Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
File: OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft (raw, json)
Hash identifier: cT3PmGE/tPnH8d/StRYCjglgpQyBBXBLExoQ61UeMEM=
Subject key identifier: C4:64:61:26:BF:19:FF:35:1A:DD:BB:91:DE:03:1A:F0:9B:07:08:62
Authority key identifier: 38:29:D1:31:BE:52:81:0E:47:C9:CB:BF:83:A3:FF:BD:4F:7C:BD:BF
Certificate issuer: /CN=3829d131be52810e47c9cbbf83a3ffbd4f7cbdbf
Certificate serial: 01A0E32C014B5E5B78D40A225DF1903AB6A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
Manifest number: 1169
Signing time: Sun 27 Sep 2026 14:01:46 +0000
Manifest this update: Sun 27 Sep 2026 14:01:46 +0000
Manifest next update: Mon 28 Sep 2026 14:01:46 +0000
Files and hashes: 1: OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl (hash: 5etpjTtOZ0X0Qu8+4PFBk7YHh3G5o2sSC/R4Bbck2ds=)
2: SA91wBhkikPDWTrAUdLpOxUcx_0.roa (hash: Y6pGr30mVBYxj09imikNObgMk7TKch+XIWYn2BcZKOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:2c:01:4b:5e:5b:78:d4:0a:22:5d:f1:90:3a:b6:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3829d131be52810e47c9cbbf83a3ffbd4f7cbdbf
Validity
Not Before: Sep 27 14:01:46 2026 GMT
Not After : Sep 28 14:01:46 2026 GMT
Subject: CN=c4646126bf19ff351addbb91de031af09b070862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c2:a2:a3:84:51:a3:de:04:e4:68:01:47:4f:
aa:80:3b:e3:67:5d:81:e5:52:ec:76:c8:2b:bd:8d:
ec:af:37:61:28:9f:a6:10:36:c6:f5:4d:d1:d9:9f:
23:ae:5a:c7:11:ba:c8:b5:6b:ea:03:0e:43:96:a1:
ec:c1:84:2a:6a:b1:d1:64:24:fd:0f:44:cd:75:db:
27:27:12:64:98:c0:02:2d:28:73:62:0f:c0:c6:68:
14:07:24:b1:33:1e:15:40:04:a1:da:2d:c5:6f:a2:
ae:4f:9e:7c:db:94:fe:c6:74:09:97:c4:94:3d:95:
2b:b1:c8:c0:87:d5:14:6e:ff:1b:15:99:62:0b:4f:
3e:dd:7d:30:47:99:6c:36:20:2c:29:9a:64:a0:75:
dd:e2:0c:2c:00:ef:6b:33:0a:14:78:42:92:ac:0d:
a5:54:1f:96:54:7c:92:67:15:f6:51:ae:02:f7:88:
e3:33:da:54:a7:f2:51:3f:6e:63:7e:5a:8f:b5:91:
67:aa:e2:97:16:86:6a:93:8c:a0:1c:b7:43:52:dd:
cd:69:82:f2:f7:c0:f3:ba:61:be:2c:cd:fd:3a:52:
ed:f9:89:08:91:a5:95:be:c2:6d:ea:8c:f6:bc:3d:
b9:19:af:56:85:5d:3e:b0:34:42:bf:a0:15:8f:5d:
d4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:64:61:26:BF:19:FF:35:1A:DD:BB:91:DE:03:1A:F0:9B:07:08:62
X509v3 Authority Key Identifier:
keyid:38:29:D1:31:BE:52:81:0E:47:C9:CB:BF:83:A3:FF:BD:4F:7C:BD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:be:95:92:25:d8:6f:7e:60:13:88:24:4e:ee:4c:63:ee:c7:
82:8b:d0:a6:9c:d4:ca:30:73:ab:46:e3:1d:6e:c0:28:2c:d2:
6d:d4:66:38:fb:79:0c:22:a8:13:41:dc:c0:a8:b3:df:3c:af:
6f:b6:cf:96:00:df:8e:70:62:76:5c:ad:d0:13:2b:fa:80:a4:
1b:69:4a:c7:9f:41:ac:0f:94:90:e6:9c:6f:1c:11:c9:d2:c1:
d8:76:74:97:47:38:07:d1:51:c2:eb:5d:99:b0:40:54:6f:bd:
92:94:6f:34:0b:80:b8:3d:34:98:f5:94:39:a2:f6:48:b2:c0:
7f:03:04:2e:87:c7:10:83:83:fb:cf:d1:4a:9b:98:d6:4b:b3:
b3:00:c6:a8:50:35:02:89:a9:e4:04:b9:6b:1f:60:10:78:2c:
4e:f1:49:aa:fc:ea:27:04:57:fa:f5:49:67:42:d2:07:48:0a:
72:c2:ee:25:e0:01:b1:17:e0:82:df:8d:77:80:e0:4c:92:53:
86:b3:64:3d:e3:5d:c7:7f:e2:c0:a2:78:e9:38:d2:f0:93:65:
6f:b8:04:a3:6a:7e:30:8a:c6:c2:f6:4b:43:fd:79:a1:eb:78:
8c:6a:a9:55:0a:c3:dc:8f:6d:d4:c7:ac:00:c7:dd:75:16:cc:
87:24:61:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:35:18 2026 by rpki-client