Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
File: Ou655pK6npPYuVpkiNXIdWCdSuw.mft (raw, json)
Hash identifier: So8akY/83BEk6lU0i5RyLKIqgqhx34zzK93lzkajNZk=
Subject key identifier: 82:D5:99:31:FE:75:77:9B:49:41:49:DA:69:2C:48:E1:9C:0D:92:D3
Authority key identifier: 3A:EE:B9:E6:92:BA:9E:93:D8:B9:5A:64:88:D5:C8:75:60:9D:4A:EC
Certificate issuer: /CN=3aeeb9e692ba9e93d8b95a6488d5c875609d4aec
Certificate serial: 019F8643EC957C84D7F49FDED9F0BFFACE87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
Manifest number: 1780
Signing time: Tue 21 Jul 2026 20:00:26 +0000
Manifest this update: Tue 21 Jul 2026 20:00:26 +0000
Manifest next update: Wed 22 Jul 2026 20:00:26 +0000
Files and hashes: 1: OSQYUaSf3gbMxgKVGaSRUtdNHTA.roa (hash: r4nA30trmkd0vBXPfRkmROxsmgpOrH0HeKPaS+ubN0w=)
2: Ou655pK6npPYuVpkiNXIdWCdSuw.crl (hash: Px22/BrdKNWaxv01UkEHFFnOyRpezaz67p1178k+dkA=)
3: pVERtNhFi8FWjU9Y4DiQboSkUcg.roa (hash: zXHM3oZaOO62QcqG4BH7LRDl6S8yZxF21aaBpfwYUVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:43:ec:95:7c:84:d7:f4:9f:de:d9:f0:bf:fa:ce:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aeeb9e692ba9e93d8b95a6488d5c875609d4aec
Validity
Not Before: Jul 21 20:00:26 2026 GMT
Not After : Jul 22 20:00:26 2026 GMT
Subject: CN=82d59931fe75779b494149da692c48e19c0d92d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:82:70:ca:8f:32:18:88:93:25:4e:9f:4e:f1:
8e:3c:ec:07:69:fc:92:28:cd:55:32:8e:4f:b4:24:
ef:37:3f:e6:ec:28:77:15:dd:a4:65:d7:57:90:dd:
06:ae:d0:02:c3:ac:82:58:19:d4:fa:c5:38:31:31:
10:ad:5b:b2:76:9b:9e:96:7a:42:d0:95:c8:5b:bc:
ea:a3:ac:8b:05:88:fd:c0:21:98:56:6b:3d:e4:fa:
f6:06:ae:d8:56:67:47:a1:bb:da:73:95:6b:51:88:
46:f5:6a:6a:d8:6f:3d:85:c6:e1:d9:61:f1:1a:11:
32:dc:e1:bf:ad:73:65:cf:60:0a:29:51:49:63:16:
62:ee:89:fc:25:bb:31:0f:53:1b:a5:a4:4d:3c:10:
9c:fa:9a:67:05:4b:74:99:d4:03:a3:ee:75:f4:ad:
6f:2b:60:30:22:7c:14:5b:51:9d:7f:7c:fe:41:41:
6a:30:49:2e:40:92:bf:7e:49:cd:af:44:17:82:56:
5c:51:9f:18:8b:48:76:ba:33:ee:35:87:6b:da:92:
c3:33:24:bc:a8:a4:d3:4b:98:21:8f:78:60:16:26:
6a:a1:8a:94:d5:92:39:d5:d3:b7:a2:3c:df:1e:ce:
39:98:4a:7e:a6:17:99:a6:ef:64:89:59:fe:46:f7:
5e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D5:99:31:FE:75:77:9B:49:41:49:DA:69:2C:48:E1:9C:0D:92:D3
X509v3 Authority Key Identifier:
keyid:3A:EE:B9:E6:92:BA:9E:93:D8:B9:5A:64:88:D5:C8:75:60:9D:4A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:89:16:c0:96:1b:be:13:e7:74:97:49:41:21:a4:36:ba:f9:
26:d4:b0:e9:64:43:c7:7e:44:4d:7f:46:af:4c:e8:6d:5e:b1:
76:8c:4e:54:8d:95:54:dc:39:0c:e8:dd:13:8e:15:88:62:ee:
06:92:5e:17:ec:0a:8d:d4:42:20:41:a3:0e:5d:41:a2:85:66:
54:13:b9:e5:6b:41:62:98:e7:f6:18:c8:a7:82:5b:41:8b:e8:
e1:ed:db:50:95:a5:7c:dc:9e:c6:eb:ba:ec:fd:61:b0:10:fb:
0d:97:bf:51:de:41:9a:ca:9e:2d:13:b4:6a:2e:cc:32:f8:f3:
f8:c6:95:fc:67:03:f7:af:58:97:6a:ce:fb:80:99:f1:e3:40:
86:c4:9c:17:da:73:85:6d:d0:0f:4a:b8:c6:bb:64:73:96:8d:
36:5f:e5:01:d5:ff:2c:39:c5:37:a2:cd:52:fe:60:0e:bc:8a:
c8:f6:c0:f9:ac:7e:39:09:b5:07:ce:dd:51:95:bd:9c:94:18:
da:ac:cc:94:af:14:ad:84:38:67:a2:4e:a2:f7:20:10:a4:f4:
65:f7:a4:74:3b:5f:b4:c4:09:05:3f:ba:e3:8a:a2:b0:bd:a0:
1a:cc:f8:1e:79:03:fe:06:53:e0:36:4d:b9:09:3a:41:52:0b:
d7:47:bf:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:11:12 2026 by rpki-client