Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
File: OcUbkTH248JZr53Qrb9U9xokmO8.mft (raw, json)
Hash identifier: fTJI9NshJ6RPwmTu0wi5YNdbqljHYs/EsdY3MPqwMG4=
Subject key identifier: 3C:C2:73:A4:F6:DA:63:C2:1E:0A:46:49:3F:3B:41:A9:8A:9D:7D:3B
Authority key identifier: 39:C5:1B:91:31:F6:E3:C2:59:AF:9D:D0:AD:BF:54:F7:1A:24:98:EF
Certificate issuer: /CN=39c51b9131f6e3c259af9dd0adbf54f71a2498ef
Certificate serial: 019F94A4DE49988232571B780F6C81939BBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
Manifest number: 078C
Signing time: Fri 24 Jul 2026 15:01:00 +0000
Manifest this update: Fri 24 Jul 2026 15:01:00 +0000
Manifest next update: Sat 25 Jul 2026 15:01:00 +0000
Files and hashes: 1: 1pw_z4ALbNcIneHL4Ij33SpACpI.roa (hash: twH8uqFHcds859fXJknbVUO58IQvg3qbZxRTaJIyMwY=)
2: OcUbkTH248JZr53Qrb9U9xokmO8.crl (hash: 9HfHSWAa4gH/fm6DQNAcHduq/CRHSTe/WE1USIynlWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:de:49:98:82:32:57:1b:78:0f:6c:81:93:9b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39c51b9131f6e3c259af9dd0adbf54f71a2498ef
Validity
Not Before: Jul 24 15:01:00 2026 GMT
Not After : Jul 25 15:01:00 2026 GMT
Subject: CN=3cc273a4f6da63c21e0a46493f3b41a98a9d7d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b5:02:14:6a:62:1d:b0:ed:57:10:e0:6f:ac:
da:ec:77:d1:1b:48:fe:99:d0:6e:9f:d3:e9:ca:63:
80:92:1b:9d:08:56:f5:3a:63:63:8e:d2:2e:d0:68:
43:62:62:41:e8:a8:b4:cc:f7:97:b0:8b:4f:f5:77:
6e:e4:10:c3:75:86:ae:cc:73:06:e3:e4:ee:b0:49:
5f:34:1f:89:d2:3d:d2:12:32:97:b3:39:d3:3f:80:
13:2b:16:20:48:72:8a:67:10:41:7d:02:ec:ac:c2:
8c:ac:23:37:0f:46:7f:75:c3:73:6e:5a:0b:61:80:
3c:af:37:60:e8:b0:db:b4:0a:81:0d:c6:f1:eb:a5:
8d:69:20:03:19:21:35:4a:b1:23:7b:42:ce:36:ba:
0f:d6:34:3d:56:6a:4e:83:fa:d1:75:ba:28:6a:94:
c9:b0:77:84:70:a7:81:b2:e8:ca:e2:23:0e:5e:1d:
58:e7:f3:f3:68:8e:f8:6e:d1:81:53:39:cb:e1:df:
2a:99:fb:5d:7f:e2:81:4e:ed:a7:cd:44:b6:a3:0d:
6d:c6:83:83:33:36:bc:a5:21:95:a0:ee:56:14:76:
54:39:e4:b0:c0:a3:25:ce:35:62:b3:d0:63:74:3b:
60:91:bd:10:82:dc:59:28:2c:92:a9:4c:d8:e5:1c:
6f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C2:73:A4:F6:DA:63:C2:1E:0A:46:49:3F:3B:41:A9:8A:9D:7D:3B
X509v3 Authority Key Identifier:
keyid:39:C5:1B:91:31:F6:E3:C2:59:AF:9D:D0:AD:BF:54:F7:1A:24:98:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:d2:58:f4:bb:c8:bc:76:06:98:cb:20:2d:6e:ec:5f:62:a2:
f8:b4:2c:12:83:05:c7:08:8a:53:87:b8:05:3f:3e:2b:f2:47:
7a:ca:72:d7:20:4e:35:71:46:4c:8c:dd:10:d7:6a:b0:5b:75:
87:29:0c:6d:15:2b:9b:ee:12:3a:4a:e1:96:4c:63:38:fe:c9:
22:72:95:35:aa:f7:36:4d:82:0e:2e:d9:3e:f1:47:56:c7:be:
34:a7:a8:ff:93:48:7e:e9:94:77:a4:ad:05:6b:d5:14:a1:bf:
89:e4:5e:6d:df:4d:75:0e:74:19:3b:4d:f3:b9:a4:16:e1:46:
1f:fd:69:bd:a3:75:49:68:86:6a:54:d0:e3:ba:75:28:68:99:
85:d9:49:9d:2d:2f:d9:4d:69:fa:75:7b:5b:fd:16:b5:d7:9b:
98:3c:29:d6:3d:40:e3:37:12:0a:50:4f:c5:fb:18:40:2e:12:
e1:f9:55:af:04:03:87:2b:7f:d3:57:4e:35:ff:58:a4:76:f1:
ec:62:d7:b3:23:ca:30:14:95:74:b3:ca:f9:1a:a7:90:25:4e:
4e:54:f0:18:1c:ab:fb:9a:db:03:4b:3d:3c:87:b3:de:33:f5:
13:f3:a6:45:8b:f4:ba:e2:0d:30:52:e1:fb:ff:63:92:65:9e:
af:d7:e1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:03:11 2026 by rpki-client