Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
File: OcUbkTH248JZr53Qrb9U9xokmO8.mft (raw, json)
Hash identifier: q/8yIFRqrXJMtBAj6IGD/UviIpa6n0QFplOAeA83f3I=
Subject key identifier: CD:1F:FB:DC:57:0F:91:78:FE:07:AF:3E:01:88:65:1E:75:BA:F0:23
Authority key identifier: 39:C5:1B:91:31:F6:E3:C2:59:AF:9D:D0:AD:BF:54:F7:1A:24:98:EF
Certificate issuer: /CN=39c51b9131f6e3c259af9dd0adbf54f71a2498ef
Certificate serial: 019F190D3696F3E35EBD144EB8024E61A886
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
Manifest number: 074C
Signing time: Tue 30 Jun 2026 15:02:04 +0000
Manifest this update: Tue 30 Jun 2026 15:02:04 +0000
Manifest next update: Wed 01 Jul 2026 15:02:04 +0000
Files and hashes: 1: 1pw_z4ALbNcIneHL4Ij33SpACpI.roa (hash: twH8uqFHcds859fXJknbVUO58IQvg3qbZxRTaJIyMwY=)
2: OcUbkTH248JZr53Qrb9U9xokmO8.crl (hash: sTwAo9cde7NTYSiAzcQoaAkfHR5iM7zmJKMPQognKgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0d:36:96:f3:e3:5e:bd:14:4e:b8:02:4e:61:a8:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39c51b9131f6e3c259af9dd0adbf54f71a2498ef
Validity
Not Before: Jun 30 15:02:04 2026 GMT
Not After : Jul 1 15:02:04 2026 GMT
Subject: CN=cd1ffbdc570f9178fe07af3e0188651e75baf023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d8:81:a3:0a:23:1e:6a:df:74:79:6b:bd:24:
19:a5:c4:c0:5a:23:f2:22:3b:c4:f2:08:c2:61:08:
69:6b:e8:cb:a5:fd:46:17:22:3f:67:ba:03:69:36:
2b:43:14:56:0b:28:5f:cf:78:1c:bb:05:04:6a:8f:
1a:ee:c4:0f:7d:3b:ff:3d:77:10:de:0d:9f:50:46:
07:4c:7a:3e:9a:15:d8:e6:dd:c4:b4:a8:79:46:c7:
15:50:d2:d4:d7:f4:65:16:00:d5:37:c7:81:8e:ee:
a6:23:49:71:1f:d3:db:80:51:3e:9d:af:b6:20:46:
6f:b4:6c:04:d0:9b:2a:34:db:e4:29:f6:20:d5:3e:
83:7b:08:c1:aa:8a:28:de:5f:a4:85:2f:08:c6:5a:
94:9c:ab:c8:6f:08:29:74:bc:d3:aa:73:0d:4d:fb:
48:56:40:ae:0d:1d:bc:05:a6:69:9e:86:0e:ce:56:
ea:ee:52:00:08:a9:0b:0b:f3:74:ec:c2:45:89:39:
ce:39:3f:31:17:f9:76:53:9c:0e:71:5b:e7:7a:44:
f0:47:d0:86:ff:b8:92:ce:b5:56:59:8a:bc:9c:7d:
e9:46:eb:58:5d:1e:3c:c1:cf:ff:67:0d:23:19:fc:
a7:a5:26:eb:ca:0f:b9:14:43:bd:b7:e2:e8:11:b3:
60:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:1F:FB:DC:57:0F:91:78:FE:07:AF:3E:01:88:65:1E:75:BA:F0:23
X509v3 Authority Key Identifier:
keyid:39:C5:1B:91:31:F6:E3:C2:59:AF:9D:D0:AD:BF:54:F7:1A:24:98:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:d3:98:b9:5f:a7:01:b6:9b:de:bb:d1:62:ae:58:20:e5:a4:
6e:1f:31:6d:a9:af:2e:69:52:09:6f:99:2a:70:39:b6:67:4c:
74:b9:38:f5:76:e2:90:bb:21:c3:28:42:fb:42:c7:d5:e4:2e:
39:96:ee:2b:03:69:44:38:71:0f:22:f3:ac:c1:a8:81:31:de:
fe:70:a0:65:22:6a:93:66:3f:e5:29:73:8a:de:ce:90:f9:61:
cd:d5:a6:34:10:4e:fc:bc:2e:cc:52:fe:6b:ca:96:0e:fb:89:
bb:df:96:fe:c3:c2:16:8b:25:ff:42:66:0c:d9:01:49:88:8c:
d8:02:5c:7e:21:29:89:12:1b:0d:63:71:40:dd:19:37:f1:dc:
23:23:60:7f:0a:fc:4e:ef:42:41:dc:a0:5e:d6:5e:61:00:7c:
83:3f:8a:b0:a7:f5:33:7e:b6:99:25:f1:72:8b:5f:88:97:ac:
4c:32:68:91:e1:9a:76:7f:03:0b:4e:9d:4f:4c:62:54:a7:ce:
e9:7f:08:d0:b2:07:15:b0:e9:6b:35:db:23:6e:a7:1b:62:d2:
cd:66:c9:cc:47:21:fc:3e:3b:9f:a4:59:26:ce:5d:b8:0a:41:
57:69:32:55:24:43:be:db:a4:88:eb:96:8d:a0:d6:9d:e3:fc:
3e:43:6d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:18:51 2026 by rpki-client