Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft
File: OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft (raw, json)
Hash identifier: TMwpO24yK8Fc74+PCjrpOaa5byCuIBTHjOl2tHpPAbg=
Subject key identifier: DD:CC:D5:37:A1:7E:FE:F6:C7:DF:5D:98:A6:B2:A2:78:B1:CC:27:F3
Authority key identifier: 38:22:7A:96:FA:64:AD:95:24:0F:0A:EE:0B:D3:74:64:6C:6B:BE:E2
Certificate issuer: /CN=38227a96fa64ad95240f0aee0bd374646c6bbee2
Certificate serial: 01A0D796DE58C4B91C6FE56FF3555E203D35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft
Manifest number: 15ED
Signing time: Fri 25 Sep 2026 08:03:03 +0000
Manifest this update: Fri 25 Sep 2026 08:03:03 +0000
Manifest next update: Sat 26 Sep 2026 08:03:03 +0000
Files and hashes: 1: OCJ6lvpkrZUkDwruC9N0ZGxrvuI.crl (hash: ceSJSqE6/fH8QQqw9rWl8m0Yt0weSpe6nhbCAoDEdcQ=)
2: wHo6ZTM3-jzipse2lB9xc8s3uRA.roa (hash: 4oFkl4sS+vN5C2DeyY08mCPgjzjmSD8SNhBeGnmU75Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:96:de:58:c4:b9:1c:6f:e5:6f:f3:55:5e:20:3d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38227a96fa64ad95240f0aee0bd374646c6bbee2
Validity
Not Before: Sep 25 08:03:03 2026 GMT
Not After : Sep 26 08:03:03 2026 GMT
Subject: CN=ddccd537a17efef6c7df5d98a6b2a278b1cc27f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:06:df:ec:b4:f1:e7:01:70:48:af:c3:d6:98:
f3:14:df:a6:a2:2a:16:b1:3b:71:51:1a:2c:7f:fb:
eb:bd:b1:ef:c7:4b:c3:8e:56:00:23:67:dd:0f:2e:
69:1b:67:23:50:fc:3f:11:2a:b7:d3:21:1e:bf:8a:
5e:14:d3:91:d3:cd:cc:85:a0:ea:e6:6e:1f:ed:4f:
14:ed:c4:3c:8a:a9:41:b5:3d:23:76:a1:c8:ec:ca:
d0:c8:67:4f:1d:01:05:04:b6:75:8d:04:01:f6:fe:
02:af:30:34:df:f2:e4:fa:39:fb:6c:0e:01:81:d7:
2f:49:6c:85:d2:3c:a5:72:86:fd:13:9e:2a:dc:57:
b3:93:3b:3f:58:15:b0:e3:69:ba:71:ea:5e:f0:c1:
55:6e:2c:9b:24:3d:a6:f0:28:50:1a:c6:e6:02:09:
61:78:66:ea:70:85:1f:57:c1:ca:b6:05:5d:eb:66:
3f:90:81:1e:95:c1:c4:42:51:f7:b6:b2:af:66:43:
37:75:76:13:dd:42:67:1e:7f:da:29:e7:00:32:dc:
d9:95:fa:db:b3:21:b7:3c:a2:ca:76:bc:b0:97:52:
bb:6e:ff:a6:54:49:cf:a3:fc:22:0c:d2:a3:e7:86:
f7:1e:dc:f1:f2:8d:60:a3:e2:9b:35:1f:7c:fc:65:
fa:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:CC:D5:37:A1:7E:FE:F6:C7:DF:5D:98:A6:B2:A2:78:B1:CC:27:F3
X509v3 Authority Key Identifier:
keyid:38:22:7A:96:FA:64:AD:95:24:0F:0A:EE:0B:D3:74:64:6C:6B:BE:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:36:ee:9c:07:3e:95:c7:08:de:de:60:72:07:b9:f5:d3:c3:
45:ed:0a:74:0d:17:14:88:18:8e:54:dd:cd:db:b7:cc:e4:c6:
5e:9d:cc:c5:84:16:7d:a0:2d:18:77:82:92:5e:bb:3f:9e:f3:
fa:53:f8:2f:d4:db:f2:cc:8b:44:79:ac:9f:87:3a:e7:e3:fa:
af:5d:54:50:1c:9d:d6:1d:b0:d1:1b:f9:85:41:e9:7d:fe:16:
79:0c:58:83:da:6e:e1:ad:38:fc:f5:ed:62:2c:b7:1c:c1:b9:
f8:9c:f5:73:3a:c3:f8:ca:69:2d:c7:1b:b8:e1:26:22:ac:b0:
63:74:08:a0:72:b5:bb:41:1b:c8:9d:93:98:34:8f:79:38:ef:
0a:f3:d1:f5:60:0c:45:29:86:e6:75:41:d7:3f:ab:d9:4e:67:
00:03:f8:10:d3:b7:a9:f8:59:b1:5e:5e:c6:3a:3a:15:6f:82:
07:7d:d7:4d:11:a8:37:4e:98:7e:7d:2e:9b:33:e7:5b:de:92:
88:c1:fa:9b:5e:93:7c:ba:36:64:94:5d:91:7f:d4:54:4f:c6:
2c:22:11:64:e0:15:07:e6:69:7c:38:33:bd:73:2a:cd:64:51:
c0:91:e7:07:20:3c:a3:6a:7e:98:98:4b:51:80:38:dd:f8:05:
6e:a4:c1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:36:44 2026 by rpki-client