Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft
File: ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft (raw, json)
Hash identifier: /ZhrWmpJIVYocMdGtmD0pzmgr24J97Nc7JuyeEd2b24=
Subject key identifier: D3:86:0C:71:C6:94:57:5A:4E:5E:54:A1:DC:E8:E7:87:2B:94:B8:DC
Authority key identifier: A2:E6:06:C7:E9:3F:ED:36:EF:90:D4:2C:E4:A9:72:60:BB:8A:A9:C1
Certificate issuer: /CN=a2e606c7e93fed36ef90d42ce4a97260bb8aa9c1
Certificate serial: 019F3CE31897FD54A29E78795A81479B833D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft
Manifest number: 199D
Signing time: Tue 07 Jul 2026 14:02:23 +0000
Manifest this update: Tue 07 Jul 2026 14:02:23 +0000
Manifest next update: Wed 08 Jul 2026 14:02:23 +0000
Files and hashes: 1: FomC0OD_NwetWkEPOTha3fWVMKU.roa (hash: dczkmLKUdcB3drX74PqMZvKfYmTs+5M5HtjBYhjGfvk=)
2: drBhV9alP4OW6ofNZOxW9TLw2f0.roa (hash: lbZ8swZRlTMR5bgvRpyD4YhMPyncb/ksvL8xrpAMysA=)
3: ouYGx-k_7TbvkNQs5KlyYLuKqcE.crl (hash: xAaXZeOpBIXzw5WI00zHHXP7s+U2YWozKEss3UKfgw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3c:e3:18:97:fd:54:a2:9e:78:79:5a:81:47:9b:83:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e606c7e93fed36ef90d42ce4a97260bb8aa9c1
Validity
Not Before: Jul 7 14:02:23 2026 GMT
Not After : Jul 8 14:02:23 2026 GMT
Subject: CN=d3860c71c694575a4e5e54a1dce8e7872b94b8dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:db:98:89:97:20:3a:42:e3:68:4b:1a:30:53:
b9:6e:42:ac:f3:57:28:42:fa:b4:3e:46:0b:82:9a:
d5:92:5d:01:4b:6a:f2:48:39:bd:35:3f:e1:b9:85:
f4:b0:b5:1c:62:16:8e:b5:e9:1f:bb:cf:32:e1:c8:
11:84:7e:20:df:78:ca:74:53:d9:9b:e0:79:4d:0a:
ac:76:5b:45:8f:e4:8c:fb:d6:99:99:d5:ac:3f:a8:
ae:32:5c:20:cb:ff:68:7d:3e:16:c4:e8:9d:86:ae:
e8:37:ca:67:06:b8:2c:46:c2:ee:c6:5b:01:8e:07:
b8:63:ad:eb:2b:7a:1e:a8:5c:23:75:40:e0:74:13:
0b:47:58:98:50:57:77:22:8c:ec:ea:85:a9:fc:62:
84:e1:5d:30:1b:e9:a5:c8:6c:2c:cd:bc:e3:1d:c2:
3a:e0:86:e2:f3:d7:f1:3e:1b:93:f7:21:b3:99:14:
66:30:8f:f4:b4:fc:62:0b:28:bf:5a:64:9e:03:cb:
64:cf:86:1f:8d:6d:de:78:d5:f6:52:bb:82:dd:7c:
67:f0:2d:88:57:5d:4e:e1:1b:0a:36:a4:d0:43:a5:
5b:1c:70:e2:0d:c0:fc:74:d0:bc:2c:53:1a:17:01:
b9:da:70:d9:77:df:00:4d:3e:a5:f4:20:be:b5:9b:
36:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:86:0C:71:C6:94:57:5A:4E:5E:54:A1:DC:E8:E7:87:2B:94:B8:DC
X509v3 Authority Key Identifier:
keyid:A2:E6:06:C7:E9:3F:ED:36:EF:90:D4:2C:E4:A9:72:60:BB:8A:A9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:11:03:c9:8d:ad:b4:99:52:92:80:a0:e7:00:bb:7c:90:02:
fd:03:8b:5b:d4:51:f9:20:cb:33:f0:3f:d3:7a:3b:4a:01:b4:
c7:33:49:32:1a:75:bd:5d:6d:3a:a1:91:ee:7d:7f:1d:1b:59:
90:87:23:c4:48:47:32:6f:f8:51:ae:30:95:3b:fa:ae:7e:51:
af:9d:2d:4b:f2:45:78:13:af:85:d6:8a:24:cb:09:4e:21:2c:
62:d6:6d:d3:c8:5a:76:08:34:79:7a:66:ab:74:bb:b3:e3:e4:
89:04:22:e7:06:eb:68:bd:5e:89:18:6c:3f:21:b2:df:c5:04:
96:19:77:c5:95:62:47:73:2e:56:8c:cf:2f:80:52:82:c4:c2:
74:fd:7d:f1:2b:66:d7:8e:a4:28:e6:49:81:7b:d9:1b:4b:ae:
59:e4:18:62:86:89:65:ce:4c:12:54:16:80:d4:d2:e6:54:56:
e0:ed:8f:62:2c:49:cb:f6:86:2c:29:b3:8a:70:3f:8d:8c:7c:
7d:50:dd:08:c6:1e:7c:24:c6:4b:0e:e1:6a:9a:22:a3:ed:82:
6b:45:4f:24:5b:a0:f1:73:1a:8a:07:cb:85:40:51:08:1c:48:
1b:b2:7b:b7:cd:b1:d1:30:4b:c7:fe:5c:9c:42:f3:49:cf:8e:
16:26:91:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 15:41:36 2026 by rpki-client