Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.mft
File: ocG-CYGk51dsVi9vCeZcF8GA48o.mft (raw, json)
Hash identifier: xYZlH0kHO4fMrPIAUB75Ij3thaies0KZR8Kd/Sg1y3A=
Subject key identifier: FA:4F:30:6D:75:9C:F2:7D:C5:1E:F6:51:EC:B9:30:CB:AE:4E:82:F8
Authority key identifier: A1:C1:BE:09:81:A4:E7:57:6C:56:2F:6F:09:E6:5C:17:C1:80:E3:CA
Certificate issuer: /CN=a1c1be0981a4e7576c562f6f09e65c17c180e3ca
Certificate serial: 019D29609A2BB4CC7124A774644573373416
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ocG-CYGk51dsVi9vCeZcF8GA48o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 09:01:29 +0000
Manifest this update: Thu 26 Mar 2026 09:01:29 +0000
Manifest next update: Fri 27 Mar 2026 09:01:29 +0000
Files and hashes: 1: ocG-CYGk51dsVi9vCeZcF8GA48o.crl (hash: 7BM/02PilTXYoyU8iDJQVUCa9lYK7Uw8f7X6px9jB9c=)
2: wu-G3RyBE4hAU-OLiWD-QOCIX_4.roa (hash: rgoDex3C8KLhszdHAASmB1VMl9HshjIiBd1RRJ0afb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ocG-CYGk51dsVi9vCeZcF8GA48o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:9a:2b:b4:cc:71:24:a7:74:64:45:73:37:34:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1c1be0981a4e7576c562f6f09e65c17c180e3ca
Validity
Not Before: Mar 26 09:01:29 2026 GMT
Not After : Mar 27 09:01:29 2026 GMT
Subject: CN=fa4f306d759cf27dc51ef651ecb930cbae4e82f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:30:05:65:48:c5:e6:7b:d9:e9:e3:b8:01:1c:
2e:58:33:d5:b8:d2:cb:09:93:c5:97:ab:b5:52:71:
28:fe:0a:7f:6e:8a:54:38:50:5f:5f:68:68:b8:04:
1c:69:d5:ff:1e:e3:fa:55:fe:14:4f:6e:da:a4:26:
bb:db:ba:87:10:23:b4:ce:ef:4e:7d:f9:11:ff:3b:
58:a9:d5:05:a8:67:c8:80:92:17:71:90:6d:53:11:
54:81:d2:4c:99:f5:58:b0:71:ed:f2:65:88:28:4b:
36:35:f4:18:b9:7b:2a:1f:44:0d:d5:41:e5:61:a5:
05:11:03:26:c0:e2:0b:ff:a9:84:b8:f8:c6:ca:f9:
cf:51:df:30:89:fe:b5:ce:53:24:69:9e:51:e4:fd:
60:45:f3:4c:b7:d2:e7:7d:f0:55:73:07:83:d1:c4:
30:73:2e:9f:1f:60:76:a4:14:d2:3d:b1:30:ef:dd:
74:4e:d1:08:9c:85:b0:77:42:bd:8c:e1:f7:67:c3:
b9:c9:c3:87:d0:95:d0:d5:c3:80:d8:7b:2b:e7:38:
07:b6:0b:59:18:91:0b:f7:2a:a5:79:c4:53:a9:96:
f5:af:22:2c:ba:b3:54:b6:e0:b8:2d:56:c8:e1:02:
06:6a:0a:31:f9:75:47:62:0a:5c:06:c9:0f:87:6c:
04:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:4F:30:6D:75:9C:F2:7D:C5:1E:F6:51:EC:B9:30:CB:AE:4E:82:F8
X509v3 Authority Key Identifier:
keyid:A1:C1:BE:09:81:A4:E7:57:6C:56:2F:6F:09:E6:5C:17:C1:80:E3:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ocG-CYGk51dsVi9vCeZcF8GA48o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:33:ed:f0:08:bc:fc:53:5f:5b:fd:1f:5b:a3:29:ab:58:c4:
d0:e7:e0:fb:ab:0a:dc:d4:78:d8:fa:c1:4b:b3:ac:9d:6e:ec:
ec:7b:4f:26:74:2b:2c:6d:32:71:63:29:f8:32:88:d4:90:6e:
d2:31:b3:54:61:c5:a1:ac:d7:8a:64:08:7e:9a:fb:b5:ce:1c:
c7:2b:35:60:86:2c:47:e2:58:06:38:30:30:0a:cf:25:49:ab:
d0:b8:2a:7c:0d:16:58:ec:4c:26:40:dc:d5:0c:b0:ae:27:ae:
f3:5e:8f:2a:5b:e3:50:67:fa:1c:53:1f:9a:ab:c3:bb:02:07:
30:c3:72:6e:8e:c4:9f:49:63:58:41:ce:19:73:20:48:0f:d2:
cd:1b:1b:a5:c5:ba:d9:55:e6:dd:0b:18:a3:c8:28:6c:bf:db:
d3:ed:ee:28:1f:ca:01:a9:af:1a:e9:2f:f2:76:74:0b:42:08:
37:3e:17:f8:99:81:6a:22:5d:37:2d:dd:60:06:c7:92:86:82:
9c:18:38:69:13:32:a1:11:8f:e3:3f:de:f6:ec:ec:46:84:98:
59:15:2a:bb:7f:11:5e:76:a8:3c:c4:e7:72:54:32:47:60:01:
98:c0:f6:5e:87:24:83:9b:e7:ea:96:70:b1:72:d6:22:73:5a:
98:06:49:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYJortMxxJKd0ZEVzNzQWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExYzFiZTA5ODFhNGU3NTc2YzU2MmY2ZjA5ZTY1YzE3YzE4
MGUzY2EwHhcNMjYwMzI2MDkwMTI5WhcNMjYwMzI3MDkwMTI5WjAzMTEwLwYDVQQD
EyhmYTRmMzA2ZDc1OWNmMjdkYzUxZWY2NTFlY2I5MzBjYmFlNGU4MmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzAFZUjF5nvZ6eO4ARwuWDPVuNLL
CZPFl6u1UnEo/gp/bopUOFBfX2houAQcadX/HuP6Vf4UT27apCa727qHECO0zu9O
ffkR/ztYqdUFqGfIgJIXcZBtUxFUgdJMmfVYsHHt8mWIKEs2NfQYuXsqH0QN1UHl
YaUFEQMmwOIL/6mEuPjGyvnPUd8wif61zlMkaZ5R5P1gRfNMt9LnffBVcweD0cQw
cy6fH2B2pBTSPbEw7910TtEInIWwd0K9jOH3Z8O5ycOH0JXQ1cOA2Hsr5zgHtgtZ
GJEL9yqlecRTqZb1ryIsurNUtuC4LVbI4QIGagox+XVHYgpcBskPh2wEDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPpPMG11nPJ9xR72Uey5MMuuToL4MB8GA1UdIwQY
MBaAFKHBvgmBpOdXbFYvbwnmXBfBgOPKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2NHLUNZR2s1MWRzVmk5dkNlWmNGOEdBNDhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi84MWU1YTUtYWMzOS00M2MxLTg3MmYt
OThkZmMyZWU2ZTBjLzEvb2NHLUNZR2s1MWRzVmk5dkNlWmNGOEdBNDhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi84MWU1YTUtYWMzOS00M2MxLTg3MmYtOThkZmMyZWU2ZTBj
LzEvb2NHLUNZR2s1MWRzVmk5dkNlWmNGOEdBNDhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhTPt8Ai8
/FNfW/0fW6Mpq1jE0Ofg+6sK3NR42PrBS7OsnW7s7HtPJnQrLG0ycWMp+DKI1JBu
0jGzVGHFoazXimQIfpr7tc4cxys1YIYsR+JYBjgwMArPJUmr0LgqfA0WWOxMJkDc
1Qywrieu816PKlvjUGf6HFMfmqvDuwIHMMNybo7En0ljWEHOGXMgSA/SzRsbpcW6
2VXm3QsYo8gobL/b0+3uKB/KAamvGukv8nZ0C0IINz4X+JmBaiJdNy3dYAbHkoaC
nBg4aRMyoRGP4z/e9uzsRoSYWRUqu38RXnaoPMTnclQyR2ABmMD2Xockg5vn6pZw
sXLWInNamAZJdA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:40:14 2026 by rpki-client