Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
File: OC5TMDOzzpXklyvyOC3awpPC3AE.mft (raw, json)
Hash identifier: 3vXYuaW/3B1tLAq09Byj9wnKQ0qPe7wHVdy4klFujBg=
Subject key identifier: 62:BC:3B:3D:BB:59:A8:AA:D2:22:33:E4:89:C8:9E:D8:B8:57:0D:32
Authority key identifier: 38:2E:53:30:33:B3:CE:95:E4:97:2B:F2:38:2D:DA:C2:93:C2:DC:01
Certificate issuer: /CN=382e533033b3ce95e4972bf2382ddac293c2dc01
Certificate serial: 019D265F5B116BA925B705962D22E584CD5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
Manifest number: 0BE5
Signing time: Wed 25 Mar 2026 19:01:16 +0000
Manifest this update: Wed 25 Mar 2026 19:01:16 +0000
Manifest next update: Thu 26 Mar 2026 19:01:16 +0000
Files and hashes: 1: 16Wly6tf9ZCRlJ1eLRRr8Q4xzIw.roa (hash: Kp7oiL6STzpmE+EAdvQJo2k6GaSB6dYQxfvWJmxfMsM=)
2: JTe6rZdralZYMfrallY8D9l18pI.roa (hash: nAhU2MmHuPgFOMieOuqyCTSQGexpWdZSuDuOtmxyLp0=)
3: OC5TMDOzzpXklyvyOC3awpPC3AE.crl (hash: r1KJ3EUT51s8B9g82cg9RyYp3OBaG9ey1aE4dqlERh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:5b:11:6b:a9:25:b7:05:96:2d:22:e5:84:cd:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382e533033b3ce95e4972bf2382ddac293c2dc01
Validity
Not Before: Mar 25 19:01:16 2026 GMT
Not After : Mar 26 19:01:16 2026 GMT
Subject: CN=62bc3b3dbb59a8aad22233e489c89ed8b8570d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f0:e9:49:e7:cc:cf:b5:bd:e0:8b:9f:e6:12:
02:9a:85:a7:63:27:bb:88:6f:06:a0:f3:88:13:76:
8a:1c:cb:00:ad:dc:c3:8b:0a:8a:c0:a1:15:b9:1e:
79:34:1e:21:e4:ee:d5:f5:df:15:e2:f1:e1:7e:2b:
6d:27:0a:ea:51:e7:d9:7b:33:d4:40:b4:cf:64:91:
91:2d:f1:aa:bd:63:ff:c6:a3:14:fb:35:0d:9a:b7:
45:26:51:b8:93:d9:85:b3:ed:eb:5d:03:08:e9:b1:
c8:ec:8d:6b:a4:16:2c:c2:9f:d3:31:88:8f:3f:ed:
08:e1:2e:01:b9:c9:5d:e2:c3:b2:9e:9f:77:d7:60:
39:a4:02:5e:e6:13:23:36:0a:b1:f7:0d:95:b8:3a:
5e:36:27:27:1d:67:b2:ce:37:22:c6:68:da:f0:6b:
c3:c9:86:8a:9f:44:34:db:17:81:26:fd:32:4c:0e:
d7:c7:f0:2d:7f:6f:7e:c4:1b:05:f4:f7:38:3c:a8:
c0:72:b6:81:ae:14:c9:a4:26:c6:b8:07:60:b6:d8:
4f:b9:a2:2d:52:0d:96:98:09:0e:41:01:13:e8:c7:
28:37:c5:52:a2:04:0a:b2:9e:9f:7c:94:71:cd:61:
99:1a:ba:10:b1:b5:56:08:9f:f7:3f:79:62:b3:09:
6b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:BC:3B:3D:BB:59:A8:AA:D2:22:33:E4:89:C8:9E:D8:B8:57:0D:32
X509v3 Authority Key Identifier:
keyid:38:2E:53:30:33:B3:CE:95:E4:97:2B:F2:38:2D:DA:C2:93:C2:DC:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:75:86:79:4c:58:85:cc:78:06:50:89:d3:eb:f4:ad:0f:e9:
60:ab:9e:c7:30:92:d1:3b:30:91:e3:27:89:9a:c2:7b:3e:c2:
80:d9:95:9b:a8:e2:bf:bf:20:fc:42:9f:8a:f3:a0:4b:d9:f8:
76:85:82:32:63:54:41:b2:f6:c1:2b:8d:47:9a:38:b4:d2:88:
06:33:f0:1d:2e:ba:1b:31:e3:0f:0e:ba:86:ef:44:61:4a:4c:
9a:26:1e:a2:bd:c3:81:54:f6:c7:b2:d0:96:ad:92:de:cf:fb:
0c:4e:df:f8:eb:66:8a:3b:ac:07:b6:4b:08:a3:93:1b:0b:e2:
69:3f:69:42:68:5a:bc:53:db:bb:4c:77:44:35:bd:0c:19:30:
a8:06:f7:29:3e:bd:6e:91:af:67:8b:8e:04:17:9d:04:d0:5c:
63:2e:29:e3:d3:9d:87:63:3c:8d:d6:87:c5:50:f2:c4:70:eb:
bd:f7:c8:97:f9:2d:d5:c1:f6:35:48:95:f6:eb:e8:bd:b1:99:
6c:34:16:b1:79:7c:69:ad:48:09:48:53:88:f3:5b:b4:9e:7d:
13:54:3f:43:8a:f3:18:9d:8d:f9:45:15:fe:ad:20:41:34:c1:
23:ce:5d:3f:18:42:61:6f:a4:85:46:dc:4f:07:26:35:87:35:
07:0f:6e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:53:17 2026 by rpki-client