Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft
File: OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft (raw, json)
Hash identifier: wmVj+QlWg8KgQjTLeZZ9ZfWLkThXcHm7RUprnPxNA7Y=
Subject key identifier: 20:90:93:8B:CC:58:E8:47:7A:83:6B:4F:AB:2B:13:31:4F:CE:58:9C
Authority key identifier: 38:22:7A:96:FA:64:AD:95:24:0F:0A:EE:0B:D3:74:64:6C:6B:BE:E2
Certificate issuer: /CN=38227a96fa64ad95240f0aee0bd374646c6bbee2
Certificate serial: 019EC0A436863DDEE46B9382A708132B8B8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft
Manifest number: 14D8
Signing time: Sat 13 Jun 2026 11:00:47 +0000
Manifest this update: Sat 13 Jun 2026 11:00:47 +0000
Manifest next update: Sun 14 Jun 2026 11:00:47 +0000
Files and hashes: 1: OCJ6lvpkrZUkDwruC9N0ZGxrvuI.crl (hash: +wvMXy2bW30aSUWJKnVWzRQF9ZbNfkqy24RmXMbbSl0=)
2: wHo6ZTM3-jzipse2lB9xc8s3uRA.roa (hash: 4oFkl4sS+vN5C2DeyY08mCPgjzjmSD8SNhBeGnmU75Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a4:36:86:3d:de:e4:6b:93:82:a7:08:13:2b:8b:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38227a96fa64ad95240f0aee0bd374646c6bbee2
Validity
Not Before: Jun 13 11:00:47 2026 GMT
Not After : Jun 14 11:00:47 2026 GMT
Subject: CN=2090938bcc58e8477a836b4fab2b13314fce589c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:82:e1:87:1d:8f:95:a0:6b:ad:ca:6f:22:f6:
ce:a1:79:c9:12:fd:38:17:1e:e7:2b:7f:fc:59:72:
f1:1c:1b:f0:59:b6:01:a4:95:6e:46:c9:8e:6e:bb:
f8:69:ad:e1:e7:19:78:78:ed:85:98:4f:58:7a:3d:
40:7e:7d:22:36:9d:a6:62:c7:5b:5e:65:be:09:2f:
a2:0d:e8:ec:dc:6f:3c:3e:6b:8d:58:95:c2:80:e4:
b3:43:fd:8a:a3:63:c1:45:53:92:3b:d3:29:a4:ec:
7a:12:5f:44:bc:70:a4:e3:8f:50:84:52:e7:51:62:
e8:f7:86:e1:79:6f:a2:5f:e8:6a:95:13:3d:12:b3:
55:00:73:e2:1d:a2:7b:4b:34:53:b6:32:a9:89:04:
98:4a:5e:92:f1:2f:14:9f:d9:18:b5:f5:ce:ad:6e:
a9:58:73:58:37:4a:ff:4e:b4:6c:b2:e7:c8:21:36:
5e:a6:4e:a1:7b:ec:41:e5:3c:76:65:cc:6e:74:93:
e0:df:5a:4e:cc:11:46:48:ab:6e:18:fc:56:28:27:
a7:95:67:b1:fc:79:20:9e:c9:45:74:3e:f3:e3:3d:
59:1d:4d:f4:45:56:be:ad:c9:04:f6:97:58:b2:6e:
2b:2a:65:aa:2c:f0:92:08:a9:b7:78:10:50:9b:3b:
cf:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:90:93:8B:CC:58:E8:47:7A:83:6B:4F:AB:2B:13:31:4F:CE:58:9C
X509v3 Authority Key Identifier:
keyid:38:22:7A:96:FA:64:AD:95:24:0F:0A:EE:0B:D3:74:64:6C:6B:BE:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:f7:5d:3b:07:0b:16:bd:9c:cc:9a:29:84:fc:3a:a9:00:89:
4a:15:c3:26:6a:4e:90:66:74:a6:81:a2:6f:f3:94:ed:17:ec:
d7:c8:63:2a:28:ed:6c:cc:9e:cc:19:28:c5:4c:90:c9:71:00:
83:4f:ab:e9:2b:fa:93:dd:9b:a3:08:56:28:12:bf:f5:71:6e:
ef:3e:f1:46:f7:1a:f3:9f:72:2c:60:36:3e:15:10:c8:e0:75:
cb:5c:d6:a6:5d:02:54:bf:d7:08:3b:25:e1:79:65:98:f2:1a:
9f:9e:6d:83:81:32:5f:1b:18:ae:a2:b2:1a:24:7d:61:2d:a1:
9a:41:62:52:7e:5d:e1:11:b8:58:aa:f8:69:65:14:3f:9e:c9:
10:f4:a9:cd:38:9b:2e:f4:a8:9a:f0:78:9e:03:e1:3d:8f:07:
d4:21:f7:4f:e9:47:69:37:cf:e4:87:9d:38:3a:49:aa:7b:4f:
77:6f:b7:6b:98:16:70:4c:81:93:6f:30:bc:3e:9b:31:6b:cb:
f0:7d:3f:cc:1e:55:1e:d8:76:6f:ca:f0:ba:18:11:ee:cd:a5:
77:ce:d1:6f:e0:37:83:95:39:c8:40:21:ff:8d:a6:76:9e:b7:
b5:38:ae:8b:62:c9:05:7c:0c:8d:ee:4a:0d:49:c8:c3:eb:ea:
60:25:3f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:22:16 2026 by rpki-client