Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
File: Ou655pK6npPYuVpkiNXIdWCdSuw.mft (raw, json)
Hash identifier: lQD+Zi3684B/WyxI+Uzgi1+K0XghQ0b/RqB7Vg+3ytU=
Subject key identifier: F6:2C:CB:32:AB:FF:A6:A9:47:B8:77:E5:5F:EC:80:31:A7:CB:0A:21
Authority key identifier: 3A:EE:B9:E6:92:BA:9E:93:D8:B9:5A:64:88:D5:C8:75:60:9D:4A:EC
Certificate issuer: /CN=3aeeb9e692ba9e93d8b95a6488d5c875609d4aec
Certificate serial: 019D39407512F86B758E87CACF2885917E16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
Manifest number: 164F
Signing time: Sun 29 Mar 2026 11:00:18 +0000
Manifest this update: Sun 29 Mar 2026 11:00:18 +0000
Manifest next update: Mon 30 Mar 2026 11:00:18 +0000
Files and hashes: 1: OSQYUaSf3gbMxgKVGaSRUtdNHTA.roa (hash: r4nA30trmkd0vBXPfRkmROxsmgpOrH0HeKPaS+ubN0w=)
2: Ou655pK6npPYuVpkiNXIdWCdSuw.crl (hash: RRd9Scq7+HG83pSk2ty7XcjDQFvIB5VbuvkOLfLkijg=)
3: pVERtNhFi8FWjU9Y4DiQboSkUcg.roa (hash: zXHM3oZaOO62QcqG4BH7LRDl6S8yZxF21aaBpfwYUVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:75:12:f8:6b:75:8e:87:ca:cf:28:85:91:7e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aeeb9e692ba9e93d8b95a6488d5c875609d4aec
Validity
Not Before: Mar 29 11:00:18 2026 GMT
Not After : Mar 30 11:00:18 2026 GMT
Subject: CN=f62ccb32abffa6a947b877e55fec8031a7cb0a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:52:63:3e:bd:bc:d4:e3:de:2e:09:06:76:96:
8d:15:4a:cd:27:6f:56:e2:23:9e:bc:c1:c8:8d:c4:
ba:01:3c:ec:31:f5:84:8f:72:47:9a:a8:31:0c:8f:
eb:3c:d4:8b:29:31:67:4c:1f:22:36:a9:8a:4b:8f:
08:51:97:c7:d7:49:0a:b2:82:bc:b5:85:52:4a:d1:
45:11:27:e5:5d:5b:e9:b9:31:60:76:d6:a1:a6:7d:
13:bf:2f:48:8d:f6:78:a7:89:a9:11:30:4c:57:79:
16:a2:c1:9e:40:43:7d:65:42:9f:b2:84:4d:66:5c:
d9:ad:d5:b1:d7:8c:57:cc:90:e2:18:7b:1c:32:a7:
b7:75:62:2b:8c:e4:d2:09:f8:1d:dd:b6:73:f7:df:
96:48:4b:ba:af:87:6e:d2:0f:58:ad:24:4d:04:b4:
9d:79:0a:b9:bc:2c:6b:cd:69:b6:7e:f4:d1:20:c7:
3f:6f:07:4d:73:5e:35:62:b0:18:1b:c9:70:ac:5a:
96:47:b2:f9:5b:db:87:8c:6f:38:79:f0:a4:f7:44:
7b:a7:c7:d2:61:18:56:b0:d6:00:7f:b9:2f:78:96:
93:df:72:11:5a:a6:12:e9:34:6f:e0:9b:4b:f1:ef:
71:44:79:98:37:ba:11:98:9e:b2:80:56:82:02:0e:
24:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:2C:CB:32:AB:FF:A6:A9:47:B8:77:E5:5F:EC:80:31:A7:CB:0A:21
X509v3 Authority Key Identifier:
keyid:3A:EE:B9:E6:92:BA:9E:93:D8:B9:5A:64:88:D5:C8:75:60:9D:4A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:5c:f2:e8:ec:c0:63:cf:95:f8:1b:29:97:95:88:f7:5e:c9:
20:3d:31:34:27:a4:54:9b:59:74:4d:2b:43:14:75:60:18:56:
64:f5:e3:2b:86:1a:18:f3:3f:4c:ea:cb:fa:29:55:c0:1d:4b:
c7:31:96:8d:4f:7a:18:9f:03:2e:95:ef:3b:61:19:dc:8f:cb:
97:f3:38:45:4f:c2:fd:83:35:de:0d:8f:1e:d4:ae:74:c7:bd:
20:b5:8d:ca:16:27:35:a4:5a:0c:7c:93:4c:9f:bc:9a:d6:58:
96:c4:9e:ef:03:96:94:e3:08:7f:d9:19:20:86:b0:26:3a:b7:
63:09:6e:97:ae:a3:43:5d:4f:f2:aa:04:77:6f:82:81:32:56:
57:da:39:83:90:05:6c:43:31:1a:92:27:24:5a:d5:fd:b5:d7:
81:9c:84:d2:1b:20:9a:d6:88:73:63:64:3a:14:c7:51:f0:bc:
f9:83:d9:04:b6:b1:90:bc:30:51:38:84:a4:33:63:8f:48:89:
05:d9:76:16:31:aa:fe:d0:5a:88:9b:45:b3:15:c2:26:6c:02:
49:ab:b8:75:8f:5e:93:64:ba:ec:2f:47:0c:f9:a5:b3:59:20:
44:b6:9b:f4:d2:bf:f7:69:f3:1d:4c:cf:ed:64:80:b2:28:db:
45:35:54:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:42 2026 by rpki-client