Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.mft
File: OCZCPrAZVSJObBHRnG05OB6L4h0.mft (raw, json)
Hash identifier: 1D1V0WxhErOy2osjpJesocaheBYRUll1WKeJgWtKsG4=
Subject key identifier: 58:90:CF:3D:44:1F:FC:63:7D:BE:58:79:F0:31:41:F0:E1:62:85:7A
Authority key identifier: 38:26:42:3E:B0:19:55:22:4E:6C:11:D1:9C:6D:39:38:1E:8B:E2:1D
Certificate issuer: /CN=3826423eb01955224e6c11d19c6d39381e8be21d
Certificate serial: 019D28F31A08FEA10B0D7D5D7ED5F3FA588F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCZCPrAZVSJObBHRnG05OB6L4h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.mft
Manifest number: 0CBC
Signing time: Thu 26 Mar 2026 07:01:53 +0000
Manifest this update: Thu 26 Mar 2026 07:01:53 +0000
Manifest next update: Fri 27 Mar 2026 07:01:53 +0000
Files and hashes: 1: OCZCPrAZVSJObBHRnG05OB6L4h0.crl (hash: 9JxSQGKLNHabPXMbt16mmMgRU2hpMwKH346tHp0q4bY=)
2: h9uxXItcVMUhyEnd-qfo0NworEk.roa (hash: cN3aXRc8HLSRjs8+K7/jdo4PEzNiyVUr1h8Z9QW7HmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCZCPrAZVSJObBHRnG05OB6L4h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:1a:08:fe:a1:0b:0d:7d:5d:7e:d5:f3:fa:58:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3826423eb01955224e6c11d19c6d39381e8be21d
Validity
Not Before: Mar 26 07:01:53 2026 GMT
Not After : Mar 27 07:01:53 2026 GMT
Subject: CN=5890cf3d441ffc637dbe5879f03141f0e162857a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:65:88:19:fb:d3:0c:a6:04:10:82:f0:7a:45:
b4:e3:28:85:15:28:9f:1a:64:d7:c6:44:5c:8e:e7:
72:c6:4a:82:d8:b9:37:70:5c:b0:f8:37:be:75:7c:
a9:80:8a:bd:bf:40:4c:d2:ff:be:f8:54:be:36:1d:
65:3d:ce:46:e9:f3:36:5b:c7:46:c2:ec:e4:cd:10:
b1:ff:9e:46:85:73:8e:53:b6:ab:f0:1c:cf:1f:ba:
9a:3d:05:9a:fe:7c:a9:af:9c:c5:3c:1f:18:2f:f9:
35:46:45:68:97:80:08:dd:e4:85:3f:07:4f:91:e7:
0c:2d:58:71:9c:c0:0d:49:87:14:2b:59:f7:84:2c:
07:ee:4c:c0:58:a1:f5:00:a7:fe:2a:61:0c:b1:79:
6d:da:4c:18:22:e0:b1:cd:78:ba:65:9f:0c:68:8d:
49:dd:b2:39:40:d7:91:f6:b9:3c:84:95:c4:43:e1:
f1:d8:6d:f1:7b:91:7b:cd:b7:81:db:5a:1f:12:c9:
c9:92:b8:b8:5c:77:8a:dd:77:2d:36:f6:c1:a6:0e:
b1:b0:f3:aa:78:7c:92:1a:ae:15:05:9f:34:29:74:
08:42:10:40:d9:79:fa:a5:0e:78:d7:da:71:bf:93:
d9:2a:d7:a9:a6:95:6f:26:69:67:95:df:91:f9:f2:
bf:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:90:CF:3D:44:1F:FC:63:7D:BE:58:79:F0:31:41:F0:E1:62:85:7A
X509v3 Authority Key Identifier:
keyid:38:26:42:3E:B0:19:55:22:4E:6C:11:D1:9C:6D:39:38:1E:8B:E2:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCZCPrAZVSJObBHRnG05OB6L4h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:a3:c3:bd:5f:00:9c:e7:51:c6:93:1f:89:71:28:58:18:8b:
f4:b4:52:44:04:10:a2:ac:ce:ad:64:b3:ab:f4:bb:8b:6c:4f:
dd:a0:a8:3c:c7:89:68:49:33:16:25:cb:bc:85:1f:3d:95:79:
bc:73:56:80:aa:ad:5f:9b:0a:01:6c:12:5c:20:39:8c:eb:a9:
ce:a4:ea:b0:4b:16:4a:2c:1c:71:9d:87:7e:2e:f5:c9:ab:37:
b6:42:d2:46:f3:fd:e5:00:25:2f:1b:51:2b:6c:0f:f9:52:12:
d5:18:c0:f1:76:be:26:87:3f:99:24:b1:1b:a4:62:d4:77:d0:
ba:7f:13:eb:b5:12:4a:8d:bf:04:e2:43:c2:87:86:37:5b:4d:
b3:f3:97:3d:02:2b:3a:9e:03:93:b1:67:4d:f9:a5:c1:1a:77:
e6:ee:6c:ab:5a:31:e4:23:f2:e7:49:32:91:f9:35:41:98:5f:
a0:b1:66:65:a5:7b:7e:b8:55:a0:fb:42:99:bf:6e:57:00:81:
b7:cf:00:cc:8d:dd:84:e8:fa:7e:67:fe:8c:39:42:80:76:fb:
af:9d:92:74:c0:76:29:d3:47:0b:c2:ba:ea:8b:7d:a1:23:16:
b2:cd:4d:1d:c8:5b:44:0d:cf:fd:9c:08:f3:c0:56:27:ae:23:
6e:c9:95:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:53:34 2026 by rpki-client