Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft
File: OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft (raw, json)
Hash identifier: yKEYCtw7YnXYTF2y6ThRALWraouB3Mko9691gL9YTT0=
Subject key identifier: 0B:5F:40:B4:C0:DF:45:42:24:99:61:AF:67:CC:85:02:15:B9:59:A4
Authority key identifier: 3A:E0:09:62:47:A8:C5:4E:5D:E8:C1:B0:DA:F1:05:4A:EC:8C:C4:50
Certificate issuer: /CN=3ae0096247a8c54e5de8c1b0daf1054aec8cc450
Certificate serial: 019D38667571865A7291C6B3548D3D8B7D65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuAJYkeoxU5d6MGw2vEFSuyMxFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 07:02:11 +0000
Manifest this update: Sun 29 Mar 2026 07:02:11 +0000
Manifest next update: Mon 30 Mar 2026 07:02:11 +0000
Files and hashes: 1: OuAJYkeoxU5d6MGw2vEFSuyMxFA.crl (hash: gfZMd4u34DQlZISxVApCUhgYiZurQi1dqld3EICzw+Q=)
2: r2XaIkvbtNRIA7GDmackHk60QAM.roa (hash: 5qhD+1z/Ukex+udgPBqOlQgjbCAqwLAXHXdPV8FaxfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OuAJYkeoxU5d6MGw2vEFSuyMxFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:75:71:86:5a:72:91:c6:b3:54:8d:3d:8b:7d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ae0096247a8c54e5de8c1b0daf1054aec8cc450
Validity
Not Before: Mar 29 07:02:11 2026 GMT
Not After : Mar 30 07:02:11 2026 GMT
Subject: CN=0b5f40b4c0df4542249961af67cc850215b959a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cf:8d:51:c8:07:8d:d1:45:bd:a1:95:bd:f9:
ae:37:d5:0f:ee:7e:3c:53:fc:b8:12:a2:3b:d9:2a:
23:a7:63:f2:f9:e6:0a:b0:37:50:d5:d8:41:6d:5b:
c2:ec:a4:b1:05:0b:83:48:c4:1b:99:af:a0:93:ed:
c4:3c:8a:47:85:b1:83:e1:6c:12:a1:05:06:b2:a9:
d8:ed:42:52:af:3f:ce:4a:cc:ab:b9:6b:6b:2f:de:
67:3c:d4:68:96:0b:39:60:b9:07:ed:de:3d:78:b4:
58:5d:8a:2e:8e:c2:5b:94:88:66:de:68:19:e5:d7:
ff:ff:8c:ca:a2:ce:90:9f:f2:39:d3:af:ed:63:f7:
6f:43:68:81:20:54:25:23:7b:80:b0:14:06:a6:ce:
54:0c:ea:23:37:e5:0e:f7:1e:66:bd:dc:b6:73:86:
7e:ed:14:d6:4a:e3:e7:c6:01:de:f6:e2:ce:b8:00:
6a:be:da:51:e0:f4:e8:87:b6:a9:e6:83:85:e9:d0:
79:a8:28:b0:53:20:8a:90:b6:82:bd:b7:38:62:3d:
58:2b:3b:28:ca:46:a8:4d:12:f6:dc:33:6c:ce:f1:
ed:ef:a0:52:98:67:96:cb:f9:98:29:f9:2b:83:1e:
80:76:e4:a5:b6:e6:46:5f:00:83:7a:fb:74:1c:8a:
b6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:5F:40:B4:C0:DF:45:42:24:99:61:AF:67:CC:85:02:15:B9:59:A4
X509v3 Authority Key Identifier:
keyid:3A:E0:09:62:47:A8:C5:4E:5D:E8:C1:B0:DA:F1:05:4A:EC:8C:C4:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuAJYkeoxU5d6MGw2vEFSuyMxFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:d0:de:af:30:8e:6a:03:10:4f:0e:c1:d7:96:87:dd:5d:e7:
cb:6c:68:bc:01:5a:c1:1f:9f:39:82:5a:b2:92:47:4b:5e:a2:
6c:80:c0:52:18:8e:18:06:42:c0:72:72:bf:c5:e0:03:1a:12:
4d:50:21:f5:d5:19:91:7a:b4:ca:7c:38:4d:90:02:68:ae:6b:
3a:10:33:88:a1:07:f9:c7:86:1d:e6:3c:ca:16:c4:fc:55:8b:
57:a5:04:38:a2:47:4b:7a:4f:d7:dd:46:8d:40:42:d1:c6:b8:
20:5a:ec:24:a3:67:15:47:04:b1:6b:4b:a6:21:89:33:da:75:
ff:c5:36:dd:eb:43:56:26:b7:78:ec:74:24:9d:5f:c2:73:f6:
51:8a:94:98:c3:a5:b9:e1:69:b9:8d:00:fb:d3:e4:23:98:83:
d0:e9:6a:f4:f1:9e:2a:da:aa:8c:64:82:a1:90:75:d4:38:98:
68:07:7c:9e:40:a2:a3:4d:50:c1:c2:48:cc:5d:3e:e1:c4:90:
fc:23:92:fd:f4:1d:2c:2e:f3:68:80:ca:15:61:76:a8:2b:cd:
06:e3:2a:23:f7:5c:26:de:7e:16:91:fb:f7:ec:3f:76:0e:a8:
47:74:15:f7:38:16:71:ff:3a:88:be:0d:88:59:c9:d1:cb:f2:
38:42:bc:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:50:59 2026 by rpki-client