Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.mft
File: OcpQZQQ9KKKtw2ODod99O-yBzo0.mft (raw, json)
Hash identifier: QdEjfbjkAtifuy5h9+2gald+r8WM/1cjYfzkWj/UtCg=
Subject key identifier: 26:63:1A:BB:B6:59:EE:F3:4F:D5:A9:31:65:39:63:A1:00:22:53:3B
Authority key identifier: 39:CA:50:65:04:3D:28:A2:AD:C3:63:83:A1:DF:7D:3B:EC:81:CE:8D
Certificate issuer: /CN=39ca5065043d28a2adc36383a1df7d3bec81ce8d
Certificate serial: 019D38D3262986B5D6AA8204417D83CA81D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OcpQZQQ9KKKtw2ODod99O-yBzo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.mft
Manifest number: 1489
Signing time: Sun 29 Mar 2026 09:00:54 +0000
Manifest this update: Sun 29 Mar 2026 09:00:54 +0000
Manifest next update: Mon 30 Mar 2026 09:00:54 +0000
Files and hashes: 1: OcpQZQQ9KKKtw2ODod99O-yBzo0.crl (hash: aWZ27z9wanbZM8YVJl5QKesI21daoy1HnrVqFeIaps8=)
2: sU4SdgLEKJLdmmd7O0WH0cIHbDc.roa (hash: 56F6iMelALI7bLbAqUWShoXQBZvQSM/mzwf3Aamh/qA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OcpQZQQ9KKKtw2ODod99O-yBzo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:26:29:86:b5:d6:aa:82:04:41:7d:83:ca:81:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ca5065043d28a2adc36383a1df7d3bec81ce8d
Validity
Not Before: Mar 29 09:00:54 2026 GMT
Not After : Mar 30 09:00:54 2026 GMT
Subject: CN=26631abbb659eef34fd5a931653963a10022533b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a9:be:a7:02:a3:ee:60:f5:7f:87:6f:b7:75:
47:31:50:9a:ac:42:ba:c5:b6:ea:b6:e3:66:51:52:
a2:bc:d7:06:8f:5c:a1:12:6a:9b:01:c3:ba:fc:08:
9d:67:72:68:ce:03:1f:b9:8e:9d:9f:43:fb:9d:02:
1c:3a:91:0f:13:0c:fe:4b:3e:0a:a9:1c:4d:ff:cc:
08:25:b7:e2:60:67:82:8f:3b:bd:61:32:a8:e1:28:
6f:aa:44:76:ae:81:13:b1:ce:79:97:40:2c:d9:55:
f5:4e:4b:ee:74:e6:e9:4e:fa:1d:3e:95:f6:ea:0e:
12:a2:fc:14:4a:2c:f8:22:a1:ab:04:ac:c3:28:44:
bb:9c:a4:f9:23:07:17:58:45:87:4a:fe:9a:ad:dc:
3f:cf:68:be:cf:fd:65:23:a0:ee:60:5f:14:d8:46:
36:a3:88:f8:a0:4b:0a:db:68:39:4c:3a:fe:b8:4b:
fb:fd:36:52:96:6e:40:ca:c5:49:ab:50:cd:1b:1e:
b2:fb:61:a1:48:6b:b3:47:c5:b7:2a:ed:f6:a8:39:
b6:1a:bb:69:f4:d2:3d:60:d6:b1:f3:88:dd:82:53:
69:69:fc:6e:d0:d4:cd:fb:ae:cb:dd:6b:17:be:6a:
c5:23:62:ce:d9:68:fc:fe:cd:e5:4b:2f:da:43:a5:
1a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:63:1A:BB:B6:59:EE:F3:4F:D5:A9:31:65:39:63:A1:00:22:53:3B
X509v3 Authority Key Identifier:
keyid:39:CA:50:65:04:3D:28:A2:AD:C3:63:83:A1:DF:7D:3B:EC:81:CE:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OcpQZQQ9KKKtw2ODod99O-yBzo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:52:55:35:f2:76:07:51:29:b5:a4:dd:1f:73:f7:ef:af:25:
9e:0c:0e:e6:fa:c6:1f:81:fa:18:30:de:3e:b0:9f:53:fd:f3:
c1:a7:21:be:a6:2e:3e:39:02:6a:66:4a:28:15:2d:ad:06:f0:
89:67:2c:65:90:22:12:4c:b2:78:40:52:30:ef:71:a3:b7:18:
17:24:f0:99:08:91:fe:94:9e:18:80:32:b3:67:8a:fa:28:18:
47:7f:6f:82:26:db:fe:7a:f9:23:49:c7:08:de:39:c6:36:36:
8a:c0:53:f8:aa:7e:26:0e:f3:b4:ac:ce:1c:78:bf:97:50:05:
58:57:2b:e8:85:f6:70:de:a3:19:11:b9:ab:6d:a9:fb:5a:74:
c3:b0:0e:77:bf:fe:60:24:24:ed:94:66:9e:f6:a8:b3:04:08:
42:14:26:8d:0a:4a:0f:3f:13:0e:59:11:76:5b:1f:ea:d7:24:
ba:d3:c7:e8:1c:12:64:55:24:8f:99:ad:f3:58:49:32:86:10:
c1:55:41:9e:d3:99:93:77:b8:12:3a:22:7d:7f:8f:13:fc:b1:
60:fe:2e:52:c4:24:8b:8a:c4:9b:18:09:1f:be:b1:d6:e2:a9:
8c:4e:c0:02:d3:86:90:69:0b:fe:47:5a:9c:e5:df:e4:51:ec:
7e:a8:85:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040yYphrXWqoIEQX2DyoHUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5Y2E1MDY1MDQzZDI4YTJhZGMzNjM4M2ExZGY3ZDNiZWM4
MWNlOGQwHhcNMjYwMzI5MDkwMDU0WhcNMjYwMzMwMDkwMDU0WjAzMTEwLwYDVQQD
EygyNjYzMWFiYmI2NTllZWYzNGZkNWE5MzE2NTM5NjNhMTAwMjI1MzNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6m+pwKj7mD1f4dvt3VHMVCarEK6
xbbqtuNmUVKivNcGj1yhEmqbAcO6/AidZ3JozgMfuY6dn0P7nQIcOpEPEwz+Sz4K
qRxN/8wIJbfiYGeCjzu9YTKo4ShvqkR2roETsc55l0As2VX1TkvudObpTvodPpX2
6g4SovwUSiz4IqGrBKzDKES7nKT5IwcXWEWHSv6ardw/z2i+z/1lI6DuYF8U2EY2
o4j4oEsK22g5TDr+uEv7/TZSlm5AysVJq1DNGx6y+2GhSGuzR8W3Ku32qDm2Grtp
9NI9YNax84jdglNpafxu0NTN+67L3WsXvmrFI2LO2Wj8/s3lSy/aQ6UaKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCZjGru2We7zT9WpMWU5Y6EAIlM7MB8GA1UdIwQY
MBaAFDnKUGUEPSiircNjg6HffTvsgc6NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2NwUVpRUTlLS0t0dzJPRG9kOTlPLXlCem8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8zNDdjMzQtOTZkOC00MTg0LWE2Njgt
ODcwYWNmZWNiY2RmLzEvT2NwUVpRUTlLS0t0dzJPRG9kOTlPLXlCem8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8zNDdjMzQtOTZkOC00MTg0LWE2NjgtODcwYWNmZWNiY2Rm
LzEvT2NwUVpRUTlLS0t0dzJPRG9kOTlPLXlCem8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX1JVNfJ2
B1EptaTdH3P3768lngwO5vrGH4H6GDDePrCfU/3zwachvqYuPjkCamZKKBUtrQbw
iWcsZZAiEkyyeEBSMO9xo7cYFyTwmQiR/pSeGIAys2eK+igYR39vgibb/nr5I0nH
CN45xjY2isBT+Kp+Jg7ztKzOHHi/l1AFWFcr6IX2cN6jGRG5q22p+1p0w7AOd7/+
YCQk7ZRmnvaoswQIQhQmjQpKDz8TDlkRdlsf6tckutPH6BwSZFUkj5mt81hJMoYQ
wVVBntOZk3e4EjoifX+PE/yxYP4uUsQki4rEmxgJH76x1uKpjE7AAtOGkGkL/kda
nOXf5FHsfqiFIw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:33 2026 by rpki-client