Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/8c4de6-794f-481a-840f-4714e097f885/1/OcusfjYtShke59dOz7obYN9Z5iM.mft
File: OcusfjYtShke59dOz7obYN9Z5iM.mft (raw, json)
Hash identifier: ZEr6fQGQogpuoqDPo5TnyizE6EhcxxrKtF/BmxRJKNk=
Subject key identifier: B3:8B:7F:74:8D:AB:32:12:4C:BB:AE:AD:83:7F:12:F3:AA:08:35:88
Authority key identifier: 39:CB:AC:7E:36:2D:4A:19:1E:E7:D7:4E:CF:BA:1B:60:DF:59:E6:23
Certificate issuer: /CN=39cbac7e362d4a191ee7d74ecfba1b60df59e623
Certificate serial: 019D389BCB9E6FD3B469BAF60FF283274A92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OcusfjYtShke59dOz7obYN9Z5iM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/8c4de6-794f-481a-840f-4714e097f885/1/OcusfjYtShke59dOz7obYN9Z5iM.mft
Manifest number: 45
Signing time: Sun 29 Mar 2026 08:00:27 +0000
Manifest this update: Sun 29 Mar 2026 08:00:27 +0000
Manifest next update: Mon 30 Mar 2026 08:00:27 +0000
Files and hashes: 1: 9jeQsBy8Ek6DJCckVcCct4bxdfk.roa (hash: N82CYTcY2mhkb6XQxmPcOuNAWExezJ21HpiQd43onXQ=)
2: OcusfjYtShke59dOz7obYN9Z5iM.crl (hash: /8oUzVuCDcOQTlCLP2dMMSCceu9bGUTz90mDciQws4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/8c4de6-794f-481a-840f-4714e097f885/1/OcusfjYtShke59dOz7obYN9Z5iM.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/8c4de6-794f-481a-840f-4714e097f885/1/OcusfjYtShke59dOz7obYN9Z5iM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OcusfjYtShke59dOz7obYN9Z5iM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:cb:9e:6f:d3:b4:69:ba:f6:0f:f2:83:27:4a:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39cbac7e362d4a191ee7d74ecfba1b60df59e623
Validity
Not Before: Mar 29 08:00:27 2026 GMT
Not After : Mar 30 08:00:27 2026 GMT
Subject: CN=b38b7f748dab32124cbbaead837f12f3aa083588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:38:e2:c2:d5:93:e2:a4:a6:b7:44:e0:ac:00:
e0:ea:12:65:90:6d:b3:d4:8c:59:29:52:f1:79:37:
66:bf:4a:16:d6:c8:ff:0b:ad:0f:e1:7e:5f:26:5a:
b8:52:36:9e:ef:f5:95:14:72:8b:e7:35:c2:be:a3:
05:6d:f8:d7:db:11:4c:bf:b6:90:ee:30:9f:e6:37:
c9:9d:d5:d3:63:89:91:d6:94:b6:92:de:e8:1d:35:
6f:2a:56:d5:ae:7e:d1:49:ad:41:85:8a:98:60:32:
10:3f:69:89:50:f9:e3:b8:a1:fd:51:d2:b7:62:3c:
4a:f7:05:4e:ee:1a:18:78:2b:96:01:76:c4:7d:5b:
74:09:40:05:8e:51:2d:15:60:39:7d:6e:b6:a2:4a:
e8:bc:69:fc:5f:ee:f1:95:b2:63:6c:44:7c:ff:8b:
d7:d1:7f:ff:86:5d:86:17:15:dd:22:ee:e1:cb:fb:
f7:a6:8e:b6:2a:94:cd:66:f5:08:e1:28:e9:bd:ae:
14:f6:9c:22:db:95:b4:59:31:06:b4:0b:56:b2:66:
82:3e:1a:e1:50:e1:6b:31:a2:7e:89:ce:4b:28:95:
b0:ef:91:da:e6:83:56:30:58:31:13:47:63:fa:b5:
a3:b4:f5:ba:55:1d:10:81:42:2f:b3:fc:10:a7:6b:
d3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:8B:7F:74:8D:AB:32:12:4C:BB:AE:AD:83:7F:12:F3:AA:08:35:88
X509v3 Authority Key Identifier:
keyid:39:CB:AC:7E:36:2D:4A:19:1E:E7:D7:4E:CF:BA:1B:60:DF:59:E6:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OcusfjYtShke59dOz7obYN9Z5iM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8c4de6-794f-481a-840f-4714e097f885/1/OcusfjYtShke59dOz7obYN9Z5iM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8c4de6-794f-481a-840f-4714e097f885/1/OcusfjYtShke59dOz7obYN9Z5iM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:76:8f:a2:e2:55:ed:d5:04:98:1c:be:58:31:c4:54:f5:22:
34:85:57:e0:a8:9e:79:73:d7:88:13:44:60:07:59:09:6a:33:
8e:a1:99:b5:26:4c:df:e1:84:48:90:a8:c3:8a:75:89:e4:ec:
d7:a6:c2:fa:b5:cb:81:8b:52:9d:40:23:06:c0:aa:23:57:05:
15:8f:f8:81:89:20:c8:50:af:b2:0a:ec:ff:83:d5:33:e8:0e:
63:72:1f:be:a6:1d:a4:a2:3d:c8:1c:d0:d6:41:e5:82:94:51:
5b:8a:f0:d3:a6:5b:8f:47:9b:1e:78:8e:e1:5f:fc:07:0f:40:
b9:cf:ad:5e:ca:bd:f4:9d:e7:4e:ed:26:f5:ec:3c:d7:87:f3:
1b:34:36:16:cf:a8:79:28:af:78:3d:2e:28:c9:c0:bd:ec:bc:
cd:98:18:2e:5a:e7:a0:37:7e:07:5c:26:5d:45:47:21:c3:22:
0a:03:a0:8b:c2:4f:e1:4f:d9:0a:9e:38:eb:d1:b3:75:33:e6:
a6:6d:ed:bf:8f:9b:10:f4:d3:03:e2:6f:09:ac:7c:56:31:d0:
13:b6:8d:63:d5:ae:ad:67:73:cb:58:d1:27:97:f9:2a:09:8a:
7a:e8:e0:07:c8:93:b7:6c:50:6f:03:56:6b:af:da:84:89:47:
58:cf:a1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:28 2026 by rpki-client