun 27 Sep 2026 22:01:06 +0000
Manifest this update: Sun 27 Sep 2026 22:01:06 +0000
Manifest next update: Mon 28 Sep 2026 22:01:06 +0000
Files and hashes: 1: jOJexkDXSAKU_-HKNDagqEhFQhQ.asa (hash: KeiHn4aRyjzV0pdDSbfv01HgfCa1tMqxOinqb4oolAs=)
2: o9Ss8pZOMtCQFMYmaOI1iiVvKck.roa (hash: yQ2lKEVWTGb2qSCYFb6mTOwCLiNtvAVdOqsP+3WUfe4=)
3: ouPE7Hs2ES_OUh9b7yhzx7TMiNE.crl (hash: SRwEqTNeZOXrGwartDEHoVUzhkJCPJmgpPviuLqu7Mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:e2:d7:a5:7c:11:f6:d7:55:fe:19:25:7d:b1:6c:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e3c4ec7b36112fce521f5bef2873c7b4cc88d1
Validity
Not Before: Sep 27 22:01:06 2026 GMT
Not After : Sep 28 22:01:06 2026 GMT
Subject: CN=2e3896a86518ca1f91a34af00eb990c6e98f0997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8f:91:b3:37:24:6a:65:6b:90:da:11:cc:ef:
c5:c0:e4:ea:99:fc:dc:05:7e:56:58:dc:43:cd:d7:
a2:45:4a:0a:75:8f:42:a7:05:c2:0b:21:e4:f4:8c:
9b:b6:aa:6c:3c:0c:ad:35:86:9d:7e:ca:17:0b:ab:
eb:03:9d:78:30:14:74:54:16:eb:12:cb:39:9b:f3:
53:7e:75:df:e3:ca:b6:ad:7b:fe:3a:26:31:4e:23:
55:a6:26:70:36:a8:a4:aa:3d:fe:c5:d3:12:d4:c0:
b2:b6:d9:6b:e8:58:75:bd:66:3e:c3:37:3a:63:92:
2d:c9:b4:24:5d:98:f5:20:06:2d:a8:40:36:bb:05:
9c:ca:7c:af:a1:ee:5d:17:68:5f:29:fd:b9:f5:c5:
a5:5b:74:6e:4c:ac:43:ad:88:0a:d8:82:a1:e7:c7:
18:86:f1:f0:97:ef:62:e4:75:b4:77:f3:b3:6a:cd:
29:10:50:2b:30:aa:52:70:ff:38:65:4f:de:59:e1:
19:cf:f1:29:56:90:45:d3:ef:0f:80:62:5e:4f:47:
25:a3:4c:5f:e3:49:8e:5f:66:46:dc:29:15:db:26:
24:f1:a0:ef:1f:c4:be:46:e4:3f:0b:e7:a4:b9:5a:
10:ce:b3:78:14:46:1c:5d:b0:ff:f8:d3:11:eb:f7:
81:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:38:96:A8:65:18:CA:1F:91:A3:4A:F0:0E:B9:90:C6:E9:8F:09:97
X509v3 Authority Key Identifier:
keyid:A2:E3:C4:EC:7B:36:11:2F:CE:52:1F:5B:EF:28:73:C7:B4:CC:88:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:48:33:54:8a:e0:b5:46:15:62:0e:53:ae:18:a0:ef:c9:2e:
2f:3f:a8:c2:7b:7b:6f:95:c3:0e:da:b2:9b:a5:eb:8b:7b:9b:
ec:c8:02:34:0a:52:b4:ee:48:33:87:6c:6e:ab:6a:73:c5:10:
54:7a:a0:fb:e4:80:8e:b5:28:1d:99:23:27:46:47:e0:d0:e8:
f3:5f:18:36:7d:ef:df:5e:df:47:fd:3e:98:ab:70:3c:82:90:
37:f4:8d:71:c7:56:f8:12:6a:f9:e8:b7:07:c9:a2:1b:a5:13:
ce:06:27:5c:92:a5:e2:09:42:b3:df:f9:be:c3:bc:a2:5e:7c:
96:c9:f9:3f:53:7d:c2:c7:4b:b2:0e:58:45:5c:44:b2:3e:ba:
5c:c3:d2:c3:09:67:51:69:16:f1:44:10:a5:5e:b8:f7:d4:95:
a9:31:56:71:bf:28:f0:48:88:37:92:f2:45:d9:15:2c:2e:ed:
b8:c6:36:38:4e:6b:21:17:b3:8b:75:06:e6:63:39:2d:e6:8f:
64:d5:10:af:bc:06:df:f5:d4:7b:f4:2e:aa:3b:0d:4a:ba:d5:
de:a6:54:93:6a:52:2a:b9:71:25:cd:1f:45:71:97:1d:58:7a:
50:5f:0a:29:73:32:3b:61:4e:2f:c7:1b:b7:6e:44:7e:c1:e2:
e1:ac:9b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 01:48:27 2026 by rpki-client