Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.mft
File: OcpQZQQ9KKKtw2ODod99O-yBzo0.mft (raw, json)
Hash identifier: MQgwC/wf83gI4KyXFrDP92ijYmir7RAxUYmLbXqKk08=
Subject key identifier: 92:93:50:15:2C:0C:CE:27:16:06:D9:34:3F:EE:6C:BE:AA:52:80:F0
Authority key identifier: 39:CA:50:65:04:3D:28:A2:AD:C3:63:83:A1:DF:7D:3B:EC:81:CE:8D
Certificate issuer: /CN=39ca5065043d28a2adc36383a1df7d3bec81ce8d
Certificate serial: 019D25840F55E1FD9F94D6EEBD2267A48AF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OcpQZQQ9KKKtw2ODod99O-yBzo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.mft
Manifest number: 147F
Signing time: Wed 25 Mar 2026 15:01:44 +0000
Manifest this update: Wed 25 Mar 2026 15:01:44 +0000
Manifest next update: Thu 26 Mar 2026 15:01:44 +0000
Files and hashes: 1: OcpQZQQ9KKKtw2ODod99O-yBzo0.crl (hash: dZ4ffIYVIUdo6tsbYeBpzmEz2ItFczZBnq71GqfYRqw=)
2: sU4SdgLEKJLdmmd7O0WH0cIHbDc.roa (hash: 56F6iMelALI7bLbAqUWShoXQBZvQSM/mzwf3Aamh/qA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OcpQZQQ9KKKtw2ODod99O-yBzo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:0f:55:e1:fd:9f:94:d6:ee:bd:22:67:a4:8a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ca5065043d28a2adc36383a1df7d3bec81ce8d
Validity
Not Before: Mar 25 15:01:44 2026 GMT
Not After : Mar 26 15:01:44 2026 GMT
Subject: CN=929350152c0cce271606d9343fee6cbeaa5280f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:08:53:4e:e9:10:82:68:40:38:02:d9:b1:e1:
4a:b9:b4:99:08:4a:f5:6c:96:ad:72:97:75:7d:9e:
7e:08:bc:e8:dc:c9:8a:df:23:ac:59:e1:51:6a:0f:
6c:71:ae:38:a3:54:ef:12:50:10:82:16:00:20:5f:
82:47:4d:07:23:7c:b2:0c:66:fe:33:93:48:66:e5:
6f:d0:10:76:d8:93:67:db:21:22:39:f2:0a:09:1e:
ff:c8:c4:c0:cf:f5:9d:3d:8d:ef:c2:75:9c:1f:e8:
42:88:6c:ae:c8:f4:6e:5a:2e:9d:08:7b:d1:84:43:
c0:e0:a6:0b:2f:3b:23:72:66:99:6a:72:3a:77:12:
7d:be:07:9a:a5:cb:48:45:f6:ea:bc:a9:b4:a4:2f:
43:18:3c:34:50:d4:e7:3d:c0:75:f7:48:64:76:83:
e8:08:28:f8:43:64:fc:e5:c3:8f:a5:08:c6:22:27:
6b:36:16:3d:f7:2c:ab:db:c8:af:75:3f:1f:21:84:
ae:df:03:65:0b:4a:70:24:13:38:05:e1:ba:0b:20:
0e:f4:df:9d:12:a6:db:84:ae:d9:64:36:dc:ba:7b:
59:c8:0e:3a:0a:c4:29:92:af:46:f3:d5:36:51:46:
5f:1e:e9:21:05:67:6c:d0:b6:80:50:4d:5d:40:a2:
b2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:93:50:15:2C:0C:CE:27:16:06:D9:34:3F:EE:6C:BE:AA:52:80:F0
X509v3 Authority Key Identifier:
keyid:39:CA:50:65:04:3D:28:A2:AD:C3:63:83:A1:DF:7D:3B:EC:81:CE:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OcpQZQQ9KKKtw2ODod99O-yBzo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:42:b0:b3:76:8c:bf:64:5e:2d:a3:7b:09:1a:b2:cc:9e:ef:
f0:e7:74:33:21:46:01:ee:da:16:5d:64:82:d2:71:e3:87:1f:
e9:53:2c:3c:01:fe:e1:33:cc:9d:c4:d0:47:dc:ac:48:f9:bf:
8e:05:81:99:64:e6:10:51:0b:14:66:94:ea:ff:a9:5a:e1:52:
bb:e2:0a:c5:79:ee:ab:c1:e5:24:5f:39:b6:74:41:a8:e1:f0:
e6:a3:4c:ff:a4:a5:5d:07:75:ab:87:a7:e9:0b:c7:ed:64:88:
65:c9:8a:d3:5c:aa:48:c1:5d:a3:e3:4d:bd:fd:78:26:ee:c0:
c8:13:20:8b:53:a8:3d:1c:c5:35:e7:d8:8b:68:58:6c:1b:91:
c5:74:ba:1a:24:a5:48:5d:ba:df:08:0f:80:09:65:68:ca:3f:
dd:a3:27:89:91:65:83:f0:2a:60:5c:60:1b:b0:80:86:cd:1a:
d9:dd:fd:10:db:85:82:d9:56:a1:24:11:a3:d2:65:b7:b5:65:
ef:77:95:34:8f:b0:01:4e:ae:68:fb:51:91:43:1a:ab:25:fe:
9a:bf:39:e1:ae:f7:0c:b5:23:82:90:0c:02:27:84:4d:bd:1a:
bf:ff:39:f0:d6:13:81:09:c6:9a:3c:f2:a7:10:92:d5:7e:20:
88:53:e9:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:47 2026 by rpki-client