Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.mft
File: ocG-CYGk51dsVi9vCeZcF8GA48o.mft (raw, json)
Hash identifier: yDScub9WdDB52qWCdQTJOsSxeEqU/LKSkHXGxb7/NJw=
Subject key identifier: BD:6A:E8:F4:57:96:ED:82:20:E0:B5:C3:79:01:A6:D2:9E:01:8A:BE
Authority key identifier: A1:C1:BE:09:81:A4:E7:57:6C:56:2F:6F:09:E6:5C:17:C1:80:E3:CA
Certificate issuer: /CN=a1c1be0981a4e7576c562f6f09e65c17c180e3ca
Certificate serial: 019CABD9BDFA8E24160A8E96F0A55F5530C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ocG-CYGk51dsVi9vCeZcF8GA48o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 00:01:39 +0000
Manifest this update: Mon 02 Mar 2026 00:01:39 +0000
Manifest next update: Tue 03 Mar 2026 00:01:39 +0000
Files and hashes: 1: ocG-CYGk51dsVi9vCeZcF8GA48o.crl (hash: QGKww4xSp+sIUJ7cU5PW5f1rC/XaalRC2/53gx57btU=)
2: wu-G3RyBE4hAU-OLiWD-QOCIX_4.roa (hash: rgoDex3C8KLhszdHAASmB1VMl9HshjIiBd1RRJ0afb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ocG-CYGk51dsVi9vCeZcF8GA48o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:bd:fa:8e:24:16:0a:8e:96:f0:a5:5f:55:30:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1c1be0981a4e7576c562f6f09e65c17c180e3ca
Validity
Not Before: Mar 2 00:01:39 2026 GMT
Not After : Mar 3 00:01:39 2026 GMT
Subject: CN=bd6ae8f45796ed8220e0b5c37901a6d29e018abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bc:20:42:f5:98:93:0a:01:51:b2:a0:45:ee:
c7:94:fe:2b:50:d9:aa:3e:90:40:c1:45:f8:44:2c:
45:ef:e7:44:84:18:4d:b7:be:08:b7:99:6c:79:e7:
8e:3f:bc:53:5d:97:a9:68:1a:08:67:14:43:08:0b:
02:87:ad:e0:28:b4:34:04:0c:7f:a0:cc:a8:a1:e9:
e0:30:dc:02:4e:3d:75:8b:41:17:ba:5e:77:44:9c:
46:fc:b4:0d:a2:ec:49:45:4c:a2:3c:9f:ee:4d:21:
55:b9:21:61:c8:b7:43:08:46:0c:bb:2e:07:e4:ba:
11:7d:49:62:c7:87:2f:98:59:c6:4f:f9:9d:03:dd:
45:74:50:54:c2:b6:f7:96:c3:d6:40:3e:7c:8f:41:
e8:28:a8:3d:11:18:09:a8:46:cb:6b:6f:74:a7:a4:
44:6d:f2:5b:43:74:c6:23:0b:e0:af:25:1f:47:05:
0c:e6:30:f7:99:73:d3:aa:6c:e6:3a:72:5d:af:21:
0f:b3:c3:76:7b:3c:55:61:fb:0b:1d:8a:56:f4:80:
b3:b5:0d:0e:29:e3:64:7d:3d:79:1a:0b:86:30:57:
68:cd:02:fb:cd:c4:43:29:36:48:76:a2:15:d2:e6:
a8:9e:39:38:86:d8:c0:bc:23:10:53:29:41:ed:78:
5c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:6A:E8:F4:57:96:ED:82:20:E0:B5:C3:79:01:A6:D2:9E:01:8A:BE
X509v3 Authority Key Identifier:
keyid:A1:C1:BE:09:81:A4:E7:57:6C:56:2F:6F:09:E6:5C:17:C1:80:E3:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ocG-CYGk51dsVi9vCeZcF8GA48o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:cc:97:40:70:9f:1b:83:c5:97:b8:b6:98:00:81:de:8b:f1:
0c:db:7b:8c:09:e2:91:b8:12:2e:2f:8e:d8:7d:90:5b:27:d1:
b1:02:08:cf:71:b6:c1:e6:3a:05:78:9c:1e:99:32:7a:e8:ed:
b3:50:15:fe:d9:49:56:da:6d:ec:dd:41:db:a6:d2:7b:71:e7:
22:02:d6:f5:da:e0:54:64:18:99:2d:a1:7f:aa:e4:da:ac:33:
c7:78:68:b1:5d:fe:94:f7:c8:ca:62:4c:aa:19:a6:e8:d8:12:
4e:21:ff:37:ec:46:88:2d:53:76:05:72:8e:44:94:1f:71:84:
f1:21:ba:b8:b8:cb:72:2f:71:3a:66:1a:b6:de:f5:48:c8:55:
e6:e3:65:28:61:ee:f5:9a:6c:b0:da:47:4b:70:b0:7c:7f:38:
b5:32:c5:ca:83:2e:06:6b:e9:8c:2b:f5:66:7d:62:9d:a3:9b:
b9:b1:ff:a0:ff:2e:5c:f1:54:06:23:1f:e6:25:52:e1:85:a7:
69:17:49:2e:3f:e3:f3:e1:7b:2d:b7:5e:47:8a:d9:85:b6:d0:
c2:44:81:7e:a5:a5:3d:f3:43:0b:d6:dd:3c:d7:7e:4e:88:64:
37:fc:bb:51:57:c2:62:e3:a4:8c:64:f4:c4:4a:62:b5:21:ef:
4e:f3:4e:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2b36jiQWCo6W8KVfVTDGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExYzFiZTA5ODFhNGU3NTc2YzU2MmY2ZjA5ZTY1YzE3YzE4
MGUzY2EwHhcNMjYwMzAyMDAwMTM5WhcNMjYwMzAzMDAwMTM5WjAzMTEwLwYDVQQD
EyhiZDZhZThmNDU3OTZlZDgyMjBlMGI1YzM3OTAxYTZkMjllMDE4YWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7wgQvWYkwoBUbKgRe7HlP4rUNmq
PpBAwUX4RCxF7+dEhBhNt74It5lseeeOP7xTXZepaBoIZxRDCAsCh63gKLQ0BAx/
oMyooengMNwCTj11i0EXul53RJxG/LQNouxJRUyiPJ/uTSFVuSFhyLdDCEYMuy4H
5LoRfUlix4cvmFnGT/mdA91FdFBUwrb3lsPWQD58j0HoKKg9ERgJqEbLa290p6RE
bfJbQ3TGIwvgryUfRwUM5jD3mXPTqmzmOnJdryEPs8N2ezxVYfsLHYpW9ICztQ0O
KeNkfT15GguGMFdozQL7zcRDKTZIdqIV0uaonjk4htjAvCMQUylB7XhcJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL1q6PRXlu2CIOC1w3kBptKeAYq+MB8GA1UdIwQY
MBaAFKHBvgmBpOdXbFYvbwnmXBfBgOPKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2NHLUNZR2s1MWRzVmk5dkNlWmNGOEdBNDhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi84MWU1YTUtYWMzOS00M2MxLTg3MmYt
OThkZmMyZWU2ZTBjLzEvb2NHLUNZR2s1MWRzVmk5dkNlWmNGOEdBNDhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi84MWU1YTUtYWMzOS00M2MxLTg3MmYtOThkZmMyZWU2ZTBj
LzEvb2NHLUNZR2s1MWRzVmk5dkNlWmNGOEdBNDhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnsyXQHCf
G4PFl7i2mACB3ovxDNt7jAnikbgSLi+O2H2QWyfRsQIIz3G2weY6BXicHpkyeujt
s1AV/tlJVtpt7N1B26bSe3HnIgLW9drgVGQYmS2hf6rk2qwzx3hosV3+lPfIymJM
qhmm6NgSTiH/N+xGiC1TdgVyjkSUH3GE8SG6uLjLci9xOmYatt71SMhV5uNlKGHu
9ZpssNpHS3CwfH84tTLFyoMuBmvpjCv1Zn1inaObubH/oP8uXPFUBiMf5iVS4YWn
aRdJLj/j8+F7LbdeR4rZhbbQwkSBfqWlPfNDC9bdPNd+TohkN/y7UVfCYuOkjGT0
xEpitSHvTvNOIA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:57:10 2026 by rpki-client