Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
File: OUiGnOVLnTsvPjmu4snI6xnLWw8.mft (raw, json)
Hash identifier: XoWrHtA1X56Jtu76WuQ2JiwO+m4TXr2AuPebF+STWhc=
Subject key identifier: F2:C1:84:3A:77:13:75:33:E2:61:61:46:8B:C4:E3:AD:51:09:EC:1C
Authority key identifier: 39:48:86:9C:E5:4B:9D:3B:2F:3E:39:AE:E2:C9:C8:EB:19:CB:5B:0F
Certificate issuer: /CN=3948869ce54b9d3b2f3e39aee2c9c8eb19cb5b0f
Certificate serial: 01A040BBB3C1760BFA2B77FFA599D3DCF40A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUiGnOVLnTsvPjmu4snI6xnLWw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
Manifest number: 1A22
Signing time: Thu 27 Aug 2026 01:00:38 +0000
Manifest this update: Thu 27 Aug 2026 01:00:38 +0000
Manifest next update: Fri 28 Aug 2026 01:00:38 +0000
Files and hashes: 1: OUiGnOVLnTsvPjmu4snI6xnLWw8.crl (hash: jrrOHdicIC9DnJZl86BfkL+GHyzyQl4Ol5RmY+rctoY=)
2: mBkIIhBUokxiDs7U62dP6EGJ28A.roa (hash: KThHm1xgh12oiiD8xAb/mt2PPatVJSHJqHsKnrjqp7Q=)
3: uEzMp8gZyoHebkBdiY9KRs9lacE.asa (hash: x7WXJvWldueVaogAt4aCHUIb6RJurPgI+nLyD+k45kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OUiGnOVLnTsvPjmu4snI6xnLWw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:bb:b3:c1:76:0b:fa:2b:77:ff:a5:99:d3:dc:f4:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3948869ce54b9d3b2f3e39aee2c9c8eb19cb5b0f
Validity
Not Before: Aug 27 01:00:38 2026 GMT
Not After : Aug 28 01:00:38 2026 GMT
Subject: CN=f2c1843a77137533e26161468bc4e3ad5109ec1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:72:24:39:e9:49:da:22:1f:e9:f7:3d:d3:ae:
50:60:e0:76:28:19:05:bb:f6:73:19:f2:70:61:2e:
60:86:70:de:ea:fc:36:ed:4a:ed:39:c4:a8:cf:98:
a6:0c:1e:eb:59:9c:1b:0d:ed:2a:c9:e8:ae:81:36:
3b:4d:5d:49:d5:14:d1:1e:69:ac:9e:05:36:5b:13:
b6:1b:c3:d4:51:df:84:1f:19:4e:dc:b3:52:bf:3d:
0c:b4:b3:b2:d5:b6:90:8a:79:46:48:40:4f:11:0f:
14:48:b7:53:ed:fd:c9:23:53:47:8e:a5:c6:6c:ca:
18:74:1a:2f:ab:af:b2:5e:01:9f:8c:f6:85:25:ae:
32:fc:f4:e3:01:54:e3:36:9c:75:bb:21:7e:b8:14:
e7:fa:31:5f:b1:22:42:be:6c:c9:73:5a:dd:bc:87:
aa:41:d4:af:f3:0e:38:9a:e3:a9:13:fc:e0:45:ec:
99:36:7b:fb:89:21:87:50:d5:fa:31:67:98:12:f0:
21:7c:b4:c7:aa:71:7f:ef:fe:a1:fe:15:b9:61:92:
fd:67:d5:62:88:1d:5e:28:82:75:e3:b3:0f:78:bb:
55:44:d7:56:36:42:d0:f1:b9:cd:97:1c:be:94:86:
c4:82:a8:84:02:25:88:9f:1b:b6:e2:17:e8:76:ed:
3c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C1:84:3A:77:13:75:33:E2:61:61:46:8B:C4:E3:AD:51:09:EC:1C
X509v3 Authority Key Identifier:
keyid:39:48:86:9C:E5:4B:9D:3B:2F:3E:39:AE:E2:C9:C8:EB:19:CB:5B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUiGnOVLnTsvPjmu4snI6xnLWw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:0b:6d:03:b8:48:dd:5f:97:79:f2:42:71:45:00:01:75:50:
05:56:3a:91:97:a2:4d:a2:30:7a:97:7f:5d:24:f0:b3:61:dc:
17:61:5f:68:75:bf:c7:7a:93:cc:7b:26:b0:c2:14:e2:ce:62:
64:11:0c:56:49:15:34:0f:b1:bd:57:ff:f5:84:b3:e1:4a:f5:
7a:fe:b9:b8:22:91:c9:d6:bc:24:a0:be:89:6b:a3:ec:62:6b:
4e:60:74:20:7a:fc:ea:20:86:fd:89:20:ac:b7:68:2d:0f:48:
5c:4d:75:34:37:96:0d:b2:7e:f1:69:fb:3b:1e:66:ce:9e:df:
9e:b6:1a:4f:1c:5c:4c:9e:6a:93:f9:d7:8c:03:8e:03:60:95:
69:57:fa:8d:5a:f4:db:3a:e2:f6:97:b8:e1:7e:95:c7:3e:13:
27:cf:1a:86:c7:0a:b0:d9:36:95:0e:1b:ff:69:a8:b8:ac:75:
e0:2c:bc:65:5a:9a:95:3a:de:40:64:84:42:52:f1:d7:d9:ab:
d6:cd:95:6c:eb:b5:62:bb:fb:b8:01:89:80:5b:68:31:73:4f:
9b:e0:1b:c4:49:bb:5e:6e:5b:20:cd:62:a8:c1:60:5a:7e:ba:
97:d8:7d:08:5a:77:cc:8b:31:05:d7:48:6b:60:2c:95:38:e2:
ef:53:49:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:25:20 2026 by rpki-client