Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
File: OcUbkTH248JZr53Qrb9U9xokmO8.mft (raw, json)
Hash identifier: uq8iPgp+T35aOBnIRXF5VuIj5iuytLtotyHThEZnw2A=
Subject key identifier: 40:01:13:5B:96:58:07:21:AF:72:2C:58:D8:73:5F:67:D2:82:BE:3F
Authority key identifier: 39:C5:1B:91:31:F6:E3:C2:59:AF:9D:D0:AD:BF:54:F7:1A:24:98:EF
Certificate issuer: /CN=39c51b9131f6e3c259af9dd0adbf54f71a2498ef
Certificate serial: 019D26CCE0DA053AB6DE1204976D557357AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
Manifest number: 064A
Signing time: Wed 25 Mar 2026 21:00:54 +0000
Manifest this update: Wed 25 Mar 2026 21:00:54 +0000
Manifest next update: Thu 26 Mar 2026 21:00:54 +0000
Files and hashes: 1: 1pw_z4ALbNcIneHL4Ij33SpACpI.roa (hash: twH8uqFHcds859fXJknbVUO58IQvg3qbZxRTaJIyMwY=)
2: OcUbkTH248JZr53Qrb9U9xokmO8.crl (hash: 7iV+UDcFkXKWIKyCAENClMMsVspDvChKdByronJtjjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:e0:da:05:3a:b6:de:12:04:97:6d:55:73:57:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39c51b9131f6e3c259af9dd0adbf54f71a2498ef
Validity
Not Before: Mar 25 21:00:54 2026 GMT
Not After : Mar 26 21:00:54 2026 GMT
Subject: CN=4001135b96580721af722c58d8735f67d282be3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:39:b0:b0:91:db:0f:4f:34:9c:bd:60:a9:61:
17:77:a3:29:67:09:4b:ce:8b:16:ac:ac:a5:b1:e2:
8a:48:4f:aa:a0:1f:05:c2:b6:97:5b:9a:83:68:19:
44:5e:e3:7f:90:db:21:f6:fe:30:66:1c:23:74:c6:
98:31:77:15:ff:6c:1f:86:60:1e:ad:ce:91:68:15:
b8:ae:de:96:6f:b7:63:a6:17:f8:de:8a:ba:69:ea:
a5:9b:fe:0b:a8:a7:9a:d2:72:47:ff:d8:4c:4e:9a:
17:c3:36:20:51:33:9f:29:e7:a2:91:39:cb:87:e8:
2f:17:d9:0e:33:b7:8d:95:0d:e5:36:94:4d:ae:ad:
ea:1e:65:11:6b:3d:49:41:a4:2a:83:7d:43:59:3d:
7e:9f:82:14:4f:39:6d:15:64:eb:2f:81:97:ba:83:
2f:a3:dd:d3:0a:88:a5:ce:37:32:cc:3a:55:22:e6:
7e:d2:01:0a:45:98:3f:d6:a1:84:f3:63:22:f7:cd:
a4:f3:89:84:38:17:c2:a6:82:dd:e2:df:4f:46:7f:
93:e8:1d:f2:99:fe:0d:f5:70:b7:5b:84:21:60:38:
c5:a3:a4:29:ca:bc:1d:e3:9b:25:9b:c3:fa:43:12:
c0:4c:08:9a:26:a1:4c:68:67:c2:78:35:c0:06:aa:
bf:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:01:13:5B:96:58:07:21:AF:72:2C:58:D8:73:5F:67:D2:82:BE:3F
X509v3 Authority Key Identifier:
keyid:39:C5:1B:91:31:F6:E3:C2:59:AF:9D:D0:AD:BF:54:F7:1A:24:98:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:3d:30:51:cf:14:8a:ed:1b:f0:b5:2d:8a:f7:00:32:94:45:
cb:80:ee:34:82:ad:5b:72:78:5e:5f:29:8a:d2:0d:20:5c:a6:
2c:c6:39:79:d7:a7:85:71:d1:85:ff:c0:82:39:38:85:d4:13:
e5:8b:6c:2f:cc:d8:0d:b9:17:9b:0c:48:41:85:f9:6c:66:53:
a0:10:c6:07:d2:7e:22:c2:68:eb:a6:a1:cc:71:df:fc:8b:d5:
7f:3b:3b:39:15:32:f7:b0:8f:e1:c1:14:e1:08:42:76:3c:b9:
f4:55:3d:62:35:69:70:70:df:fc:79:5f:26:ba:12:d5:d1:cc:
31:d6:4c:5d:c5:99:96:98:7d:39:ba:7b:4f:5d:c8:fd:3d:92:
a5:9d:1e:4d:7a:e4:db:50:30:f0:64:a8:4e:c7:15:81:0c:7e:
3f:0c:cc:0b:4c:9d:28:64:44:af:a8:fc:29:2f:f0:78:20:b9:
00:10:37:68:c6:eb:b2:b0:3c:a1:4c:39:3f:55:ca:b0:3c:36:
75:5e:25:59:92:f6:da:78:f9:58:b6:1d:6f:6d:9c:53:ce:2e:
e5:15:9f:10:19:ba:ad:08:b6:a9:37:24:87:d1:9e:04:68:d2:
27:e2:38:67:3f:ed:44:6a:88:80:d4:9a:e0:fc:1b:1b:4d:4a:
c7:29:b5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:38:06 2026 by rpki-client