Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
File: OcUbkTH248JZr53Qrb9U9xokmO8.mft (raw, json)
Hash identifier: NZzwu5o2WLdDuRmKVMiwmKLCZMwQH1HKcUQH1y29jn0=
Subject key identifier: 3C:EA:8B:A0:80:85:E0:8E:AB:F8:8C:85:E9:1C:1C:3C:14:B2:3D:7B
Authority key identifier: 39:C5:1B:91:31:F6:E3:C2:59:AF:9D:D0:AD:BF:54:F7:1A:24:98:EF
Certificate issuer: /CN=39c51b9131f6e3c259af9dd0adbf54f71a2498ef
Certificate serial: 019E1FED135F6A45D9700C47663863BF9EC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
Manifest number: 06CB
Signing time: Wed 13 May 2026 06:01:31 +0000
Manifest this update: Wed 13 May 2026 06:01:31 +0000
Manifest next update: Thu 14 May 2026 06:01:31 +0000
Files and hashes: 1: 1pw_z4ALbNcIneHL4Ij33SpACpI.roa (hash: twH8uqFHcds859fXJknbVUO58IQvg3qbZxRTaJIyMwY=)
2: OcUbkTH248JZr53Qrb9U9xokmO8.crl (hash: Qcvz9B63mZAYj1qjx9kigc73mvmjMERy1Gl2KpTozDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ed:13:5f:6a:45:d9:70:0c:47:66:38:63:bf:9e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39c51b9131f6e3c259af9dd0adbf54f71a2498ef
Validity
Not Before: May 13 06:01:31 2026 GMT
Not After : May 14 06:01:31 2026 GMT
Subject: CN=3cea8ba08085e08eabf88c85e91c1c3c14b23d7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:33:64:c8:e5:73:39:79:76:ba:42:c4:07:d0:
3b:27:bc:48:09:11:82:70:c3:df:70:92:54:ea:1c:
64:67:ad:84:2a:08:e2:2d:f6:09:1e:56:77:fd:48:
72:8b:d4:55:43:88:52:bb:ef:e4:6a:fe:2e:b8:b2:
a2:5c:20:e4:b9:bc:58:11:70:43:7b:d6:9b:b2:15:
6a:60:07:74:5b:7a:c7:2f:3d:36:21:9f:4e:90:19:
7a:51:eb:06:79:61:19:0a:17:d2:3f:83:41:4f:33:
12:e7:1a:cc:98:43:28:ad:e0:59:02:6a:14:b6:04:
e1:91:55:48:7e:9f:5b:5d:de:c8:05:a7:6a:97:8f:
81:cc:f0:b8:ae:2a:d5:c2:4d:46:02:6b:4d:1d:c7:
a3:e8:a2:ce:b9:e7:e3:87:45:2f:51:f4:7c:c8:bb:
bc:4d:aa:a9:a8:71:11:4b:d9:0d:e4:4b:47:fd:c9:
f4:77:63:d7:86:69:55:5b:7e:2d:fb:9a:f1:50:81:
35:ba:c2:ef:7e:a7:7e:db:70:f2:d6:20:ed:be:e7:
43:06:0d:41:34:52:4c:cc:e6:3c:16:8a:62:7f:54:
82:30:f9:a6:37:57:ce:c3:45:4b:0f:df:84:26:cf:
84:96:cd:29:b6:f7:40:13:64:63:5f:14:0c:cc:d1:
51:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:EA:8B:A0:80:85:E0:8E:AB:F8:8C:85:E9:1C:1C:3C:14:B2:3D:7B
X509v3 Authority Key Identifier:
keyid:39:C5:1B:91:31:F6:E3:C2:59:AF:9D:D0:AD:BF:54:F7:1A:24:98:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:0b:9a:a2:3d:c1:2a:8e:6f:be:36:e5:d8:71:72:1b:05:cd:
50:26:c4:b7:f0:19:1d:69:2f:e4:5a:0f:90:31:19:09:1a:f3:
56:9d:d0:44:42:c0:51:7e:62:ed:09:ab:18:d5:cf:07:58:bd:
9f:0c:39:0d:e3:83:40:7c:7f:a0:9e:8e:e4:96:dc:86:08:c5:
ba:d3:60:57:03:b2:cd:62:e2:e0:10:e1:8b:66:c8:f6:c2:7b:
e8:ae:b1:13:0e:69:00:b0:9e:c6:10:b6:e5:bd:7b:41:a9:12:
7b:74:79:52:30:0d:3d:71:49:cb:9e:5f:4a:cc:86:3f:07:cd:
67:ca:54:32:ab:2a:e4:48:bf:61:21:ae:29:00:9b:8c:ad:fc:
71:b3:46:c2:49:20:3c:df:ee:db:f1:db:e0:8d:d0:49:9f:62:
da:e4:7b:8d:8c:3b:9e:5a:92:50:21:a5:7f:8f:c9:a0:55:9e:
f4:cf:e1:45:d1:30:d6:4b:37:25:90:ea:ac:c2:55:d3:8b:4d:
b4:a3:17:45:19:f0:73:a3:1e:01:4c:bd:d4:b9:77:18:8d:a1:
17:54:a1:2e:7c:6d:f2:43:89:21:61:d7:4a:37:b1:2b:4e:78:
3a:65:b6:ea:bc:57:95:4e:d3:60:ba:64:79:15:9e:b2:a5:72:
4f:b1:79:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:58:30 2026 by rpki-client