Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
File: OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft (raw, json)
Hash identifier: VQBaKpI1xLk11zcxA+M7Bo6Qx49vWOh31uw/1Lo9AjU=
Subject key identifier: EB:C3:1F:73:9F:31:F0:63:1F:FA:D1:0A:B5:06:53:47:02:AF:9E:9D
Authority key identifier: 38:29:D1:31:BE:52:81:0E:47:C9:CB:BF:83:A3:FF:BD:4F:7C:BD:BF
Certificate issuer: /CN=3829d131be52810e47c9cbbf83a3ffbd4f7cbdbf
Certificate serial: 01A06F4C98DF7AFFD38654E8BDC089D9DDA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
Manifest number: 112D
Signing time: Sat 05 Sep 2026 02:01:25 +0000
Manifest this update: Sat 05 Sep 2026 02:01:25 +0000
Manifest next update: Sun 06 Sep 2026 02:01:25 +0000
Files and hashes: 1: OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl (hash: RqaDxKgU0nNGthkS+aWpOd/ftc+fQ4CtSU+ZqnBfFQw=)
2: SA91wBhkikPDWTrAUdLpOxUcx_0.roa (hash: Y6pGr30mVBYxj09imikNObgMk7TKch+XIWYn2BcZKOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:4c:98:df:7a:ff:d3:86:54:e8:bd:c0:89:d9:dd:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3829d131be52810e47c9cbbf83a3ffbd4f7cbdbf
Validity
Not Before: Sep 5 02:01:25 2026 GMT
Not After : Sep 6 02:01:25 2026 GMT
Subject: CN=ebc31f739f31f0631ffad10ab506534702af9e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:90:ba:ee:0c:13:6c:a8:4c:31:1e:3d:c8:a0:
e7:8d:e6:3b:ea:af:61:d1:f9:3a:ac:4b:33:82:6c:
6a:b7:77:76:e3:45:88:c6:34:e5:b0:11:11:92:51:
f2:69:51:4e:4a:9e:b7:12:f0:48:f4:b1:a3:4b:d9:
e4:88:94:1f:e1:d9:ae:f2:6e:ae:6e:81:70:a4:78:
bc:30:aa:12:a4:99:df:88:d4:1d:39:42:86:ca:05:
84:b0:b3:71:61:06:dd:ea:b1:d9:91:ef:d0:d0:5e:
71:78:61:a6:30:aa:58:10:4f:c1:c1:aa:5a:c8:16:
f5:29:39:7c:3d:0a:6d:3f:c1:4c:b6:c6:70:85:dc:
a0:55:5f:81:fd:28:4b:aa:3e:74:48:3b:6d:2e:c6:
4f:03:e6:5d:b5:d8:a9:81:67:b9:ef:15:b1:c9:eb:
03:5c:f9:ec:99:11:22:e0:d5:d2:a9:a0:e1:2a:1d:
b5:42:ab:0a:ca:2e:90:5a:bc:57:b7:9f:9c:5a:96:
11:1b:b1:d5:fd:47:fe:8c:74:10:2f:cd:2d:78:8f:
38:b2:6b:cb:a5:f5:56:d4:a0:c4:94:1b:a6:94:23:
92:dd:35:56:43:9d:9e:2a:58:14:79:d4:7d:11:8b:
12:71:fe:84:27:30:1c:94:d3:2f:cd:75:9d:c4:04:
83:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C3:1F:73:9F:31:F0:63:1F:FA:D1:0A:B5:06:53:47:02:AF:9E:9D
X509v3 Authority Key Identifier:
keyid:38:29:D1:31:BE:52:81:0E:47:C9:CB:BF:83:A3:FF:BD:4F:7C:BD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:0d:80:c1:2a:8b:4d:45:4f:ff:78:64:6a:c9:0c:98:52:4a:
dd:ec:cb:bc:56:f1:bb:61:af:f9:85:3a:e6:a0:42:f8:26:50:
e4:45:a9:67:f8:60:f2:05:28:84:b6:4d:7d:31:70:9d:fc:3b:
16:9a:60:1c:cf:ae:14:04:d3:e4:9e:c8:22:25:dc:af:13:fd:
c4:cf:26:25:4e:7d:fc:fb:f0:53:36:6c:82:eb:ae:26:9c:c9:
fe:ef:7f:9c:dd:5d:d8:a7:62:ea:a8:e8:72:16:31:7e:c3:d0:
4a:52:ed:e0:0f:f5:a1:ed:4d:3c:38:cd:12:8d:28:7e:0a:8b:
6b:68:e8:76:c7:7f:2d:ca:4e:7b:eb:02:bc:07:7f:92:c0:6a:
ee:b3:f8:b2:7b:c1:16:9b:26:57:a1:55:9a:b7:2f:f0:bc:9e:
d5:0f:a9:e5:f4:af:58:26:a5:6c:89:c6:93:23:53:f9:35:22:
03:a3:bb:03:5c:ed:c1:af:32:41:23:e0:70:8d:e8:9e:e5:89:
70:5a:28:f9:a6:b8:d1:69:ab:21:3e:88:32:57:a8:14:ad:54:
b6:3e:7c:0e:fe:21:ce:10:7b:d9:54:45:69:49:70:65:c9:12:
bc:51:ef:3c:f3:fb:ef:d5:d7:4e:ca:80:8d:ff:56:bb:a9:9b:
09:69:d0:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBvTJjfev/ThlTovcCJ2d2jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MjlkMTMxYmU1MjgxMGU0N2M5Y2JiZjgzYTNmZmJkNGY3
Y2JkYmYwHhcNMjYwOTA1MDIwMTI1WhcNMjYwOTA2MDIwMTI1WjAzMTEwLwYDVQQD
EyhlYmMzMWY3MzlmMzFmMDYzMWZmYWQxMGFiNTA2NTM0NzAyYWY5ZTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZC67gwTbKhMMR49yKDnjeY76q9h
0fk6rEszgmxqt3d240WIxjTlsBERklHyaVFOSp63EvBI9LGjS9nkiJQf4dmu8m6u
boFwpHi8MKoSpJnfiNQdOUKGygWEsLNxYQbd6rHZke/Q0F5xeGGmMKpYEE/Bwapa
yBb1KTl8PQptP8FMtsZwhdygVV+B/ShLqj50SDttLsZPA+ZdtdipgWe57xWxyesD
XPnsmREi4NXSqaDhKh21QqsKyi6QWrxXt5+cWpYRG7HV/Uf+jHQQL80teI84smvL
pfVW1KDElBumlCOS3TVWQ52eKlgUedR9EYsScf6EJzAclNMvzXWdxASD1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOvDH3OfMfBjH/rRCrUGU0cCr56dMB8GA1UdIwQY
MBaAFDgp0TG+UoEOR8nLv4Oj/71PfL2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0NuUk1iNVNnUTVIeWN1X2c2UF92VTk4dmI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iMWE0ZTEtODc3Yi00MzgwLWJmYmYt
YjAzOGRiODk4YjdlLzEvT0NuUk1iNVNnUTVIeWN1X2c2UF92VTk4dmI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9iMWE0ZTEtODc3Yi00MzgwLWJmYmYtYjAzOGRiODk4Yjdl
LzEvT0NuUk1iNVNnUTVIeWN1X2c2UF92VTk4dmI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQg2AwSqL
TUVP/3hkaskMmFJK3ezLvFbxu2Gv+YU65qBC+CZQ5EWpZ/hg8gUohLZNfTFwnfw7
FppgHM+uFATT5J7IIiXcrxP9xM8mJU59/PvwUzZsguuuJpzJ/u9/nN1d2Kdi6qjo
chYxfsPQSlLt4A/1oe1NPDjNEo0ofgqLa2jodsd/LcpOe+sCvAd/ksBq7rP4snvB
FpsmV6FVmrcv8Lye1Q+p5fSvWCalbInGkyNT+TUiA6O7A1ztwa8yQSPgcI3onuWJ
cFoo+aa40WmrIT6IMleoFK1Utj58Dv4hzhB72VRFaUlwZckSvFHvPPP779XXTsqA
jf9Wu6mbCWnQlw==
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:39:56 2026 by rpki-client