Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft
File: OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft (raw, json)
Hash identifier: OMG0h5fVCic5yvUYLTmLf9SfNGefL4w80/lGTaJJtgk=
Subject key identifier: A4:0D:46:1A:1D:31:B6:C8:76:7A:7F:55:81:68:B7:F5:3C:8C:78:49
Authority key identifier: 38:22:7A:96:FA:64:AD:95:24:0F:0A:EE:0B:D3:74:64:6C:6B:BE:E2
Certificate issuer: /CN=38227a96fa64ad95240f0aee0bd374646c6bbee2
Certificate serial: 019FAC3F299979D5D73FBE32527A5155728A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft
Manifest number: 1552
Signing time: Wed 29 Jul 2026 05:00:48 +0000
Manifest this update: Wed 29 Jul 2026 05:00:48 +0000
Manifest next update: Thu 30 Jul 2026 05:00:48 +0000
Files and hashes: 1: OCJ6lvpkrZUkDwruC9N0ZGxrvuI.crl (hash: w/iRPjbfx5PxOZ0fNYgyKSJYzf39BzolESSJELjTkwo=)
2: wHo6ZTM3-jzipse2lB9xc8s3uRA.roa (hash: 4oFkl4sS+vN5C2DeyY08mCPgjzjmSD8SNhBeGnmU75Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3f:29:99:79:d5:d7:3f:be:32:52:7a:51:55:72:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38227a96fa64ad95240f0aee0bd374646c6bbee2
Validity
Not Before: Jul 29 05:00:48 2026 GMT
Not After : Jul 30 05:00:48 2026 GMT
Subject: CN=a40d461a1d31b6c8767a7f558168b7f53c8c7849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ee:ad:9c:1b:7e:55:4b:a9:75:21:7a:9a:df:
3c:cc:d1:d9:d6:50:23:15:89:4f:b3:ce:99:73:86:
d8:e6:d0:0e:10:a3:c9:ea:cb:a0:23:f0:93:19:1e:
ae:f6:93:08:34:3d:6f:ee:ba:16:3b:81:46:6a:68:
ee:98:35:ec:2e:85:7e:8d:ce:8d:66:a5:b5:c1:57:
f5:e9:29:f0:7e:40:d3:a7:a3:9a:6a:f0:23:f3:b4:
5b:5f:b9:e5:bb:5a:ba:e2:2a:6e:c8:8a:24:a9:2c:
f0:59:60:30:75:6a:9b:60:5d:e7:2e:61:36:72:98:
58:fd:c8:06:7f:55:56:ef:26:b7:32:39:dc:13:a6:
52:dc:7c:e8:5d:9f:13:a7:0e:f7:c7:d8:ec:17:f9:
ea:37:21:c5:e3:b3:88:99:29:ec:8b:74:99:b6:30:
63:fc:c5:c4:43:5c:6a:e0:43:92:a6:3b:6c:73:a0:
c8:7f:c0:bb:df:69:51:d1:a5:4d:4b:fd:d8:59:ec:
09:18:ba:b8:13:70:0e:c8:84:09:4a:18:c4:e7:aa:
a0:d0:32:db:53:38:0a:cd:ba:f2:b9:c4:92:28:72:
df:bf:7d:20:b3:5b:35:06:b7:23:f7:b5:81:2d:51:
cb:68:2b:4c:66:68:24:2a:8a:37:0c:a3:e0:08:b5:
9a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:0D:46:1A:1D:31:B6:C8:76:7A:7F:55:81:68:B7:F5:3C:8C:78:49
X509v3 Authority Key Identifier:
keyid:38:22:7A:96:FA:64:AD:95:24:0F:0A:EE:0B:D3:74:64:6C:6B:BE:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:7e:47:03:35:9d:5c:f4:9a:f7:db:52:ec:19:1b:13:fc:7b:
ee:2c:af:35:0e:b9:de:2d:6b:3b:82:fe:ee:b3:47:23:9b:33:
2e:e3:09:3d:9e:8a:c4:ea:a9:aa:ec:e9:97:be:2b:67:99:f7:
c4:b3:d0:8a:b7:41:b1:f7:b0:90:e3:b2:9c:cb:f3:d6:37:d1:
8f:80:68:0d:a9:ec:57:da:fd:72:f5:20:42:db:4d:22:c8:bc:
77:3d:fc:b4:d5:1f:34:a0:d4:e6:35:9c:7f:6f:47:c9:d2:71:
0b:b5:1b:f0:0f:d8:cd:91:70:0c:f7:cf:74:d6:58:12:89:b6:
a3:f2:cf:a4:74:06:9a:2a:ac:2d:d7:db:d7:6b:04:41:c0:41:
0a:f0:ed:9d:cc:af:15:99:2c:d9:50:10:28:99:3c:72:70:39:
48:d4:db:c1:33:b4:e8:7c:35:6f:26:94:74:48:32:d5:21:e2:
d4:b3:18:49:7f:c1:fc:8e:fb:bf:28:9c:b5:2b:30:d2:22:20:
b6:31:db:2e:d3:a4:11:85:ae:fe:62:ec:82:ee:8a:9c:49:47:
ea:fc:32:ef:94:42:9e:1d:af:bf:84:75:b8:d1:5d:3b:c3:49:
11:e1:cd:97:65:fa:76:d0:40:b0:5b:92:98:93:c9:78:28:7d:
ef:f2:c2:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sPymZedXXP74yUnpRVXKKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MjI3YTk2ZmE2NGFkOTUyNDBmMGFlZTBiZDM3NDY0NmM2
YmJlZTIwHhcNMjYwNzI5MDUwMDQ4WhcNMjYwNzMwMDUwMDQ4WjAzMTEwLwYDVQQD
EyhhNDBkNDYxYTFkMzFiNmM4NzY3YTdmNTU4MTY4YjdmNTNjOGM3ODQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtu6tnBt+VUupdSF6mt88zNHZ1lAj
FYlPs86Zc4bY5tAOEKPJ6sugI/CTGR6u9pMIND1v7roWO4FGamjumDXsLoV+jc6N
ZqW1wVf16SnwfkDTp6OaavAj87RbX7nlu1q64ipuyIokqSzwWWAwdWqbYF3nLmE2
cphY/cgGf1VW7ya3MjncE6ZS3HzoXZ8Tpw73x9jsF/nqNyHF47OImSnsi3SZtjBj
/MXEQ1xq4EOSpjtsc6DIf8C732lR0aVNS/3YWewJGLq4E3AOyIQJShjE56qg0DLb
UzgKzbryucSSKHLfv30gs1s1Brcj97WBLVHLaCtMZmgkKoo3DKPgCLWa5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKQNRhodMbbIdnp/VYFot/U8jHhJMB8GA1UdIwQY
MBaAFDgiepb6ZK2VJA8K7gvTdGRsa77iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0NKNmx2cGtyWlVrRHdydUM5TjBaR3hydnVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8xY2Y5YWMtMTBkNC00YTVlLWE3MDYt
ZDFjOWJhMDhmNTU5LzEvT0NKNmx2cGtyWlVrRHdydUM5TjBaR3hydnVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8xY2Y5YWMtMTBkNC00YTVlLWE3MDYtZDFjOWJhMDhmNTU5
LzEvT0NKNmx2cGtyWlVrRHdydUM5TjBaR3hydnVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAan5HAzWd
XPSa99tS7BkbE/x77iyvNQ653i1rO4L+7rNHI5szLuMJPZ6KxOqpquzpl74rZ5n3
xLPQirdBsfewkOOynMvz1jfRj4BoDansV9r9cvUgQttNIsi8dz38tNUfNKDU5jWc
f29HydJxC7Ub8A/YzZFwDPfPdNZYEom2o/LPpHQGmiqsLdfb12sEQcBBCvDtncyv
FZks2VAQKJk8cnA5SNTbwTO06Hw1byaUdEgy1SHi1LMYSX/B/I77vyictSsw0iIg
tjHbLtOkEYWu/mLsgu6KnElH6vwy75RCnh2vv4R1uNFdO8NJEeHNl2X6dtBAsFuS
mJPJeCh97/LCsA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 13:11:32 2026 by rpki-client