Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft
File: ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft (raw, json)
Hash identifier: HELc4m5MTmocsCciW5HXQ9h27q/l+SPCOLhpMwkysa8=
Subject key identifier: 51:50:A9:27:8F:7C:DF:14:45:9F:56:BA:42:A8:BE:85:05:CB:1A:C1
Authority key identifier: A2:E6:06:C7:E9:3F:ED:36:EF:90:D4:2C:E4:A9:72:60:BB:8A:A9:C1
Certificate issuer: /CN=a2e606c7e93fed36ef90d42ce4a97260bb8aa9c1
Certificate serial: 019D3752F262CEE77A997D15B56AB768D0F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 02:01:15 +0000
Manifest this update: Sun 29 Mar 2026 02:01:15 +0000
Manifest next update: Mon 30 Mar 2026 02:01:15 +0000
Files and hashes: 1: FomC0OD_NwetWkEPOTha3fWVMKU.roa (hash: dczkmLKUdcB3drX74PqMZvKfYmTs+5M5HtjBYhjGfvk=)
2: drBhV9alP4OW6ofNZOxW9TLw2f0.roa (hash: lbZ8swZRlTMR5bgvRpyD4YhMPyncb/ksvL8xrpAMysA=)
3: ouYGx-k_7TbvkNQs5KlyYLuKqcE.crl (hash: c8uVLlR/F5kByQw4SUiNC4zQNskEqVqbTerj+qkzpFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:f2:62:ce:e7:7a:99:7d:15:b5:6a:b7:68:d0:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e606c7e93fed36ef90d42ce4a97260bb8aa9c1
Validity
Not Before: Mar 29 02:01:15 2026 GMT
Not After : Mar 30 02:01:15 2026 GMT
Subject: CN=5150a9278f7cdf14459f56ba42a8be8505cb1ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f6:e1:ce:8d:75:e0:93:cd:5b:fe:0e:71:95:
a3:ba:ff:d3:8f:05:01:0c:6e:65:b6:07:7c:b4:5e:
4d:25:f3:0d:98:0a:cc:40:52:c0:21:cf:39:cd:8e:
79:08:f3:fa:eb:07:6a:1c:cc:97:ac:40:35:26:ce:
bb:a2:66:24:fb:14:d5:1e:be:76:86:39:30:82:77:
08:7f:fa:08:36:20:1a:0f:07:57:cd:7f:15:5b:24:
0b:38:b7:f7:e4:1a:aa:7f:23:88:09:b2:0f:09:cb:
22:8a:dc:7b:fe:64:2b:21:b8:b6:68:5d:6d:25:c6:
3e:3a:9d:79:a3:0c:20:72:af:8d:9d:24:37:97:21:
59:89:1f:ca:00:ae:12:ff:60:5b:51:32:bf:09:a7:
55:1d:be:5a:25:ab:1e:7a:c8:4b:b6:ff:e4:6c:e9:
e8:8e:7a:60:30:d0:42:be:67:e0:e8:ef:f9:86:43:
9e:71:c3:f4:46:86:3e:60:ab:d9:83:fa:e4:ad:20:
a2:9e:8d:b2:7a:1b:4f:20:0a:18:b4:7e:ca:5e:4d:
f7:a5:21:59:e6:e7:bc:11:09:98:d9:5c:7c:d6:29:
2b:e6:ae:0a:07:eb:d5:4f:52:e9:1f:b9:24:b0:a4:
e5:01:5b:e9:d0:2e:a3:52:e8:3f:1e:cc:d9:e5:1b:
44:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:50:A9:27:8F:7C:DF:14:45:9F:56:BA:42:A8:BE:85:05:CB:1A:C1
X509v3 Authority Key Identifier:
keyid:A2:E6:06:C7:E9:3F:ED:36:EF:90:D4:2C:E4:A9:72:60:BB:8A:A9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:81:ed:65:88:45:9c:87:45:17:99:21:59:b8:7e:a5:d9:d2:
c1:c5:09:5f:3f:26:6b:4a:d7:2b:68:34:33:d2:15:fd:62:71:
ae:ba:19:ba:13:47:e1:43:bf:cb:8a:92:2d:7b:f1:f6:e5:fd:
02:68:08:2d:e3:ec:b1:ba:d4:57:9c:7c:5b:70:50:c9:60:d7:
12:dd:84:dd:cc:70:2c:26:da:3d:02:64:f8:25:de:b1:40:d3:
37:a2:1d:6d:0b:e4:bd:b1:6e:98:5a:c2:36:ac:75:cb:49:c0:
26:08:e8:3c:3c:df:48:bc:84:e1:c5:02:ca:24:2f:fe:98:16:
b7:2e:60:49:00:0e:00:9e:3b:f9:16:da:33:1a:b8:6d:43:9c:
9c:8b:6a:3d:63:4c:6d:4f:8d:1c:57:c0:7a:56:1e:07:e1:4e:
f3:1b:fd:3c:ab:52:67:cd:ed:77:c0:c7:00:b6:c6:81:1c:9c:
7b:5b:6b:53:ac:23:aa:94:de:21:ee:02:f4:8a:c5:84:07:a4:
4f:c5:92:f1:a4:e4:ee:cd:1b:45:9d:8e:45:08:29:32:db:b8:
d2:d3:90:4a:da:fd:56:02:08:0c:91:d3:a0:87:3d:45:ff:f6:
26:5a:cd:12:aa:0c:a2:1f:29:81:5c:82:c5:3c:ad:1d:40:d1:
bd:93:d7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:21 2026 by rpki-client