Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
File: OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft (raw, json)
Hash identifier: xXSmMScF1YCQAe5X35yuV/aNCPm5TxlAjSWet4d3uf8=
Subject key identifier: F2:D9:FB:2E:57:B1:93:75:C6:31:AD:0C:01:D9:75:EF:39:74:E7:76
Authority key identifier: 38:29:D1:31:BE:52:81:0E:47:C9:CB:BF:83:A3:FF:BD:4F:7C:BD:BF
Certificate issuer: /CN=3829d131be52810e47c9cbbf83a3ffbd4f7cbdbf
Certificate serial: 019E1E6C3EA5CCD4333FC6FF6C1DDE1BF4A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
Manifest number: 0FFA
Signing time: Tue 12 May 2026 23:01:10 +0000
Manifest this update: Tue 12 May 2026 23:01:10 +0000
Manifest next update: Wed 13 May 2026 23:01:10 +0000
Files and hashes: 1: OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl (hash: fm02lWX6A9z5JlG8MX4LWlNANB1amFyAh/XclaBFp8c=)
2: SA91wBhkikPDWTrAUdLpOxUcx_0.roa (hash: Y6pGr30mVBYxj09imikNObgMk7TKch+XIWYn2BcZKOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:3e:a5:cc:d4:33:3f:c6:ff:6c:1d:de:1b:f4:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3829d131be52810e47c9cbbf83a3ffbd4f7cbdbf
Validity
Not Before: May 12 23:01:10 2026 GMT
Not After : May 13 23:01:10 2026 GMT
Subject: CN=f2d9fb2e57b19375c631ad0c01d975ef3974e776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0a:8d:ca:5d:ce:21:0f:a3:b0:7e:32:d7:b1:
3f:16:e5:f4:62:b6:f2:ba:20:d4:f3:3e:08:83:3a:
96:a6:42:58:8f:ab:1d:35:1e:90:04:28:3c:a6:b8:
a3:be:07:c8:44:ef:35:33:1d:b8:e0:c0:9a:e7:d2:
a0:48:4a:23:02:ea:b2:5f:dd:cb:49:77:c5:21:63:
a2:2a:85:15:9c:3e:b6:78:d9:2e:1c:70:0f:86:4b:
bc:80:07:74:f0:39:e3:7e:0d:65:65:e1:4b:e8:36:
60:2b:ee:87:85:d6:bf:06:0a:09:88:72:57:d8:76:
63:3e:26:66:4e:06:04:eb:ae:1d:d2:44:32:4b:2c:
d8:1f:5e:8c:64:ef:8c:e1:75:7b:8d:d8:49:d4:84:
fe:3f:d0:71:f8:e3:fe:92:85:48:0c:e4:6a:e5:6c:
3a:ac:93:d1:d9:3d:60:0d:6f:16:ff:b4:0b:fa:fb:
0c:bc:8d:d8:d7:c2:1b:af:74:cc:e9:f7:40:05:03:
ef:f6:9b:e4:52:3a:91:2a:b4:38:0f:0b:56:96:5e:
e6:63:4d:98:9f:4e:6e:57:51:3c:05:55:37:0e:c2:
c2:09:bb:4f:22:c7:28:f4:63:d0:5e:9e:52:8b:fb:
99:9f:db:db:fa:8d:97:11:72:9d:71:bc:81:4d:3e:
58:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D9:FB:2E:57:B1:93:75:C6:31:AD:0C:01:D9:75:EF:39:74:E7:76
X509v3 Authority Key Identifier:
keyid:38:29:D1:31:BE:52:81:0E:47:C9:CB:BF:83:A3:FF:BD:4F:7C:BD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:f5:70:64:a3:ec:8e:21:03:49:37:2f:70:7e:48:28:71:0e:
cc:51:ca:b3:60:21:94:38:a8:97:8d:04:b6:c8:ad:dc:61:97:
39:dc:8f:72:f8:54:99:dd:d0:55:63:63:65:b3:85:74:16:e9:
82:fa:d9:7a:6c:6b:c7:a6:db:7b:c7:ed:da:03:a6:1a:a0:24:
1d:34:8e:33:c4:cc:6a:65:b6:c9:fc:af:bf:95:0d:c4:dc:e8:
99:c3:e6:28:dd:53:9a:88:e8:c4:f6:3f:02:a8:6e:9b:5e:c7:
67:da:eb:95:b2:f9:75:67:5e:f0:a4:87:40:28:31:a1:a9:95:
40:15:a9:3a:b3:81:f4:8a:7a:47:98:1e:2e:22:9d:ed:d6:e5:
0e:f1:35:5a:a7:c8:b8:a4:ea:dc:f2:c3:9f:af:7d:21:47:fd:
59:4c:e5:ec:9e:a6:2b:6d:74:c7:75:2b:92:31:b1:13:80:34:
7d:f8:ee:ce:c5:2d:9b:83:a7:55:27:87:21:86:35:17:a3:c6:
9c:88:4b:54:82:16:a9:e1:8b:87:85:aa:12:d5:d3:cf:76:13:
f2:e2:35:0c:7b:ee:59:f3:ea:58:17:81:6a:9e:20:d8:be:40:
64:14:81:b3:e0:dd:e4:0e:25:fa:9c:f3:57:69:a9:23:52:d7:
22:01:5c:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ebD6lzNQzP8b/bB3eG/SjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MjlkMTMxYmU1MjgxMGU0N2M5Y2JiZjgzYTNmZmJkNGY3
Y2JkYmYwHhcNMjYwNTEyMjMwMTEwWhcNMjYwNTEzMjMwMTEwWjAzMTEwLwYDVQQD
EyhmMmQ5ZmIyZTU3YjE5Mzc1YzYzMWFkMGMwMWQ5NzVlZjM5NzRlNzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAqNyl3OIQ+jsH4y17E/FuX0Yrby
uiDU8z4IgzqWpkJYj6sdNR6QBCg8prijvgfIRO81Mx244MCa59KgSEojAuqyX93L
SXfFIWOiKoUVnD62eNkuHHAPhku8gAd08Dnjfg1lZeFL6DZgK+6Hhda/BgoJiHJX
2HZjPiZmTgYE664d0kQySyzYH16MZO+M4XV7jdhJ1IT+P9Bx+OP+koVIDORq5Ww6
rJPR2T1gDW8W/7QL+vsMvI3Y18Ibr3TM6fdABQPv9pvkUjqRKrQ4DwtWll7mY02Y
n05uV1E8BVU3DsLCCbtPIsco9GPQXp5Si/uZn9vb+o2XEXKdcbyBTT5YZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPLZ+y5XsZN1xjGtDAHZde85dOd2MB8GA1UdIwQY
MBaAFDgp0TG+UoEOR8nLv4Oj/71PfL2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0NuUk1iNVNnUTVIeWN1X2c2UF92VTk4dmI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iMWE0ZTEtODc3Yi00MzgwLWJmYmYt
YjAzOGRiODk4YjdlLzEvT0NuUk1iNVNnUTVIeWN1X2c2UF92VTk4dmI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9iMWE0ZTEtODc3Yi00MzgwLWJmYmYtYjAzOGRiODk4Yjdl
LzEvT0NuUk1iNVNnUTVIeWN1X2c2UF92VTk4dmI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaPVwZKPs
jiEDSTcvcH5IKHEOzFHKs2AhlDiol40Etsit3GGXOdyPcvhUmd3QVWNjZbOFdBbp
gvrZemxrx6bbe8ft2gOmGqAkHTSOM8TMamW2yfyvv5UNxNzomcPmKN1TmojoxPY/
Aqhum17HZ9rrlbL5dWde8KSHQCgxoamVQBWpOrOB9Ip6R5geLiKd7dblDvE1WqfI
uKTq3PLDn699IUf9WUzl7J6mK210x3UrkjGxE4A0ffjuzsUtm4OnVSeHIYY1F6PG
nIhLVIIWqeGLh4WqEtXTz3YT8uI1DHvuWfPqWBeBap4g2L5AZBSBs+Dd5A4l+pzz
V2mpI1LXIgFcZg==
-----END CERTIFICATE-----
Generated at Wed May 13 03:57:53 2026 by rpki-client