Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft
File: ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft (raw, json)
Hash identifier: QoTQdp3A+ad3Mzt99lAoED5Dw9Mp3/gdn+ijNEZH4uQ=
Subject key identifier: 3B:B8:70:C0:F9:E7:91:FF:B1:84:56:82:67:46:9F:DE:77:A6:F3:22
Authority key identifier: A2:E3:C4:EC:7B:36:11:2F:CE:52:1F:5B:EF:28:73:C7:B4:CC:88:D1
Certificate issuer: /CN=a2e3c4ec7b36112fce521f5bef2873c7b4cc88d1
Certificate serial: 019D389C4A5BF86FD92457A775D1834E592A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft
Manifest number: 14B6
Signing time: Sun 29 Mar 2026 08:00:59 +0000
Manifest this update: Sun 29 Mar 2026 08:00:59 +0000
Manifest next update: Mon 30 Mar 2026 08:00:59 +0000
Files and hashes: 1: Ieo-AC5YDpT5XaC-tbGvdsSwkLE.roa (hash: sib5MLrWFBDEBml1a5atNNLAsn61q4TVzPsWvIidTuU=)
2: ouPE7Hs2ES_OUh9b7yhzx7TMiNE.crl (hash: nbwnsR70zS/Hy4C4rTkOYdWpj0fs+NcBaEnyTJppHi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:4a:5b:f8:6f:d9:24:57:a7:75:d1:83:4e:59:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e3c4ec7b36112fce521f5bef2873c7b4cc88d1
Validity
Not Before: Mar 29 08:00:59 2026 GMT
Not After : Mar 30 08:00:59 2026 GMT
Subject: CN=3bb870c0f9e791ffb184568267469fde77a6f322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2c:3e:f9:e6:44:c7:75:16:9e:8f:6e:3c:2e:
44:3b:31:fb:fb:f6:42:69:1b:77:5a:bc:91:9a:8e:
cd:2a:41:f5:d7:d0:f7:2b:a5:af:c8:3c:6a:b3:ad:
ea:c2:3d:5a:13:f7:f4:fa:50:6f:af:9c:1c:79:73:
b3:25:8e:4a:df:73:15:f2:0d:96:cd:f1:39:ae:63:
79:96:88:ce:40:e4:96:dd:70:e7:b6:6e:f7:f9:2a:
06:3b:76:95:54:b1:91:35:48:2b:3f:93:b5:7f:f0:
01:ef:41:45:38:db:73:bb:c8:25:50:c0:b1:59:fe:
cf:6c:07:e5:30:b1:ff:57:d1:ea:a6:09:ef:27:92:
1a:9a:61:d5:f7:99:2d:9d:bf:0f:a9:64:ea:52:b1:
f2:c8:1b:36:20:a6:09:d0:a8:7d:ec:61:a2:f1:d6:
28:89:c2:e9:7c:6a:7c:6f:ff:ef:62:1e:b8:20:4c:
27:b0:e8:57:c9:dc:ce:c9:f0:f3:e9:aa:55:7d:7c:
77:72:10:fb:ea:86:0c:a1:21:24:78:e8:a0:19:e2:
e0:7e:a3:6b:4b:67:2b:b0:a0:8e:f2:d8:b7:52:4d:
b2:f1:58:cf:3a:47:a3:0b:04:09:5f:7b:de:b5:bb:
97:26:fe:8f:bb:f5:1d:bd:40:13:16:f1:cd:87:02:
6e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B8:70:C0:F9:E7:91:FF:B1:84:56:82:67:46:9F:DE:77:A6:F3:22
X509v3 Authority Key Identifier:
keyid:A2:E3:C4:EC:7B:36:11:2F:CE:52:1F:5B:EF:28:73:C7:B4:CC:88:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:29:63:3a:d8:45:38:10:77:fe:36:f6:13:42:c4:42:30:2c:
d4:45:c4:65:89:94:88:24:a8:34:a1:0a:14:11:e6:d7:a3:96:
94:0c:8d:35:9a:2b:13:1b:4c:98:13:72:ca:c9:55:e4:0a:62:
1c:a2:e3:ea:74:c7:25:30:8d:f0:f7:68:f8:b7:08:51:39:b8:
d6:b4:c1:7a:8d:9b:c2:5e:53:c5:49:17:55:60:35:78:5f:a1:
58:b5:b4:e6:77:bd:bf:f1:08:cd:c4:97:2e:72:d4:84:c9:ce:
fe:bd:70:0d:cf:40:d9:10:c1:f4:50:75:a5:c3:ea:ee:f8:7f:
98:c2:63:5c:83:d9:f9:e0:20:b2:54:82:4a:d1:76:13:14:bd:
cc:fd:c6:ab:10:a9:f9:13:d7:0b:2e:62:fa:a6:38:e9:c5:da:
b7:80:c5:d4:e0:9d:5c:96:41:7f:72:c3:ef:22:5f:88:51:a6:
33:b3:3b:69:bb:82:98:37:9b:19:3d:a6:b1:56:51:2a:cd:28:
6c:cb:a5:f9:7e:2f:32:92:22:6a:4b:55:29:59:e9:77:f9:b6:
3d:94:d5:c0:e2:3c:98:b9:66:02:ef:07:6f:75:be:ac:1c:2f:
8b:32:6a:ed:2d:45:fe:87:a5:2a:c2:b2:f6:f7:02:88:3c:eb:
1d:99:f8:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nEpb+G/ZJFenddGDTlkqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZTNjNGVjN2IzNjExMmZjZTUyMWY1YmVmMjg3M2M3YjRj
Yzg4ZDEwHhcNMjYwMzI5MDgwMDU5WhcNMjYwMzMwMDgwMDU5WjAzMTEwLwYDVQQD
EygzYmI4NzBjMGY5ZTc5MWZmYjE4NDU2ODI2NzQ2OWZkZTc3YTZmMzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Cw++eZEx3UWno9uPC5EOzH7+/ZC
aRt3WryRmo7NKkH119D3K6WvyDxqs63qwj1aE/f0+lBvr5wceXOzJY5K33MV8g2W
zfE5rmN5lojOQOSW3XDntm73+SoGO3aVVLGRNUgrP5O1f/AB70FFONtzu8glUMCx
Wf7PbAflMLH/V9HqpgnvJ5IammHV95ktnb8PqWTqUrHyyBs2IKYJ0Kh97GGi8dYo
icLpfGp8b//vYh64IEwnsOhXydzOyfDz6apVfXx3chD76oYMoSEkeOigGeLgfqNr
S2crsKCO8ti3Uk2y8VjPOkejCwQJX3vetbuXJv6Pu/UdvUATFvHNhwJuuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDu4cMD555H/sYRWgmdGn953pvMiMB8GA1UdIwQY
MBaAFKLjxOx7NhEvzlIfW+8oc8e0zIjRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3VQRTdIczJFU19PVWg5Yjd5aHp4N1RNaU5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9mNDAzODctMmQ4NC00MDYyLWJlYzYt
ZGE1MTNjYzY5ODM5LzEvb3VQRTdIczJFU19PVWg5Yjd5aHp4N1RNaU5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9mNDAzODctMmQ4NC00MDYyLWJlYzYtZGE1MTNjYzY5ODM5
LzEvb3VQRTdIczJFU19PVWg5Yjd5aHp4N1RNaU5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbiljOthF
OBB3/jb2E0LEQjAs1EXEZYmUiCSoNKEKFBHm16OWlAyNNZorExtMmBNyyslV5Api
HKLj6nTHJTCN8Pdo+LcIUTm41rTBeo2bwl5TxUkXVWA1eF+hWLW05ne9v/EIzcSX
LnLUhMnO/r1wDc9A2RDB9FB1pcPq7vh/mMJjXIPZ+eAgslSCStF2ExS9zP3GqxCp
+RPXCy5i+qY46cXat4DF1OCdXJZBf3LD7yJfiFGmM7M7abuCmDebGT2msVZRKs0o
bMul+X4vMpIiaktVKVnpd/m2PZTVwOI8mLlmAu8Hb3W+rBwvizJq7S1F/oelKsKy
9vcCiDzrHZn4yw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:17 2026 by rpki-client