Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.mft
File: ouOnZzp5md1JaggNu6-hB3rZgPs.mft (raw, json)
Hash identifier: XOSuIVnMvGVDhjliATn1wRWNo3118qN3BBO6Xr7/1BQ=
Subject key identifier: 27:1A:49:EC:93:FE:EC:46:CC:6E:57:9B:A0:EA:7B:F3:78:2C:A8:AF
Authority key identifier: A2:E3:A7:67:3A:79:99:DD:49:6A:08:0D:BB:AF:A1:07:7A:D9:80:FB
Certificate issuer: /CN=a2e3a7673a7999dd496a080dbbafa1077ad980fb
Certificate serial: 019D39419D3C9625F238B9AFA1316F80CC6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ouOnZzp5md1JaggNu6-hB3rZgPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.mft
Manifest number: 0B9A
Signing time: Sun 29 Mar 2026 11:01:34 +0000
Manifest this update: Sun 29 Mar 2026 11:01:34 +0000
Manifest next update: Mon 30 Mar 2026 11:01:34 +0000
Files and hashes: 1: k1jUiB18FcQkB0JlR9kMswQdw1M.roa (hash: CfSBzFps5ykYGRlVBhnlga1YMIkO7XIfB2LTKOI9Iko=)
2: ouOnZzp5md1JaggNu6-hB3rZgPs.crl (hash: 93tb9yLyqtC3Wxvgjq3oSulMIiCear9d0ZGcwOUphIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ouOnZzp5md1JaggNu6-hB3rZgPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:9d:3c:96:25:f2:38:b9:af:a1:31:6f:80:cc:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e3a7673a7999dd496a080dbbafa1077ad980fb
Validity
Not Before: Mar 29 11:01:34 2026 GMT
Not After : Mar 30 11:01:34 2026 GMT
Subject: CN=271a49ec93feec46cc6e579ba0ea7bf3782ca8af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:98:6a:17:54:84:75:53:b9:0c:34:28:a6:de:
2e:7a:b8:f5:87:70:b1:28:ad:4f:aa:08:85:67:2c:
f4:a5:96:b5:fe:68:3e:2d:4e:df:df:3a:d8:e0:da:
81:94:a3:dc:b1:49:cb:7a:e4:a6:f3:f7:7e:37:5d:
51:4b:5f:56:41:fe:39:66:25:47:cf:89:af:11:29:
17:2e:16:9c:3f:ce:7f:69:18:45:26:84:2c:f1:69:
2a:82:5f:26:ba:63:4d:85:51:30:f9:0b:68:f7:cc:
75:65:79:c6:52:1c:79:52:b1:03:a2:2b:dd:63:fc:
04:ac:d7:84:d6:6f:56:48:58:ca:5c:b8:a1:f3:b0:
ab:d6:91:ea:49:5c:a0:1a:eb:be:8b:13:9f:69:e2:
be:0e:f4:cc:15:37:c6:28:b6:06:9c:b1:a9:57:0c:
ac:3a:fa:04:6f:e3:6f:64:fb:f0:fc:ef:25:b7:d5:
8f:8d:d7:0b:cd:05:23:e2:9c:e8:eb:03:1f:41:e9:
6e:67:0b:a6:ad:e0:29:96:dc:30:29:cc:2c:d6:7b:
37:31:2a:b0:f2:da:2d:74:78:7c:88:4a:e9:ed:71:
6c:83:77:09:af:6f:00:a2:18:b5:f7:86:40:51:aa:
4e:54:08:1c:7f:d2:cc:a5:73:f7:f2:70:33:81:a6:
02:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:1A:49:EC:93:FE:EC:46:CC:6E:57:9B:A0:EA:7B:F3:78:2C:A8:AF
X509v3 Authority Key Identifier:
keyid:A2:E3:A7:67:3A:79:99:DD:49:6A:08:0D:BB:AF:A1:07:7A:D9:80:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouOnZzp5md1JaggNu6-hB3rZgPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:43:a5:8a:6c:b4:d0:d3:71:55:d4:c2:1e:12:86:44:9a:0f:
85:12:e6:c1:ec:fa:d6:e7:07:0a:1a:e4:f6:7d:e2:f5:e1:6b:
d6:62:2b:2c:a1:76:16:71:1b:bd:08:3b:d3:45:9d:01:53:7a:
9a:cc:41:3b:11:d2:5a:14:72:71:d8:24:20:80:af:60:58:1c:
f3:54:aa:25:22:8a:47:00:a8:f0:ea:5d:f5:85:f8:03:81:eb:
33:22:c4:bb:95:ef:71:51:ad:88:59:ab:e5:a1:97:77:c0:b0:
a6:3c:e8:58:ce:53:6e:ad:91:cd:1e:38:f9:96:40:e1:f0:57:
46:e3:0b:b6:42:3a:ea:a4:e5:bd:21:31:2f:69:b4:62:a3:35:
1f:cf:e4:e6:93:d3:8a:b7:65:29:cc:d0:e1:a0:0b:20:2c:16:
35:09:4a:4c:90:b5:5a:4e:86:fb:b3:c0:08:27:18:ad:2a:95:
68:a2:8b:e9:56:30:89:8c:a4:7e:73:02:3b:a3:83:27:f6:b1:
ba:4e:e4:9e:55:9d:49:a0:89:8a:cc:2a:d9:69:06:61:e5:ea:
ec:f7:9d:b0:56:c1:8a:df:ca:38:23:91:56:49:1a:ce:cd:ee:
2d:17:a8:3f:01:a6:6e:4c:39:2b:09:a2:b8:b9:96:e4:0d:91:
de:4d:85:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:25:29 2026 by rpki-client