Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
File: OcUbkTH248JZr53Qrb9U9xokmO8.mft (raw, json)
Hash identifier: vrNKe6nvX7nYqi2u1090w78ARTK6hejlXDUPwEs+nDA=
Subject key identifier: D9:65:F1:82:C1:9E:4E:0B:A9:5B:73:A7:8E:98:62:A5:26:6C:DE:CD
Authority key identifier: 39:C5:1B:91:31:F6:E3:C2:59:AF:9D:D0:AD:BF:54:F7:1A:24:98:EF
Certificate issuer: /CN=39c51b9131f6e3c259af9dd0adbf54f71a2498ef
Certificate serial: 01A16421BBDC3EA96E0013D602ECBB5D7402
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
Manifest number: 087C
Signing time: Thu 22 Oct 2026 15:01:34 +0000
Manifest this update: Thu 22 Oct 2026 15:01:34 +0000
Manifest next update: Fri 23 Oct 2026 15:01:34 +0000
Files and hashes: 1: 1pw_z4ALbNcIneHL4Ij33SpACpI.roa (hash: twH8uqFHcds859fXJknbVUO58IQvg3qbZxRTaJIyMwY=)
2: OcUbkTH248JZr53Qrb9U9xokmO8.crl (hash: 0s+8HE2Ww28Alo3aozKXxPY5XrbV66v6Vpva4j0txBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:64:21:bb:dc:3e:a9:6e:00:13:d6:02:ec:bb:5d:74:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39c51b9131f6e3c259af9dd0adbf54f71a2498ef
Validity
Not Before: Oct 22 15:01:34 2026 GMT
Not After : Oct 23 15:01:34 2026 GMT
Subject: CN=d965f182c19e4e0ba95b73a78e9862a5266cdecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:17:53:a1:ce:eb:80:9b:b5:0a:94:32:99:46:
c0:26:b2:32:53:3d:71:f5:2f:94:6e:f8:3b:3d:3c:
e3:e0:87:89:91:22:ef:4e:f6:e2:24:d0:3c:41:62:
4e:e5:79:aa:07:f6:51:c8:72:9b:67:5f:30:87:c4:
b3:91:c7:c2:4d:f5:fb:1d:cd:83:b2:c4:07:92:2b:
2e:fb:14:0a:7d:02:9d:3b:20:9f:8f:77:1c:31:0b:
ea:56:25:a9:97:3c:82:6b:b1:72:97:4a:7c:0f:1c:
ac:6d:69:5e:a0:a7:2e:7b:3e:07:fa:3c:dc:a7:4b:
fe:d3:d6:9d:21:02:db:ea:35:26:94:a7:9f:16:ce:
cb:03:8d:4a:12:17:82:72:2d:25:01:d9:f9:1a:f5:
a3:ca:6c:dc:f8:a0:80:53:26:c7:0e:a0:c5:90:b9:
b2:d4:de:48:25:27:7d:e4:e7:0c:e0:d0:b5:8c:e8:
20:a1:da:54:d1:f1:18:4a:2b:c6:62:52:98:87:36:
3a:bd:99:03:42:f4:08:94:fc:0b:2f:ce:98:44:e4:
89:11:b1:93:6c:99:94:c6:db:59:9d:3b:2b:ff:f6:
53:86:8d:0a:af:2d:92:2a:34:65:72:bc:0c:8c:0d:
e3:df:24:db:08:8a:ef:2a:57:77:30:36:89:cc:51:
5e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:65:F1:82:C1:9E:4E:0B:A9:5B:73:A7:8E:98:62:A5:26:6C:DE:CD
X509v3 Authority Key Identifier:
keyid:39:C5:1B:91:31:F6:E3:C2:59:AF:9D:D0:AD:BF:54:F7:1A:24:98:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:c5:16:7c:79:be:5b:02:3c:3a:1a:c6:b2:2c:bc:06:cf:df:
41:6b:97:f6:0e:e3:f9:e8:8d:29:e2:45:88:68:63:85:e7:de:
85:e9:d6:28:bc:3f:26:39:b8:d3:da:81:63:40:e6:08:97:32:
f7:4f:60:c3:2e:65:46:c2:38:c9:7c:57:29:1c:e8:81:c8:46:
d3:ee:73:e2:8a:fa:97:8f:98:7a:29:3d:a0:c9:15:2f:61:7c:
2c:45:f7:68:74:c8:68:ce:d9:6a:78:59:1f:38:12:90:56:27:
0c:61:11:2e:6c:9e:be:03:d4:d1:e1:ce:59:02:7b:4d:ea:21:
0c:d8:52:ed:24:cb:43:c1:84:c4:45:a8:7f:18:d5:8b:0a:2c:
f5:15:2e:2d:39:b3:82:dd:35:62:69:3e:8e:af:80:b0:58:21:
95:46:4f:47:86:c1:99:8b:23:be:fc:df:5d:34:9c:58:d6:00:
41:83:8e:62:3e:de:c3:e0:6c:66:4c:8c:02:8d:1b:bd:09:34:
f4:ff:e9:b7:8b:b4:8b:21:54:84:c5:78:4c:e2:41:8d:85:58:
0c:a9:11:ae:34:c2:52:e1:79:73:68:d1:de:e0:79:f4:47:49:
f3:f8:a1:9b:d2:88:5c:57:f5:17:4e:7c:f0:37:72:e5:b5:4b:
2f:ad:18:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 18:50:58 2026 by rpki-client