Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.mft
File: OCZCPrAZVSJObBHRnG05OB6L4h0.mft (raw, json)
Hash identifier: gq6t8HcWfly7/xmftBniAmAa24de8tH//AwYqVERPJ4=
Subject key identifier: 88:34:C8:FA:26:E5:60:64:E4:AF:80:A1:1D:8C:38:3D:4F:F2:2B:F5
Authority key identifier: 38:26:42:3E:B0:19:55:22:4E:6C:11:D1:9C:6D:39:38:1E:8B:E2:1D
Certificate issuer: /CN=3826423eb01955224e6c11d19c6d39381e8be21d
Certificate serial: 019CA97C7635F9D2D5230BD0C316D511099B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCZCPrAZVSJObBHRnG05OB6L4h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.mft
Manifest number: 0C7A
Signing time: Sun 01 Mar 2026 13:00:32 +0000
Manifest this update: Sun 01 Mar 2026 13:00:32 +0000
Manifest next update: Mon 02 Mar 2026 13:00:32 +0000
Files and hashes: 1: OCZCPrAZVSJObBHRnG05OB6L4h0.crl (hash: m3dnOKQzL7L7ybXrEFOxIiwTU+SyZYVHYBFGtTbN2Nc=)
2: h9uxXItcVMUhyEnd-qfo0NworEk.roa (hash: cN3aXRc8HLSRjs8+K7/jdo4PEzNiyVUr1h8Z9QW7HmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCZCPrAZVSJObBHRnG05OB6L4h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7c:76:35:f9:d2:d5:23:0b:d0:c3:16:d5:11:09:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3826423eb01955224e6c11d19c6d39381e8be21d
Validity
Not Before: Mar 1 13:00:32 2026 GMT
Not After : Mar 2 13:00:32 2026 GMT
Subject: CN=8834c8fa26e56064e4af80a11d8c383d4ff22bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7c:48:60:a8:2f:9f:d6:76:73:03:c8:1a:7f:
a3:37:92:4d:a2:4e:cb:8b:31:59:bb:69:3e:e5:ba:
89:fd:00:90:80:fa:19:b2:1d:8f:f9:0c:92:a1:9b:
8a:a7:a3:65:7c:f0:e4:f6:92:76:07:b0:21:3b:0e:
d0:56:04:ca:30:76:14:3b:29:6d:22:97:d1:3b:ca:
ac:24:00:46:2a:82:48:13:c5:b8:a8:42:4b:fc:6f:
22:22:c8:59:d8:ac:32:ff:3a:4a:52:36:d9:f8:c6:
ce:3a:99:f2:11:26:44:7e:88:50:d4:be:f5:2f:16:
87:fa:42:db:55:34:0d:81:94:de:6c:63:f1:b8:fe:
fb:63:89:1a:f2:5d:e0:9a:18:39:37:e9:bb:3e:0c:
16:fe:50:26:54:dc:83:7f:4f:33:af:3b:f0:74:04:
ec:3a:3b:cb:6f:75:39:7b:28:46:ac:52:b7:23:56:
77:d7:93:40:cf:18:aa:35:f8:32:0c:82:ef:22:8d:
ef:b2:16:ec:c5:05:e5:0c:35:b2:9f:67:a4:7f:af:
72:51:d4:67:1f:73:71:91:0a:c0:bb:14:31:55:3c:
fb:dc:00:95:db:1c:c7:bc:d1:22:f5:82:c3:d9:ed:
6d:b7:b7:60:c3:09:b2:9f:34:ca:41:40:5c:0d:ff:
5f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:34:C8:FA:26:E5:60:64:E4:AF:80:A1:1D:8C:38:3D:4F:F2:2B:F5
X509v3 Authority Key Identifier:
keyid:38:26:42:3E:B0:19:55:22:4E:6C:11:D1:9C:6D:39:38:1E:8B:E2:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCZCPrAZVSJObBHRnG05OB6L4h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:af:84:8a:1e:4b:17:4c:c1:06:a0:64:6f:9e:a6:f7:27:3c:
bd:03:7b:8f:9c:3c:91:c0:af:fb:cf:e5:fd:a9:ba:b3:22:d4:
6b:e8:70:a0:3d:a7:b4:1d:4f:91:8c:11:43:e5:92:e7:e6:23:
78:0e:aa:6a:33:d1:48:e4:94:43:9f:7c:90:0a:b0:8d:ab:7f:
71:8f:8a:78:c7:f8:52:62:41:29:d5:d5:16:6d:0c:80:6f:50:
37:e3:26:c8:7f:46:83:70:62:65:a1:49:5a:90:e2:c6:e1:05:
ce:3c:9a:21:fa:9c:2a:fb:a1:29:17:2f:ce:84:72:d7:a2:ca:
9d:5a:7a:75:ce:71:5b:6a:ca:52:fe:ac:0b:47:99:75:50:40:
37:6f:45:ef:f6:d1:51:8b:75:79:ac:87:2b:7e:c5:1c:b6:25:
7b:71:09:f3:dd:8b:0d:bc:13:09:43:ee:cd:a2:7c:e9:1a:29:
f3:4e:ae:03:28:1a:bd:4a:8f:bb:ec:06:b8:0d:47:f4:69:c4:
a6:af:c0:e1:7f:8f:5b:da:78:bb:f5:77:60:28:1e:85:1d:0c:
18:57:e0:eb:df:00:56:d0:71:87:78:9a:42:cc:95:26:0a:2f:
c6:e4:96:68:07:c8:cb:ce:ad:41:56:28:1b:ad:04:7d:cb:55:
a8:8a:b1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:35 2026 by rpki-client