Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/04748d-923b-4284-9628-203563f845bb/1/OC-G8tvQd2xOUZycmuT60EJvOf8.mft
File: OC-G8tvQd2xOUZycmuT60EJvOf8.mft (raw, json)
Hash identifier: afYRmEhJEjfTr1zuRq7jQAd/DnF7xU89A732xfRAekU=
Subject key identifier: 5D:0B:6B:A7:CE:6B:7A:F3:6F:F8:21:7F:09:FC:EA:44:D8:5A:5B:8B
Authority key identifier: 38:2F:86:F2:DB:D0:77:6C:4E:51:9C:9C:9A:E4:FA:D0:42:6F:39:FF
Certificate issuer: /CN=382f86f2dbd0776c4e519c9c9ae4fad0426f39ff
Certificate serial: 019F92ECBA9CD284328934BC62BFEA5AFA23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OC-G8tvQd2xOUZycmuT60EJvOf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/04748d-923b-4284-9628-203563f845bb/1/OC-G8tvQd2xOUZycmuT60EJvOf8.mft
Manifest number: 05AA
Signing time: Fri 24 Jul 2026 07:00:15 +0000
Manifest this update: Fri 24 Jul 2026 07:00:15 +0000
Manifest next update: Sat 25 Jul 2026 07:00:15 +0000
Files and hashes: 1: 1-CvN4vL-gOumnUiw8kqYnlyhsGg.roa (hash: j8Mlx4J1MdSRge54lSRG985DTWF3u6cnasrSWFkZ6ac=)
2: OC-G8tvQd2xOUZycmuT60EJvOf8.crl (hash: qA/UShBQrLA4W4+g4ghyw4Be7OWe/Fu76pCzf66mbdw=)
3: t25FS3p7VfnEPbzfHv-DyXEln4A.roa (hash: 71ZKU18culvAhzrOg6y8Lw3IENicOoZIJiAlIOqPr8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/04748d-923b-4284-9628-203563f845bb/1/OC-G8tvQd2xOUZycmuT60EJvOf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/04748d-923b-4284-9628-203563f845bb/1/OC-G8tvQd2xOUZycmuT60EJvOf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OC-G8tvQd2xOUZycmuT60EJvOf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ec:ba:9c:d2:84:32:89:34:bc:62:bf:ea:5a:fa:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382f86f2dbd0776c4e519c9c9ae4fad0426f39ff
Validity
Not Before: Jul 24 07:00:15 2026 GMT
Not After : Jul 25 07:00:15 2026 GMT
Subject: CN=5d0b6ba7ce6b7af36ff8217f09fcea44d85a5b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:74:7c:03:cd:40:f7:14:b1:ee:ae:04:8c:e3:
ed:c0:6b:eb:fe:a7:c4:37:43:6c:c9:9c:9f:10:55:
af:6b:7a:ce:6a:82:ed:19:39:08:03:ae:ca:35:4e:
73:2e:32:76:a7:eb:25:2e:a4:ca:4e:94:d5:e9:96:
8e:2f:47:a1:6d:65:12:97:e8:70:40:fc:a6:a1:cf:
6e:c2:e5:89:36:88:0f:a1:18:64:ae:bd:81:55:26:
a6:17:70:d5:df:13:e4:67:3a:cb:d6:5e:51:ed:94:
0a:8c:38:1d:8d:2e:e9:ed:3b:ff:c6:de:0f:a1:ba:
7d:79:b6:ac:d3:d4:09:4f:77:20:db:32:32:1c:4b:
59:51:cd:1c:de:58:00:c5:57:5b:04:46:b9:77:b3:
19:5b:9e:94:96:b5:e4:79:2d:3b:d8:51:84:e6:da:
bc:0c:29:09:f5:4b:ea:50:49:5d:2a:16:80:91:02:
79:88:9c:19:b4:77:82:be:f9:86:76:c9:fb:0d:4e:
7f:b9:73:84:af:a6:00:0a:4d:1c:c2:90:3d:0e:5a:
cf:b2:ac:40:eb:71:a1:67:40:a8:5e:7e:bd:61:3b:
2b:59:c7:78:7a:5a:37:c2:d2:23:21:d7:e2:f4:c2:
10:c5:c6:de:4f:de:ac:e2:8a:de:65:2f:cb:03:bd:
c6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:0B:6B:A7:CE:6B:7A:F3:6F:F8:21:7F:09:FC:EA:44:D8:5A:5B:8B
X509v3 Authority Key Identifier:
keyid:38:2F:86:F2:DB:D0:77:6C:4E:51:9C:9C:9A:E4:FA:D0:42:6F:39:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OC-G8tvQd2xOUZycmuT60EJvOf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/04748d-923b-4284-9628-203563f845bb/1/OC-G8tvQd2xOUZycmuT60EJvOf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/04748d-923b-4284-9628-203563f845bb/1/OC-G8tvQd2xOUZycmuT60EJvOf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:78:78:69:ae:4a:16:af:ad:95:c6:a0:5e:4e:0e:0c:35:31:
50:68:dd:6f:4c:65:cc:2a:91:d8:4b:40:3e:5d:17:14:b0:0b:
46:dd:6c:df:c3:5a:14:33:ae:23:ca:62:02:42:ab:77:c9:76:
e0:e2:81:68:9e:76:a4:50:74:97:a6:91:ed:a7:0f:9f:be:be:
98:8e:29:a5:00:51:16:93:05:f0:8e:15:8c:1f:4a:67:b3:fa:
90:bb:b7:5a:c8:3c:d5:b2:2d:9f:5d:37:bf:92:4f:56:10:ba:
53:74:0d:df:ac:27:10:48:6c:02:67:82:ce:30:7d:86:53:a5:
d0:85:84:18:cb:cc:57:47:70:87:5c:f2:76:98:1d:e8:a7:b5:
98:c8:de:92:ab:d7:6e:7f:ee:d3:e2:fe:85:2b:a0:f1:33:9b:
1a:ad:03:f1:26:7e:da:9c:89:30:b2:d1:51:83:31:50:71:79:
df:84:c3:75:86:b7:73:c4:a8:67:41:31:24:cd:fc:e1:9e:c4:
d5:47:9b:37:39:db:d0:65:ea:e8:2a:f1:44:22:9a:11:d6:42:
69:e6:8e:91:c9:25:20:e9:6a:f4:3a:a4:f9:f9:29:54:e6:1c:
6a:da:32:88:9b:f0:41:51:bd:40:b9:0e:df:63:41:2f:e5:e2:
8c:71:13:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+S7Lqc0oQyiTS8Yr/qWvojMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MmY4NmYyZGJkMDc3NmM0ZTUxOWM5YzlhZTRmYWQwNDI2
ZjM5ZmYwHhcNMjYwNzI0MDcwMDE1WhcNMjYwNzI1MDcwMDE1WjAzMTEwLwYDVQQD
Eyg1ZDBiNmJhN2NlNmI3YWYzNmZmODIxN2YwOWZjZWE0NGQ4NWE1YjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHR8A81A9xSx7q4EjOPtwGvr/qfE
N0NsyZyfEFWva3rOaoLtGTkIA67KNU5zLjJ2p+slLqTKTpTV6ZaOL0ehbWUSl+hw
QPymoc9uwuWJNogPoRhkrr2BVSamF3DV3xPkZzrL1l5R7ZQKjDgdjS7p7Tv/xt4P
obp9ebas09QJT3cg2zIyHEtZUc0c3lgAxVdbBEa5d7MZW56UlrXkeS072FGE5tq8
DCkJ9UvqUEldKhaAkQJ5iJwZtHeCvvmGdsn7DU5/uXOEr6YACk0cwpA9DlrPsqxA
63GhZ0CoXn69YTsrWcd4elo3wtIjIdfi9MIQxcbeT96s4oreZS/LA73GNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF0La6fOa3rzb/ghfwn86kTYWluLMB8GA1UdIwQY
MBaAFDgvhvLb0HdsTlGcnJrk+tBCbzn/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0MtRzh0dlFkMnhPVVp5Y211VDYwRUp2T2Y4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wNDc0OGQtOTIzYi00Mjg0LTk2Mjgt
MjAzNTYzZjg0NWJiLzEvT0MtRzh0dlFkMnhPVVp5Y211VDYwRUp2T2Y4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wNDc0OGQtOTIzYi00Mjg0LTk2MjgtMjAzNTYzZjg0NWJi
LzEvT0MtRzh0dlFkMnhPVVp5Y211VDYwRUp2T2Y4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwXh4aa5K
Fq+tlcagXk4ODDUxUGjdb0xlzCqR2EtAPl0XFLALRt1s38NaFDOuI8piAkKrd8l2
4OKBaJ52pFB0l6aR7acPn76+mI4ppQBRFpMF8I4VjB9KZ7P6kLu3Wsg81bItn103
v5JPVhC6U3QN36wnEEhsAmeCzjB9hlOl0IWEGMvMV0dwh1zydpgd6Ke1mMjekqvX
bn/u0+L+hSug8TObGq0D8SZ+2pyJMLLRUYMxUHF534TDdYa3c8SoZ0ExJM384Z7E
1UebNznb0GXq6CrxRCKaEdZCaeaOkcklIOlq9Dqk+fkpVOYcatoyiJvwQVG9QLkO
32NBL+XijHETVg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:35:09 2026 by rpki-client