Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
File: Ou655pK6npPYuVpkiNXIdWCdSuw.mft (raw, json)
Hash identifier: 0UBTtjjWarN6OIdYLkHnKNqlaNSMGFjqKvIQwXUsd2w=
Subject key identifier: DA:BD:AF:21:7B:CD:A7:35:17:9E:7D:8A:BB:96:BD:24:6C:43:C4:CE
Authority key identifier: 3A:EE:B9:E6:92:BA:9E:93:D8:B9:5A:64:88:D5:C8:75:60:9D:4A:EC
Certificate issuer: /CN=3aeeb9e692ba9e93d8b95a6488d5c875609d4aec
Certificate serial: 01A15B8C32653B82D7D96788F02B2E2BDF9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
Manifest number: 1873
Signing time: Tue 20 Oct 2026 23:01:16 +0000
Manifest this update: Tue 20 Oct 2026 23:01:16 +0000
Manifest next update: Wed 21 Oct 2026 23:01:16 +0000
Files and hashes: 1: OSQYUaSf3gbMxgKVGaSRUtdNHTA.roa (hash: r4nA30trmkd0vBXPfRkmROxsmgpOrH0HeKPaS+ubN0w=)
2: Ou655pK6npPYuVpkiNXIdWCdSuw.crl (hash: 8HBpnP8CS5tQu5QXqHzzo7jOTtX6GievoYLrIBA/tmA=)
3: pVERtNhFi8FWjU9Y4DiQboSkUcg.roa (hash: zXHM3oZaOO62QcqG4BH7LRDl6S8yZxF21aaBpfwYUVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 23:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5b:8c:32:65:3b:82:d7:d9:67:88:f0:2b:2e:2b:df:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aeeb9e692ba9e93d8b95a6488d5c875609d4aec
Validity
Not Before: Oct 20 23:01:16 2026 GMT
Not After : Oct 21 23:01:16 2026 GMT
Subject: CN=dabdaf217bcda735179e7d8abb96bd246c43c4ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:08:cf:79:51:fc:16:b9:74:77:c8:8f:ef:84:
7d:1e:1f:90:6e:d8:be:ff:a6:97:d7:5c:95:f7:11:
32:1c:d1:35:9a:89:b8:06:ce:b8:f9:60:aa:36:36:
46:c5:f6:d8:10:d7:fc:d4:00:04:99:87:38:99:8e:
9f:24:60:cb:2f:f8:e1:20:22:92:57:ea:44:bd:85:
fd:f6:43:3a:96:e5:2c:2a:10:82:dd:f0:48:0c:f4:
6f:3e:f3:b6:bc:e5:80:0d:b8:23:67:c0:f0:72:50:
70:e8:b0:3a:4f:b6:88:bc:cf:b3:17:71:c6:87:0b:
aa:56:8b:b0:3d:66:87:60:0b:f9:af:1b:61:35:8d:
cf:d7:85:ad:ab:26:42:6b:b0:6d:08:42:12:05:96:
a2:63:1f:f5:f2:a6:c9:78:20:6b:ee:96:2b:38:5e:
cd:53:b9:05:6d:32:2c:9e:dc:36:3f:f1:4a:07:84:
a7:9f:8f:40:4e:65:50:17:9e:f3:a0:2d:9f:2a:87:
8e:01:6c:a0:bb:75:a3:9a:c3:23:b9:4c:de:2d:38:
21:0f:c9:7e:d7:14:50:75:f5:8a:e0:1d:59:52:94:
67:fe:1c:e6:7b:19:63:e0:fc:bb:bd:7d:0c:aa:47:
2c:30:bb:2b:af:20:0d:17:4b:05:6c:09:68:89:aa:
ed:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:BD:AF:21:7B:CD:A7:35:17:9E:7D:8A:BB:96:BD:24:6C:43:C4:CE
X509v3 Authority Key Identifier:
keyid:3A:EE:B9:E6:92:BA:9E:93:D8:B9:5A:64:88:D5:C8:75:60:9D:4A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:f9:f7:23:bb:3e:d4:57:14:09:83:79:5a:6c:3f:b6:a0:b5:
77:6e:8f:91:e3:f5:14:e9:8f:01:86:7f:ba:93:25:ad:29:5a:
71:f2:b4:1b:84:41:df:bd:62:ef:86:b6:27:31:cd:26:51:92:
d0:9d:9b:e5:ca:5b:f8:93:24:8e:42:8d:1c:4f:7e:77:be:c8:
05:2c:52:a2:2d:74:d7:04:47:d8:3d:7c:b6:a7:3c:28:1b:5d:
f7:93:5d:b3:6c:fb:6e:14:e0:15:cd:25:7c:46:34:68:0b:03:
8a:42:47:d6:af:b4:e0:14:4a:4f:41:4e:be:e4:9b:10:fb:c0:
e1:f3:d4:d0:4e:40:b7:dd:18:5e:51:5b:71:46:bc:44:a8:27:
7e:14:c6:b5:67:09:97:8e:73:44:59:4f:6e:51:ed:b1:0e:5e:
65:47:45:c7:96:55:96:a5:45:66:c1:1a:49:e9:28:30:ff:7c:
7a:88:61:fc:27:bf:13:08:18:44:5f:ab:40:28:76:96:49:85:
66:51:c9:15:d4:32:f2:42:2c:df:29:25:d4:84:2a:09:46:e9:
8f:10:35:22:80:9a:01:ff:46:ff:ef:de:52:8a:3e:2d:47:d1:
c5:ea:f8:a2:1a:29:2c:13:e4:11:e8:0c:1e:64:48:b7:6a:54:
8d:64:64:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 07:33:53 2026 by rpki-client