Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.mft
File: oCcpAmWOFcs0vVCcOVC63iGnltI.mft (raw, json)
Hash identifier: j9t2ukmpco28hMWPKAI25Y3w68DTeSx9c7SvfJVELww=
Subject key identifier: 84:31:E7:91:B3:8F:B0:86:62:D7:77:A8:F9:11:F1:DF:6F:C9:64:36
Authority key identifier: A0:27:29:02:65:8E:15:CB:34:BD:50:9C:39:50:BA:DE:21:A7:96:D2
Certificate issuer: /CN=a0272902658e15cb34bd509c3950bade21a796d2
Certificate serial: 019D27E059F5C68FC6CD0CDDF4D635949C6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oCcpAmWOFcs0vVCcOVC63iGnltI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 02:01:47 +0000
Manifest this update: Thu 26 Mar 2026 02:01:47 +0000
Manifest next update: Fri 27 Mar 2026 02:01:47 +0000
Files and hashes: 1: Wv-19NnCsrhZrwnSI2oU6lLrFv4.roa (hash: QUllUIUWzb1bn3tS38z/e3aKNKTT0J3rQMusPQtlNMo=)
2: oCcpAmWOFcs0vVCcOVC63iGnltI.crl (hash: LRziKElMS6dCNp6e2gCnWBCnNcspn2Ypu6DEA8Cl/7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.mft
rsync://rpki.ripe.net/repository/DEFAULT/oCcpAmWOFcs0vVCcOVC63iGnltI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:59:f5:c6:8f:c6:cd:0c:dd:f4:d6:35:94:9c:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0272902658e15cb34bd509c3950bade21a796d2
Validity
Not Before: Mar 26 02:01:47 2026 GMT
Not After : Mar 27 02:01:47 2026 GMT
Subject: CN=8431e791b38fb08662d777a8f911f1df6fc96436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5f:3f:3d:e9:c4:4c:9c:0c:b1:ba:d4:0a:02:
1f:f5:b2:ae:dd:e9:e9:79:6b:79:b6:c0:c5:0c:6d:
aa:e4:8c:86:0c:69:77:f7:d2:16:71:36:ba:e7:81:
51:30:93:cf:cf:c7:67:64:09:9b:d6:b0:5e:4a:73:
6f:b4:fc:77:19:5e:09:4c:f5:9d:fa:a5:3e:4a:b9:
30:28:c7:41:d6:94:17:7d:33:26:39:af:dc:6c:e5:
90:5c:56:ce:9a:0b:b5:e1:a0:3d:0b:99:f1:b0:a1:
2f:ec:fa:50:6a:29:34:b6:12:ba:40:fa:0f:e9:73:
8d:c0:ef:c8:66:7d:cc:a6:97:0a:3e:c0:2b:4d:a3:
c4:d4:7d:28:6b:c9:a0:a2:0e:a5:6f:7c:83:3e:d9:
7c:f2:45:ba:94:22:40:f5:6e:1f:4e:79:f6:a3:94:
0c:22:c1:61:a2:bd:79:12:f0:99:0e:3c:ef:01:a3:
1a:02:2c:67:6b:17:1a:01:4d:4d:f2:4e:1a:f7:ec:
e9:f8:5a:6b:e3:b1:57:f0:cd:d5:bd:c4:4d:0b:d8:
5c:a9:1d:7f:31:ce:6f:be:8c:2c:7b:b3:19:dc:47:
0e:0b:aa:f9:24:43:7f:d3:fb:85:5d:46:c9:fd:ee:
ed:90:3e:30:03:43:de:b6:f0:dd:ef:b6:b0:05:04:
81:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:31:E7:91:B3:8F:B0:86:62:D7:77:A8:F9:11:F1:DF:6F:C9:64:36
X509v3 Authority Key Identifier:
keyid:A0:27:29:02:65:8E:15:CB:34:BD:50:9C:39:50:BA:DE:21:A7:96:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oCcpAmWOFcs0vVCcOVC63iGnltI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:e6:fc:3d:c9:41:20:18:ff:37:1a:2f:26:7a:a2:16:9b:af:
5d:19:09:af:02:3f:bf:f2:6a:09:a6:81:ef:ca:61:2c:1b:ec:
36:87:cf:91:bc:3d:d8:6f:82:d4:5a:5c:99:58:44:35:c6:ba:
67:17:c8:bf:fe:8c:f7:9c:ca:db:13:e1:36:08:9e:88:ea:19:
18:1e:ee:3b:98:98:3d:c9:ca:1d:a1:b8:f1:ba:96:33:6c:5d:
3e:c3:50:78:9d:b5:87:37:7b:43:c5:ed:af:09:b2:ca:fc:95:
b8:8f:7b:60:81:94:52:7e:0f:72:3a:d8:c7:c2:e3:21:1d:2f:
9c:bf:93:33:9a:fe:cb:02:20:6e:b4:39:f4:4f:96:a7:9a:3c:
fe:76:f7:83:28:ac:c6:83:28:8b:ec:61:cb:9f:0f:5d:70:28:
39:94:55:9b:eb:dd:41:ea:63:6f:98:04:88:9c:9b:f5:e7:a5:
f3:5a:27:da:85:57:dc:dd:59:3f:2e:bb:0b:db:a9:3a:30:51:
61:0f:8d:c7:f4:b4:77:4d:26:68:59:99:54:bc:b6:21:c6:e3:
f8:6f:09:e5:46:b4:cc:ff:e7:b7:09:6b:96:71:ed:a3:df:0b:
44:cf:f9:73:83:04:26:09:9d:38:e4:18:9b:9e:05:a7:f4:99:
aa:d6:92:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:35:17 2026 by rpki-client