Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.mft
File: Ou3Txyc9mrNkoxTaSB5bpR-EKW8.mft (raw, json)
Hash identifier: SMeDAn97IUI4WS3pXRF2meceSbeGmJneMAH/OaS1SO8=
Subject key identifier: DE:5E:BB:2C:43:EF:FF:FC:CA:EE:2A:B2:04:39:43:1A:97:93:CC:4E
Authority key identifier: 3A:ED:D3:C7:27:3D:9A:B3:64:A3:14:DA:48:1E:5B:A5:1F:84:29:6F
Certificate issuer: /CN=3aedd3c7273d9ab364a314da481e5ba51f84296f
Certificate serial: 019D382E6E6D3C231FAACF6A676DDA9CD6F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 06:01:00 +0000
Manifest this update: Sun 29 Mar 2026 06:01:00 +0000
Manifest next update: Mon 30 Mar 2026 06:01:00 +0000
Files and hashes: 1: Ou3Txyc9mrNkoxTaSB5bpR-EKW8.crl (hash: qt72aTfYaGXBF0YuxBoZWJ49tU9FxuqQWo+swFU09HE=)
2: jTw_oq7LAYrSJ1yTG6NZs-qd_OQ.roa (hash: nLB/S+2oGFc9tQIVWN3vkSki+22/PC0HnQATmKLZOKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:6e:6d:3c:23:1f:aa:cf:6a:67:6d:da:9c:d6:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aedd3c7273d9ab364a314da481e5ba51f84296f
Validity
Not Before: Mar 29 06:01:00 2026 GMT
Not After : Mar 30 06:01:00 2026 GMT
Subject: CN=de5ebb2c43effffccaee2ab20439431a9793cc4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f2:6b:c8:64:4f:76:9e:1f:66:73:21:f8:92:
4e:6c:15:c1:b4:26:a0:a6:96:53:99:6b:84:f3:e8:
11:34:91:b2:e9:3c:bf:2d:de:7a:94:d9:c1:6f:11:
db:43:10:b2:98:ab:44:c9:44:26:57:b5:37:8b:d3:
a0:f0:20:bd:c3:df:5b:29:2c:98:7e:c7:9a:76:71:
5a:ea:94:bc:03:6f:e7:4f:55:8c:c1:e4:6b:05:33:
47:25:2b:02:e7:35:99:fa:c7:c9:af:b9:7b:75:4e:
f7:44:ef:37:2b:34:34:13:03:d2:5a:b6:88:95:f2:
76:dc:7f:e0:f0:cf:be:38:c4:49:57:ee:93:36:c2:
06:13:2b:3d:b1:ba:b3:57:a8:77:ac:7b:21:76:41:
5e:15:f2:ed:97:10:ec:e3:67:c8:92:7c:de:36:05:
b3:76:37:f3:29:14:7f:2f:c5:1b:0e:ec:cc:c0:9b:
62:d7:64:98:72:94:0e:69:61:ff:4b:0b:0a:ca:cb:
99:9e:68:2a:da:7d:6a:6b:ae:a8:ff:19:df:0e:c7:
63:37:bd:84:4a:a7:6b:73:1f:2c:1d:1b:c5:46:27:
98:27:58:12:27:94:ae:b1:9d:54:94:27:54:a0:45:
d2:21:03:0b:bf:c7:0c:a3:67:f1:66:fe:95:9f:7f:
99:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:5E:BB:2C:43:EF:FF:FC:CA:EE:2A:B2:04:39:43:1A:97:93:CC:4E
X509v3 Authority Key Identifier:
keyid:3A:ED:D3:C7:27:3D:9A:B3:64:A3:14:DA:48:1E:5B:A5:1F:84:29:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:a9:0d:4f:ee:0d:0f:06:fb:d4:b4:ec:ad:f4:0e:ed:f7:a9:
0e:99:53:31:77:b0:af:bf:fb:b3:50:b8:29:be:92:a8:d5:0a:
5a:3f:b5:26:11:08:ed:78:8c:a6:05:b7:bb:a4:6d:ee:8a:9e:
75:87:98:ab:d2:46:66:12:33:c3:91:04:1c:15:3f:fa:77:ad:
05:0f:90:e7:90:fc:04:61:57:58:d7:e5:05:7c:d7:ed:fa:35:
64:6c:63:a3:7d:5c:d2:83:9a:d9:b9:1d:72:8e:9d:b9:5e:80:
00:6c:b6:02:5d:dc:e7:08:22:9d:93:4e:dc:5b:5d:64:65:ed:
ee:93:d6:b4:d6:f7:96:ec:27:1f:16:77:95:54:47:e3:c9:cf:
0e:e1:d4:30:e9:2a:bb:f8:59:40:68:5a:ab:b7:1a:07:16:d1:
19:20:da:55:9a:ce:d4:73:d2:80:84:53:db:61:77:11:ee:43:
8b:9f:b0:d1:11:64:89:3d:8a:74:e9:4a:bc:02:36:4a:a8:16:
eb:74:8a:a9:c5:dd:dd:09:26:22:8f:eb:2e:f0:e6:55:4f:68:
89:09:ef:de:88:7e:87:1d:2f:39:a1:f4:96:f4:2d:7d:09:4c:
11:a4:ff:79:b0:8a:d6:50:0d:99:89:cb:d5:38:ed:50:26:22:
a5:6a:92:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:42 2026 by rpki-client