Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
File: Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft (raw, json)
Hash identifier: 2EA6c26KtZla7gReNnbp2Qhecgo3Ql+D8CEUzdVC+GU=
Subject key identifier: CB:01:91:24:27:2A:30:3E:20:3D:A5:63:C9:4F:83:32:9B:9C:27:AD
Authority key identifier: 39:CE:4C:0A:BE:27:85:D4:6A:55:71:85:21:70:37:04:23:B5:C5:9A
Certificate issuer: /CN=39ce4c0abe2785d46a5571852170370423b5c59a
Certificate serial: 01A178BA67E435D36EAA4BC84F5DEF0124D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
Manifest number: 12F1
Signing time: Mon 26 Oct 2026 15:00:44 +0000
Manifest this update: Mon 26 Oct 2026 15:00:44 +0000
Manifest next update: Tue 27 Oct 2026 15:00:44 +0000
Files and hashes: 1: GtRugG7rUNXwN8D-4_Fmv8xBbi4.roa (hash: /BvITM4S5y0rZ1AQGGceJ5QHF+EoXg6/6ygN/nHgl9Y=)
2: Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl (hash: YOnr5YkxeZEIocdjjtbf9I6gI7YcUkz15NluvOyg8N8=)
3: _09CYID6_CGhAezIzwAbTFbsCi8.roa (hash: dZSTZUSxmSRc4nvVBTT8GAEBkxmPLHGJ4SuadjBnT94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 15:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:ba:67:e4:35:d3:6e:aa:4b:c8:4f:5d:ef:01:24:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ce4c0abe2785d46a5571852170370423b5c59a
Validity
Not Before: Oct 26 15:00:44 2026 GMT
Not After : Oct 27 15:00:44 2026 GMT
Subject: CN=cb019124272a303e203da563c94f83329b9c27ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b1:fc:08:01:45:09:53:17:1b:21:a6:40:b5:
2b:9c:fa:87:4e:2e:52:d4:1d:e1:d2:45:19:81:a7:
5b:4b:b8:bc:73:77:20:fc:56:99:03:dc:96:6d:cf:
9f:f8:e9:a8:2c:6d:7b:59:e8:3e:e8:15:a6:ad:67:
dd:ac:5d:ab:b8:4e:42:c2:d2:34:58:99:00:f6:df:
05:e5:a1:06:24:be:4d:4a:69:cd:21:ad:94:cd:ad:
42:36:7d:68:8c:09:d0:79:27:14:c8:ed:77:ee:a4:
6d:eb:de:ba:db:73:3e:0a:66:7f:54:45:49:82:9a:
34:8c:4b:64:e0:df:95:06:c9:a1:ff:58:aa:eb:af:
b4:4b:a3:cd:c2:30:d7:33:dd:af:6e:29:5a:70:19:
5f:b6:18:01:e6:2d:fa:7e:8a:cf:01:a3:d6:7f:bb:
83:35:e1:9b:38:bb:0b:b1:83:f4:b7:07:4f:1f:bf:
90:83:7e:4b:ef:9e:21:d1:2e:9a:18:e8:c6:21:07:
c6:3b:df:c4:8d:0c:3c:5b:da:da:b1:01:8d:4c:b4:
06:b5:0a:22:c7:ce:05:f1:53:c5:6f:28:12:07:a8:
5b:c9:76:a7:34:d3:18:b9:3c:b4:6a:e1:74:d4:f5:
5e:5b:37:2f:ec:58:a7:c0:12:b0:88:31:43:39:9f:
fb:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:01:91:24:27:2A:30:3E:20:3D:A5:63:C9:4F:83:32:9B:9C:27:AD
X509v3 Authority Key Identifier:
keyid:39:CE:4C:0A:BE:27:85:D4:6A:55:71:85:21:70:37:04:23:B5:C5:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:73:90:15:73:8a:d7:8e:88:10:9d:31:b4:8e:05:6a:ba:01:
e7:ee:d8:07:50:48:5d:2f:b3:27:72:1b:d1:aa:13:9f:95:2e:
ac:96:ae:b6:ab:f6:c7:5a:04:19:82:d6:2c:c2:8d:ae:57:32:
50:fe:34:a9:9d:de:56:24:85:64:6d:c0:d3:de:9d:b4:e2:5d:
d9:9a:e4:f0:69:dc:6b:be:c2:2f:ed:c5:74:9a:6c:ab:8e:6a:
e3:d5:1e:4f:47:91:8f:c3:52:eb:1c:af:fb:0d:bd:14:2d:12:
79:3f:df:45:9a:5d:b3:0a:d4:a3:82:d1:f0:16:03:71:9d:5f:
8a:83:a6:ec:d5:5e:e2:ec:86:3f:b0:ab:d6:f5:c6:05:67:07:
46:cc:14:95:1f:f1:db:78:8c:90:93:8f:92:61:12:03:25:85:
06:2b:db:c9:aa:fe:73:a6:e9:e8:cb:1a:8a:c7:d3:55:e8:53:
a8:f4:f9:ae:72:d0:d5:de:d1:58:e7:c2:b1:58:54:c0:4e:e2:
01:40:85:a6:76:6b:bd:cc:84:60:31:c2:6d:aa:b2:1c:d7:ef:
84:96:f1:e3:07:4d:a1:1a:91:12:f1:76:05:ef:63:67:b5:2b:
38:e7:62:ef:ee:b2:00:6a:aa:73:83:05:42:7f:e4:9e:0b:a8:
24:1e:75:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 02:04:13 2026 by rpki-client