Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft
File: OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft (raw, json)
Hash identifier: GvHss9OGq8tMzDMp/jhpkr1M0hw0pKPeTGaHIs7L44I=
Subject key identifier: 14:B1:2D:EF:34:3C:54:B6:5C:1C:46:8B:3E:7C:31:C0:20:4E:29:39
Authority key identifier: 38:22:7A:96:FA:64:AD:95:24:0F:0A:EE:0B:D3:74:64:6C:6B:BE:E2
Certificate issuer: /CN=38227a96fa64ad95240f0aee0bd374646c6bbee2
Certificate serial: 019FD6BC56C32C175D551BAF29A94C0F01FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft
Manifest number: 1568
Signing time: Thu 06 Aug 2026 11:01:34 +0000
Manifest this update: Thu 06 Aug 2026 11:01:34 +0000
Manifest next update: Fri 07 Aug 2026 11:01:34 +0000
Files and hashes: 1: OCJ6lvpkrZUkDwruC9N0ZGxrvuI.crl (hash: mGsfJ79HKavIxHjq019I9i/6a/E8mOu104rnYsFH9Ao=)
2: wHo6ZTM3-jzipse2lB9xc8s3uRA.roa (hash: 4oFkl4sS+vN5C2DeyY08mCPgjzjmSD8SNhBeGnmU75Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Aug 2026 11:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d6:bc:56:c3:2c:17:5d:55:1b:af:29:a9:4c:0f:01:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38227a96fa64ad95240f0aee0bd374646c6bbee2
Validity
Not Before: Aug 6 11:01:34 2026 GMT
Not After : Aug 7 11:01:34 2026 GMT
Subject: CN=14b12def343c54b65c1c468b3e7c31c0204e2939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a5:f6:a3:08:fe:9e:c5:31:ef:43:ee:69:f9:
0d:6a:d0:30:f3:cb:39:98:1d:e2:81:66:e8:90:95:
b7:08:60:86:e7:d5:e5:af:5b:2a:44:4a:c1:b0:21:
fe:92:d6:fd:17:f2:2d:52:2e:71:d5:9b:33:fe:5c:
97:b1:87:b5:26:67:1d:b2:32:59:2c:fb:40:23:3b:
d6:ec:01:53:fd:ce:b3:2c:e0:78:94:01:e3:27:ba:
3a:00:a0:a1:9b:fd:d8:88:72:f8:6d:1b:87:f8:a3:
7b:92:aa:b2:09:07:56:44:6c:51:d6:fe:dc:2c:4e:
c7:02:82:26:48:94:c4:f3:fc:e4:f9:d6:70:cc:4a:
62:97:74:86:31:d4:8e:37:35:5e:4e:ee:f6:2e:57:
83:86:ce:8f:5e:7a:ff:5c:86:7b:e5:05:2b:6a:12:
16:55:20:ff:8a:26:ac:32:14:a1:20:41:eb:73:b5:
25:10:4b:02:00:6a:d0:41:e2:ba:10:84:21:a7:af:
28:c8:4f:3a:4a:fb:1d:f1:6e:3e:d1:b1:94:58:60:
24:af:b3:6d:33:c6:6a:5b:ed:19:39:3a:07:26:96:
a9:96:4f:4f:0e:08:d2:8f:46:00:b8:ce:36:e2:52:
66:16:38:a4:cd:fc:6c:13:f5:e6:b9:23:be:e1:47:
b0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B1:2D:EF:34:3C:54:B6:5C:1C:46:8B:3E:7C:31:C0:20:4E:29:39
X509v3 Authority Key Identifier:
keyid:38:22:7A:96:FA:64:AD:95:24:0F:0A:EE:0B:D3:74:64:6C:6B:BE:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ce:78:3b:a7:28:8c:77:4f:75:a8:a9:cf:b9:86:a6:b5:fe:
77:6d:41:c2:f3:73:db:17:b5:b1:d7:0a:05:bb:65:61:3e:b6:
06:23:ae:26:62:dc:ed:b8:63:e5:50:c8:67:55:71:8c:83:80:
3b:3a:1d:c2:b8:4f:23:6e:0a:59:03:97:8b:b6:f6:62:cb:ea:
92:e7:e1:f5:4e:b5:16:2e:4a:5b:08:ec:97:17:f7:a9:bb:3f:
a7:da:3a:1f:bb:63:76:8e:64:d6:c2:e0:90:7a:24:e6:e6:d4:
32:37:95:f5:7f:ff:be:64:42:5b:6f:06:05:aa:b0:c3:2e:cd:
cd:f9:7b:f3:17:aa:91:58:b7:b3:d8:70:a3:b4:91:36:b4:69:
92:23:ee:7e:8b:e5:c2:28:64:1e:68:e8:a3:80:87:42:2d:7a:
69:73:ff:46:5e:95:99:e9:3e:d0:5c:db:38:11:8e:78:18:24:
6b:78:fa:82:4c:ec:8b:3e:55:c7:ea:ee:7b:9d:12:51:a9:5a:
02:b8:4e:ba:ae:f1:f0:d2:64:89:a9:29:75:69:f5:4f:d1:21:
d8:bd:31:7a:58:4d:ee:50:a9:d3:ac:5a:a1:3d:40:e4:73:fb:
26:ac:cc:e3:83:b1:60:27:74:6a:87:3c:85:d1:5b:ad:1f:d6:
3e:bc:3e:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/WvFbDLBddVRuvKalMDwH6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MjI3YTk2ZmE2NGFkOTUyNDBmMGFlZTBiZDM3NDY0NmM2
YmJlZTIwHhcNMjYwODA2MTEwMTM0WhcNMjYwODA3MTEwMTM0WjAzMTEwLwYDVQQD
EygxNGIxMmRlZjM0M2M1NGI2NWMxYzQ2OGIzZTdjMzFjMDIwNGUyOTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qX2owj+nsUx70PuafkNatAw88s5
mB3igWbokJW3CGCG59Xlr1sqRErBsCH+ktb9F/ItUi5x1Zsz/lyXsYe1JmcdsjJZ
LPtAIzvW7AFT/c6zLOB4lAHjJ7o6AKChm/3YiHL4bRuH+KN7kqqyCQdWRGxR1v7c
LE7HAoImSJTE8/zk+dZwzEpil3SGMdSONzVeTu72LleDhs6PXnr/XIZ75QUrahIW
VSD/iiasMhShIEHrc7UlEEsCAGrQQeK6EIQhp68oyE86Svsd8W4+0bGUWGAkr7Nt
M8ZqW+0ZOToHJpaplk9PDgjSj0YAuM424lJmFjikzfxsE/XmuSO+4UewCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBSxLe80PFS2XBxGiz58McAgTik5MB8GA1UdIwQY
MBaAFDgiepb6ZK2VJA8K7gvTdGRsa77iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0NKNmx2cGtyWlVrRHdydUM5TjBaR3hydnVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8xY2Y5YWMtMTBkNC00YTVlLWE3MDYt
ZDFjOWJhMDhmNTU5LzEvT0NKNmx2cGtyWlVrRHdydUM5TjBaR3hydnVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8xY2Y5YWMtMTBkNC00YTVlLWE3MDYtZDFjOWJhMDhmNTU5
LzEvT0NKNmx2cGtyWlVrRHdydUM5TjBaR3hydnVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhM54O6co
jHdPdaipz7mGprX+d21BwvNz2xe1sdcKBbtlYT62BiOuJmLc7bhj5VDIZ1VxjIOA
OzodwrhPI24KWQOXi7b2Ysvqkufh9U61Fi5KWwjslxf3qbs/p9o6H7tjdo5k1sLg
kHok5ubUMjeV9X//vmRCW28GBaqwwy7Nzfl78xeqkVi3s9hwo7SRNrRpkiPufovl
wihkHmjoo4CHQi16aXP/Rl6Vmek+0FzbOBGOeBgka3j6gkzsiz5Vx+rue50SUala
ArhOuq7x8NJkiakpdWn1T9Eh2L0xelhN7lCp06xaoT1A5HP7JqzM44OxYCd0aoc8
hdFbrR/WPrw+Tw==
-----END CERTIFICATE-----
Generated at Thu Aug 6 21:12:32 2026 by rpki-client