Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/04748d-923b-4284-9628-203563f845bb/1/OC-G8tvQd2xOUZycmuT60EJvOf8.mft
File: OC-G8tvQd2xOUZycmuT60EJvOf8.mft (raw, json)
Hash identifier: n/1Nd4bciiNO6eLGgW+w4pjEnhJ3pGzLX39JdggU+o4=
Subject key identifier: 56:D5:98:DB:70:47:77:D2:D1:B1:BC:1D:6E:7E:53:E7:2B:DD:E8:E7
Authority key identifier: 38:2F:86:F2:DB:D0:77:6C:4E:51:9C:9C:9A:E4:FA:D0:42:6F:39:FF
Certificate issuer: /CN=382f86f2dbd0776c4e519c9c9ae4fad0426f39ff
Certificate serial: 01A16E001DA4DA84D28DAB77327A35F5BB15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OC-G8tvQd2xOUZycmuT60EJvOf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/04748d-923b-4284-9628-203563f845bb/1/OC-G8tvQd2xOUZycmuT60EJvOf8.mft
Manifest number: 06A0
Signing time: Sat 24 Oct 2026 13:01:03 +0000
Manifest this update: Sat 24 Oct 2026 13:01:03 +0000
Manifest next update: Sun 25 Oct 2026 13:01:03 +0000
Files and hashes: 1: 1-CvN4vL-gOumnUiw8kqYnlyhsGg.roa (hash: j8Mlx4J1MdSRge54lSRG985DTWF3u6cnasrSWFkZ6ac=)
2: OC-G8tvQd2xOUZycmuT60EJvOf8.crl (hash: DY/KIjfMWilAsUcA5h6tBD20I9h59d/GQ47glx8PwEU=)
3: t25FS3p7VfnEPbzfHv-DyXEln4A.roa (hash: 71ZKU18culvAhzrOg6y8Lw3IENicOoZIJiAlIOqPr8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/04748d-923b-4284-9628-203563f845bb/1/OC-G8tvQd2xOUZycmuT60EJvOf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/04748d-923b-4284-9628-203563f845bb/1/OC-G8tvQd2xOUZycmuT60EJvOf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OC-G8tvQd2xOUZycmuT60EJvOf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 12:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6e:00:1d:a4:da:84:d2:8d:ab:77:32:7a:35:f5:bb:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382f86f2dbd0776c4e519c9c9ae4fad0426f39ff
Validity
Not Before: Oct 24 13:01:03 2026 GMT
Not After : Oct 25 13:01:03 2026 GMT
Subject: CN=56d598db704777d2d1b1bc1d6e7e53e72bdde8e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d8:15:5d:d5:7e:68:07:d8:f9:dd:3a:06:b3:
42:f7:b0:3e:d2:01:93:86:11:7c:08:db:3c:3b:fa:
e6:91:c4:ab:7d:2b:6f:bb:9d:8d:18:1a:d0:28:92:
85:ba:48:a5:fd:5b:cb:9a:43:de:61:dc:4c:9c:bd:
d4:dc:da:39:4a:0e:c3:e6:c5:29:7a:1c:53:b1:c5:
a3:af:c0:bc:96:85:4d:61:19:88:e3:76:54:f8:4a:
00:2a:66:31:f8:a7:a1:0b:6b:df:4e:cc:30:08:78:
75:25:98:cf:1c:99:00:89:6f:33:71:0a:2e:68:4f:
d0:aa:50:da:13:a9:50:19:71:cf:3d:da:56:34:a6:
90:32:06:04:b0:b1:ef:0e:f2:14:0f:da:13:b1:8a:
b2:1c:a8:7c:d2:81:f9:4e:88:95:18:23:25:0f:02:
68:e7:72:e9:22:17:da:27:3b:95:fa:42:85:df:3b:
04:24:91:53:fd:fd:f7:5c:4e:a7:e7:cb:ec:c9:e7:
bc:bd:e8:60:9d:df:2d:10:bd:9b:fb:4f:37:43:81:
dc:64:22:ef:12:b4:2d:60:30:88:6c:a5:6b:9f:61:
aa:48:6a:9e:f8:52:4c:57:32:0e:97:6d:ae:92:70:
f5:3f:62:bb:3a:99:e5:82:a9:bc:e9:1e:a6:e2:35:
66:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D5:98:DB:70:47:77:D2:D1:B1:BC:1D:6E:7E:53:E7:2B:DD:E8:E7
X509v3 Authority Key Identifier:
keyid:38:2F:86:F2:DB:D0:77:6C:4E:51:9C:9C:9A:E4:FA:D0:42:6F:39:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OC-G8tvQd2xOUZycmuT60EJvOf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/04748d-923b-4284-9628-203563f845bb/1/OC-G8tvQd2xOUZycmuT60EJvOf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/04748d-923b-4284-9628-203563f845bb/1/OC-G8tvQd2xOUZycmuT60EJvOf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:6a:38:ea:4c:68:12:d9:78:aa:20:73:9e:ed:0a:ec:e1:88:
f6:c5:9c:59:90:91:18:b2:ad:6f:5a:e7:a4:a5:0c:ce:bd:80:
a0:91:6a:ff:59:07:bb:20:55:66:17:d2:2f:d3:7c:1e:1e:02:
43:ff:5a:bc:1d:1f:9a:89:0c:0d:4c:7f:95:f5:16:9d:88:5b:
3b:bf:5d:80:5a:20:3f:41:8d:4a:5c:ae:b1:98:c2:72:a5:36:
91:0b:8d:ac:f0:6a:ed:72:a2:93:a8:e8:f0:c1:a8:ea:3e:4b:
68:5f:90:cc:36:b1:48:3d:e8:3c:03:4c:9a:2d:99:36:09:62:
5f:6c:d0:18:16:ba:e8:eb:2c:49:ac:49:bb:ad:96:5c:62:73:
6e:2c:c8:94:b7:45:60:54:bb:d3:ef:c6:02:1f:15:90:d3:32:
ce:df:e2:41:e4:98:77:ed:b1:88:5c:0f:75:4c:34:b7:32:fa:
b0:06:b6:03:34:74:26:5f:1a:10:47:37:63:9e:01:b1:9a:7d:
33:5c:56:7c:52:04:af:b3:7a:2e:70:84:cf:8d:b4:6d:c1:63:
5e:1c:71:ad:0b:11:2c:fa:95:69:97:b4:03:a8:2f:54:4c:56:
c3:d3:98:2e:eb:14:20:8b:b9:52:2e:a4:ba:db:e8:de:dc:d3:
84:86:35:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 17:49:04 2026 by rpki-client