Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft
File: OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft (raw, json)
Hash identifier: Hec6S+mAb7LvDgzcR9xMhQOaHH8RiPwwA3wSZnbTmJ8=
Subject key identifier: D2:69:A2:FA:07:2C:39:6B:CC:17:0B:35:A0:69:80:4C:8C:F4:86:76
Authority key identifier: 38:25:28:AB:1C:D1:B6:DC:73:C0:B0:9B:67:D3:E7:E3:58:4F:36:3D
Certificate issuer: /CN=382528ab1cd1b6dc73c0b09b67d3e7e3584f363d
Certificate serial: 019D292965E6250B13799091C4DF9718DFC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCUoqxzRttxzwLCbZ9Pn41hPNj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 08:01:11 +0000
Manifest this update: Thu 26 Mar 2026 08:01:11 +0000
Manifest next update: Fri 27 Mar 2026 08:01:11 +0000
Files and hashes: 1: CA-MzpWp9Dx3CrADIEvJQZw4E7E.roa (hash: cFLJlMvt+zbdg7Xdn6mpst0pNhdveJ/oPmHZEhv3T5Y=)
2: OCUoqxzRttxzwLCbZ9Pn41hPNj0.crl (hash: sZNk5lNmiIXsRJuu23VZWYCg/jw5gz4llohHD5njfsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCUoqxzRttxzwLCbZ9Pn41hPNj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:65:e6:25:0b:13:79:90:91:c4:df:97:18:df:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382528ab1cd1b6dc73c0b09b67d3e7e3584f363d
Validity
Not Before: Mar 26 08:01:11 2026 GMT
Not After : Mar 27 08:01:11 2026 GMT
Subject: CN=d269a2fa072c396bcc170b35a069804c8cf48676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:eb:ca:94:af:09:49:cc:31:48:2d:24:01:f1:
56:90:61:cc:fa:bb:ba:03:4d:e9:18:43:0c:9a:f9:
3b:ca:44:89:58:6f:49:55:90:a7:0e:fa:0a:b1:c8:
a0:f3:9d:f4:fe:d4:70:ed:df:98:b5:2a:88:b6:84:
41:43:18:55:64:f1:de:5d:cd:a9:c2:b5:5b:62:fa:
a0:2d:cf:71:6e:04:3d:37:ec:fa:66:a7:31:35:fc:
d8:f3:c2:4f:b5:2c:57:b0:91:74:59:46:90:65:b7:
3e:39:68:c3:c6:0d:13:64:0e:3e:ec:be:7a:8f:24:
bc:34:ad:fe:45:ae:1f:db:23:9f:0e:15:6e:cd:0f:
2a:9b:1d:b8:ad:81:8f:6f:76:d5:fd:4d:c7:5d:74:
fc:ca:a0:1b:fc:2a:1d:10:bb:33:d3:0e:e6:f5:6a:
55:92:45:53:1a:90:e9:41:42:0e:23:22:8e:a0:90:
53:2d:bd:db:ee:95:2f:0f:52:8d:8d:2b:45:20:9f:
ef:85:b0:c5:13:28:7b:6a:d4:67:84:ef:9b:02:58:
e0:b4:ed:ec:07:60:ac:08:47:7d:51:00:82:8c:4b:
94:c4:6b:4e:7b:50:87:b7:1f:84:14:66:d9:26:4f:
99:f5:ef:4f:68:c0:45:c6:3a:9a:72:91:c2:c7:63:
b5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:69:A2:FA:07:2C:39:6B:CC:17:0B:35:A0:69:80:4C:8C:F4:86:76
X509v3 Authority Key Identifier:
keyid:38:25:28:AB:1C:D1:B6:DC:73:C0:B0:9B:67:D3:E7:E3:58:4F:36:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCUoqxzRttxzwLCbZ9Pn41hPNj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:84:b7:7f:9f:1f:67:6e:3e:46:07:02:37:04:7b:4c:4f:63:
82:bb:f0:d8:d5:22:97:2f:3d:6d:22:cf:4e:58:b4:0f:b1:af:
b2:62:72:9a:fc:48:ac:73:44:b1:72:fa:5f:f4:67:c1:33:c9:
29:de:ce:ca:24:c3:2e:f6:68:27:bc:cd:9d:f5:a0:06:11:e2:
99:cf:c4:4c:6a:e2:50:ff:28:65:9e:cd:c9:d8:b6:62:ed:61:
63:b8:80:0b:0b:0e:82:25:0e:ea:d9:3b:60:ef:1f:6c:10:20:
29:bf:d9:02:96:db:d0:b2:68:b4:c0:56:d1:f9:74:cc:40:5c:
88:c4:1b:4d:ba:a0:68:a4:97:83:43:6e:b6:b7:75:0d:69:cf:
f4:ec:bb:d1:24:58:4d:97:15:c3:b0:05:b3:19:57:53:c9:88:
7e:ec:30:e9:bc:11:be:29:d7:7e:a7:e4:17:c8:32:3b:35:f5:
99:4e:b2:3c:48:10:58:a5:fb:8f:80:69:89:74:ae:ae:f6:ad:
a7:78:9a:cb:83:9d:28:51:b0:29:f9:8e:e1:7b:87:0a:80:3e:
f3:3e:8c:bb:5f:94:ab:73:9b:d1:36:bb:15:c2:7d:f9:33:9f:
d8:46:8b:d0:d2:df:29:c6:ef:18:b3:60:d2:62:2d:ee:60:fb:
b1:ac:b1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:06:02 2026 by rpki-client