Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/OCvsQ90a_pemT1brhUx58WP6TuY.mft
File: OCvsQ90a_pemT1brhUx58WP6TuY.mft (raw, json)
Hash identifier: NcFJDsPZUlR1m012CiG0/oz6Tm8uSrIxh3XiPKXWTFI=
Subject key identifier: DF:A5:F1:BF:1F:16:70:B7:55:C2:F1:F1:5A:6F:8C:41:4A:20:9B:CD
Authority key identifier: 38:2B:EC:43:DD:1A:FE:97:A6:4F:56:EB:85:4C:79:F1:63:FA:4E:E6
Certificate issuer: /CN=382bec43dd1afe97a64f56eb854c79f163fa4ee6
Certificate serial: 019D2627FDBA55827934E80806FCD43367BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCvsQ90a_pemT1brhUx58WP6TuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/OCvsQ90a_pemT1brhUx58WP6TuY.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 18:00:48 +0000
Manifest this update: Wed 25 Mar 2026 18:00:48 +0000
Manifest next update: Thu 26 Mar 2026 18:00:48 +0000
Files and hashes: 1: OCvsQ90a_pemT1brhUx58WP6TuY.crl (hash: 53S9NS7MVaodD0hknjuaPz5R6tKd7S0JOrd5MzwoD2A=)
2: koNJsw7rhD5IJatTFzpoPL-Nrc0.roa (hash: Wndxcrvpmd8iBNHp55napUJ/eEMGTsK13AYEaJxB1y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/OCvsQ90a_pemT1brhUx58WP6TuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/OCvsQ90a_pemT1brhUx58WP6TuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCvsQ90a_pemT1brhUx58WP6TuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:27:fd:ba:55:82:79:34:e8:08:06:fc:d4:33:67:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382bec43dd1afe97a64f56eb854c79f163fa4ee6
Validity
Not Before: Mar 25 18:00:48 2026 GMT
Not After : Mar 26 18:00:48 2026 GMT
Subject: CN=dfa5f1bf1f1670b755c2f1f15a6f8c414a209bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:15:ba:56:7c:8c:29:68:04:88:e1:d3:99:6f:
23:78:c5:db:25:4c:ce:e8:6b:da:ed:2f:31:49:8e:
32:d8:ed:31:a5:a5:e9:c5:08:ad:8d:2a:23:9b:e8:
ea:c1:e0:e8:3d:f7:a9:5a:1e:93:3e:28:9e:db:ab:
01:fa:73:79:79:bc:87:82:40:1b:f2:70:dd:56:c7:
ae:0c:35:b7:db:26:c1:4a:d5:f2:87:87:a5:72:f2:
90:ee:a8:8d:3c:55:bf:df:92:7c:3d:ef:34:ca:31:
2e:54:0f:c7:c9:10:0b:4d:50:07:2e:b7:22:ab:41:
55:1f:1d:15:97:cf:6e:cb:2c:78:4d:95:55:9d:92:
84:86:6b:c2:b8:a1:7b:8a:0d:64:8f:4a:c1:15:00:
2b:98:7c:92:00:b0:a3:e7:46:46:f1:84:97:7a:a2:
6c:99:32:bd:7a:09:55:25:eb:ab:49:7d:e5:37:57:
bd:04:a7:98:b5:df:4b:88:3a:62:c7:4b:7c:05:e3:
6a:31:cb:1a:4c:57:d4:40:d6:c1:f6:b9:2f:58:0a:
f0:9a:01:01:60:0e:61:45:03:7c:03:44:b1:b6:a7:
0b:3e:87:e4:52:a5:f4:8f:91:e2:06:64:6a:1f:8a:
3e:b6:36:a7:22:97:3f:64:b8:84:75:ac:5d:2a:90:
6d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A5:F1:BF:1F:16:70:B7:55:C2:F1:F1:5A:6F:8C:41:4A:20:9B:CD
X509v3 Authority Key Identifier:
keyid:38:2B:EC:43:DD:1A:FE:97:A6:4F:56:EB:85:4C:79:F1:63:FA:4E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCvsQ90a_pemT1brhUx58WP6TuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/OCvsQ90a_pemT1brhUx58WP6TuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/OCvsQ90a_pemT1brhUx58WP6TuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:33:f2:91:4a:e6:28:1f:09:e6:92:7d:2b:16:fd:7f:f9:7c:
27:28:b5:6f:90:cc:8e:fb:36:94:6d:3c:bc:ba:69:75:b3:2c:
f4:1b:c3:e2:6d:fc:fc:22:f8:43:ea:a2:00:87:9b:d7:4e:99:
27:9a:8a:a2:29:96:5e:93:01:cd:b5:b1:e9:46:7f:b8:ee:69:
78:cc:db:ca:dc:ce:80:6f:62:9d:40:d4:f6:da:5c:f7:2b:5e:
98:ce:55:4e:7d:5e:90:f5:41:06:f0:a4:e9:3b:77:9d:9d:47:
ea:e9:9b:f6:bc:8c:65:a6:dc:dc:3c:86:a9:6e:8e:61:d9:88:
8b:16:e6:0c:10:a2:63:f0:7b:97:02:33:89:d6:9d:b2:c4:aa:
60:69:f1:35:be:29:74:54:f1:9d:57:ae:d1:62:13:3f:8c:86:
49:ae:cb:95:2d:2f:df:e3:40:71:8e:a3:c2:4f:de:25:0e:24:
4f:14:e0:36:b1:86:a6:4d:1d:fa:b7:e3:22:3e:74:d7:fe:82:
f0:35:8b:a8:31:8f:3f:14:b1:a4:42:37:0f:ff:d1:f1:0b:c6:
ea:4b:0d:08:94:fc:79:bc:9a:10:6a:0e:59:1b:f6:cd:a4:9a:
29:e9:01:66:33:15:97:ac:03:6e:e6:fa:2d:4e:a3:9c:c5:b2:
db:8b:f1:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mJ/26VYJ5NOgIBvzUM2e9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MmJlYzQzZGQxYWZlOTdhNjRmNTZlYjg1NGM3OWYxNjNm
YTRlZTYwHhcNMjYwMzI1MTgwMDQ4WhcNMjYwMzI2MTgwMDQ4WjAzMTEwLwYDVQQD
EyhkZmE1ZjFiZjFmMTY3MGI3NTVjMmYxZjE1YTZmOGM0MTRhMjA5YmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshW6VnyMKWgEiOHTmW8jeMXbJUzO
6Gva7S8xSY4y2O0xpaXpxQitjSojm+jqweDoPfepWh6TPiie26sB+nN5ebyHgkAb
8nDdVseuDDW32ybBStXyh4elcvKQ7qiNPFW/35J8Pe80yjEuVA/HyRALTVAHLrci
q0FVHx0Vl89uyyx4TZVVnZKEhmvCuKF7ig1kj0rBFQArmHySALCj50ZG8YSXeqJs
mTK9eglVJeurSX3lN1e9BKeYtd9LiDpix0t8BeNqMcsaTFfUQNbB9rkvWArwmgEB
YA5hRQN8A0SxtqcLPofkUqX0j5HiBmRqH4o+tjanIpc/ZLiEdaxdKpBtDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN+l8b8fFnC3VcLx8VpvjEFKIJvNMB8GA1UdIwQY
MBaAFDgr7EPdGv6Xpk9W64VMefFj+k7mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0N2c1E5MGFfcGVtVDFicmhVeDU4V1A2VHVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9lMmE4ZjQtNzA2NS00NzRiLWEwM2Qt
Mjc1MDk3MTFlMzdmLzEvT0N2c1E5MGFfcGVtVDFicmhVeDU4V1A2VHVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9lMmE4ZjQtNzA2NS00NzRiLWEwM2QtMjc1MDk3MTFlMzdm
LzEvT0N2c1E5MGFfcGVtVDFicmhVeDU4V1A2VHVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAizPykUrm
KB8J5pJ9Kxb9f/l8Jyi1b5DMjvs2lG08vLppdbMs9BvD4m38/CL4Q+qiAIeb106Z
J5qKoimWXpMBzbWx6UZ/uO5peMzbytzOgG9inUDU9tpc9ytemM5VTn1ekPVBBvCk
6Tt3nZ1H6umb9ryMZabc3DyGqW6OYdmIixbmDBCiY/B7lwIzidadssSqYGnxNb4p
dFTxnVeu0WITP4yGSa7LlS0v3+NAcY6jwk/eJQ4kTxTgNrGGpk0d+rfjIj501/6C
8DWLqDGPPxSxpEI3D//R8QvG6ksNCJT8ebyaEGoOWRv2zaSaKekBZjMVl6wDbub6
LU6jnMWy24vxLw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:34 2026 by rpki-client