Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
File: OCxntKtK-G_mHqjG4X0R4-BdClE.mft (raw, json)
Hash identifier: LvHuRIEW1fVOCO51J3CCmLmSmsEwWC0ylpa0a/d+phI=
Subject key identifier: 3E:27:E8:77:E6:33:8A:DD:1D:BA:76:C4:41:DF:83:DD:F6:B0:FF:74
Authority key identifier: 38:2C:67:B4:AB:4A:F8:6F:E6:1E:A8:C6:E1:7D:11:E3:E0:5D:0A:51
Certificate issuer: /CN=382c67b4ab4af86fe61ea8c6e17d11e3e05d0a51
Certificate serial: 019D390A459FF40EC021B2D436E91C6CC371
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
Manifest number: 10FC
Signing time: Sun 29 Mar 2026 10:01:07 +0000
Manifest this update: Sun 29 Mar 2026 10:01:07 +0000
Manifest next update: Mon 30 Mar 2026 10:01:07 +0000
Files and hashes: 1: OCxntKtK-G_mHqjG4X0R4-BdClE.crl (hash: /gLaK2Iwue3LIMpDwPNk+ob54D+XK1f6F2fmiswVoEw=)
2: PPgnUS1OTeT8xtOKOgFCmjzijW0.roa (hash: hTERt+3AhxQ4QtapOxXoNon5AhhXXrDspSgS4orn0+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:45:9f:f4:0e:c0:21:b2:d4:36:e9:1c:6c:c3:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382c67b4ab4af86fe61ea8c6e17d11e3e05d0a51
Validity
Not Before: Mar 29 10:01:07 2026 GMT
Not After : Mar 30 10:01:07 2026 GMT
Subject: CN=3e27e877e6338add1dba76c441df83ddf6b0ff74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6d:00:d0:a4:a1:05:80:ab:b4:2d:88:c6:39:
6d:67:77:43:72:1d:39:88:df:1e:04:cd:3d:ac:61:
93:3f:be:e8:47:5c:f1:77:d5:49:2a:9a:c9:cc:aa:
68:66:b0:2b:af:6d:81:b0:80:4b:29:77:ac:2b:38:
61:ae:63:f5:59:0f:7e:e0:c8:19:55:9e:3f:83:1e:
a1:c2:0c:58:e0:aa:a2:82:42:c6:17:1d:7d:8c:57:
59:21:0a:03:d1:a7:21:4a:2e:9d:aa:3f:9a:e6:71:
ad:2a:b6:97:ae:c7:26:02:17:38:66:01:62:c5:ff:
df:d1:d6:62:34:15:e1:3f:26:af:db:25:90:d7:e9:
e6:d1:9b:8a:66:ce:5a:07:81:be:3d:ed:dd:a8:55:
52:90:c9:da:d1:bc:30:fd:81:03:9c:9f:ef:c3:f0:
cf:bc:61:b9:f1:24:74:a8:1b:36:4c:7e:69:1e:f0:
56:2b:80:bf:5b:0b:50:8d:48:ee:f8:fa:60:08:26:
f3:30:4f:1a:5f:e0:da:c7:84:cd:3f:67:d0:b6:92:
ec:41:47:b5:cf:21:c2:4a:22:27:25:ef:28:eb:85:
1d:ab:54:12:d6:6f:72:e7:ca:d8:61:39:e1:2c:38:
43:82:d8:69:32:6d:b9:b0:81:d2:e3:b6:d9:25:37:
bd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:27:E8:77:E6:33:8A:DD:1D:BA:76:C4:41:DF:83:DD:F6:B0:FF:74
X509v3 Authority Key Identifier:
keyid:38:2C:67:B4:AB:4A:F8:6F:E6:1E:A8:C6:E1:7D:11:E3:E0:5D:0A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:30:ba:da:27:f4:5f:a6:94:f2:02:18:5e:f0:cf:d2:61:0e:
d7:44:50:bd:7f:17:73:bd:a9:d6:92:21:e3:01:46:aa:4e:55:
bd:4c:ab:67:4f:d2:43:8d:d4:e1:24:d7:98:15:ac:b8:c0:03:
4a:d0:8d:79:41:25:5b:f7:76:52:11:8a:ce:f2:14:63:6d:d7:
7b:8b:a0:33:32:d2:77:ff:8f:36:5b:95:59:74:d6:7f:19:91:
bd:e3:bc:5a:b7:e0:75:af:05:cd:29:79:5b:99:7a:26:c4:20:
c2:cc:bf:2d:05:ec:f8:4e:c1:b4:4f:e7:93:b0:43:6f:b3:ce:
23:90:e8:59:7f:58:0f:30:2e:90:58:cd:bc:5b:94:1a:2d:5d:
c8:ee:21:12:4c:45:3b:0e:c0:3e:08:d6:5c:23:ed:c9:4b:70:
62:a1:ad:18:cc:c9:01:c6:2f:56:83:46:51:d2:c1:ea:f3:dd:
7e:93:f7:27:50:3b:7d:93:b7:b7:2c:de:20:ba:a2:65:cb:5a:
50:e3:11:e9:eb:37:1c:51:4a:1f:96:83:9a:4b:31:ad:b9:4a:
db:9d:a7:de:22:1b:cd:e5:37:c3:39:a7:e0:0f:21:11:d4:f1:
b0:ea:f4:3e:b1:23:8e:37:a0:51:d9:96:df:cd:8e:49:e4:b2:
99:b4:8e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:52:14 2026 by rpki-client