Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.mft
File: OuFF_jt5sr9oqtvgB9721yrvKsM.mft (raw, json)
Hash identifier: oc7LYn2OvtLuWuUORP9KS9dm0+dJsTtQ513YcuzHARY=
Subject key identifier: DE:71:A4:E8:CC:34:C2:F6:90:42:65:A1:83:17:14:53:FB:3C:5C:50
Authority key identifier: 3A:E1:45:FE:3B:79:B2:BF:68:AA:DB:E0:07:DE:F6:D7:2A:EF:2A:C3
Certificate issuer: /CN=3ae145fe3b79b2bf68aadbe007def6d72aef2ac3
Certificate serial: 019D3A1CC35CFC2EC32D897EB2E4E25F527A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuFF_jt5sr9oqtvgB9721yrvKsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.mft
Manifest number: 11A1
Signing time: Sun 29 Mar 2026 15:00:56 +0000
Manifest this update: Sun 29 Mar 2026 15:00:56 +0000
Manifest next update: Mon 30 Mar 2026 15:00:56 +0000
Files and hashes: 1: 9dlwjsoeaynXvLD6hU--GhYSrqM.roa (hash: mUWy20UuJGJ5BznEAMczwLkiJHHJsFmSVmANdbalu+k=)
2: OuFF_jt5sr9oqtvgB9721yrvKsM.crl (hash: PIGEZFCDKhT//7FeISf08I7Onuootk7SxuDGoQwhdFk=)
3: rM_jdXy84vXGo0-WUXb97B2X5Vc.roa (hash: GjuFk6jemR6ii4hI/oxG1vqpEf4r+3pyDc+nTJsViK0=)
4: sEmorA-ZRll0p0UMYOTfT8auHu8.roa (hash: NXJluQHm5Ujqo8vGjkexvbDRO7wfW2RmWXBToETA0t4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OuFF_jt5sr9oqtvgB9721yrvKsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:c3:5c:fc:2e:c3:2d:89:7e:b2:e4:e2:5f:52:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ae145fe3b79b2bf68aadbe007def6d72aef2ac3
Validity
Not Before: Mar 29 15:00:56 2026 GMT
Not After : Mar 30 15:00:56 2026 GMT
Subject: CN=de71a4e8cc34c2f6904265a183171453fb3c5c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:06:e5:14:c3:7f:10:91:64:d7:04:83:3e:4b:
ba:cd:e0:0a:f7:67:25:1f:cc:7f:84:41:00:18:04:
0e:22:d3:a0:20:96:c5:c3:5c:30:40:48:83:f4:2b:
50:14:b4:4f:08:61:85:34:47:1b:a0:84:11:cf:ef:
c1:db:4c:59:13:1e:66:d3:ac:09:74:be:f3:d4:b1:
de:e2:4e:92:b3:ea:45:a8:55:94:fd:f7:2f:c8:74:
87:33:a9:b2:c9:b6:43:54:82:d0:b7:a3:2f:b9:2d:
c8:59:90:93:b2:e3:82:00:7b:92:c5:3b:b9:11:ad:
37:e8:d2:eb:1c:19:85:d1:a2:1c:d1:39:e9:ca:85:
63:95:35:4a:55:47:eb:dc:dd:28:a0:4d:e9:e5:dc:
8d:8e:e5:9b:f1:1d:5b:e8:f3:9d:fc:0f:c7:c2:17:
dd:f5:60:49:cb:e2:d2:e0:b9:1b:9c:c5:0b:e4:d2:
d0:eb:c3:a7:18:0e:73:19:b1:20:27:49:1b:ca:9a:
bf:be:39:ae:3f:fb:55:ee:53:61:01:58:9b:a8:e6:
c6:a2:47:c3:da:f2:f2:5e:a3:07:61:2c:68:d3:e1:
db:89:00:22:d8:f0:a5:5b:0a:d2:0f:58:bf:e2:66:
99:fd:95:2c:69:db:9d:00:79:d7:a4:af:98:50:c3:
4d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:71:A4:E8:CC:34:C2:F6:90:42:65:A1:83:17:14:53:FB:3C:5C:50
X509v3 Authority Key Identifier:
keyid:3A:E1:45:FE:3B:79:B2:BF:68:AA:DB:E0:07:DE:F6:D7:2A:EF:2A:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuFF_jt5sr9oqtvgB9721yrvKsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:36:13:8a:b7:d9:de:46:c8:8c:71:66:5e:98:d4:d2:d8:3c:
dc:07:f7:6e:1f:22:3f:1b:70:12:79:d8:b2:9d:7c:9e:2a:cf:
05:bc:21:57:a0:3e:9a:4d:9c:24:c3:8d:db:2c:1c:f5:2f:ed:
03:d1:b3:5b:dc:a9:e3:d7:51:66:6f:1f:22:9f:f6:8c:7b:be:
4d:e1:11:49:0c:7a:7c:7d:b3:24:88:fc:71:a4:5a:64:56:5d:
ce:5d:c0:e2:ae:17:1a:a4:98:16:ce:82:9c:a2:9f:30:b8:27:
25:cc:ad:5a:e2:29:a9:81:e7:65:6d:5e:dc:76:3f:1f:b2:e6:
3c:31:ca:8e:33:6d:43:03:ea:fa:7f:12:86:03:81:07:3e:53:
7c:83:42:b2:19:50:06:af:35:4e:9f:c6:1b:c2:6b:1c:0a:fe:
dd:75:3f:f1:77:8c:9b:2c:bd:83:01:58:5f:66:71:6c:1c:41:
11:3e:b8:57:c5:1d:ab:60:9a:a3:90:9d:63:1c:0f:98:ce:42:
f7:91:58:b2:3d:ba:e1:a5:8b:28:e8:ce:36:1b:6e:c5:fd:ec:
96:83:90:ec:56:b2:46:50:58:a2:68:e4:30:01:c2:63:92:f2:
e1:86:ad:09:21:0c:6b:92:97:fd:44:38:b2:cc:36:b5:3d:b6:
57:1a:64:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:29:35 2026 by rpki-client