Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/OucTLOaCVLix_l3L-9IyLrkqctY.mft
File: OucTLOaCVLix_l3L-9IyLrkqctY.mft (raw, json)
Hash identifier: vFi3CyvNJcLHCRjPHgRsIPLFAa/yWNZtaWmj5c5NyzA=
Subject key identifier: C1:F7:97:92:79:BE:70:19:90:8A:6D:33:8E:5D:53:56:52:E9:EF:EA
Authority key identifier: 3A:E7:13:2C:E6:82:54:B8:B1:FE:5D:CB:FB:D2:32:2E:B9:2A:72:D6
Certificate issuer: /CN=3ae7132ce68254b8b1fe5dcbfbd2322eb92a72d6
Certificate serial: 01A14D995F16A9E0B90CB474B35BDE63246B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OucTLOaCVLix_l3L-9IyLrkqctY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/OucTLOaCVLix_l3L-9IyLrkqctY.mft
Manifest number: 0126
Signing time: Sun 18 Oct 2026 06:00:59 +0000
Manifest this update: Sun 18 Oct 2026 06:00:59 +0000
Manifest next update: Mon 19 Oct 2026 06:00:59 +0000
Files and hashes: 1: BMNzg6EYr5M8zE4GFwahQLKFDj8.roa (hash: 8/w5/sefdEDU7vsG2GXfOV5wF3VjDyOddeHrv8h3r8c=)
2: OucTLOaCVLix_l3L-9IyLrkqctY.crl (hash: bge1gHy+LZlUJtsaD7oN8EYFGGO4PHElcBIy8nmbeyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/OucTLOaCVLix_l3L-9IyLrkqctY.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/OucTLOaCVLix_l3L-9IyLrkqctY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OucTLOaCVLix_l3L-9IyLrkqctY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 05:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4d:99:5f:16:a9:e0:b9:0c:b4:74:b3:5b:de:63:24:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ae7132ce68254b8b1fe5dcbfbd2322eb92a72d6
Validity
Not Before: Oct 18 06:00:59 2026 GMT
Not After : Oct 19 06:00:59 2026 GMT
Subject: CN=c1f7979279be7019908a6d338e5d535652e9efea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c5:44:98:7a:88:95:db:f7:b6:cc:13:02:10:
2e:6f:97:c2:6c:a8:60:be:d1:b3:82:86:ff:dd:66:
4e:8a:79:99:47:dd:0a:d2:0f:8c:06:5b:bc:b5:b5:
2b:ef:ed:39:43:08:3c:44:2d:bb:72:4f:15:cc:a0:
18:bf:7e:c3:5b:60:80:67:79:b6:79:1f:e1:09:55:
38:30:23:bc:44:ad:c9:1f:e9:29:14:48:39:70:0d:
8f:65:74:53:0c:fe:73:05:8e:aa:14:2e:66:11:9c:
c4:fc:74:36:41:17:6e:21:85:7f:42:96:a9:ab:77:
03:26:2d:b9:80:af:6f:44:fe:4d:13:77:75:2e:16:
82:01:c1:80:a4:29:1d:66:ff:02:0d:fe:4c:47:51:
7a:e6:ec:6d:7a:32:87:1f:c8:51:ae:c9:da:b2:a6:
b8:3d:9b:3d:38:56:2f:b9:a3:03:00:9c:df:0f:aa:
7b:f8:51:ff:f1:7c:dc:a2:ba:50:23:6c:3b:7e:09:
7d:b4:be:ec:49:54:8c:d9:7f:5f:1a:06:6e:ed:be:
f1:1c:51:7a:14:9c:b0:66:b6:c5:38:65:ce:1f:28:
f8:24:71:d2:1c:f5:d4:d2:36:f2:24:e7:32:8c:b5:
66:3d:87:39:95:fa:ee:0d:fa:bc:06:58:ed:9c:1d:
e7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F7:97:92:79:BE:70:19:90:8A:6D:33:8E:5D:53:56:52:E9:EF:EA
X509v3 Authority Key Identifier:
keyid:3A:E7:13:2C:E6:82:54:B8:B1:FE:5D:CB:FB:D2:32:2E:B9:2A:72:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OucTLOaCVLix_l3L-9IyLrkqctY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/OucTLOaCVLix_l3L-9IyLrkqctY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/OucTLOaCVLix_l3L-9IyLrkqctY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:46:2f:0f:d9:79:8f:2b:af:86:4b:c6:d5:b1:f6:c4:16:42:
4d:c5:4d:ad:a7:39:4d:20:64:83:58:e7:e7:8e:6b:3c:0b:39:
77:7d:66:c6:70:d2:d3:29:61:84:76:38:ec:8c:f3:1c:5b:9f:
da:81:14:b9:c6:07:ec:f7:a9:87:30:ec:0a:07:97:a7:0c:be:
81:10:79:2e:8f:75:b7:3c:52:df:68:ca:a0:30:34:bd:da:47:
19:fc:5e:7f:31:e3:23:b7:55:14:65:60:d6:b5:ae:83:01:3c:
23:33:00:82:75:20:11:92:6b:6a:09:9f:51:e3:79:8d:b4:96:
56:2a:25:7a:57:6c:f9:80:07:1a:bb:0d:f6:06:f0:00:4b:a3:
97:00:da:02:f4:f2:62:d3:90:9e:11:c7:2f:d0:29:6b:15:10:
a8:e8:38:66:df:72:a0:11:cb:f6:6d:de:4a:ee:7e:eb:a2:ae:
ab:6e:85:47:88:29:a9:d3:e2:45:2e:30:81:7e:8d:b2:ef:0e:
1d:ef:65:ed:73:c8:41:4b:e4:1a:08:5c:00:b4:27:1d:6c:3f:
a4:90:2b:7e:1d:be:94:a5:2a:ea:56:ca:07:a6:a3:2e:f9:08:
1d:93:00:f7:84:ee:95:5d:68:87:17:61:60:a7:b3:83:e1:06:
73:7d:1c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 14:40:13 2026 by rpki-client