Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/04748d-923b-4284-9628-203563f845bb/1/OC-G8tvQd2xOUZycmuT60EJvOf8.mft
File: OC-G8tvQd2xOUZycmuT60EJvOf8.mft (raw, json)
Hash identifier: vwsYjuNEl8jJp82/2eGQaFOj4lY9I8gbHYCzkhz0JkI=
Subject key identifier: 3E:80:65:CE:D4:A6:16:9D:0D:A5:17:0A:AF:41:2A:A7:7B:10:5C:56
Authority key identifier: 38:2F:86:F2:DB:D0:77:6C:4E:51:9C:9C:9A:E4:FA:D0:42:6F:39:FF
Certificate issuer: /CN=382f86f2dbd0776c4e519c9c9ae4fad0426f39ff
Certificate serial: 019F8379D25731EE80A2179CF010DEA0D975
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OC-G8tvQd2xOUZycmuT60EJvOf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/04748d-923b-4284-9628-203563f845bb/1/OC-G8tvQd2xOUZycmuT60EJvOf8.mft
Manifest number: 05A2
Signing time: Tue 21 Jul 2026 07:00:26 +0000
Manifest this update: Tue 21 Jul 2026 07:00:26 +0000
Manifest next update: Wed 22 Jul 2026 07:00:26 +0000
Files and hashes: 1: 1-CvN4vL-gOumnUiw8kqYnlyhsGg.roa (hash: j8Mlx4J1MdSRge54lSRG985DTWF3u6cnasrSWFkZ6ac=)
2: OC-G8tvQd2xOUZycmuT60EJvOf8.crl (hash: gV5/MnLg75whE2UCLMSpWSzSrvojuYHhRjAk1GLvgqk=)
3: t25FS3p7VfnEPbzfHv-DyXEln4A.roa (hash: 71ZKU18culvAhzrOg6y8Lw3IENicOoZIJiAlIOqPr8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/04748d-923b-4284-9628-203563f845bb/1/OC-G8tvQd2xOUZycmuT60EJvOf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/04748d-923b-4284-9628-203563f845bb/1/OC-G8tvQd2xOUZycmuT60EJvOf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OC-G8tvQd2xOUZycmuT60EJvOf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 07:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:79:d2:57:31:ee:80:a2:17:9c:f0:10:de:a0:d9:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382f86f2dbd0776c4e519c9c9ae4fad0426f39ff
Validity
Not Before: Jul 21 07:00:26 2026 GMT
Not After : Jul 22 07:00:26 2026 GMT
Subject: CN=3e8065ced4a6169d0da5170aaf412aa77b105c56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:02:52:a7:0b:3d:9b:18:58:cf:ee:8d:f2:1d:
9c:6e:9f:4f:78:5f:9a:c8:20:31:47:65:c8:34:bd:
7f:1f:86:47:18:6e:e1:12:9a:f5:84:50:b2:3e:60:
42:30:6d:a2:35:bc:6c:c8:60:fd:be:76:09:5d:aa:
8a:1d:0f:b1:b1:3a:8b:f8:fd:dc:ec:3f:5b:ef:83:
5f:e1:e5:b7:7a:f6:29:74:4d:a6:4f:69:26:92:ec:
7e:36:0a:05:ff:77:9d:44:aa:40:d4:d2:f0:3d:fa:
d1:0b:d8:06:74:f9:e3:40:bd:ac:99:09:bf:29:87:
4c:69:1f:8c:2b:0b:6d:d9:d8:1c:da:dd:ab:81:1a:
5f:5d:a9:50:44:3a:b8:1a:c5:3b:11:19:3b:ae:6f:
5c:f9:d1:f1:be:12:c8:c5:f6:04:4f:b6:8b:4b:c0:
4c:96:94:c6:b6:02:fd:57:94:5d:e6:dc:66:dd:01:
a2:d0:da:ca:3d:ea:37:71:27:e2:f9:b9:0e:29:b8:
05:31:ee:54:e4:d7:34:8c:2e:c0:83:3d:6f:7f:4c:
56:9f:ef:5d:43:93:35:f5:81:89:ad:64:b1:0b:9f:
ba:16:bf:6b:46:e1:a0:c4:27:ce:4c:1b:a3:79:0c:
48:b5:6d:60:16:94:66:dc:49:97:12:25:a9:51:41:
f0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:80:65:CE:D4:A6:16:9D:0D:A5:17:0A:AF:41:2A:A7:7B:10:5C:56
X509v3 Authority Key Identifier:
keyid:38:2F:86:F2:DB:D0:77:6C:4E:51:9C:9C:9A:E4:FA:D0:42:6F:39:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OC-G8tvQd2xOUZycmuT60EJvOf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/04748d-923b-4284-9628-203563f845bb/1/OC-G8tvQd2xOUZycmuT60EJvOf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/04748d-923b-4284-9628-203563f845bb/1/OC-G8tvQd2xOUZycmuT60EJvOf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:41:36:77:77:5c:32:5c:53:cf:af:e8:0e:97:71:f6:24:2b:
ec:65:8e:dc:1f:49:bc:13:32:99:c8:e3:24:48:bb:b4:59:ed:
6a:17:8f:e8:61:1a:8a:3b:a3:c0:d7:6b:3e:fe:a5:37:ea:2e:
81:17:a8:a2:60:8e:b5:1e:22:ba:22:ff:23:64:a7:6d:b3:d7:
c4:7c:79:b4:19:8c:a8:c5:c1:e4:ad:cc:80:87:ad:02:57:4b:
a3:c7:fc:b0:2e:f7:27:9d:a0:40:94:a6:c9:bd:6e:57:2c:54:
f7:83:1a:7b:48:97:c6:1e:2d:06:e5:f3:7f:a2:80:88:16:3c:
70:eb:11:bf:8d:fd:d1:46:92:a8:80:52:c6:db:21:9c:a1:22:
c9:74:41:27:1a:bf:e4:7f:25:0c:a8:7b:c7:ff:19:c6:c3:ed:
21:dd:22:2b:d2:47:8d:38:bb:d4:dd:35:13:eb:c0:08:3d:be:
5c:e8:c0:96:15:95:ac:c9:76:31:cd:16:c4:fb:6a:82:0b:b5:
1b:f4:e2:93:2e:89:f3:4d:a4:6a:7a:c0:4c:3a:0c:a5:81:ef:
b1:3b:56:4a:26:1f:ee:a3:76:60:8e:fc:95:06:3e:0a:23:f7:
ca:94:7c:ae:a2:0a:83:b8:db:2c:8d:b6:37:18:a2:17:24:c8:
ae:da:ea:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:21:56 2026 by rpki-client