Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/04748d-923b-4284-9628-203563f845bb/1/OC-G8tvQd2xOUZycmuT60EJvOf8.mft
File: OC-G8tvQd2xOUZycmuT60EJvOf8.mft (raw, json)
Hash identifier: GZOtcFZbixLR+lRj7Q4PpTuYTFWoHxO0bd7ukFa2vzk=
Subject key identifier: 3A:32:FC:03:15:FF:28:1E:6F:6D:D2:37:95:65:CE:BF:85:C0:A7:94
Authority key identifier: 38:2F:86:F2:DB:D0:77:6C:4E:51:9C:9C:9A:E4:FA:D0:42:6F:39:FF
Certificate issuer: /CN=382f86f2dbd0776c4e519c9c9ae4fad0426f39ff
Certificate serial: 019F94DB7228B1C25A459EDA6658590C1217
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OC-G8tvQd2xOUZycmuT60EJvOf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/04748d-923b-4284-9628-203563f845bb/1/OC-G8tvQd2xOUZycmuT60EJvOf8.mft
Manifest number: 05AB
Signing time: Fri 24 Jul 2026 16:00:37 +0000
Manifest this update: Fri 24 Jul 2026 16:00:37 +0000
Manifest next update: Sat 25 Jul 2026 16:00:37 +0000
Files and hashes: 1: 1-CvN4vL-gOumnUiw8kqYnlyhsGg.roa (hash: j8Mlx4J1MdSRge54lSRG985DTWF3u6cnasrSWFkZ6ac=)
2: OC-G8tvQd2xOUZycmuT60EJvOf8.crl (hash: LnjmTcEqZ18bIaUDn4s8o7OlLDrKDfLtZbfpM/ReuRM=)
3: t25FS3p7VfnEPbzfHv-DyXEln4A.roa (hash: 71ZKU18culvAhzrOg6y8Lw3IENicOoZIJiAlIOqPr8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/04748d-923b-4284-9628-203563f845bb/1/OC-G8tvQd2xOUZycmuT60EJvOf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/04748d-923b-4284-9628-203563f845bb/1/OC-G8tvQd2xOUZycmuT60EJvOf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OC-G8tvQd2xOUZycmuT60EJvOf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:db:72:28:b1:c2:5a:45:9e:da:66:58:59:0c:12:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382f86f2dbd0776c4e519c9c9ae4fad0426f39ff
Validity
Not Before: Jul 24 16:00:37 2026 GMT
Not After : Jul 25 16:00:37 2026 GMT
Subject: CN=3a32fc0315ff281e6f6dd2379565cebf85c0a794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7f:14:19:70:e5:d5:38:73:32:e6:85:34:f5:
7b:6d:0b:b1:a9:e1:fb:c1:66:73:6d:67:45:81:8c:
0e:68:7a:31:5d:e7:0d:16:95:d7:e1:8b:ce:8b:03:
00:86:b7:20:47:45:27:51:4e:97:4b:dc:e4:65:c2:
fd:53:74:ff:69:50:c0:78:a9:f7:84:9a:3b:29:a9:
42:79:bd:e4:4b:7a:6d:a9:22:a1:7b:ae:4e:9c:c1:
98:56:6e:97:b0:58:00:a1:44:8b:13:ef:f6:27:fd:
87:6c:8c:ef:72:de:36:0c:92:b0:a7:68:ab:4b:7c:
38:b9:27:87:9f:18:b4:a5:d7:f9:af:a8:0f:6e:b0:
93:0f:e2:49:ca:57:5d:99:ec:34:84:c0:5b:d7:92:
ea:9b:ab:57:76:4e:d0:45:bc:53:b5:51:c9:d6:3a:
71:7b:c0:b5:fb:ac:43:ad:0b:ae:5d:aa:bc:99:94:
72:32:a6:ba:0d:ea:14:d0:fa:1f:c6:18:ec:e9:8e:
1a:91:67:38:28:35:65:62:da:76:11:7e:4a:56:a0:
2c:9b:41:ee:bd:ab:1f:56:6b:2c:a4:1d:34:b5:0f:
f0:c8:b5:0f:49:b7:1e:7d:32:eb:49:7d:b6:ef:53:
29:9d:41:ab:f7:fe:66:20:a4:97:e4:82:6d:8a:6e:
57:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:32:FC:03:15:FF:28:1E:6F:6D:D2:37:95:65:CE:BF:85:C0:A7:94
X509v3 Authority Key Identifier:
keyid:38:2F:86:F2:DB:D0:77:6C:4E:51:9C:9C:9A:E4:FA:D0:42:6F:39:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OC-G8tvQd2xOUZycmuT60EJvOf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/04748d-923b-4284-9628-203563f845bb/1/OC-G8tvQd2xOUZycmuT60EJvOf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/04748d-923b-4284-9628-203563f845bb/1/OC-G8tvQd2xOUZycmuT60EJvOf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:64:76:76:37:ff:67:6f:d3:f7:58:16:75:86:19:ef:ae:fe:
b0:2f:d2:3b:5a:d2:6e:38:b8:9c:41:a5:57:c5:bb:4e:b6:f6:
9e:65:74:54:a9:ce:f6:ee:a0:a8:eb:14:9b:99:6b:c0:62:f0:
79:48:8c:42:1b:50:4c:5b:db:3a:3c:4e:29:99:97:39:2c:16:
a1:e0:41:a1:69:4f:25:3c:29:dd:d1:3f:68:c1:20:c9:19:ae:
5a:dc:85:77:e6:16:f5:ec:d5:38:ff:2b:12:1b:2a:18:44:2a:
0b:ed:e1:26:ae:2f:47:1f:47:ed:c2:a5:0a:72:65:80:ab:9c:
e9:3e:0a:cb:47:2c:16:8b:65:dc:d8:b0:8f:ab:e5:e6:aa:21:
95:f1:1e:d6:52:f6:c5:87:93:4e:c9:ef:c2:a8:a4:96:4c:b5:
0f:e5:7a:b1:ff:d5:dc:9c:2b:5d:2e:95:a6:e7:ad:fd:e1:c7:
42:db:dc:62:98:5a:26:58:9e:35:46:fe:da:7d:4f:46:e1:80:
c8:ce:6c:98:eb:c5:d8:f2:38:56:6f:d7:31:f8:c2:d0:b6:99:
c4:53:39:2c:65:11:6a:1a:32:1d:d6:9b:ff:00:3c:4b:84:05:
8b:08:b9:0d:8a:29:7f:e8:91:90:2d:e5:64:ca:49:26:20:f6:
aa:d8:20:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+U23IoscJaRZ7aZlhZDBIXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MmY4NmYyZGJkMDc3NmM0ZTUxOWM5YzlhZTRmYWQwNDI2
ZjM5ZmYwHhcNMjYwNzI0MTYwMDM3WhcNMjYwNzI1MTYwMDM3WjAzMTEwLwYDVQQD
EygzYTMyZmMwMzE1ZmYyODFlNmY2ZGQyMzc5NTY1Y2ViZjg1YzBhNzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvX8UGXDl1ThzMuaFNPV7bQuxqeH7
wWZzbWdFgYwOaHoxXecNFpXX4YvOiwMAhrcgR0UnUU6XS9zkZcL9U3T/aVDAeKn3
hJo7KalCeb3kS3ptqSKhe65OnMGYVm6XsFgAoUSLE+/2J/2HbIzvct42DJKwp2ir
S3w4uSeHnxi0pdf5r6gPbrCTD+JJylddmew0hMBb15Lqm6tXdk7QRbxTtVHJ1jpx
e8C1+6xDrQuuXaq8mZRyMqa6DeoU0Pofxhjs6Y4akWc4KDVlYtp2EX5KVqAsm0Hu
vasfVmsspB00tQ/wyLUPSbcefTLrSX2271MpnUGr9/5mIKSX5IJtim5XZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDoy/AMV/ygeb23SN5Vlzr+FwKeUMB8GA1UdIwQY
MBaAFDgvhvLb0HdsTlGcnJrk+tBCbzn/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0MtRzh0dlFkMnhPVVp5Y211VDYwRUp2T2Y4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wNDc0OGQtOTIzYi00Mjg0LTk2Mjgt
MjAzNTYzZjg0NWJiLzEvT0MtRzh0dlFkMnhPVVp5Y211VDYwRUp2T2Y4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wNDc0OGQtOTIzYi00Mjg0LTk2MjgtMjAzNTYzZjg0NWJi
LzEvT0MtRzh0dlFkMnhPVVp5Y211VDYwRUp2T2Y4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb2R2djf/
Z2/T91gWdYYZ767+sC/SO1rSbji4nEGlV8W7Trb2nmV0VKnO9u6gqOsUm5lrwGLw
eUiMQhtQTFvbOjxOKZmXOSwWoeBBoWlPJTwp3dE/aMEgyRmuWtyFd+YW9ezVOP8r
EhsqGEQqC+3hJq4vRx9H7cKlCnJlgKuc6T4Ky0csFotl3Niwj6vl5qohlfEe1lL2
xYeTTsnvwqiklky1D+V6sf/V3JwrXS6Vpuet/eHHQtvcYphaJlieNUb+2n1PRuGA
yM5smOvF2PI4Vm/XMfjC0LaZxFM5LGURahoyHdab/wA8S4QFiwi5DYopf+iRkC3l
ZMpJJiD2qtggrg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:15:30 2026 by rpki-client