Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft
File: OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft (raw, json)
Hash identifier: rMVgB2e5VWFfa9dppwDsLwFGp27Odk8BSAPden76JvE=
Subject key identifier: C2:7E:6A:09:83:E2:5E:A1:AE:AE:67:24:31:68:B7:71:51:A3:12:88
Authority key identifier: 38:22:7A:96:FA:64:AD:95:24:0F:0A:EE:0B:D3:74:64:6C:6B:BE:E2
Certificate issuer: /CN=38227a96fa64ad95240f0aee0bd374646c6bbee2
Certificate serial: 019F93241A13A8EB322DD6957D616B532105
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft
Manifest number: 1545
Signing time: Fri 24 Jul 2026 08:00:44 +0000
Manifest this update: Fri 24 Jul 2026 08:00:44 +0000
Manifest next update: Sat 25 Jul 2026 08:00:44 +0000
Files and hashes: 1: OCJ6lvpkrZUkDwruC9N0ZGxrvuI.crl (hash: 3NsGv2jhkrO0ofipkr2fCMYHHoGR7VlBy2PSRdiIS6c=)
2: wHo6ZTM3-jzipse2lB9xc8s3uRA.roa (hash: 4oFkl4sS+vN5C2DeyY08mCPgjzjmSD8SNhBeGnmU75Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:1a:13:a8:eb:32:2d:d6:95:7d:61:6b:53:21:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38227a96fa64ad95240f0aee0bd374646c6bbee2
Validity
Not Before: Jul 24 08:00:44 2026 GMT
Not After : Jul 25 08:00:44 2026 GMT
Subject: CN=c27e6a0983e25ea1aeae67243168b77151a31288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0f:ac:41:62:6f:30:53:0d:02:19:f2:8b:fc:
57:46:72:0e:d2:e5:48:4a:9f:28:a7:c5:35:65:05:
7c:63:69:8d:69:61:02:ab:72:95:93:ae:00:78:40:
b6:71:a4:d2:6f:35:25:6d:98:3f:27:d0:52:66:80:
1a:1b:02:70:09:72:75:9a:01:f7:f6:eb:8b:0d:64:
f5:78:22:1b:e7:59:07:3c:2e:a2:8a:03:e7:82:2d:
9f:c8:fa:fe:ee:70:28:90:e2:bc:48:90:70:a2:29:
de:3c:b4:8a:c4:c2:c1:70:24:54:8f:44:ee:33:a2:
2c:fa:20:43:13:82:a9:2a:d4:f7:b4:8b:53:47:8d:
42:9a:ca:80:76:09:33:e9:9f:df:a3:09:01:7a:7d:
33:05:b2:7a:60:2c:da:c8:80:3e:4e:73:63:be:0b:
0a:4c:04:c3:6a:c6:e8:f0:a5:be:89:1c:3e:a4:c9:
68:7e:5f:e3:cf:0b:a5:1f:ca:34:9c:b3:5c:38:72:
4a:a5:77:5d:5c:f7:7f:74:e2:9d:df:2a:00:53:1b:
65:fc:c9:5b:9a:43:46:02:9c:12:5d:24:f1:d5:26:
68:7e:6e:95:6b:70:e6:25:6f:b0:af:1b:97:b0:7d:
28:c8:7d:2e:44:c9:b6:0d:b2:1a:a3:dc:b0:e7:60:
d8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:7E:6A:09:83:E2:5E:A1:AE:AE:67:24:31:68:B7:71:51:A3:12:88
X509v3 Authority Key Identifier:
keyid:38:22:7A:96:FA:64:AD:95:24:0F:0A:EE:0B:D3:74:64:6C:6B:BE:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:50:7c:1f:1a:0f:52:32:05:da:8f:53:4a:96:c0:6d:8d:ff:
78:27:8c:51:05:87:59:0e:14:ff:e9:36:c3:48:46:04:3f:28:
75:49:86:72:71:2f:a5:20:da:8c:5e:ed:31:a9:86:8e:f7:75:
4b:4b:a7:af:82:c7:ac:8f:40:32:02:b1:57:e7:c6:df:df:7d:
1f:76:38:81:b0:cf:dd:d4:4c:6d:b2:4e:06:c2:05:cf:60:e7:
f9:ca:75:0b:a2:15:a1:91:10:3c:f9:4b:56:ef:dd:3b:bd:19:
bb:5e:52:fe:10:46:59:ff:90:d9:a6:c7:14:ca:b9:af:4d:bf:
30:f1:e7:fe:fa:d1:50:2f:a7:d7:34:74:42:f6:09:55:d1:e4:
c4:fe:0f:7e:c3:8d:45:04:ad:ca:e7:d1:8b:56:0f:df:0e:94:
d5:5b:80:cb:79:34:e7:2b:c7:a5:c7:da:6f:6a:5b:29:6e:3a:
82:d4:ad:d0:17:15:05:7a:ec:81:83:9e:93:6d:d6:ab:be:ef:
66:34:f3:b1:35:d7:12:3c:82:99:c4:ab:34:41:0b:f5:d1:96:
0b:e9:d4:e8:70:82:37:ac:97:77:97:0a:87:e5:f2:8e:98:7d:
1e:1e:da:42:97:72:fb:6e:f9:a0:45:4d:41:a4:1d:13:e9:f9:
f9:23:86:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:13:43 2026 by rpki-client