
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
File: OUiGnOVLnTsvPjmu4snI6xnLWw8.mft (raw, json)
Hash identifier: H7XqovECvP7dd9cxkLinmO81FtQ5xkrybVbNFGWdK9o=
Subject key identifier: A4:CE:A1:FA:AC:B1:E1:03:15:63:A0:BB:C2:C7:FD:30:2E:C1:45:A5
Authority key identifier: 39:48:86:9C:E5:4B:9D:3B:2F:3E:39:AE:E2:C9:C8:EB:19:CB:5B:0F
Certificate issuer: /CN=3948869ce54b9d3b2f3e39aee2c9c8eb19cb5b0f
Certificate serial: 019E29CC887BB495EC71F0E77914CE3DAC38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUiGnOVLnTsvPjmu4snI6xnLWw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
Manifest number: 190D
Signing time: Fri 15 May 2026 04:02:10 +0000
Manifest this update: Fri 15 May 2026 04:02:10 +0000
Manifest next update: Sat 16 May 2026 04:02:10 +0000
Files and hashes: 1: OUiGnOVLnTsvPjmu4snI6xnLWw8.crl (hash: wc3N7PQzLMMCpYXPH9F1wjQcr+bvVJhWw6+pYWiFeno=)
2: mBkIIhBUokxiDs7U62dP6EGJ28A.roa (hash: KThHm1xgh12oiiD8xAb/mt2PPatVJSHJqHsKnrjqp7Q=)
3: uEzMp8gZyoHebkBdiY9KRs9lacE.asa (hash: x7WXJvWldueVaogAt4aCHUIb6RJurPgI+nLyD+k45kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OUiGnOVLnTsvPjmu4snI6xnLWw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:cc:88:7b:b4:95:ec:71:f0:e7:79:14:ce:3d:ac:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3948869ce54b9d3b2f3e39aee2c9c8eb19cb5b0f
Validity
Not Before: May 15 04:02:10 2026 GMT
Not After : May 16 04:02:10 2026 GMT
Subject: CN=a4cea1faacb1e1031563a0bbc2c7fd302ec145a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5f:5f:ea:54:59:47:26:ec:a8:6e:2e:1a:db:
8b:33:35:d8:07:a7:13:8c:da:f2:ab:9a:bc:21:f5:
32:94:db:5f:9c:5b:f2:c3:5b:78:b6:17:d6:25:33:
63:0a:41:9c:0f:d8:fd:58:95:e5:7c:33:fa:15:bc:
82:2f:cb:56:a6:3b:ba:ec:81:99:56:33:50:90:35:
50:ee:c3:34:ce:bb:c2:c8:87:6f:2a:ba:3d:6d:41:
75:e6:3a:1e:6a:39:a3:3e:e5:28:99:ea:81:9c:b0:
a3:ac:86:fb:bc:8a:fd:13:e5:8b:1e:17:db:15:c7:
58:3f:65:ce:dc:c3:ba:71:c6:88:6e:d0:91:f8:ec:
dd:7c:ba:69:ec:53:02:41:ca:60:17:da:d4:0f:0b:
8c:d6:94:7f:44:90:50:8b:1a:5f:9b:8c:53:af:c6:
53:a9:e4:f6:6a:11:6e:aa:78:30:b1:6c:9b:ea:d1:
38:d3:9b:e9:d9:f1:7a:e7:31:51:0f:cd:94:b9:2d:
cb:e9:68:ba:c3:d1:2a:d8:aa:03:12:e4:8e:b1:c1:
89:97:26:b4:36:56:d7:c5:2b:6b:3d:b6:d3:ba:eb:
d8:01:96:f0:5d:f3:07:06:f0:8a:87:a0:82:47:45:
9b:7e:55:f3:da:f3:04:45:59:e5:1a:47:2f:79:ac:
ef:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:CE:A1:FA:AC:B1:E1:03:15:63:A0:BB:C2:C7:FD:30:2E:C1:45:A5
X509v3 Authority Key Identifier:
keyid:39:48:86:9C:E5:4B:9D:3B:2F:3E:39:AE:E2:C9:C8:EB:19:CB:5B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUiGnOVLnTsvPjmu4snI6xnLWw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:5f:74:23:2b:af:ca:54:a1:e6:7a:d8:a8:d1:58:74:a1:77:
0c:7a:6f:02:e4:7f:8a:34:ef:f2:ef:3c:48:c1:27:ce:97:6b:
03:19:1a:11:d3:d3:b6:54:4b:a6:0d:2c:f7:84:5f:52:3d:32:
a5:e6:bc:fd:e3:14:72:80:6c:c0:56:ef:5a:9e:70:53:37:44:
54:a7:21:91:66:04:86:2f:80:c3:82:4d:bf:8f:cc:e2:1a:a9:
07:38:8a:47:d5:a9:64:8c:5e:37:90:38:58:72:9a:dd:aa:31:
c1:5f:f1:7a:d1:db:2e:3f:06:c5:f6:38:2e:bf:ff:ae:75:7e:
bd:78:a4:20:3f:e7:d8:dd:45:65:23:26:a5:99:a5:b4:14:3c:
59:ba:15:c5:03:5f:88:41:69:4d:48:0f:c4:45:9d:31:99:ea:
38:fe:d3:02:1d:2b:4b:9b:81:85:85:3c:ce:45:c8:d9:42:6e:
4f:a9:48:74:70:07:b5:50:df:5e:86:6f:30:b3:35:63:14:ed:
7b:e2:aa:33:de:7e:83:46:e9:a9:bb:b6:31:b8:14:70:44:a9:
41:bf:38:95:8a:2c:69:86:4f:f0:ae:68:f2:66:72:da:c6:44:
86:f5:6b:ee:71:07:d9:a6:59:a3:4e:98:08:80:5d:6b:dc:9b:
46:69:d1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 07:03:17 2026 by rpki-client