Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
File: OCxntKtK-G_mHqjG4X0R4-BdClE.mft (raw, json)
Hash identifier: A/fJsR7dvRxFnBFuVeSPUPqwHiaC+cSsxzB9JIw8MvM=
Subject key identifier: 94:48:8D:FE:5F:7F:2C:6C:4B:8E:6C:60:1A:9F:53:EA:5D:B7:0A:7A
Authority key identifier: 38:2C:67:B4:AB:4A:F8:6F:E6:1E:A8:C6:E1:7D:11:E3:E0:5D:0A:51
Certificate issuer: /CN=382c67b4ab4af86fe61ea8c6e17d11e3e05d0a51
Certificate serial: 019D333EBB291E077E152E5DC20E5B0226BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
Manifest number: 10F9
Signing time: Sat 28 Mar 2026 07:00:42 +0000
Manifest this update: Sat 28 Mar 2026 07:00:42 +0000
Manifest next update: Sun 29 Mar 2026 07:00:42 +0000
Files and hashes: 1: OCxntKtK-G_mHqjG4X0R4-BdClE.crl (hash: el4iwIHSqwCcZG3Qqr24D8DL6RV0RifiRpcAgkxLj7A=)
2: PPgnUS1OTeT8xtOKOgFCmjzijW0.roa (hash: hTERt+3AhxQ4QtapOxXoNon5AhhXXrDspSgS4orn0+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3e:bb:29:1e:07:7e:15:2e:5d:c2:0e:5b:02:26:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382c67b4ab4af86fe61ea8c6e17d11e3e05d0a51
Validity
Not Before: Mar 28 07:00:42 2026 GMT
Not After : Mar 29 07:00:42 2026 GMT
Subject: CN=94488dfe5f7f2c6c4b8e6c601a9f53ea5db70a7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:de:8f:93:2b:25:ee:ac:cc:20:e9:af:68:6e:
f9:ca:94:45:52:1f:c6:2a:26:52:26:78:64:e5:a4:
f2:9d:1f:d9:29:07:ec:4e:12:9c:05:50:76:99:61:
f9:70:71:06:ba:59:b4:bb:c6:83:c3:8f:3b:22:8c:
03:26:4c:b9:c0:fe:be:68:af:81:99:80:34:64:3d:
92:75:ea:e2:4c:17:86:4b:b4:32:1e:99:af:24:5a:
a9:47:e9:40:65:67:9a:31:d2:c2:e3:0a:a5:57:02:
e6:ad:09:0a:b2:21:ac:82:08:82:4b:b3:29:a0:42:
8b:17:4b:72:31:34:9c:b4:c7:07:95:97:f8:57:bc:
8f:6d:8e:ff:0b:6b:39:63:57:90:7d:1a:90:4c:c6:
45:26:99:5b:19:7e:66:a8:3b:66:00:b0:7e:4a:64:
89:1d:b2:1e:bf:3c:bc:a7:34:92:f1:bc:83:bb:d1:
59:16:e8:2b:b6:40:00:91:5a:f7:59:80:6f:42:28:
14:a8:b1:b8:57:89:a7:c6:4c:5d:a0:a8:ab:78:89:
75:ce:7e:86:c8:e0:3c:2b:99:e0:3c:76:65:f0:39:
0b:f1:43:22:fd:00:36:65:db:4e:22:be:ba:8a:21:
d8:21:68:31:94:2e:1d:01:b6:f6:20:13:08:ba:8d:
e5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:48:8D:FE:5F:7F:2C:6C:4B:8E:6C:60:1A:9F:53:EA:5D:B7:0A:7A
X509v3 Authority Key Identifier:
keyid:38:2C:67:B4:AB:4A:F8:6F:E6:1E:A8:C6:E1:7D:11:E3:E0:5D:0A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:7e:e4:0d:06:20:a6:48:a2:b8:1e:c7:d1:ea:8c:13:c3:95:
4d:55:bb:d1:5e:53:09:a0:46:d9:5f:91:80:18:75:97:b4:b7:
a7:75:df:83:3f:98:ea:9c:82:1a:b3:9e:99:1d:61:6c:f7:f6:
e6:7b:35:90:63:d0:88:e3:e4:7f:0e:c5:44:ea:ef:01:62:fb:
7a:02:7f:1a:c0:cd:77:64:92:f0:51:46:b8:c6:d8:a2:ee:fa:
e2:7a:de:98:0b:f8:3b:49:10:3b:80:a9:5a:fc:5c:50:38:4e:
a2:ca:05:98:c1:78:96:4b:04:19:b8:81:4e:ba:d8:a2:6a:19:
54:1b:1a:87:cb:fa:5a:dc:e8:7b:30:b3:38:1c:1a:e0:bd:59:
e0:b6:5e:1b:07:05:4f:26:c7:f8:9a:b1:f1:dc:b2:bb:a4:1d:
0f:eb:2a:92:99:6d:d6:ff:2f:76:28:5c:3b:92:ab:7b:05:73:
e5:73:dc:1e:4d:11:72:1a:73:20:ea:71:d6:fc:f2:c5:59:d0:
54:76:e8:f8:07:40:02:20:a4:99:09:b1:6d:20:5a:6c:8c:b2:
ec:72:18:e7:8a:22:50:db:bd:92:e7:7e:f4:e5:6f:54:9b:8e:
13:b9:35:48:97:c4:9f:5e:72:6c:98:52:ef:15:55:89:40:46:
b4:cc:1d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:23 2026 by rpki-client