Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
File: OUiGnOVLnTsvPjmu4snI6xnLWw8.mft (raw, json)
Hash identifier: EYlXQ3ZJIVUMkBhyudalFDJGHywuDwOqr20LVB4NnTU=
Subject key identifier: C4:58:9A:EF:8C:9D:EF:0D:DB:21:3B:C9:28:C4:35:E7:31:48:8D:55
Authority key identifier: 39:48:86:9C:E5:4B:9D:3B:2F:3E:39:AE:E2:C9:C8:EB:19:CB:5B:0F
Certificate issuer: /CN=3948869ce54b9d3b2f3e39aee2c9c8eb19cb5b0f
Certificate serial: 019D38663659A092D5218F5815D1D1A440C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUiGnOVLnTsvPjmu4snI6xnLWw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 07:01:55 +0000
Manifest this update: Sun 29 Mar 2026 07:01:55 +0000
Manifest next update: Mon 30 Mar 2026 07:01:55 +0000
Files and hashes: 1: OUiGnOVLnTsvPjmu4snI6xnLWw8.crl (hash: PY4Skv0C7ujlGtbacTgXFTYxLKxRUAqcwGweANgyrNs=)
2: mBkIIhBUokxiDs7U62dP6EGJ28A.roa (hash: KThHm1xgh12oiiD8xAb/mt2PPatVJSHJqHsKnrjqp7Q=)
3: uEzMp8gZyoHebkBdiY9KRs9lacE.asa (hash: x7WXJvWldueVaogAt4aCHUIb6RJurPgI+nLyD+k45kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OUiGnOVLnTsvPjmu4snI6xnLWw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:36:59:a0:92:d5:21:8f:58:15:d1:d1:a4:40:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3948869ce54b9d3b2f3e39aee2c9c8eb19cb5b0f
Validity
Not Before: Mar 29 07:01:55 2026 GMT
Not After : Mar 30 07:01:55 2026 GMT
Subject: CN=c4589aef8c9def0ddb213bc928c435e731488d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d5:f0:93:2c:48:8d:aa:d5:49:f9:ae:fd:0b:
28:b1:5a:1c:0d:e8:ee:e6:23:9d:d0:f0:f1:10:ea:
3c:58:56:93:4a:04:c7:f5:05:d6:44:c8:75:96:ea:
69:e8:85:96:68:9a:79:43:88:d3:4f:a1:19:70:92:
b4:84:22:ca:a3:98:fc:42:c0:37:d7:c4:f6:de:1d:
5e:0c:cc:43:50:11:79:e2:f9:75:6f:9c:6f:40:ba:
2b:df:bf:bb:a7:d3:6b:48:f3:41:e2:8d:9e:74:8a:
32:80:ba:32:16:ae:ab:fd:f3:e3:07:63:53:cd:63:
f6:b9:16:58:b0:73:62:d3:c4:a4:dd:29:8f:d7:d7:
22:0a:a0:7b:76:2c:18:88:fc:80:88:5d:12:21:71:
d1:9e:61:98:9f:f9:74:7c:b0:1b:77:8c:28:06:11:
7c:5e:47:66:48:db:a0:eb:42:dc:94:5c:f4:df:3a:
b8:dd:68:26:54:1e:db:3a:48:c4:0f:5f:d7:14:96:
4b:a2:fa:c2:2b:d8:c6:75:97:bc:09:b0:d5:13:8b:
c7:66:d3:25:63:d9:b0:7b:8d:fa:73:87:6d:bf:0d:
d4:4e:df:68:c3:fd:29:4f:b3:8a:75:30:0a:66:2a:
ec:39:46:6a:8c:35:c1:3d:35:a6:7e:c6:b9:2b:d5:
85:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:58:9A:EF:8C:9D:EF:0D:DB:21:3B:C9:28:C4:35:E7:31:48:8D:55
X509v3 Authority Key Identifier:
keyid:39:48:86:9C:E5:4B:9D:3B:2F:3E:39:AE:E2:C9:C8:EB:19:CB:5B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUiGnOVLnTsvPjmu4snI6xnLWw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:67:ac:c3:17:18:d9:15:71:ca:b3:b9:68:cb:01:7d:3a:e3:
bb:55:86:1d:81:36:5c:fe:f9:0f:08:eb:27:a7:eb:71:67:7b:
1e:17:b3:f2:05:83:6f:f2:09:84:0c:ed:f2:36:21:ee:ee:8a:
2d:4b:3a:9d:4c:1c:53:dc:62:3a:a5:56:54:06:8f:0d:84:56:
f0:ee:3f:91:fa:26:6c:7b:cc:db:33:ea:27:8b:bd:72:90:b0:
eb:17:3c:fd:32:a1:26:74:8c:0e:c2:fc:83:82:0f:96:61:c4:
e3:83:bd:df:be:4b:07:ad:ca:79:e0:d8:c8:a4:27:4a:df:55:
12:0b:40:e3:45:8a:e9:c7:1f:13:19:89:47:6e:f4:7f:9c:85:
e7:e9:b6:bc:e1:33:81:1b:dd:9b:85:b9:c2:f6:9a:41:d3:99:
e7:f0:c8:fa:a7:1a:60:08:bf:35:9c:fc:aa:8c:66:e0:6c:6f:
13:23:7e:9f:bd:bc:1b:4c:6f:a5:85:96:1a:6a:90:0f:db:9b:
65:15:7d:70:a4:24:57:1b:5a:be:c9:1f:3d:23:31:65:c6:77:
d4:a4:17:04:d6:63:2b:56:4c:6f:0f:42:12:e0:83:50:d6:39:
72:99:67:3c:7f:21:46:72:d2:85:36:73:41:00:b4:d1:7b:a7:
94:6c:56:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:26 2026 by rpki-client