Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
File: OcUbkTH248JZr53Qrb9U9xokmO8.mft (raw, json)
Hash identifier: zVjFj4vU9Ru0Y8XhqJD9Hidb7hlYuYbRl//AYZG61dk=
Subject key identifier: 0F:AA:82:EC:63:91:B2:C9:AB:4F:B7:E1:76:CD:01:33:7F:17:F4:FE
Authority key identifier: 39:C5:1B:91:31:F6:E3:C2:59:AF:9D:D0:AD:BF:54:F7:1A:24:98:EF
Certificate issuer: /CN=39c51b9131f6e3c259af9dd0adbf54f71a2498ef
Certificate serial: 019E314E67D03B42DDC12D6F4BFC735918E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
Manifest number: 06D4
Signing time: Sat 16 May 2026 15:01:22 +0000
Manifest this update: Sat 16 May 2026 15:01:22 +0000
Manifest next update: Sun 17 May 2026 15:01:22 +0000
Files and hashes: 1: 1pw_z4ALbNcIneHL4Ij33SpACpI.roa (hash: twH8uqFHcds859fXJknbVUO58IQvg3qbZxRTaJIyMwY=)
2: OcUbkTH248JZr53Qrb9U9xokmO8.crl (hash: 502LydtM6xIdVzaxXwy9hcFMr6/tDVdS3SbwyThAWXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4e:67:d0:3b:42:dd:c1:2d:6f:4b:fc:73:59:18:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39c51b9131f6e3c259af9dd0adbf54f71a2498ef
Validity
Not Before: May 16 15:01:22 2026 GMT
Not After : May 17 15:01:22 2026 GMT
Subject: CN=0faa82ec6391b2c9ab4fb7e176cd01337f17f4fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:48:d1:15:cb:7c:f8:d6:80:5b:d0:21:1a:24:
9d:8a:1f:3c:ea:71:05:ac:a7:d2:b7:2b:48:30:be:
dd:f7:28:44:04:aa:60:71:28:a8:25:53:b2:0b:c6:
8e:0a:28:17:00:f6:c7:f7:bd:4c:43:54:84:ee:bd:
09:b4:ae:2b:fd:ac:25:fa:01:09:7f:07:71:bc:c7:
8a:1f:0b:f1:17:e5:e2:ed:e5:d9:ba:2a:4c:39:e2:
d8:cf:2a:91:ec:16:4b:d4:7a:6e:3e:5a:1e:f9:82:
1d:6a:3a:4f:f7:a2:b3:31:49:00:79:66:51:dc:91:
3f:db:78:ba:19:0d:01:b8:3e:e3:98:2f:96:e3:b8:
b5:b7:cf:16:45:a1:f0:f4:3a:7f:52:ea:6d:b0:31:
51:7f:07:7c:8e:09:33:67:be:ce:61:85:bf:d7:bf:
71:23:70:cd:47:62:96:a7:fc:a7:ce:e0:c1:63:07:
2e:7b:7d:cc:07:5c:2b:d2:76:f6:d2:56:67:18:4d:
86:cf:31:35:8a:02:3b:7c:4b:b1:d0:82:dd:fe:24:
05:79:dc:31:5a:16:97:80:15:10:f3:25:8d:7d:e9:
58:fa:8a:9c:e5:58:fd:95:d7:90:b1:03:f0:60:08:
f7:9d:8c:ea:99:eb:e9:c1:07:44:99:fd:8b:7d:52:
17:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:AA:82:EC:63:91:B2:C9:AB:4F:B7:E1:76:CD:01:33:7F:17:F4:FE
X509v3 Authority Key Identifier:
keyid:39:C5:1B:91:31:F6:E3:C2:59:AF:9D:D0:AD:BF:54:F7:1A:24:98:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:d8:bf:d1:f5:c6:73:d2:dd:25:fa:c1:92:06:0b:1c:15:58:
e6:23:f5:1f:19:36:14:7b:d1:89:6e:1b:01:90:6b:c7:c6:44:
74:99:81:34:27:22:e8:e7:44:73:76:0d:24:bd:13:aa:e0:ba:
5e:5d:31:25:d4:ad:f5:8c:4e:76:f3:bf:ef:0e:f9:29:40:27:
72:2c:92:9f:13:0a:43:cf:94:6e:2b:e1:c6:5b:de:4d:5c:c5:
27:bd:81:b1:41:00:33:d2:a0:ea:a5:da:c7:44:37:ba:99:cb:
10:d9:3f:3b:2d:88:a1:5a:20:30:7e:61:cb:6a:8f:af:ba:dc:
23:de:00:2f:7c:44:43:b4:37:e0:b9:b0:e0:8f:98:f0:92:e6:
f8:a7:dc:46:d0:82:eb:03:fd:2b:06:2e:de:34:ab:c3:23:f2:
f2:3d:8e:74:b5:32:27:c2:6b:12:ef:4b:fc:fb:68:26:e7:b6:
c1:c5:ff:4c:7a:50:55:93:58:1c:31:c8:e0:71:62:7f:d9:a4:
aa:03:e9:c2:3a:c6:61:51:58:89:c8:d0:b0:06:26:9d:3d:ce:
3a:c8:63:26:35:a7:03:2d:c8:db:6d:7c:f8:9b:e5:ec:83:b9:
0e:0c:ff:a0:35:cd:e6:12:aa:fa:46:ba:28:70:74:c8:37:64:
6e:bc:a9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:02:06 2026 by rpki-client