Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.mft
File: ocEwBy0s6c9WK4MZjtqtr6SPbbQ.mft (raw, json)
Hash identifier: /jW51kEl6udgcDNyJCxUGLAJlvLrYhnnne8r6OH+YeY=
Subject key identifier: AD:7D:2C:8A:B9:A8:37:E5:3D:CE:BF:7B:3A:CD:0E:38:7F:B0:FB:67
Authority key identifier: A1:C1:30:07:2D:2C:E9:CF:56:2B:83:19:8E:DA:AD:AF:A4:8F:6D:B4
Certificate issuer: /CN=a1c130072d2ce9cf562b83198edaadafa48f6db4
Certificate serial: 019D3940EC99C4A9E085D1A6D6ACC70D605A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.mft
Manifest number: 1161
Signing time: Sun 29 Mar 2026 11:00:49 +0000
Manifest this update: Sun 29 Mar 2026 11:00:49 +0000
Manifest next update: Mon 30 Mar 2026 11:00:49 +0000
Files and hashes: 1: c7MPDF7AuIz_xunWDuFI6Zip6nY.roa (hash: 7iUKf2Xowp5SQqf2eZSh0VXwG8m3+M8eOQtKtEsx4Q4=)
2: ocEwBy0s6c9WK4MZjtqtr6SPbbQ.crl (hash: FORHLOG0GzB/uCkOADQ7hYc4oYaz70kVl9TFKr3dXm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:ec:99:c4:a9:e0:85:d1:a6:d6:ac:c7:0d:60:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1c130072d2ce9cf562b83198edaadafa48f6db4
Validity
Not Before: Mar 29 11:00:49 2026 GMT
Not After : Mar 30 11:00:49 2026 GMT
Subject: CN=ad7d2c8ab9a837e53dcebf7b3acd0e387fb0fb67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fe:41:6e:89:b7:44:79:fd:27:0e:d4:df:f1:
e7:76:5b:a2:2e:59:f7:13:42:7d:59:63:92:e5:5b:
83:f2:6f:17:83:c4:e4:f1:d2:61:67:ee:15:a1:24:
17:4f:20:4c:67:50:e6:c4:82:93:8c:6d:3b:3c:3c:
31:fe:6a:dd:bc:56:a6:6b:ba:8a:65:5d:95:fc:19:
6e:b9:16:db:cf:17:df:f1:72:cb:67:79:d5:f4:2e:
5c:0f:78:89:db:15:27:87:37:bb:44:84:4a:9c:dd:
f9:41:f9:e5:ef:cf:7c:df:db:ad:f2:3f:7b:1a:dd:
80:dc:70:91:16:0a:a0:4f:8f:4a:fd:f9:87:1c:8c:
f1:fc:88:a9:de:ed:bd:7e:48:5d:2f:43:1e:14:a4:
e4:28:11:22:42:5c:1b:da:a6:39:2f:c7:ec:1d:ba:
1c:7f:07:35:7c:dc:f3:09:23:41:c1:53:00:b3:76:
53:78:79:e9:b2:c9:8f:d7:c8:16:3c:f9:aa:72:68:
eb:d9:f3:50:3a:63:2b:6c:76:c9:c6:81:eb:86:e0:
70:19:0a:d0:79:57:f0:6b:76:f0:77:a2:d3:4b:12:
7d:59:39:d0:97:6a:3a:f9:3b:26:f5:ca:ae:bb:5d:
ef:fe:13:e6:fe:2a:64:64:b3:b2:d2:07:66:f3:f2:
04:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:7D:2C:8A:B9:A8:37:E5:3D:CE:BF:7B:3A:CD:0E:38:7F:B0:FB:67
X509v3 Authority Key Identifier:
keyid:A1:C1:30:07:2D:2C:E9:CF:56:2B:83:19:8E:DA:AD:AF:A4:8F:6D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:24:ea:7a:9e:16:6b:9c:84:27:0f:23:59:91:3c:36:4d:e6:
c8:11:92:f3:e7:d0:85:3d:0d:b1:96:d5:ce:ce:1b:23:1c:9f:
f5:6b:24:9c:8d:b3:52:ab:01:f3:cc:1b:44:78:83:32:9d:77:
67:12:f9:6e:f7:33:d8:eb:f9:18:b0:88:f8:5e:cf:b8:a1:37:
83:06:17:2a:61:b6:0b:9d:cf:cd:41:7a:82:2f:58:11:ae:ef:
c2:20:f3:db:50:43:c5:5a:86:81:9d:a5:e1:c0:0e:2e:2a:71:
a4:74:0c:61:e9:7c:ed:75:ec:e6:1f:eb:84:7e:82:bc:11:eb:
af:c5:c2:5d:e4:39:1b:eb:5f:8f:86:20:1b:de:1a:4e:4e:aa:
b9:48:6a:50:d0:74:74:8b:b2:64:ee:cf:f4:9f:d1:3a:61:a3:
43:e7:1a:b6:82:89:4e:8a:e0:50:46:21:91:1a:1a:f4:03:37:
a6:54:6b:3b:92:37:61:b0:39:6b:2a:8a:b5:a2:ac:94:5c:cf:
d5:34:9b:2b:b8:82:63:bd:9e:5b:c6:85:cf:7d:2a:d5:d3:c7:
ab:67:2d:26:a5:a6:8f:cf:7c:3f:02:42:09:6f:89:a9:86:93:
eb:79:dd:2e:d8:76:0d:e3:08:b5:30:51:29:b2:68:21:5d:0a:
07:b9:5c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:18 2026 by rpki-client