Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
File: OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft (raw, json)
Hash identifier: 9OLd14RcTO2J6dx5fsFy9Xj2k1WCkDj0tdDBArORWWI=
Subject key identifier: 28:D6:B6:76:0E:34:9F:C5:33:D6:28:5F:CF:93:9E:36:CF:B0:D8:3A
Authority key identifier: 38:29:D1:31:BE:52:81:0E:47:C9:CB:BF:83:A3:FF:BD:4F:7C:BD:BF
Certificate issuer: /CN=3829d131be52810e47c9cbbf83a3ffbd4f7cbdbf
Certificate serial: 019F859F180555FFBB5F19E515F4F6CF3F38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
Manifest number: 10B4
Signing time: Tue 21 Jul 2026 17:00:23 +0000
Manifest this update: Tue 21 Jul 2026 17:00:23 +0000
Manifest next update: Wed 22 Jul 2026 17:00:23 +0000
Files and hashes: 1: OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl (hash: GIvqEN8o0JmXfvuFdUzOY57Q1Yszur8R5+hPD9zCXDY=)
2: SA91wBhkikPDWTrAUdLpOxUcx_0.roa (hash: Y6pGr30mVBYxj09imikNObgMk7TKch+XIWYn2BcZKOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:9f:18:05:55:ff:bb:5f:19:e5:15:f4:f6:cf:3f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3829d131be52810e47c9cbbf83a3ffbd4f7cbdbf
Validity
Not Before: Jul 21 17:00:23 2026 GMT
Not After : Jul 22 17:00:23 2026 GMT
Subject: CN=28d6b6760e349fc533d6285fcf939e36cfb0d83a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:26:db:60:d4:bc:45:3f:f8:50:30:63:ab:a2:
36:7c:62:31:b7:15:d1:ac:d5:9d:9a:55:b6:95:1a:
c8:be:1a:ae:d1:17:ba:6a:f5:79:d7:3c:f6:ba:62:
eb:3d:9d:fb:a2:9f:10:3a:82:0c:e9:d0:4f:22:e2:
56:53:d6:f6:f3:24:34:a1:f6:da:88:79:98:39:00:
74:f1:45:f7:43:14:bb:27:99:02:b0:56:54:8a:0d:
3e:d4:7a:6f:d9:96:3d:60:b5:ca:6b:2c:d2:a0:f0:
40:b9:e4:ca:13:1d:03:90:36:5b:e8:ba:06:0b:43:
b2:43:1c:26:cf:59:d6:3c:b1:96:ad:3e:2d:02:f5:
65:93:e4:34:e6:87:3a:13:94:14:0e:fd:07:05:c1:
b1:16:24:d9:50:e0:69:40:14:1f:1e:66:12:37:87:
53:d3:86:ef:6c:2e:a4:5b:0f:03:d4:a9:bc:aa:56:
c5:aa:2f:ab:2f:eb:96:ab:f0:af:77:47:9e:6d:32:
73:1e:6a:04:c7:aa:b0:ee:0d:6e:4b:98:56:4e:fd:
64:60:e4:3c:00:78:c2:03:88:28:b9:29:7b:18:e2:
ad:ef:4c:6c:cf:20:df:58:22:f4:9a:18:80:d9:68:
8a:86:8b:e8:20:96:28:be:d3:21:df:19:0f:42:57:
7d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D6:B6:76:0E:34:9F:C5:33:D6:28:5F:CF:93:9E:36:CF:B0:D8:3A
X509v3 Authority Key Identifier:
keyid:38:29:D1:31:BE:52:81:0E:47:C9:CB:BF:83:A3:FF:BD:4F:7C:BD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:81:57:f4:10:fc:22:89:bb:53:1c:41:13:aa:1a:f8:15:bb:
ac:b1:fd:87:8a:5f:b0:f5:db:c1:8f:5d:19:ed:02:13:18:4c:
81:dd:2a:78:16:8f:5b:a9:c0:ba:6d:e2:37:c0:51:5c:13:6b:
77:d8:25:ae:b5:c1:f8:25:02:96:31:cb:e1:46:07:bc:69:ed:
91:d8:97:8d:a8:78:32:ce:f3:b8:ac:d8:cd:75:8b:67:cc:7f:
49:ec:51:c3:3e:e7:2c:af:e9:23:9a:d6:fd:bc:7b:3c:57:25:
d2:dc:3a:26:be:5c:fb:38:c3:85:a8:49:70:2b:04:51:48:cb:
f6:9d:3e:ed:a2:37:30:94:ef:14:7e:f0:1a:5b:c9:af:a8:fb:
4e:4a:aa:02:64:bd:b4:32:be:aa:49:1d:50:40:d2:ff:f6:85:
e7:88:b2:f3:58:db:a6:83:c1:d9:76:7d:67:b5:0f:d7:6b:4c:
d3:42:9c:b8:3d:89:81:fc:98:7d:e6:a0:69:4a:b7:18:0a:84:
fb:21:fc:88:a5:9a:0d:cc:83:26:8d:28:7c:b9:14:ea:99:c0:
70:ac:29:43:e4:f6:65:0e:cb:f4:5d:a4:fc:54:42:7c:13:b1:
bf:40:59:b0:73:e7:46:40:98:34:5e:df:ed:3f:65:60:7f:26:
16:c0:7f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:43:31 2026 by rpki-client