Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft
File: OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft (raw, json)
Hash identifier: XIf0oO4HI/v/9EwXe60Hj6i/zUJ2TpphQnDkVSKRs6M=
Subject key identifier: 93:03:F6:A3:39:9A:C2:3E:AF:A9:F5:5C:C6:7B:C5:E8:57:A9:47:86
Authority key identifier: 38:22:7A:96:FA:64:AD:95:24:0F:0A:EE:0B:D3:74:64:6C:6B:BE:E2
Certificate issuer: /CN=38227a96fa64ad95240f0aee0bd374646c6bbee2
Certificate serial: 01A0DD60A049A046D1E89453A2E9CCE73D0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft
Manifest number: 15F0
Signing time: Sat 26 Sep 2026 11:01:32 +0000
Manifest this update: Sat 26 Sep 2026 11:01:32 +0000
Manifest next update: Sun 27 Sep 2026 11:01:32 +0000
Files and hashes: 1: OCJ6lvpkrZUkDwruC9N0ZGxrvuI.crl (hash: L2bArRwxnvO0o662D4vN08/T5MDtCGODXP/wgfmzuMk=)
2: wHo6ZTM3-jzipse2lB9xc8s3uRA.roa (hash: 4oFkl4sS+vN5C2DeyY08mCPgjzjmSD8SNhBeGnmU75Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:60:a0:49:a0:46:d1:e8:94:53:a2:e9:cc:e7:3d:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38227a96fa64ad95240f0aee0bd374646c6bbee2
Validity
Not Before: Sep 26 11:01:32 2026 GMT
Not After : Sep 27 11:01:32 2026 GMT
Subject: CN=9303f6a3399ac23eafa9f55cc67bc5e857a94786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a0:21:95:3e:07:21:1d:0c:a2:d4:5b:b5:13:
0d:de:21:8d:76:a8:d6:27:70:52:b7:d1:bc:44:df:
9a:85:5b:b6:7b:d1:1f:f7:7c:e5:e3:85:d0:57:b1:
f4:f9:2d:91:b9:f2:81:d5:73:1e:35:1a:66:7e:db:
89:b9:4a:b1:f5:18:90:b8:22:4e:a7:b5:d9:28:27:
aa:f2:0d:73:36:41:49:86:89:34:d0:4f:c6:5d:fb:
1f:ab:12:96:85:49:df:c8:41:44:6b:5b:36:89:e2:
e4:8a:44:1e:df:f6:f6:91:ff:29:3a:23:51:29:21:
db:b7:0f:b2:d0:3f:7c:34:69:24:f9:0c:52:81:0b:
51:c2:b6:03:26:b0:91:f7:bb:d4:3b:e8:d0:9e:ad:
57:5b:47:32:d3:2b:85:1a:88:04:c5:fe:41:95:ce:
ee:1f:dc:f2:90:6c:3b:66:c8:9c:d9:78:f4:2c:82:
16:ef:a6:af:e9:f1:a3:f2:e6:7f:4e:19:65:1c:cb:
0d:a8:67:fb:44:72:d5:5e:20:d6:32:67:a8:35:b9:
f6:30:f5:82:3c:dd:bf:93:c0:13:43:44:5d:3b:47:
c3:9f:14:81:c7:ea:60:6a:95:9c:28:29:29:ee:60:
c1:85:5f:2c:95:9c:ef:da:bd:66:c2:bc:6f:78:ea:
f4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:03:F6:A3:39:9A:C2:3E:AF:A9:F5:5C:C6:7B:C5:E8:57:A9:47:86
X509v3 Authority Key Identifier:
keyid:38:22:7A:96:FA:64:AD:95:24:0F:0A:EE:0B:D3:74:64:6C:6B:BE:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:dd:b1:49:e5:4f:ef:bc:b1:6f:dd:06:39:42:ef:13:7c:d0:
38:e2:f8:ad:fa:3e:31:33:84:af:0e:49:89:d2:ec:e1:e0:d8:
75:0e:ba:ef:34:bb:46:eb:22:ea:c3:e2:2a:93:03:33:38:76:
f4:6d:0a:d3:14:bf:ac:f9:17:95:1f:70:f4:3d:12:a0:1c:d6:
bf:43:71:db:63:69:29:f3:60:34:6e:7c:11:22:cc:f5:27:18:
f7:52:ed:3c:f0:d4:1e:c6:e5:29:a9:e0:d8:19:d1:82:b6:3c:
39:fb:c4:11:f2:f0:59:53:b0:87:92:5f:40:df:ad:7e:cd:f1:
29:34:8c:e8:f4:8a:c3:e2:03:87:5f:12:37:ca:be:39:aa:08:
bf:c9:c4:b2:40:26:bf:af:ab:3f:90:2b:ab:3f:5f:f3:93:34:
fb:ab:52:c2:8d:df:fc:19:28:08:e5:44:37:3f:ce:c7:fa:19:
96:64:e1:77:e5:5d:a1:80:21:2a:8c:dd:f0:91:59:cd:b5:9f:
4a:08:59:8a:96:7f:2f:57:98:a5:6d:d0:ee:15:83:9a:b8:20:
6f:07:9b:e7:f0:92:ff:c5:34:f4:42:f0:2b:5e:81:9d:ff:b1:
d3:42:e0:02:2b:f5:b0:84:9f:61:68:8c:93:a3:f4:8c:7e:5e:
4d:b8:14:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:13:43 2026 by rpki-client