Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft
File: OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft (raw, json)
Hash identifier: K1QZUlv3dcgrbKbc9sL/P+4Qv68ucxAcpN8bjeOuNqc=
Subject key identifier: C1:86:8A:FC:47:C3:C3:C3:EF:93:AE:3C:56:78:6D:1A:3B:12:44:CA
Authority key identifier: 38:22:7A:96:FA:64:AD:95:24:0F:0A:EE:0B:D3:74:64:6C:6B:BE:E2
Certificate issuer: /CN=38227a96fa64ad95240f0aee0bd374646c6bbee2
Certificate serial: 01A0F29E61772AC20CE9DCBE0942FD662F2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft
Manifest number: 15FB
Signing time: Wed 30 Sep 2026 14:01:00 +0000
Manifest this update: Wed 30 Sep 2026 14:01:00 +0000
Manifest next update: Thu 01 Oct 2026 14:01:00 +0000
Files and hashes: 1: OCJ6lvpkrZUkDwruC9N0ZGxrvuI.crl (hash: Ev4OV/Z8iBK/S+H48UBe9+PXDeLCXJlX9sg7gRkSf+Y=)
2: wHo6ZTM3-jzipse2lB9xc8s3uRA.roa (hash: 4oFkl4sS+vN5C2DeyY08mCPgjzjmSD8SNhBeGnmU75Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:9e:61:77:2a:c2:0c:e9:dc:be:09:42:fd:66:2f:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38227a96fa64ad95240f0aee0bd374646c6bbee2
Validity
Not Before: Sep 30 14:01:00 2026 GMT
Not After : Oct 1 14:01:00 2026 GMT
Subject: CN=c1868afc47c3c3c3ef93ae3c56786d1a3b1244ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:70:71:ea:dd:73:91:a2:9a:b7:80:d2:b8:40:
15:f7:ac:90:ca:38:c2:17:e6:8c:98:24:09:0b:e0:
dd:da:36:c0:98:c4:d5:35:f1:8e:d8:62:93:db:f6:
10:f9:bd:14:c2:77:14:c1:fa:de:97:c2:d6:80:be:
9f:2a:61:bf:07:72:cc:83:92:d0:8e:08:d8:f0:f5:
d4:4d:a2:2d:a4:5b:2e:6f:bb:a6:3d:96:fe:a8:ab:
cd:5e:91:73:e9:a3:2f:ac:39:a6:51:64:c3:c5:2b:
4c:9c:43:27:6d:0b:c0:e0:d9:b9:7e:15:d9:33:2c:
57:f2:8d:bd:44:c5:5c:d6:e9:d1:94:68:d1:07:4f:
4a:1d:5a:23:f1:0b:b3:ed:37:89:05:06:00:97:db:
af:4a:26:8b:f5:25:a8:0b:d8:84:54:5d:8f:4f:74:
9e:a3:b4:df:5d:f1:20:43:40:f0:c4:98:81:b0:21:
2b:11:63:9b:a6:a6:41:e4:9a:63:8a:ff:69:8f:d9:
9b:96:6a:10:a7:41:54:81:2e:08:6f:a0:21:d1:6f:
eb:9d:68:70:1e:2c:92:31:50:a3:77:b0:6f:39:6a:
c0:13:0f:53:3d:42:85:b2:2d:9b:82:cb:13:ac:03:
f5:96:6a:53:90:cd:c0:5f:ed:23:f5:02:15:aa:75:
a8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:86:8A:FC:47:C3:C3:C3:EF:93:AE:3C:56:78:6D:1A:3B:12:44:CA
X509v3 Authority Key Identifier:
keyid:38:22:7A:96:FA:64:AD:95:24:0F:0A:EE:0B:D3:74:64:6C:6B:BE:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:c7:0e:80:a3:f6:71:b7:93:13:79:fe:59:12:9c:dc:26:2f:
81:e6:e2:d2:d1:b3:74:dd:c4:a2:e9:1d:27:d8:ea:ea:62:ff:
10:3f:ee:2d:ea:d5:4a:bc:83:05:e9:13:68:7d:d1:ef:cb:df:
16:8a:66:5c:53:cb:77:01:32:9b:15:38:ef:36:32:e0:79:16:
23:7e:e7:05:8a:94:f4:b8:41:96:79:f2:7b:10:c4:74:ed:3b:
4f:69:c7:10:ee:a2:1f:6e:89:90:39:34:3e:ad:cc:02:7f:46:
68:f5:f2:ad:0f:ee:c4:4c:b3:da:0b:53:23:09:57:7b:e6:9a:
6e:f6:fb:f0:b8:a2:3c:cf:c9:7f:5a:09:95:35:22:74:69:62:
71:11:16:c6:62:e8:92:7a:cb:d2:4b:f2:4a:dd:08:7a:8d:d4:
b8:77:d0:3c:1e:71:40:98:81:e1:28:85:e8:72:52:b6:c9:4d:
11:de:fc:23:00:d2:7b:62:89:12:af:83:e3:4c:07:9d:71:28:
2c:f0:e2:7c:71:64:4f:b2:f5:bb:9e:a5:a0:42:1c:34:15:5a:
54:4c:e3:69:c7:39:83:d9:6e:d6:b7:df:11:6a:1b:45:3c:e3:
79:3e:a1:c8:3d:e7:37:bf:0f:e2:d9:59:66:19:b9:eb:a5:19:
f3:c3:ae:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDynmF3KsIM6dy+CUL9Zi8vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MjI3YTk2ZmE2NGFkOTUyNDBmMGFlZTBiZDM3NDY0NmM2
YmJlZTIwHhcNMjYwOTMwMTQwMTAwWhcNMjYxMDAxMTQwMTAwWjAzMTEwLwYDVQQD
EyhjMTg2OGFmYzQ3YzNjM2MzZWY5M2FlM2M1Njc4NmQxYTNiMTI0NGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3Bx6t1zkaKat4DSuEAV96yQyjjC
F+aMmCQJC+Dd2jbAmMTVNfGO2GKT2/YQ+b0UwncUwfrel8LWgL6fKmG/B3LMg5LQ
jgjY8PXUTaItpFsub7umPZb+qKvNXpFz6aMvrDmmUWTDxStMnEMnbQvA4Nm5fhXZ
MyxX8o29RMVc1unRlGjRB09KHVoj8Quz7TeJBQYAl9uvSiaL9SWoC9iEVF2PT3Se
o7TfXfEgQ0DwxJiBsCErEWObpqZB5Jpjiv9pj9mblmoQp0FUgS4Ib6Ah0W/rnWhw
HiySMVCjd7BvOWrAEw9TPUKFsi2bgssTrAP1lmpTkM3AX+0j9QIVqnWoUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMGGivxHw8PD75OuPFZ4bRo7EkTKMB8GA1UdIwQY
MBaAFDgiepb6ZK2VJA8K7gvTdGRsa77iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0NKNmx2cGtyWlVrRHdydUM5TjBaR3hydnVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8xY2Y5YWMtMTBkNC00YTVlLWE3MDYt
ZDFjOWJhMDhmNTU5LzEvT0NKNmx2cGtyWlVrRHdydUM5TjBaR3hydnVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8xY2Y5YWMtMTBkNC00YTVlLWE3MDYtZDFjOWJhMDhmNTU5
LzEvT0NKNmx2cGtyWlVrRHdydUM5TjBaR3hydnVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlscOgKP2
cbeTE3n+WRKc3CYvgebi0tGzdN3EoukdJ9jq6mL/ED/uLerVSryDBekTaH3R78vf
FopmXFPLdwEymxU47zYy4HkWI37nBYqU9LhBlnnyexDEdO07T2nHEO6iH26JkDk0
Pq3MAn9GaPXyrQ/uxEyz2gtTIwlXe+aabvb78LiiPM/Jf1oJlTUidGlicREWxmLo
knrL0kvySt0Ieo3UuHfQPB5xQJiB4SiF6HJStslNEd78IwDSe2KJEq+D40wHnXEo
LPDifHFkT7L1u56loEIcNBVaVEzjacc5g9lu1rffEWobRTzjeT6hyD3nN78P4tlZ
Zhm566UZ88Oudw==
-----END CERTIFICATE-----
Generated at Wed Sep 30 22:45:27 2026 by rpki-client