Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
File: OuUFv8f9kXaGscizohj1UI9aNwo.mft (raw, json)
Hash identifier: aQPrOXt/X0C+5jOvLaMP3BGYVnt0rtfPzrXZjspSk1A=
Subject key identifier: 92:C0:A5:45:59:F5:75:E9:FC:75:BA:BB:1B:E3:1B:BA:45:42:62:CE
Authority key identifier: 3A:E5:05:BF:C7:FD:91:76:86:B1:C8:B3:A2:18:F5:50:8F:5A:37:0A
Certificate issuer: /CN=3ae505bfc7fd917686b1c8b3a218f5508f5a370a
Certificate serial: 01A152F651B7354962FC2380C6871EE77BEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuUFv8f9kXaGscizohj1UI9aNwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
Manifest number: 06FF
Signing time: Mon 19 Oct 2026 07:00:36 +0000
Manifest this update: Mon 19 Oct 2026 07:00:36 +0000
Manifest next update: Tue 20 Oct 2026 07:00:36 +0000
Files and hashes: 1: OuUFv8f9kXaGscizohj1UI9aNwo.crl (hash: NvNUjLCZLG/Tx5E2mMi9OXmE5+c53obSdvpQIWcSIRw=)
2: zMm9JKVVKWKfD1DDKP4qsT59tOg.roa (hash: C1WJK5Q9adCFTqiEMvgoPvMhAn7ou/puIqaX1v5Q3vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OuUFv8f9kXaGscizohj1UI9aNwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:52:f6:51:b7:35:49:62:fc:23:80:c6:87:1e:e7:7b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ae505bfc7fd917686b1c8b3a218f5508f5a370a
Validity
Not Before: Oct 19 07:00:36 2026 GMT
Not After : Oct 20 07:00:36 2026 GMT
Subject: CN=92c0a54559f575e9fc75babb1be31bba454262ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0b:af:23:25:f5:d5:be:63:c1:72:d3:10:b9:
76:99:a4:22:54:eb:0a:31:f5:9a:09:f8:34:4c:9e:
43:19:f2:d2:ee:9e:c4:8b:1e:08:e1:f5:5e:eb:d8:
91:f9:16:5d:47:d2:e2:2f:3d:9a:5c:e9:c2:52:f1:
08:19:d2:a9:ab:cc:c0:60:54:f3:ba:4b:60:b2:5e:
04:9b:55:c6:d9:01:b2:ab:7f:2e:b9:c5:a8:4b:c9:
e9:33:3c:b8:0f:bb:0e:eb:97:28:7d:8b:07:72:35:
81:0d:de:a7:f0:87:ec:f0:82:13:ec:bd:9d:25:9a:
40:03:dc:f1:16:43:58:03:6d:10:2f:93:e0:fd:72:
14:52:b9:c0:87:71:85:f6:67:ce:72:05:16:c4:15:
9e:8c:f7:3e:2d:f3:1b:a9:62:87:3a:16:92:f2:aa:
ad:bb:8c:1f:bd:7f:64:c1:0f:ce:f1:7a:f4:a5:4f:
a2:ef:22:cf:dc:21:ab:28:5c:c6:4b:c5:7b:3c:43:
e7:25:3c:82:fc:61:2e:35:e8:54:29:4b:29:d5:c8:
16:97:b8:76:57:bd:6b:88:d3:c1:e1:14:e5:fb:37:
e8:7c:42:77:b8:af:5a:e6:2d:9b:88:4b:dd:00:e0:
e5:3c:4b:cb:80:46:8a:21:3e:b0:1a:59:ca:21:e4:
d4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C0:A5:45:59:F5:75:E9:FC:75:BA:BB:1B:E3:1B:BA:45:42:62:CE
X509v3 Authority Key Identifier:
keyid:3A:E5:05:BF:C7:FD:91:76:86:B1:C8:B3:A2:18:F5:50:8F:5A:37:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuUFv8f9kXaGscizohj1UI9aNwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:79:2b:45:cd:d1:23:9a:a7:1b:29:da:47:57:04:ff:f4:73:
f9:41:82:2a:4a:fb:22:6a:e5:9b:7d:d8:33:97:da:37:f8:db:
98:11:f0:bd:fc:ff:1f:56:12:4a:8e:a8:0e:b7:d5:18:83:a1:
4a:46:27:b1:96:14:1d:40:6c:c7:43:8e:dd:ac:49:9a:45:96:
eb:ec:29:91:55:70:55:84:d1:de:dc:7d:7c:66:5d:9c:6e:52:
38:9a:f1:1c:23:bd:2c:33:3c:5a:52:06:f6:92:ed:72:88:79:
a5:2e:89:ac:52:a1:b1:2e:99:b9:bb:49:90:8a:bb:28:03:78:
a9:55:fe:ac:2a:6a:30:50:c1:08:ab:92:ec:8c:02:e5:4d:93:
c4:67:0d:08:80:0d:8a:80:91:55:11:ce:e2:b7:af:26:ce:7d:
9c:05:a4:d0:ae:0a:d6:b1:b5:5b:02:9e:6b:04:0b:24:22:61:
28:8b:39:8d:49:4a:69:bd:a8:77:85:a7:06:68:bc:4c:7b:c6:
cd:76:7c:cf:b0:1a:22:d6:42:a3:d0:68:c0:d0:6f:ea:3c:11:
fb:c0:44:36:9b:b5:e6:f8:fc:05:7a:dd:21:f9:24:b9:b1:53:
ee:f4:4a:74:64:6b:83:f2:a2:7c:a4:3d:bb:9e:5e:b0:7f:49:
10:c7:81:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 14:28:43 2026 by rpki-client