Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/04748d-923b-4284-9628-203563f845bb/1/OC-G8tvQd2xOUZycmuT60EJvOf8.mft
File: OC-G8tvQd2xOUZycmuT60EJvOf8.mft (raw, json)
Hash identifier: EU8vjr1a6pWxK4X1edi+o7xjH+Nwa1nNcVnAhcT+2SA=
Subject key identifier: 8E:B9:BD:73:DD:DC:1D:90:B6:CF:D6:40:A4:57:A3:A7:BE:7F:B7:EC
Authority key identifier: 38:2F:86:F2:DB:D0:77:6C:4E:51:9C:9C:9A:E4:FA:D0:42:6F:39:FF
Certificate issuer: /CN=382f86f2dbd0776c4e519c9c9ae4fad0426f39ff
Certificate serial: 01A0EAAE0BD92F6A5AD9D3306E105DB659A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OC-G8tvQd2xOUZycmuT60EJvOf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/04748d-923b-4284-9628-203563f845bb/1/OC-G8tvQd2xOUZycmuT60EJvOf8.mft
Manifest number: 065C
Signing time: Tue 29 Sep 2026 01:01:09 +0000
Manifest this update: Tue 29 Sep 2026 01:01:09 +0000
Manifest next update: Wed 30 Sep 2026 01:01:09 +0000
Files and hashes: 1: 1-CvN4vL-gOumnUiw8kqYnlyhsGg.roa (hash: j8Mlx4J1MdSRge54lSRG985DTWF3u6cnasrSWFkZ6ac=)
2: OC-G8tvQd2xOUZycmuT60EJvOf8.crl (hash: dY4kNVgR7TDDeaKljWpoacKBG9H6YcNBrFSUFIWLYAA=)
3: t25FS3p7VfnEPbzfHv-DyXEln4A.roa (hash: 71ZKU18culvAhzrOg6y8Lw3IENicOoZIJiAlIOqPr8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/04748d-923b-4284-9628-203563f845bb/1/OC-G8tvQd2xOUZycmuT60EJvOf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/04748d-923b-4284-9628-203563f845bb/1/OC-G8tvQd2xOUZycmuT60EJvOf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OC-G8tvQd2xOUZycmuT60EJvOf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:ae:0b:d9:2f:6a:5a:d9:d3:30:6e:10:5d:b6:59:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382f86f2dbd0776c4e519c9c9ae4fad0426f39ff
Validity
Not Before: Sep 29 01:01:09 2026 GMT
Not After : Sep 30 01:01:09 2026 GMT
Subject: CN=8eb9bd73dddc1d90b6cfd640a457a3a7be7fb7ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:31:8e:3b:6f:54:e2:8b:2a:f1:6c:b8:17:8b:
a8:bd:f5:c2:81:fb:79:b4:2e:2e:dc:a6:d6:84:de:
55:b8:83:2a:00:59:3d:40:65:51:a8:46:64:ad:ed:
9e:9e:25:46:ad:5c:b8:67:f0:82:d0:1d:07:6f:4d:
88:55:3f:e8:b8:61:6a:3a:f4:7c:80:73:7a:cc:b3:
2f:5b:8a:fe:a2:86:38:a9:86:b5:6a:b8:fc:06:e1:
90:ba:c1:19:65:1b:4b:9d:6b:3b:8b:58:0b:6e:e6:
e7:0e:ee:8a:25:49:b4:db:2f:dc:4b:b4:c1:5d:59:
db:d0:b0:c7:cc:f3:98:a2:a0:82:d1:7f:5c:6e:a0:
e4:aa:33:f3:a5:bf:96:dc:2f:b1:ce:55:1f:51:a8:
67:bf:c4:7f:a8:f3:fb:75:42:b0:18:c5:7b:1d:cf:
d2:17:9f:e1:42:56:c0:e0:a8:4d:97:2a:17:21:77:
86:b3:b1:9c:3f:99:b1:7c:4c:17:81:07:6f:44:2d:
1c:31:46:6e:d8:1b:20:9d:b8:e2:96:a6:86:9b:48:
f0:a3:8f:3e:06:61:65:0e:0e:ed:a6:d8:c0:1e:d6:
51:de:a3:47:4f:24:39:5f:be:35:03:63:a2:92:b9:
e5:f6:2a:ef:94:d1:d0:99:62:ec:ae:35:fd:35:82:
be:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B9:BD:73:DD:DC:1D:90:B6:CF:D6:40:A4:57:A3:A7:BE:7F:B7:EC
X509v3 Authority Key Identifier:
keyid:38:2F:86:F2:DB:D0:77:6C:4E:51:9C:9C:9A:E4:FA:D0:42:6F:39:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OC-G8tvQd2xOUZycmuT60EJvOf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/04748d-923b-4284-9628-203563f845bb/1/OC-G8tvQd2xOUZycmuT60EJvOf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/04748d-923b-4284-9628-203563f845bb/1/OC-G8tvQd2xOUZycmuT60EJvOf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:de:91:91:4b:ba:55:dd:d2:7f:16:a4:95:38:b1:4f:9b:9b:
af:47:28:ff:6f:fb:22:62:f6:18:6f:df:dc:25:30:a6:8d:73:
4b:97:b0:cc:3e:4f:ee:4f:72:77:6e:51:52:fc:aa:60:89:bd:
7e:76:3d:2c:11:e0:fb:a5:c8:e8:49:39:86:35:1e:70:62:64:
d6:c1:91:e6:fa:1d:42:dd:e3:81:93:9a:e8:f7:cd:de:9f:16:
2c:db:47:69:b8:70:94:7a:0c:4d:44:84:e8:5f:0e:5f:48:37:
de:b8:19:9f:57:f6:50:ce:43:0e:60:fd:a6:47:38:ef:b9:67:
ce:28:8d:08:ff:6f:4a:66:cb:96:cf:12:e3:a5:9f:54:99:45:
4b:e2:9f:97:a6:60:c1:ae:42:d2:51:f2:a3:32:2e:38:9f:24:
43:50:37:42:22:43:9e:bc:3f:06:4e:18:58:e9:3c:28:db:fe:
49:4c:a0:0f:ca:59:c4:ca:6f:5b:9e:57:63:fe:f2:3d:09:02:
48:c4:bf:40:cb:2a:04:77:bd:a9:18:2f:b1:ca:54:74:76:16:
b9:5d:5b:3d:6e:40:31:47:58:0e:0f:6f:ee:54:a9:67:e2:fe:
7d:19:c0:28:ec:62:b9:b5:90:19:37:87:f3:ab:03:00:d6:75:
a4:18:ff:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:59:36 2026 by rpki-client