Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft
File: OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft (raw, json)
Hash identifier: NWfF/KYJHTuPQphBv899aW9+hhG3ie1R3XzduZyY7LI=
Subject key identifier: 4E:34:77:93:F3:FC:1E:2A:58:23:EB:25:02:21:C0:83:66:FC:4A:6C
Authority key identifier: 38:25:28:AB:1C:D1:B6:DC:73:C0:B0:9B:67:D3:E7:E3:58:4F:36:3D
Certificate issuer: /CN=382528ab1cd1b6dc73c0b09b67d3e7e3584f363d
Certificate serial: 01A119E2F46C0FCA8810EA85601398A65E51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCUoqxzRttxzwLCbZ9Pn41hPNj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft
Manifest number: 1A96
Signing time: Thu 08 Oct 2026 05:01:06 +0000
Manifest this update: Thu 08 Oct 2026 05:01:06 +0000
Manifest next update: Fri 09 Oct 2026 05:01:06 +0000
Files and hashes: 1: CA-MzpWp9Dx3CrADIEvJQZw4E7E.roa (hash: cFLJlMvt+zbdg7Xdn6mpst0pNhdveJ/oPmHZEhv3T5Y=)
2: OCUoqxzRttxzwLCbZ9Pn41hPNj0.crl (hash: LzyWUDKBitQUgVUSekPjD+m0M2AyBm8lNdRSxp4v1Fw=)
3: YbU5wyUqLqEHDmRvFcj5yxlUnP4.asa (hash: kL358urGtKDFubZ/xfiLlds0XnPgCtrLaQBg7SppGts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCUoqxzRttxzwLCbZ9Pn41hPNj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:e2:f4:6c:0f:ca:88:10:ea:85:60:13:98:a6:5e:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382528ab1cd1b6dc73c0b09b67d3e7e3584f363d
Validity
Not Before: Oct 8 05:01:06 2026 GMT
Not After : Oct 9 05:01:06 2026 GMT
Subject: CN=4e347793f3fc1e2a5823eb250221c08366fc4a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:3a:ae:90:fa:ac:14:64:95:31:12:7a:4f:7c:
51:37:19:e1:38:b0:db:ee:ef:b7:72:e5:d3:48:61:
a2:05:c1:70:d4:5a:7b:6f:00:c7:ff:ba:ea:13:b5:
0b:ec:7e:8e:a9:99:e3:1a:bb:ec:41:80:cd:6e:ee:
78:75:be:2d:91:66:b9:6d:01:d0:0b:ec:a7:35:aa:
5c:27:56:d2:f1:5b:1c:14:c2:b5:66:b6:68:25:34:
0c:d5:4d:5d:fb:19:9a:1c:5f:28:cc:54:f6:c8:ad:
c5:c8:86:1c:75:76:79:2e:28:be:83:c2:0e:4e:24:
5f:f7:33:d2:e5:e1:f9:f6:eb:b1:e7:2f:10:8d:82:
40:6f:0c:ae:fe:83:90:76:0e:e0:fa:c3:8e:d3:4b:
6c:90:34:b1:4d:3a:b0:f6:7c:f9:68:d5:2d:57:87:
70:37:6b:ed:35:a5:fb:1c:a1:d4:79:65:5a:5e:23:
79:92:7b:c3:cd:1f:dd:8a:f8:1e:83:b5:7d:a1:ea:
cb:41:7b:18:88:ed:33:42:28:32:6a:c4:31:7e:26:
c9:0c:37:ee:28:85:d4:7c:b2:c2:8a:2e:52:9e:9b:
fc:5d:42:1e:eb:6c:5a:a8:5a:71:6b:32:3b:05:af:
6b:2f:2a:af:6c:67:2d:80:8f:81:93:15:71:d6:94:
30:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:34:77:93:F3:FC:1E:2A:58:23:EB:25:02:21:C0:83:66:FC:4A:6C
X509v3 Authority Key Identifier:
keyid:38:25:28:AB:1C:D1:B6:DC:73:C0:B0:9B:67:D3:E7:E3:58:4F:36:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCUoqxzRttxzwLCbZ9Pn41hPNj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:57:ff:10:12:7a:46:65:0c:ef:68:a4:0a:f8:9e:fd:ee:f3:
36:16:44:20:82:f5:8b:c3:be:f1:ed:58:7d:cc:d0:4f:6a:70:
db:a9:2c:f1:87:c0:de:fe:ff:8c:c1:fd:75:f9:ab:a3:24:06:
b5:20:53:44:41:c8:68:5e:04:d8:68:65:b6:a8:3e:1c:f2:a7:
e3:90:6d:9f:0b:95:31:32:44:be:cc:d5:19:b1:9e:71:e5:2e:
a8:44:11:a5:2c:47:a0:bd:3f:2e:39:38:ca:3d:51:32:7f:10:
48:df:94:32:4a:42:d4:16:b6:ba:2a:2b:6a:03:95:53:33:73:
f3:6b:13:a3:41:f6:63:cc:d0:c5:bb:d7:5b:61:dc:f4:7b:b1:
7b:78:a0:fa:43:2b:8c:f8:8d:9a:bf:e3:8d:95:9e:ab:7a:f8:
60:d3:2b:96:f4:61:45:29:69:28:a9:11:57:59:35:4a:06:47:
6b:7d:d3:a8:c5:bb:88:cf:9a:de:95:21:29:b4:ac:af:2b:1e:
81:7d:bb:6e:6d:2c:60:d6:01:48:a3:7a:d1:c1:bf:a7:6b:e8:
12:eb:6d:b4:f0:9f:66:bd:a5:26:5f:d2:64:df:bf:fa:ff:e3:
57:7f:b2:fe:ff:b2:e4:0d:18:f7:54:9e:27:a9:6c:c7:5a:f5:
4d:e8:ff:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 14:09:43 2026 by rpki-client