Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/04748d-923b-4284-9628-203563f845bb/1/OC-G8tvQd2xOUZycmuT60EJvOf8.mft
File: OC-G8tvQd2xOUZycmuT60EJvOf8.mft (raw, json)
Hash identifier: U2zZiysYSSOtFOlacF/ViVy/HPFlu5ZR6uJqC4Qjzc8=
Subject key identifier: 13:9A:B9:39:E4:98:B2:80:B0:D2:29:72:8A:54:37:DF:CD:D8:CF:E3
Authority key identifier: 38:2F:86:F2:DB:D0:77:6C:4E:51:9C:9C:9A:E4:FA:D0:42:6F:39:FF
Certificate issuer: /CN=382f86f2dbd0776c4e519c9c9ae4fad0426f39ff
Certificate serial: 01A06F1600BF839BD92389360889FE5C4A53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OC-G8tvQd2xOUZycmuT60EJvOf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/04748d-923b-4284-9628-203563f845bb/1/OC-G8tvQd2xOUZycmuT60EJvOf8.mft
Manifest number: 061C
Signing time: Sat 05 Sep 2026 01:01:47 +0000
Manifest this update: Sat 05 Sep 2026 01:01:47 +0000
Manifest next update: Sun 06 Sep 2026 01:01:47 +0000
Files and hashes: 1: 1-CvN4vL-gOumnUiw8kqYnlyhsGg.roa (hash: j8Mlx4J1MdSRge54lSRG985DTWF3u6cnasrSWFkZ6ac=)
2: OC-G8tvQd2xOUZycmuT60EJvOf8.crl (hash: 4zyX5TKx1cu0oxc46+yzrMxHIlDCXghzHBt2SIHKEBA=)
3: t25FS3p7VfnEPbzfHv-DyXEln4A.roa (hash: 71ZKU18culvAhzrOg6y8Lw3IENicOoZIJiAlIOqPr8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/04748d-923b-4284-9628-203563f845bb/1/OC-G8tvQd2xOUZycmuT60EJvOf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/04748d-923b-4284-9628-203563f845bb/1/OC-G8tvQd2xOUZycmuT60EJvOf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OC-G8tvQd2xOUZycmuT60EJvOf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:16:00:bf:83:9b:d9:23:89:36:08:89:fe:5c:4a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382f86f2dbd0776c4e519c9c9ae4fad0426f39ff
Validity
Not Before: Sep 5 01:01:47 2026 GMT
Not After : Sep 6 01:01:47 2026 GMT
Subject: CN=139ab939e498b280b0d229728a5437dfcdd8cfe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:37:96:ca:74:a9:a9:7d:d8:1b:a8:82:5e:a7:
7b:c7:a5:9b:89:49:20:dd:37:d0:29:51:ba:f2:37:
ee:bc:50:c1:a2:81:81:16:9d:78:60:25:b5:d0:18:
f3:01:0e:ae:86:61:84:7d:d3:dd:a9:65:1b:f7:a0:
8d:6c:94:16:e2:11:82:6c:38:a7:48:88:16:09:6c:
af:e2:18:d9:45:29:86:21:34:5b:24:94:4a:c2:d3:
02:b1:36:50:cf:bb:b1:fc:7d:a6:d8:b4:d6:f4:6a:
a0:ff:e4:5d:47:7a:30:ff:d2:de:00:ed:ab:47:5b:
49:86:ae:a0:a0:b2:a6:fe:c3:0a:c3:b8:00:f5:11:
5d:b3:c8:f6:6a:70:81:c9:0a:01:17:fe:2a:a4:77:
72:a0:98:c4:6d:d7:5e:78:17:f0:ac:75:4f:ca:97:
31:5a:1b:4d:30:dd:9e:eb:f9:bb:b2:e5:c3:dc:af:
dc:f8:66:cc:4f:c2:ee:31:ab:a0:bb:fa:c4:4b:70:
3a:49:e1:fd:59:37:3b:2a:8b:18:ba:68:d4:32:01:
d7:93:08:0f:31:31:3b:3e:c5:00:2c:3e:19:f8:75:
e9:97:0f:09:fc:f5:f0:c4:5f:f0:ec:d5:56:23:6b:
ed:40:3b:ce:6c:23:cb:bb:93:6d:80:a8:31:8b:be:
ed:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:9A:B9:39:E4:98:B2:80:B0:D2:29:72:8A:54:37:DF:CD:D8:CF:E3
X509v3 Authority Key Identifier:
keyid:38:2F:86:F2:DB:D0:77:6C:4E:51:9C:9C:9A:E4:FA:D0:42:6F:39:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OC-G8tvQd2xOUZycmuT60EJvOf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/04748d-923b-4284-9628-203563f845bb/1/OC-G8tvQd2xOUZycmuT60EJvOf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/04748d-923b-4284-9628-203563f845bb/1/OC-G8tvQd2xOUZycmuT60EJvOf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:7e:39:4e:3a:bd:41:3e:c0:29:2c:1f:4a:2f:e6:dd:12:97:
ad:55:94:0f:a6:ac:30:b1:40:97:cb:43:1e:88:67:a9:7f:0c:
b2:1d:27:0f:fa:29:3d:15:f7:e2:95:14:4c:08:9f:ed:b2:15:
3a:bb:e1:0f:19:66:4e:07:5b:b2:81:44:77:63:ad:1f:02:e7:
62:b0:3e:de:b1:29:dc:71:5d:d8:d3:44:89:3f:fd:61:4a:32:
f3:d5:fb:e5:ad:82:7e:b1:2e:07:61:1b:08:65:45:2d:4f:56:
81:f7:ef:f3:4a:c1:86:c5:12:5e:da:9e:42:67:ef:0a:ac:48:
67:29:30:6e:34:88:75:6f:fc:0a:16:f5:aa:62:c3:7c:a0:39:
1b:2d:29:5c:3c:52:86:39:70:d4:d4:bd:5e:64:cd:b0:cb:f6:
37:e2:19:e3:16:f1:7b:37:d9:c7:f3:50:f8:16:21:48:c8:b0:
c6:aa:c2:41:c9:88:1f:bd:3c:f3:89:c2:73:27:b0:53:97:97:
97:87:60:57:53:df:3b:f6:4a:e0:67:24:0b:41:e7:a1:ad:38:
70:b6:18:cb:7c:1b:0b:16:b7:54:71:81:4a:6b:53:89:30:38:
b1:c1:91:18:e5:04:6d:02:1e:cf:7c:7d:a0:53:20:b4:1d:66:
49:f6:af:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBvFgC/g5vZI4k2CIn+XEpTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MmY4NmYyZGJkMDc3NmM0ZTUxOWM5YzlhZTRmYWQwNDI2
ZjM5ZmYwHhcNMjYwOTA1MDEwMTQ3WhcNMjYwOTA2MDEwMTQ3WjAzMTEwLwYDVQQD
EygxMzlhYjkzOWU0OThiMjgwYjBkMjI5NzI4YTU0MzdkZmNkZDhjZmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jeWynSpqX3YG6iCXqd7x6WbiUkg
3TfQKVG68jfuvFDBooGBFp14YCW10BjzAQ6uhmGEfdPdqWUb96CNbJQW4hGCbDin
SIgWCWyv4hjZRSmGITRbJJRKwtMCsTZQz7ux/H2m2LTW9Gqg/+RdR3ow/9LeAO2r
R1tJhq6goLKm/sMKw7gA9RFds8j2anCByQoBF/4qpHdyoJjEbddeeBfwrHVPypcx
WhtNMN2e6/m7suXD3K/c+GbMT8LuMaugu/rES3A6SeH9WTc7KosYumjUMgHXkwgP
MTE7PsUALD4Z+HXplw8J/PXwxF/w7NVWI2vtQDvObCPLu5NtgKgxi77towIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBOauTnkmLKAsNIpcopUN9/N2M/jMB8GA1UdIwQY
MBaAFDgvhvLb0HdsTlGcnJrk+tBCbzn/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0MtRzh0dlFkMnhPVVp5Y211VDYwRUp2T2Y4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wNDc0OGQtOTIzYi00Mjg0LTk2Mjgt
MjAzNTYzZjg0NWJiLzEvT0MtRzh0dlFkMnhPVVp5Y211VDYwRUp2T2Y4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wNDc0OGQtOTIzYi00Mjg0LTk2MjgtMjAzNTYzZjg0NWJi
LzEvT0MtRzh0dlFkMnhPVVp5Y211VDYwRUp2T2Y4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmn45Tjq9
QT7AKSwfSi/m3RKXrVWUD6asMLFAl8tDHohnqX8Msh0nD/opPRX34pUUTAif7bIV
OrvhDxlmTgdbsoFEd2OtHwLnYrA+3rEp3HFd2NNEiT/9YUoy89X75a2CfrEuB2Eb
CGVFLU9Wgffv80rBhsUSXtqeQmfvCqxIZykwbjSIdW/8Chb1qmLDfKA5Gy0pXDxS
hjlw1NS9XmTNsMv2N+IZ4xbxezfZx/NQ+BYhSMiwxqrCQcmIH70884nCcyewU5eX
l4dgV1PfO/ZK4GckC0Hnoa04cLYYy3wbCxa3VHGBSmtTiTA4scGRGOUEbQIez3x9
oFMgtB1mSfavYw==
-----END CERTIFICATE-----
Generated at Sat Sep 5 05:20:22 2026 by rpki-client