Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
File: OcUbkTH248JZr53Qrb9U9xokmO8.mft (raw, json)
Hash identifier: eq8SfnnjSFnHTiHSSTTRkgJWhi4lBBPD/ML9L6KWSbw=
Subject key identifier: B9:C6:C8:D4:A4:64:45:11:91:D6:87:0A:EA:BB:FD:61:70:8A:3C:A8
Authority key identifier: 39:C5:1B:91:31:F6:E3:C2:59:AF:9D:D0:AD:BF:54:F7:1A:24:98:EF
Certificate issuer: /CN=39c51b9131f6e3c259af9dd0adbf54f71a2498ef
Certificate serial: 01A002B8A007AF4FCC8F13E1DC7BB843624D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
Manifest number: 07C5
Signing time: Sat 15 Aug 2026 00:00:49 +0000
Manifest this update: Sat 15 Aug 2026 00:00:49 +0000
Manifest next update: Sun 16 Aug 2026 00:00:49 +0000
Files and hashes: 1: 1pw_z4ALbNcIneHL4Ij33SpACpI.roa (hash: twH8uqFHcds859fXJknbVUO58IQvg3qbZxRTaJIyMwY=)
2: OcUbkTH248JZr53Qrb9U9xokmO8.crl (hash: JMKjubOprdE4vjEdgvHqwFZ6gec9pcfA3JeR/dfsI1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:b8:a0:07:af:4f:cc:8f:13:e1:dc:7b:b8:43:62:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39c51b9131f6e3c259af9dd0adbf54f71a2498ef
Validity
Not Before: Aug 15 00:00:49 2026 GMT
Not After : Aug 16 00:00:49 2026 GMT
Subject: CN=b9c6c8d4a464451191d6870aeabbfd61708a3ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:72:82:f3:e6:5a:db:59:c0:ce:8d:c0:2f:c3:
ba:cb:52:e7:6e:1a:ca:76:f0:90:08:06:e3:65:99:
2c:dd:9a:f7:0c:ff:ea:1b:d4:65:46:50:34:78:17:
47:e5:99:3d:29:3a:6a:fe:ea:da:a1:8b:1d:3a:a4:
8d:e0:07:16:fe:55:31:3a:a4:bf:d7:eb:24:b6:fa:
14:e7:6a:53:7d:45:5c:a0:e5:8e:8d:16:2b:f7:2d:
c6:6a:ab:b6:2a:e2:90:a9:ed:35:76:3e:b6:9d:f2:
49:1b:7a:7e:10:cb:18:71:59:c4:dc:c4:16:85:95:
5a:57:32:89:1b:ea:b8:bb:bd:c6:3b:ab:51:56:0d:
19:e7:70:42:0d:23:3c:d9:29:10:db:63:cf:07:9c:
00:4c:65:3d:03:1d:31:d4:7b:61:b2:5e:71:a9:14:
50:86:1c:90:e6:a1:32:aa:db:ce:c2:73:ca:8a:bc:
d7:6e:54:15:f5:b8:55:eb:e2:ec:27:a7:14:10:cb:
8e:fa:5c:fe:23:aa:16:0a:fc:88:44:d3:f3:e0:f3:
72:08:49:40:2a:2b:4c:96:9f:19:6b:c0:40:8a:3e:
e5:c2:4a:70:96:47:f0:d5:4f:32:33:c2:89:e1:11:
cf:25:24:b7:fa:a5:56:d1:46:3e:74:32:32:83:33:
62:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C6:C8:D4:A4:64:45:11:91:D6:87:0A:EA:BB:FD:61:70:8A:3C:A8
X509v3 Authority Key Identifier:
keyid:39:C5:1B:91:31:F6:E3:C2:59:AF:9D:D0:AD:BF:54:F7:1A:24:98:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:f9:9b:7f:e7:2b:c6:c5:a1:bd:c1:6a:25:cf:d8:2c:4c:94:
67:ea:69:04:12:ce:a8:03:43:a8:bb:02:30:77:66:8e:77:c0:
9c:32:cd:df:5d:9a:9a:09:73:6d:d6:c6:eb:6e:cd:91:35:12:
ac:9a:20:b0:4c:2a:87:eb:da:4a:8e:92:60:34:ae:59:60:32:
8f:42:ab:24:9f:8b:1c:3f:1d:fb:06:81:fb:37:b3:14:68:0d:
c7:d0:bd:91:95:42:d1:36:67:ee:2a:86:8f:c5:c0:f9:a2:84:
f1:b8:9c:e5:e4:cd:80:4c:84:12:cb:e8:f9:f6:fb:60:ee:5e:
d9:08:24:d2:53:34:a2:a1:40:8d:ec:df:c8:cb:94:ed:a0:a1:
bf:d5:6c:81:80:06:6e:06:e6:67:36:77:e5:26:75:7a:b9:d3:
c8:45:11:9e:aa:de:03:6a:e9:7e:01:00:3d:53:98:19:14:87:
0e:b0:24:1d:cd:16:14:6a:92:7d:85:4a:b1:7a:5d:7f:d1:27:
5c:67:ee:d2:c1:4b:7e:fc:19:38:0f:7c:ff:c0:f5:09:eb:c5:
aa:87:9f:bc:cb:36:26:ac:e6:58:ae:b8:fe:cb:e4:a2:59:9b:
21:f6:22:94:d1:b4:96:f9:31:d2:4a:a0:68:14:14:02:16:c5:
96:e9:fc:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACuKAHr0/MjxPh3Hu4Q2JNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5YzUxYjkxMzFmNmUzYzI1OWFmOWRkMGFkYmY1NGY3MWEy
NDk4ZWYwHhcNMjYwODE1MDAwMDQ5WhcNMjYwODE2MDAwMDQ5WjAzMTEwLwYDVQQD
EyhiOWM2YzhkNGE0NjQ0NTExOTFkNjg3MGFlYWJiZmQ2MTcwOGEzY2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3KC8+Za21nAzo3AL8O6y1LnbhrK
dvCQCAbjZZks3Zr3DP/qG9RlRlA0eBdH5Zk9KTpq/uraoYsdOqSN4AcW/lUxOqS/
1+sktvoU52pTfUVcoOWOjRYr9y3Gaqu2KuKQqe01dj62nfJJG3p+EMsYcVnE3MQW
hZVaVzKJG+q4u73GO6tRVg0Z53BCDSM82SkQ22PPB5wATGU9Ax0x1Hthsl5xqRRQ
hhyQ5qEyqtvOwnPKirzXblQV9bhV6+LsJ6cUEMuO+lz+I6oWCvyIRNPz4PNyCElA
KitMlp8Za8BAij7lwkpwlkfw1U8yM8KJ4RHPJSS3+qVW0UY+dDIygzNiQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLnGyNSkZEURkdaHCuq7/WFwijyoMB8GA1UdIwQY
MBaAFDnFG5Ex9uPCWa+d0K2/VPcaJJjvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2NVYmtUSDI0OEpacjUzUXJiOVU5eG9rbU84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8zYTA4YzMtZWRiMC00NzVkLWI4NzAt
NzMwYzRkNDcyYThhLzEvT2NVYmtUSDI0OEpacjUzUXJiOVU5eG9rbU84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8zYTA4YzMtZWRiMC00NzVkLWI4NzAtNzMwYzRkNDcyYThh
LzEvT2NVYmtUSDI0OEpacjUzUXJiOVU5eG9rbU84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS/mbf+cr
xsWhvcFqJc/YLEyUZ+ppBBLOqANDqLsCMHdmjnfAnDLN312amglzbdbG627NkTUS
rJogsEwqh+vaSo6SYDSuWWAyj0KrJJ+LHD8d+waB+zezFGgNx9C9kZVC0TZn7iqG
j8XA+aKE8bic5eTNgEyEEsvo+fb7YO5e2Qgk0lM0oqFAjezfyMuU7aChv9VsgYAG
bgbmZzZ35SZ1ernTyEURnqreA2rpfgEAPVOYGRSHDrAkHc0WFGqSfYVKsXpdf9En
XGfu0sFLfvwZOA98/8D1CevFqoefvMs2JqzmWK64/svkolmbIfYilNG0lvkx0kqg
aBQUAhbFlun82g==
-----END CERTIFICATE-----
Generated at Sat Aug 15 05:22:47 2026 by rpki-client