Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
File: OuUFv8f9kXaGscizohj1UI9aNwo.mft (raw, json)
Hash identifier: hjMm+j0TTHd/XExx9fIZDT840kWXnG0GKZei9qgDCsM=
Subject key identifier: 55:DA:86:7E:D7:9C:4D:22:59:86:06:95:4A:4F:90:62:9C:BD:85:43
Authority key identifier: 3A:E5:05:BF:C7:FD:91:76:86:B1:C8:B3:A2:18:F5:50:8F:5A:37:0A
Certificate issuer: /CN=3ae505bfc7fd917686b1c8b3a218f5508f5a370a
Certificate serial: 01A059D652A094161938D735C84471F1AF90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuUFv8f9kXaGscizohj1UI9aNwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
Manifest number: 067E
Signing time: Mon 31 Aug 2026 22:00:13 +0000
Manifest this update: Mon 31 Aug 2026 22:00:13 +0000
Manifest next update: Tue 01 Sep 2026 22:00:13 +0000
Files and hashes: 1: OuUFv8f9kXaGscizohj1UI9aNwo.crl (hash: ALT7yV0hkzfgydv5hNbvvCoj/3zl37SD2QoI2DHv23M=)
2: zMm9JKVVKWKfD1DDKP4qsT59tOg.roa (hash: C1WJK5Q9adCFTqiEMvgoPvMhAn7ou/puIqaX1v5Q3vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OuUFv8f9kXaGscizohj1UI9aNwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:59:d6:52:a0:94:16:19:38:d7:35:c8:44:71:f1:af:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ae505bfc7fd917686b1c8b3a218f5508f5a370a
Validity
Not Before: Aug 31 22:00:13 2026 GMT
Not After : Sep 1 22:00:13 2026 GMT
Subject: CN=55da867ed79c4d22598606954a4f90629cbd8543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:87:dd:f4:c1:b8:0b:ee:42:e8:fd:02:ab:13:
65:72:e4:8f:d4:ba:fb:72:96:5e:5e:50:c5:98:08:
01:7c:5f:26:70:16:b3:83:53:5f:6f:0e:a5:12:9f:
24:9f:f7:bb:25:9c:54:82:bc:e1:5a:d0:ac:4a:1d:
9a:86:8a:69:bd:43:98:29:89:39:60:c1:63:5a:fe:
f4:69:86:0d:da:b4:a5:a5:68:a9:71:b6:43:29:93:
d2:18:36:73:7b:08:7d:c5:8e:ae:5d:39:5e:9c:9e:
56:94:a2:71:a3:ed:b1:ae:ed:13:04:6f:c2:11:38:
c1:41:27:b2:35:6d:1a:a2:38:be:cb:72:54:2b:63:
7a:cc:7b:a0:2a:17:66:86:ff:af:7e:26:91:b0:6c:
8b:88:9d:15:41:c0:b3:b3:74:86:23:d5:08:98:e5:
38:07:99:33:81:f8:df:7c:34:15:50:5e:2f:61:42:
47:a5:67:02:ae:b0:f8:3b:5a:e4:10:64:5e:ce:ae:
91:24:23:83:36:30:76:be:aa:6b:73:d6:77:9d:25:
29:3b:99:f2:33:20:57:b8:18:f0:74:89:ac:1a:57:
a7:84:ce:74:42:fc:cc:c1:b2:d5:5f:4d:3c:fa:f9:
ac:d4:87:c8:8b:79:74:05:d8:ac:85:8e:84:7e:a0:
70:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:DA:86:7E:D7:9C:4D:22:59:86:06:95:4A:4F:90:62:9C:BD:85:43
X509v3 Authority Key Identifier:
keyid:3A:E5:05:BF:C7:FD:91:76:86:B1:C8:B3:A2:18:F5:50:8F:5A:37:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuUFv8f9kXaGscizohj1UI9aNwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:2a:80:0d:e9:b8:f0:38:a3:0b:f7:51:07:a1:27:4b:0e:a3:
08:64:4b:07:ce:3b:01:ce:20:b2:8d:70:a5:0f:ac:c4:4f:79:
b5:9e:9d:42:03:34:b5:6b:70:39:2d:fd:c2:50:ae:8d:be:66:
6f:56:42:ee:26:96:23:fd:fc:1c:cb:60:cb:84:9a:cf:5e:f7:
9e:04:cd:37:fe:ca:6a:c1:a8:57:38:e8:b4:ab:c6:0c:47:82:
83:7e:fa:f1:92:3b:36:2b:ec:7e:f0:23:8a:11:36:2f:d5:fd:
3a:81:0a:bd:6b:b0:93:e2:f2:95:4a:a7:41:82:8f:6b:f9:8d:
a6:e1:d3:8d:08:a7:e6:fc:1b:b0:93:a9:dd:8e:54:d9:c4:45:
5e:70:58:ba:e8:73:d7:7b:27:20:a7:34:bd:c0:c5:a0:05:fb:
be:71:23:f5:35:36:6f:30:14:45:8c:99:93:cb:35:4d:01:67:
70:4b:8b:65:b6:93:d1:f5:3b:f5:70:6e:bd:12:9b:de:65:35:
c9:c6:3e:49:4f:20:48:26:af:ee:07:d7:b8:15:cc:9b:d7:be:
7c:51:38:3a:f6:d4:91:46:81:5c:97:fa:b4:59:6c:e2:ea:25:
7c:b1:84:34:a2:7f:69:f1:44:30:9a:e1:fa:a5:2e:37:73:a7:
44:64:b3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:20:36 2026 by rpki-client